Values for content-security-policy: upgrade-insecure-requests 21,034 block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; 17,089 frame-ancestors 'self' 11,067 frame-ancestors 'self'; 6,426 upgrade-insecure-requests; 6,277 default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self'; 3,011 frame-ancestors 'none' 1,598 block-all-mixed-content 1,091 frame-ancestors 'none'; 903 block-all-mixed-content; 857 frame-ancestors 'self' mitiendanube.com *.mitiendanube.com lojavirtualnuvem.com.br *.lojavirtualnuvem.com.br mitiendanube.com.ar *.mitiendanube.com.ar mitiendanube.com.mx *.mitiendanube.com.mx mitiendanube.com.co *.mitiendanube.com.co mitiendanube.cl *.mitiendanube.cl; upgrade-insecure-requests 682 object-src 'none' 557 frame-ancestors https://*.pironet-ndh.com:4433 'self' 513 frame-ancestors * 497 block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests; 440 default-src 'self' ws: wss: http: https: data: blob: 'unsafe-inline' 433 409 frame-ancestors 'self' https://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data: blob:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src * 409 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; 401 frame-ancestors 'self' godaddy.com *.godaddy.com dev-godaddy.com *.dev-godaddy.com test-godaddy.com *.test-godaddy.com 360 upgrade-insecure-requests;frame-ancestors 'none';object-src 'none' 269 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.baidu.com *.bing.com; 252 script-src 'self' https://avep.if-einblick.de blob: https://morris-server.de:8801 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; media-src 'self' data: blob: https://api.sparkassen-mediacenter.de https://sparkassen-mediacenter.de https://cdn.sparkassen-mediacenter.de 241 report-uri /report-csp-violation 229 default-src 'self'; style-src 'unsafe-inline'; object-src 'none' 221 upgrade-insecure-requests; block-all-mixed-content 198 default-src 'self' https: wss: data: blob:; worker-src 'self' blob:; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; script-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https: https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; 198 upgrade-insecure-requests;object-src 'none' 186 default-src https: data: 'unsafe-inline' 'unsafe-eval' 172 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; 162 frame-ancestors 'self' https://app.grovecms.org/ 152 upgrade-insecure-requests; frame-ancestors 'self' 149 frame-src 'self' https://objectstorage.ap-dcc-gazipur-1.oraclecloud15.com https://www.googletagmanager.com https://www.youtube.com https://youtube.com https://*.youtube.com http://*.youtube.com https://*.google.com https://www.facebook.com https://*.gov.bd http://*.gov.bd https://*.*.gov.bd http://*.*.gov.bd; 148 default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 145 frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com; 135 frame-ancestors 'self' ; 134 frame-ancestors 'self' http://webvisor.com 134 frame-ancestors 'self' https://*.substack.com https://substack.com 129 frame-ancestors 'self' https://s.salla.sa https://mahally.com/ https://portal.salla.partners 122 frame-ancestors *; 118 report-uri /report-csp-violation; upgrade-insecure-requests 116 require-trusted-types-for 'script' 111 frame-ancestors self 109 default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 108 default-src * data: 'unsafe-eval' 'unsafe-inline' 108 upgrade-insecure-requests;connect-src * 104 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content; 102 self 100 frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com 99 frame-ancestors 'self' ; upgrade-insecure-requests; 98 frame-ancestors https://sinclairstoryline.com https://qa-sinclairstoryline.com https://int-sinclairstoryline.com https://storyline-qa.com https://storyline-int.com https://preview.int-sinclairstoryline.com https://preview.storyline-int.com https://preview.storyline-qa.com https://preview.qa-sinclairstoryline.com https://preview.sinclairstoryline.com; upgrade-insecure-requests 93 frame-ancestors 'self' www.wirtgen-group.com forms.wirtgen-group.com; 90 default-src 'none' 89 img-src 'self' *.twimg.com *.twitter.com img.youtube.com *.s3waas.gov.in secure.gravatar.com maps.gstatic.com maps.googleapis.com cbpssubscriber.mygov.in data: translation-plugin.bhashini.co.in;connect-src 'self' *.s3waas.gov.in maps.googleapis.com www.google-analytics.com translation-plugin.bhashini.co.in;object-src 'none';media-src 'self' *.s3waas.gov.in data: blob: 'unsafe-inline' 'unsafe-eval';child-src *;frame-src *;form-action *.s3waas.gov.in 'self';frame-ancestors 'self' *.s3waas.gov.in ;upgrade-insecure-requests;worker-src 'self' *.s3waas.gov.in blob: 88 frame-ancestors 'self' https://app.contentful.com 87 frame-ancestors 'self' https://www.oracle.eu https://oracle.eu https://my.oracle.com https://eeho.fa.us2.oraclecloud.com https://blogs.oracle.com *.khapps.com *.khapps.jp *.lsapps.oracle.com *.lsapps.oracle.jp *.dev-lsapps.oracle.com https://oraclesso.sharepoint.com https://oracle.sharepoint.com https://partners.oracle.com https://partners-stage.oracle.com https://partners-test.oracle.com https://partners-sit.oracle.com https://partners-dev.oracle.com 84 default-src 'self' http: https: data: blob: 'unsafe-inline' 80 frame-ancestors 'self' https://*.cdn.ampproject.org/ https://bing-amp.com/ https://*.tm-aws.com/ https://*.tm-awx.com/; 80 frame-ancestors 'self'; upgrade-insecure-requests 78 upgrade-insecure-requests; frame-ancestors 'self'; 76 object-src 'none';frame-ancestors 'self';base-uri 'none';upgrade-insecure-requests 73 default-src * 'unsafe-inline' 'unsafe-eval'; img-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * 'unsafe-inline' 'unsafe-eval' data:; frame-ancestors 'self' https://a.cms.omniupdate.com; 72 base-uri 'self'; frame-ancestors 'self'; 71 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; 71 ; report-to blog-front-csp-endpoint 69 frame-ancestors 'self' https://*.studio.design https://studio.design https://studio.inc; 68 default-src https: data: blob: ws: wss: 'unsafe-inline' 'unsafe-eval' 66 default-src 'self' *.smartsites.parentsquare.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' *.smartsites.parentsquare.com http://localhost:*; style-src 'self' https: 'unsafe-inline' *.smartsites.parentsquare.com http://localhost:*; img-src 'self' data: https:; font-src 'self' data: https:; frame-src https:; connect-src 'self' https: ws://localhost:* wss://localhost:*; worker-src 'self' blob:; object-src 'self' *.smartsites.parentsquare.com; media-src 'self' https:; base-uri 'self'; form-action 'self' https:; report-uri /api/public/csp-reports; report-to csp-endpoint; 66 block-all-mixed-content; frame-ancestors 'self'; upgrade-insecure-requests 65 default-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.cookiepro.com https://*.onetrust.com; frame-src 'none'; img-src 'self' data: *.ttcache.com https://*.ttcache.com https://*.google-analytics.com https://*.googletagmanager.com https://*.cookiepro.com; media-src 'none'; object-src 'none'; script-src 'self' https://*.googletagmanager.com https://*.cookiepro.com; style-src 'self' 'unsafe-inline' 64 default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 62 frame-ancestors *.builder-preview.com *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk 62 default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; media-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https: 62 script-src 'self' 'unsafe-eval' 'unsafe-inline' *.seals.dlagglobal.com *.sbo.top *.sbobet.com *.sbobetex.com *.youtube.com *.ytimg.com *.cloudfront.net optimize.google.com *.google-analytics.com *.hotjar.com *.googletagmanager.com *.googleapis.com *.cdnnetworks.net *.edgecasts.net *.fasttrackcdn.net *.cdnrocket.net *.speedysurfcdn.net *.cloudswiftcdn.net *.globalwavecdn.net *.acceleracloud.net *.quickroutecdn.net *.lightningspeedcdn.net *.stormshieldcdn.net *.rapidflarecdn.net *.velocitystream.net *.nexusaccelerate.net *.pacificrouter.com *.cdnhealthcare.net *.traveladventurescdn.net *.purseno.com *.syndication.twimg.com *.sportradar.com *.sportradarserving.com *.digitru.st *.bidswitch.net *.gstatic.com *.geetest.com avplayer-cdn.sportradar.com *.userleap.com *.akamaized.net http://*.sbobet.com; worker-src 'self' blob:; report-uri https://csp.trackittk.net/z/7046ef45-99d6-447d-9ac3-6d42ae2a70fa https://csp.trackittk.net/z/44e4f334-51c5-4cdb-b5e0-b33b1ec85c9d 61 frame-ancestors 'self' https://*.jumpseller.com https://app.jivosite.com 58 frame-ancestors 'none'; upgrade-insecure-requests 57 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self'; 57 default-src 'self' 56 default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ 56 frame-ancestors 'self'; upgrade-insecure-requests; 55 frame-ancestors 'self'; block-all-mixed-content; upgrade-insecure-requests; 54 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'none'; 53 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; 53 frame-ancestors 'self' https://cms.scrippsdigital.com 52 base-uri 'self';default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval';connect-src * data: blob: 'unsafe-inline';form-action * data: blob: 'unsafe-inline';img-src * data: blob: 'unsafe-inline';frame-src * data: blob: ;style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline';report-uri /post_report/;report-to default; 49 default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 49 frame-ancestors https://platform.sbnation.com https://*.sbnation.com https://platform.sbnation.com https://*.sbnation.com 'self' 48 frame-ancestors 'self' *; 48 frame-ancestors 'self' *.plentymarkets-cloud-de.com *.my.plentysystems.com 48 default-src * 'unsafe-eval' 'unsafe-inline' data: blob: 47 frame-ancestors 'self' continuum.epublishing.com *.continuum.epublishing.com 47 frame-ancestors 'self' https://dashboard.thepublive.com https://betadashboard.thepublive.com; 46 upgrade-insecure-requests; block-all-mixed-content; 45 default-src 'self' 'unsafe-inline' 45 frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.engadget.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.onesearch.com https://*.verizonmedia.com https://*.publishing.oath.com https://cdn.taboola.com https://ads.taboola.com chrome-extension://jdanfkhnfpagoijgfmklhgakdicpnfil; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation-by-user-activation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=news®ion=US&lang=en-US&device=desktop&yrid=6o9nr8tivmg0j&partner=; 44 frame-ancestors 'self' https://app.storyblok.com 44 child-src * blob: 44 default-src 'none';base-uri 'self';script-src 'self' 'unsafe-inline' blob: https://*.awswaf.com https://api.search.gov.sg https://www.search.gov.sg https://*.wogaa.sg https://*.dcube.cloud https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.google-analytics.com https://www.google.com https://www.googletagmanager.com https://connect.facebook.net https://graph.facebook.com https://*.licdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.youtube.com https://webchat.vica.gov.sg https://webchat.mol-vica.com https://*.clarity.ms https://*.ask.gov.sg https://analytics.tiktok.com https://login.dotomi.com https://login-ds.dotomi.com https://embed-cdn.spotifycdn.com https://open.spotify.com https://js-cdn.music.apple.com https://assets.polyglot.gov.sg https://staging-assets.polyglot.gov.sg https://*.zdassets.com https://*.zendesk.com https://*.zopim.com ;style-src 'self' 'unsafe-inline' https://assets.wogaa.sg https://assets.dcube.cloud https://www.search.gov.sg https://webchat.vica.gov.sg https://webchat.mol-vica.com https://embed-cdn.spotifycdn.com https://www.apple.com ;object-src 'none' ;connect-src 'self' https://*.awswaf.com https://isomer-user-content.by.gov.sg https://browser-intake-datadoghq.com https://api.search.gov.sg https://*.wogaa.sg https://*.dcube.cloud https://api-chat-fe-flag.vica.gov.sg https://chat.vica.gov.sg https://autocomplete.vica.gov.sg wss://chat.vica.gov.sg https://api-chat-fe-flag.mol-vica.com https://chat.mol-vica.com wss://chat.mol-vica.com https://autocomplete.mol-vica.com https://www.google-analytics.com https://*.googletagmanager.com https://google.com https://www.google.com https://analytics.google.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://*.clarity.ms https://c.bing.com https://ask.gov.sg https://*.ask.gov.sg https://data.gov.sg https://*.data.gov.sg https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://adservice.google.com https://www.google.com.sg https://www.facebook.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.spotify.com https://*.wg.spotify.com https://*.podcasts.apple.com https://*.xp.apple.com https://www.youtube.com https://vimeo.com https://assets.polyglot.gov.sg https://staging-assets.polyglot.gov.sg https://widget-server.polyglot.gov.sg https://staging-widget-server.polyglot.gov.sg https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://*.zendesk.com wss://*.zopim.com https://*.algolia.net https://*.algolianet.com https://*.algolia.io ;font-src 'self' data: https://fonts.gstatic.com https://www.search.gov.sg https://assets.wogaa.sg https://assets.dcube.cloud https://encore.scdn.co ;frame-src 'self' https://www.search.gov.sg https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net https://www.onemap.gov.sg https://www.youtube-nocookie.com https://player.vimeo.com https://m.facebook.com https://www.facebook.com https://docs.google.com https://form.gov.sg https://maps.gov.sg https://www.google.com/recaptcha/ https://*.fls.doubleclick.net https://open.spotify.com https://embed-standalone.spotify.com https://embed.podcasts.apple.com ;img-src 'self' https: ;manifest-src 'self' ;media-src 'self' https://episodes.captivate.fm https://podcasts.captivate.fm ;worker-src 'self' ;frame-ancestors 'self' https://eservice.ura.gov.sg ; 44 default-src * data: 'unsafe-eval' 'unsafe-inline' blob: 43 report-to default; 43 report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' apis.roblox.com roblox.com apis.robloxapp.vnggames.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com js.stripe.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com arkoselabs.roblox.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com client-api.arkoselabs.com api.arkoselabs.com *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com cdn.safecharge.com wasm.rbxcdn.com *.px-cloud.net *.px-cdn.net; img-src 'self' data: *.cloudfront.net *.gilcdn.com *.gldcdn.com *.google-analytics.com *.google.com *.kaptcha.com *.openstreetmap.org *.rblx.org *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat *.stripe.com *.tarobicdn.com *.tarobidevsandboxcdn.com www.facebook.com *.snapchat.com *.safecharge.com; connect-src 'self' *.roblox.com *.robloxlabs.com *.rblx.org *.rbx.com *.rbxcdn.com *.roblox.cn *.robloxapp.vnggames.com *.simulpong.com *.lightstep.com *.ns1p.net *.arkoselabs.com *.kaptcha.com *.google.com *.google-analytics.com *.doubleclick.net *.sentry.io wss://realtime.roblox.com wss://realtime.sitetest1.robloxlabs.com wss://realtime.sitetest2.robloxlabs.com wss://realtime.sitetest3.robloxlabs.com wss://realtime-signalr.roblox.com wss://realtime-signalr.robloxapp.vnggames.com *.braintree-api.com *.braintreegateway.com d1q2u37vreaobr.cloudfront.net funcaptcha.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com *.safecharge.com *.px-cloud.net *.px-cdn.net *.pxchk.net *.px-client.net; 42 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tawk.to cdn.jsdelivr.net fw-cdn.com *.freshdesk.com *.freshworks.com https://fonts.googleapis.com/css https://*.freshchat.com/ https:; manifest-src 'self'; child-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.tawk.to cdn.jsdelivr.net *.freshdesk.com *.freshworks.com https://fonts.googleapis.com/css https://*.freshchat.com/ https://www.datadoghq-browser-agent.com; font-src 'self' fonts.gstatic.com cdn.livechatinc.com *.tawk.to data:; img-src 'self' cdn.jsdelivr.net tawk.link https: data: cdn.databerjalan.com cdn.databerjalan.com cdn.livechat-files.com www.google-analytics.com; media-src 'self' data: cdn.databerjalan.com dataset.catgarong.com cdn.livechatinc.com youtube.com vimeo.com geo.dailymotion.com twitch.com; object-src 'self' data:; connect-src 'self' data: cdn.databerjalan.com cdn.databerjalan.com cdn.livechat-files.com www.google-analytics.com unpkg.com *.tawk.to wss://*.tawk.to https://browser-intake-datadoghq.com https: wss:; frame-src *.tawk.to https:; frame-ancestors 'self'; form-action 'self' *.tawk.to; worker-src blob:; 42 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zohoapis.in https://*.zohoflow.com https://*.zohocorppublic.in https://*.zohostatic.jp https://*.zohopublic.jp https://maillist-manage.com https://www.buzzsprout.com https://*.nimbuspop.com https://*.zoho.com https://*.google.com https://cdnjs.cloudflare.com https://platform.twitter.com https://player.vimeo.com https://*.maillist-manage.com https://*.manageengine.com https://*.pagesense.io https://*.zapier.com https://*.zoho.com.au https://*.zoho.eu https://*.zoho.in https://*.zoho.jp https://*.zoho.sa https://*.zohocdn.com https://*.zohocloud.ca https://*.zohostatic.com https://*.zohowebstatic.com https://cdn.ampproject.org https://cdn.checkhq.com https://fast.wistia.com https://run.pstmn.io https://www.youtube.com https://www.youtube-nocookie.com https://*.zoho.ae https://*.zohopublic.com https://*.zohopublic.in https://*.zohopublic.eu https://*.zohosalesiq.com https://*.zohocorp.com https://*.zohoexternal.in https://*.zohoexternal.com https://*.zoho.uk https://*.catalystserverless.in https://*.catalystserverless.com https://*.zohobookings.com https://*.zohobookings.eu https://*.zohobookings.in https://*.zohocdn.com.cn https://*.scoreapp.com https://*.jsdelivr.net https://*.maillist-manage.in https://*.gstatic.com https://*.zoho.sg;connect-src 'self' blob: https://*.catalystserverless.jp https://*.development.catalystappsail.in https://*.zohorecruit.in https://*.zohorecruit.eu https://*.zoho.sg https://*.zohopublic.jp https://*.zohostratus.com https://*.zoho.in https://*.zoho.com https://*.zoho.com.au https://*.zoho.eu https://*.zoho.jp https://*.zohocloud.ca https://*.zoho.uk https://*.zoho.sa https://*.zoho.ae https://*.zohosalesiq.com https://*.zohocorp.com https://*.zohoexternal.in https://*.zohoexternal.com https://*.zohostatic.com https://*.wistia.com https://*.maillist-manage.com https://*.maillist-manage.in https://*.maillist-manage.eu https://*.catalystserverless.in https://*.catalystserverless.com https://*.zapier.com https://api.github.com https://player.vimeo.com https://twitter.com https://*.zohocdn.com https://*.zohopublic.com https://*.zohopublic.in wss://*.zohopublic.jp wss://*.zohopublic.in wss://*.zohopublic.eu wss://vts.zohopublic.com https://*.zohowebstatic.com https://*.zohobookings.com https://*.zohobookings.eu https://*.zohobookings.in https://*.zohocdn.com.cn https://*.zohopublic.eu https://*.scoreapp.com https://*.cdn.pagesense.io https://*.zohoportal.in https://*.cdn-in.pagesense.io https://*.jsdelivr.net;frame-src 'self' blob: https://*.nimbuspop.com https://*.manageengine.in https://*.manageengine.com https://*.manageengine.eu https://*.manageengine.com.au https://www.buzzsprout.com https://*.zohobookings.com https://*.zohobookings.eu https://*.zohobookings.in https://anchor.fm https://*.zohosites.com https://*.spotify.com https://platform.twitter.com https://player.captivate.fm https://player.vimeo.com https://vimeo.com https://*.soundcloud.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://*.zohoshowtime.com https://*.maillist-manage.com https://*.maillist-manage.in https://*.maillist-manage.eu https://*.pagesense.io https://*.zohohq.in https://*.zoho.ae https://*.zoho.com https://*.zoho.com.cn https://*.zoho.com.au https://*.zoho.eu https://*.zoho.in https://*.zoho.sg https://*.zoho.jp https://*.zoho.sa https://*.zohocdn.com https://*.zohocloud.ca https://*.zohopublic.com https://*.zohopublic.in https://*.zohosalesiq.com https://*.zohocorp.com https://*.zohoexternal.in https://*.zohoexternal.com https://*.zohowebstatic.com https://*.zohostatic.com https://*.zoho.uk https://*.catalystserverless.in https://*.catalystserverless.com https://*.zohocdn.com.cn https://*.zohopublic.eu https://*.scoreapp.com https://capture.navattic.com https://*.campaign-view.in https://*.campaign-view.jp https://*.campaign-view.com https://*.campaign-view.eu https://*.zohopublic.jp; 41 base-uri 'self' 40 frame-src 'self'; frame-ancestors 'self'; object-src 'none'; 40 frame-ancestors 'self'; report-uri /report-csp-violation 39 default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * blob: data: 'unsafe-inline'; connect-src * 'unsafe-inline'; frame-src * 38 default-src data: 'unsafe-inline' 'unsafe-eval' https:;base-uri 'self';frame-ancestors 'self' ;img-src data: https: blob:;font-src data: https:;media-src https: blob:;connect-src https: wss: http:;script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:;style-src data: 'unsafe-inline' https:;child-src https: data: blob:;form-action https:;object-src 'none'; 38 frame-ancestors https://web.telegram.org 38 frame-ancestors 'self' https://webvisor.com http://webvisor.com; 38 default-src 'self' *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org mediawiki.org *.mediawiki.org wikidata.org www.gstatic.com www.google.com apis.google.com platform.twitter.com ajax.cloudflare.com cdnjs.cloudflare.com cdn.jsdelivr.net fastly.jsdelivr.net cdn.syndication.twimg.com openlayers.org www.gstatic.cn hcaptcha.com *.hcaptcha.com bandcamp.com flo.uri.sh challenges.cloudflare.com www.youtube.com; style-src 'self' data: 'unsafe-inline' miraheze.org wikitide.org *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org mediawiki.org *.mediawiki.org wikidata.org www.gstatic.com fonts.googleapis.com cdn.jsdelivr.net fastly.jsdelivr.net cdnjs.cloudflare.com platform.twitter.com ton.twimg.com hcaptcha.com *.hcaptcha.com use.typekit.net; img-src blob: 'self' data: miraheze.org wikitide.org *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net upload.wikimedia.org wikimedia.org maps.google.com www.gstatic.com maxcdn.bootstrapcdn.com *.twimg.com i.imgur.com image.tmdb.org *.googleusercontent.com *.fontawesome.com *.dropboxstatic.com *.redd.it *.redditmedia.com mirrors.creativecommons.org www.gnu.org live.staticflikr.com cdn.pixabay.com cdn.geogebra.org docs.blender.org *.imgbox.com tile.openstreetmap.org *.tile.openstreetmap.org cdn.discordapp.com na.llnet.sims3storee.cdn.ea.com *.fastly.net minotar.net db.onlinewebfonts.com openlayers.org discordapp.com imgbb.com postimages.org platform.twitter.com syndication.twitter.com img.newspapers.com cdn.smutstone.com storage.googleapis.com *.fbcdn.net i.ytimg.com *.imgbb.com simgbb.com *.simgbb.com ibb.co *.ibb.co *.postimages.org postimgs.org *.postimgs.org postimg.cc *.postimg.cc *.rbxcdn.com cms-imgp.jw-cdn.org hosted.weblate.org minecraft.wiki www.divine-pride.net static.divine-pride.net legacyofnightwind.com cdn.jsdelivr.net; font-src 'self' data: *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net fastly.jsdelivr.net db.onlinewebfonts.com upload.wikimedia.org use.typekit.net; media-src 'self' blob: *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net upload.wikimedia.org embed.nicovideo.jp *.youtube.com *.youtube-nocookie.com player.twitch.tv clips.twitch.tv player.vimeo.com apis.google.com bandcamp.com cdn.jsdelivr.net; frame-src 'self' *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net www.google.com docs.google.com apis.google.com calendar.google.com drive.google.com web.libera.chat snap.berkeley.edu *.youtube-nocookie.com www.youtube.com player.twitch.tv platform.twitter.com discord.com discordapp.com embed.nicovideo.jp syndication.twitter.com open.spotify.com www.gofundme.com archive.org w.soundcloud.com query.wikidata.org player.vimeo.com www.bing.com lucid.app scratch.mit.edu hcaptcha.com *.hcaptcha.com bandcamp.com challenges.cloudflare.com map.showdown.wiki clips.twitch.tv video.fastly.steamstatic.com shared.fastly.steamstatic.com *.instatus.com; connect-src 'self' blob: *.miraheze.org *.mirabeta.org *.wikitide.org *.wikitide.net www.wikidata.org *.wikipedia.org www.mediawiki.org *.wikimedia.org *.wikinews.org *.wiktionary.org cdn.jsdelivr.net fastly.jsdelivr.net storage.googleapis.com *.youtube-nocookie.com hcaptcha.com *.hcaptcha.com 1.1.1.1 translate.googleapis.com games.roblox.com economy.roblox.com discord.com discordapp.com api.steampowered.com *.instatus.com 37 frame-ancestors 'self'; report-uri /_/commcsp?disposition=enforce; 37 worker-src 'self' blob: 37 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.ad-plus.com.tr *.teimg.com *.google.com google.com *.google-analytics.com *.gstatic.com *.jquery.com *.bik.gov.tr *.bildirt.com *.adpush.com.tr *.ampproject.org cdn.ampproject.org *.googleadservices.com *.optad360.io *.doubleclick.net *.adhouse.pro *.jwpcdn.com *.onesignal.com onesignal.com *.vidyome.com *.tebilisim.com *.tevideo.org *.googleapis.com *.yandex.ru *.yandex.com *.criteo.net *.cloudflare.com *.cloudflareinsights.com static.cloudflareinsights.com *.onnetwork.tv *.twitter.com *.instagram.com instagram.com *.facebook.com *.facebook.net connect.facebook.net *.meta.com *.x.com *.youtube.com *.youtu.be *.linkedin.com *.pinterest.com *.dailymotion.com *.vimeo.com *.admatic.com.tr *.reklamstore.com *.linkwi.se *.makroo.com *.wordego.com *.tradingview.com *.weatherwidget.io *.openweathermap.com *.mgid.com *.themediagrid.com *.amazon.com *.googlesyndication.com pagead2.googlesyndication.com *.googletagmanager.com *.openx.com *.appnexus.com *.districtm.io *.rubiconproject.com *.rhythmone.com *.yahoo.com *.indexexchange.com *.smaato.com *.smartadserver.com *.sovrn.com *.lijit.com *.pubmatic.com *.sharethrough.com *.admanmedia.com *.emxdgt.com *.contextweb.com *.gumgum.com *.yieldmo.com *.ad-generation.jp *.adform.com *.adwmg.com *.idealmedia.io *.improvedigital.com *.connectad.io *.ibillboard.com *.stroeer.com *.adtarget.com.tr *.2mdn.net *.33across.com *.admixer.com *.adtech.com *.adtelligent.com *.adtopia.com *.advangelists.com *.advenuemedia.co.uk *.advertising.com *.aralego.com *.axonix.com *.beachfront.com *.bidtellect.com *.bizzclick.com *.cmcm.com *.coxmt.com *.cubepile.com *.e-planning.net *.engagebdr.com *.exponential.com *.freewheel.tv *.ijit.com *.inmobi.com *.lkqd.com *.lkqd.net *.maple-team.com *.mars.media *.mediabong.com *.newborntown.com *.omnijay.com *.outbrain.com *.peak226.com *.resultsmedia.com *.gamoshi.io *.sabio.us *.smartyads.com *.smrtb.com *.sonobi.com *.spotx.tv *.spotxchange.com *.colossusssp.com *.synacor.com *.thebrave.io *.tribalfusion.com *.ucfunnel.com *.unrulymedia.com *.us.com *.webeyemob.com *.taboola.com *.googletagservices.com trgde.adocean.pl gdetr.hit.gemius.pl *.gemius.pl *.pixad.com.tr *.air.tech *.yastatic.net yastatic.net *.serving-sys.com *.adform.net *.criteo.com cpm.programattik.com *.programattik.com pcode.yads.tech *.clarity.ms *.ytimg.com *.tiktok.com *.videoomy.com *.ttwstatic.com *.aistekso.net *.baithoph.net *.thubanoa.com *.moatads.com *.flashtalking.com *.player.im player.im *.yayin.com.tr api-maps.yandex.ru static-maps.yandex.ru *.virgul.com *.tagon.co c1.imgiz.com script.4dex.io *.amazon-adsystem.com cdn.id5-sync.com cdn.ravenjs.com pghub.io tags.crwdcntrl.net invstatic101.creativecdn.com oa.openxcdn.net pool-eu.creative-serving.com cdn.doubleverify.com *.adnxs.com lidertv.radyotelekom.com.tr *.radyotelekom.com.tr *.devotrans.com platform-api.sharethis.com *.sharethis.com *.vidoomy.com ads.vidoomy.com *.alexametrics.com *.static.hotjar.com *.abt.s3.yandex.net *.schema.org *.tiviplayer.com buttons-config.sharethis.com static.cdn.pixad.com.tr *.theadx.com *.adocean.pl *.thalespirlanta.com *.dsp-media.eskimi.com js.globalsun.io jscdn.greeter.me *.atombilisim.com.tr *.binance.com testerparfum.com myvalice.com.tr *.adnsafe.org api.adnsafe.org *.publisher-network.com *.protagcdn.com protagcdn.com *.preply.com preply.com cdn2.bildirt.com proadscdn.com dsp-media.eskimi.com *.incehesap.com cdn.proadscdn.com *.cdn.proadscdn.com say.ac *.say.ac *.cimri.com ep2.adtrafficquality.google *.ep2.adtrafficquality.google cdn.adhouse.pro *.adhouse.pro *.yandex.net *.uidapi.com *.sanalofisonline.com *.trvdp.com ad-plus.com.tr sp.ad-plus.com.tr adsby.io *.adsby.io *.abkafurniture.com yandex.ru adsturk.com *.adsturk.com dable.io *.dable.io anura.io *.anura.io id5-sync.com *.id5-sync.com twimg.com *.twimg.com *.jewelbetting.net *.jewelbetting.co *.adfor.io adfor.io erpm-js.erstream.com *.erstream.com tv5-live.ercdn.net *.ercdn.net vjs.zencdn.net *.zencdn.net *.api-sports.io jsc.idealmedia.io *.adtrafficquality.google mc.yandex.com cdn.flowplayer.com *.flowplayer.com securepubads.g.doubleclick.net *.karakasbezcanta.com gtranslate.net *.gtranslate.net *.ads7-adnow.com *.adnow.com analytics.ahrefs.com *.app.adjust.com *.adsafescan.com cdn.adsafescan.com *.amxrtb.com euw2-a.amxrtb.com player.viads.com *.player.viads.com *.viads.com viads.net *.viads.net vdo.ai *.vdo.ai *.hhkld.com hhkld.com st-n.nnowa.com *.nnowa.com n.nnowa.com *.admost.com run.admost.com *.unpkg.com unpkg.com visitchange.com *.visitchange.com platform.foremedia.net *.foremedia.net cdn.adpushup.com *.adpushup.com radyotelekom.com.tr radyotelekomtv.com *.radyotelekomtv.com adsmx.online *.adsmx.online videojs.com paytr.com *.paytr.com cleverwebserver.com *.cleverwebserver.com ep1.adtrafficquality.google cdn.jwplayer.com adtrafficquality.google webchat.monochat.ai *.monochat.ai *.adsafeprotected.com *.script.ac *.adroll.com st-n.ads7-adnow.com static.ads-twitter.com *.ads-twitter.com sosyal.teknofest.app *.teknofest.app *.t3vakfi.app cdn-auth.t3vakfi.app id2.t3vakfi.app *.mrf.io sdk.mrf.io mrf.io monosnap.com *.monosnap.com nnowa.com *.smilewanted.com prebid.smilewanted.com cdn.stickyadstv.com *.stickyadstv.com *.cdn.pixad.com.tr theadsby.rtb.pixad.com.tr *.springserve.com vpaid.springserve.com *.360yield.com ad.360yield.com *.loopme.me csync.loopme.me *.openx.net u.openx.net *.bidswitch.net x.bidswitch.net ib.adnxs.com *.yads.tech display-static.yads.tech *.pubmatic.com hbopenbid.pubmatic.com *.github.io ads.viralize.tv *.viralize.tv a.bringads.ru *.bringads.ru adsdkprod.azureedge.net *.azureedge.net s0.2mdn.net *.rtb.pixad.com.tr prebid-server.rubiconproject.com onetag-sys.com *.onetag-sys.com netmedyaajans.com.tr *.netmedyaajans.com.tr *.152media.info bidlift.152media.info *.quantcount.com creative-measurement.quantcount.com *.growone.sg monitor.growone.sg *.ftstatic.com ajs-assets.ftstatic.com cm.g.doubleclick.net openstat.eu *.openstat.eu consent.cookiebot.com *.cookiebot.com pushsaas.digital *.pushsaas.digital ittr.eskimi.com *.eskimi.com ssb-global.smartadserver.com yandex.com mp.4dex.io *.4dex.io cm.adform.net js.ad-score.com *.ad-score.com user-sync.gamoshi.io ittpx.eskimi.com sads.adsboosters.xyz *.adsboosters.xyz *.krenora.com krenora.com *.krenora.com api.genelpara.com tblsm.com *.tblsm.com; 37 default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; connect-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; frame-src 'self' *.cloudflare.com 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' blob: *; img-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * data:; manifest-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; object-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; script-src 'self' *.cloudflare.com 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; style-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; media-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; form-action 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; worker-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * blob:; report-uri https://hyperia.report-uri.com; block-all-mixed-content; upgrade-insecure-requests 37 default-src https: ws: data: 'unsafe-inline' 'unsafe-eval'; 37 default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 36 upgrade-insecure-requests; frame-ancestors 'self' live.sagepay.com live.opayo.eu.elavon.com; base-uri 'self'; object-src 'none' 36 default-src blob: * 'unsafe-inline' 'unsafe-eval'; script-src * blob: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src * data: 'unsafe-inline'; 35 base-uri 'self'; frame-ancestors 'self' 35 frame-ancestors 'self' https://deco.cx https://www.deco.cx 127.0.0.1:* localhost:* http://localhost:* http://127.0.0.1:* https://admin.deco.cx https://admin-cx.deco.page https://deco.chat https://admin.decocms.com https://decocms.com https://studio.decocms.com 35 default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' 34 frame-ancestors 'self' * 33 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 33 default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' * https://cdn.us.heap-api.com https://heapanalytics.com https://viewer.threshold360.com 'unsafe-inline' 'unsafe-eval'; script-src-elem * https://viewer.threshold360.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' * https://heapanalytics.com https://viewer.threshold360.com blob: data:; style-src 'self' * https://heapanalytics.com https://viewer.threshold360.com 'unsafe-inline' 'unsafe-eval' blob:; connect-src 'self' * https://c.us.heap-api.com https://heapanalytics.com https://viewer.threshold360.com wss://viewer.threshold360.com blob:; font-src 'self' * https://heapanalytics.com https://viewer.threshold360.com data:; frame-src 'self' * https://viewer.threshold360.com; worker-src * blob:; media-src * blob: data:; frame-ancestors 'self'; 33 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: 31 frame-ancestors 'self'; object-src 'none'; base-uri 'self' 31 default-src https: 'unsafe-inline' 'unsafe-eval' wss://umd.userlike.com wss://ws.botmaker.com; worker-src blob:; img-src 'self' blob: data: https:; font-src 'self' data: https: 31 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; 31 block-all-mixed-content; style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; 30 default-src 'self'; 30 default-src 'none'; script-src 'self' https://cdn.markmonitor.com; connect-src 'self'; img-src 'self' https://cdn.markmonitor.com; style-src 'self' https://cdn.markmonitor.com; base-uri 'self'; form-action 'self' 30 default-src 'self'; img-src 'self' data:; media-src 'self' blob:; connect-src 'self' blob:; form-action 'self'; 30 default-src https: wss: blob: data: 'unsafe-eval' 'unsafe-inline'; object-src 'self' 30 connect-src 'self' https://*.chaport.com https://www.google-analytics.com https://graph.facebook.com https://*.livechat.com https://*.tawk.to 30 default-src 'self'; script-src 'self' 'unsafe-inline' https://robofolks.cyberfolks.pl https://api-chat.cyberfolks.pl https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleoptimize.com https://dev.visualwebsiteoptimizer.com https://cyberfolks.user.com https://widget.user.com https://bat.bing.com https://bat.bing.net https://cdn.mouseflow.com https://analytics.tiktok.com https://business.tiktok.com https://googleads.g.doubleclick.net https://connect.facebook.net https://scripts.clarity.ms https://apps.mypurecloud.ie https://www.youtube.com https://cdnjs.cloudflare.com https://cdn-widget.callpage.io https://www.googleadservices.com https://www.googletagservices.com https://app.vwo.com https://www.clarity.ms ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; worker-src 'self' blob:; img-src 'self' data: https:; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.mouseflow.com https://static2.sharepointonline.com https://www.googletagmanager.com data:; connect-src 'self' https://robofolks.cyberfolks.pl https://api-chat.cyberfolks.pl https://api-cdn.mypurecloud.ie https://api.mypurecloud.ie wss://webmessaging.mypurecloud.ie https://fileupload.mypurecloud.ie https://apps.mypurecloud.ie https://dev.visualwebsiteoptimizer.com https://www.google.com https://www.google.pl https://region1.analytics.google.com https://region2.analytics.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://eu01.rec.mouseflow.com https://cyberfolks.user.com wss://cyberfolks.user.com https://ads.tiktok.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://business.tiktok.com https://cdnjs.cloudflare.com https://c.clarity.ms https://log.clarity.ms https://y.clarity.ms https://n.clarity.ms https://h.clarity.ms https://www.facebook.com https://www.youtube.com https://www.clarity.ms https://report.clarity.ms https://www.googletagservices.com https://pagead2.googlesyndication.com https://bat.bing.com https://bat.bing.net; frame-src 'self' https://cyberfolks.fireprobe.net https://apps.mypurecloud.ie https://www.google.com https://www.facebook.com https://www.youtube.com https://bid.g.doubleclick.net https://cyberfolks.user.com https://www.googletagmanager.com; frame-ancestors 'self' https://www.google.com; object-src 'none'; base-uri 'self'; 29 default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src * data: blob: ; base-uri 'self'; upgrade-insecure-requests; font-src https: 'unsafe-inline' data: 'unsafe-inline'; worker-src * blob:; 29 default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; 29 frame-ancestors 'self' devcue.diks.fi cue.media.fi cue.test.media.fi http://jankko-importer.prod.media.fi http://jankko-importer.test.media.fi http://localhost:5000 http://cue.test:* http://cue.cue-web:*; 29 frame-ancestors 'none'; connect-src 'self' http://127.0.0.1:*; default-src https: 'unsafe-inline' 29 frame-ancestors 'self' https://aboutyou.content.aboutyou.cloud https://aboutyou.content.staging.aboutyou.cloud 28 object-src 'none'; frame-ancestors 'self' 28 default-src * data: blob: 'unsafe-inline' 'unsafe-eval' 28 default-src * data: blob: 'unsafe-eval' 'unsafe-inline' 28 block-all-mixed-content; frame-ancestors 'self' https://*.sapo.vn https://*.mysapo.net https://aelang.aecomapp.com; upgrade-insecure-requests 28 upgrade-insecure-requests; base-uri 'none'; object-src 'none'; manifest-src 'self'; 27 frame-ancestors 'self' https://c360.cricketwireless.com; 27 default-src *;script-src 'self' resource://pdf.js 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' *.teamblue.services d1rv23qj5kas56.cloudfront.net d3nn3278imm5nr.cloudfront.net d1di2lzuh97fh2.cloudfront.net duyn491kcolsw.cloudfront.net events.webnode.com events.staging.webnode.com events.testing.webnode.com js.stripe.com www.gstatic.com www.googleadservices.com www.googletagmanager.com bat.bing.com bat.bing.net analytics.ahrefs.com/analytics.js connect.facebook.net a.quora.com www.google-analytics.com googleads.g.doubleclick.net c.imedia.cz www.google.com www.google.de www.google.com.br cdn.inspectlet.com *.clarity.ms *.bing.com c.seznam.cz pagead2.googlesyndication.com s.yimg.jp ct.pinterest.com analytics.tiktok.com www.redditstatic.com alb.reddit.com https://cdn.rudderlabs.com/ https://cdn.amplitude.com/ cdn.euc-freshbots.ai blob: euc-widget.freshworks.com/widgets/101000002785.js euc-widget.freshworks.com/widgetBase/ b98.yahoo.co.jp https://s.pinimg.com https://track.adform.net https://s2.adform.net https://embeds.acswapp.com/accessibility/app.js https://embeds.acswapp.com/accessibility/check.js https://eu.acsbapp.com/apps/app/dist/js/app.js https://eu.acsbapp.com/apps/app/dist/js/ https://accesswidget-log-receiver.acsbapp.com/ https://eu-cdn.acsbapp.com/config/ https://js-eu1.hs-scripts.com/ https://js-eu1.hs-analytics.net/ https://js-eu1.hs-banner.com/ https://track-eu1.hubspot.com/ https://cdn.hub-prod.team.blue/loader/widget-loader.js *.convertexperiments.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' d1rv23qj5kas56.cloudfront.net d3nn3278imm5nr.cloudfront.net static.d.webnodev.com www.gstatic.com js.stripe.com d11bh4d8fhuq47.cloudfront.net d1di2lzuh97fh2.cloudfront.net duyn491kcolsw.cloudfront.net use.typekit.net p.typekit.net cdn.euc-freshbots.ai euc-widget.freshworks.com/widgetBase/static/media/;img-src 'self' data: mediastream: blob: filesystem: *.teamblue.services d1rv23qj5kas56.cloudfront.net d3nn3278imm5nr.cloudfront.net du5rkdszt1kq5.cloudfront.net d11bh4d8fhuq47.cloudfront.net d1bz77arbww182.cloudfront.net d1me9yvfki5736.cloudfront.net d6scj24zvfbbo.cloudfront.net *.pbhom-cdnwnd.com *.cbaul-cdnwnd.com *.clvaw-cdnwnd.com static.d.webnodev.com www.webnode.com www.gstatic.com q.stripe.com bat.bing.com bat.bing.net q.quora.com www.google.com www.google.cz www.google.de www.google.com.br www.google-analytics.com googleads.g.doubleclick.net cx.atdmt.com c.seznam.cz www.facebook.com www.googletagmanager.com *.clarity.ms *.bing.com analytics.tiktok.com www.redditstatic.com alb.reddit.com *.webnode.com *.webnode.cz *.webnode.sk *.webnode.at *.webnode.es *.webnode.cl *.webnode.com.ve *.webnode.com.uy *.webnode.mx *.webnode.com.co *.webnode.co *.webnode.com.ar *.webnode.com.py *.webnode.bo *.webnode.do *.webnode.ec *.webnode.pe *.webnode.cr *.webnode.com.br *.webnode.pt *.webnode.it *.webnode.fr *.webnode.us *.webnode.in *.webnode.gr *.webnode.com.tr *.webnode.cn *.webnode.tw *.webnode.nl *.webnode.be *.webnode.jp *.webnode.hu *.webnode.ru *.webnode.com.ua *.webnode.se *.webnode.dk *.webnode.lv *.webnode.hr *.webnode.no *.webnode.co.uk *.webnode.vn *.webnode.ro *.webnode.cat *.webnode.kr *.webnode.fi ct.capterra.com d1di2lzuh97fh2.cloudfront.net duyn491kcolsw.cloudfront.net cdn.euc-freshbots.ai cdn.freshbots.ai fc-euc1-00-pics-bkt-00.s3.eu-central-1.amazonaws.com https://s3-eu-central-1.amazonaws.com/euc-cdn.freshdesk.com/ https://ct.pinterest.com https://track.adform.net https://server.seadform.net/serving/cookie/ https://track-eu1.hubspot.com/ i.ytimg.com;frame-ancestors 'self'; 27 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval' 27 img-src https: data:; upgrade-insecure-requests 27 frame-ancestors 'self' streamatemodels.com *.streamatemodels.com adultmobile.com *.adultmobile.com babes.com *.babes.com babesnetwork.com *.babesnetwork.com bblmate.com *.bblmate.com biempire.com *.biempire.com bigstr.com *.bigstr.com blackmaleme.com *.blackmaleme.com brazzers.com *.brazzers.com brazzersnetwork.com *.brazzersnetwork.com bromo.com *.bromo.com bromonetwork.com *.bromonetwork.com cambb.xxx *.cambb.xxx cambuilder.com *.cambuilder.com camdevils.com *.camdevils.com camjab.com *.camjab.com camjunky.com *.camjunky.com camrub.com *.camrub.com camutik.com *.camutik.com chatass.com *.chatass.com chatfree24.com *.chatfree24.com clipeek.com *.clipeek.com czechhunter.com *.czechhunter.com danejones.com *.danejones.com debtdandy.com *.debtdandy.com deviante.com *.deviante.com devianthardcore.com *.devianthardcore.com digitalplayground.com *.digitalplayground.com digitalplaygroundnetwork.com *.digitalplaygroundnetwork.com dilfed.com *.dilfed.com dirtyscout.com *.dirtyscout.com doghousedigital.com *.doghousedigital.com dpmate.com *.dpmate.com erito.com *.erito.com eroticspice.com *.eroticspice.com extremetubemate.com *.extremetubemate.com fakehostel.com *.fakehostel.com fakehub.com *.fakehub.com faketaxi.com *.faketaxi.com familyhookups.com *.familyhookups.com familysinners.com *.familysinners.com forgivemefather.com *.forgivemefather.com gilfed.com *.gilfed.com girlgrind.com *.girlgrind.com hentaipros.com *.hentaipros.com hentaiprosnetwork.com *.hentaiprosnetwork.com hotgirlsgame.com *.hotgirlsgame.com househumpers.com *.househumpers.com icfadmin.com *.icfadmin.com iconmale.com *.iconmale.com iknowthatgirl.com *.iknowthatgirl.com jerkmate.com *.jerkmate.com kinkyspa.com *.kinkyspa.com kwikylive.com *.kwikylive.com lesbea.com *.lesbea.com letspostit.com *.letspostit.com liveporncams.xxx *.liveporncams.xxx loveherass.com *.loveherass.com maleaccess.com *.maleaccess.com men.com *.men.com mennetwork.com *.mennetwork.com menxposed.com *.menxposed.com metrohd.com *.metrohd.com milehighmedia.com *.milehighmedia.com milfed.com *.milfed.com mofos.com *.mofos.com mofosnetwork.com *.mofosnetwork.com momslickteens.com *.momslickteens.com nastycast.com *.nastycast.com noirmale.com *.noirmale.com nudecams.xxx *.nudecams.xxx nudeporncams.xxx *.nudeporncams.xxx nyloncams.com *.nyloncams.com onbrazzers.com *.onbrazzers.com onmofos.com *.onmofos.com papi.com *.papi.com prettydirtyteens.com *.prettydirtyteens.com privatamateure.com *.privatamateure.com propertysex.com *.propertysex.com publicagent.com *.publicagent.com realitydudes.com *.realitydudes.com realitydudesnetwork.com *.realitydudesnetwork.com realityjunkies.com *.realityjunkies.com realitykings.com *.realitykings.com rk.com *.rk.com seancody.com *.seancody.com seancodynetwork.com *.seancodynetwork.com sexapemate.com *.sexapemate.com sexroulettelive.net *.sexroulettelive.net sextubemate.com *.sextubemate.com sexworking.com *.sexworking.com sexyhub.com *.sexyhub.com shewillcheat.com *.shewillcheat.com spicevids.com *.spicevids.com spicevidsgay.com *.spicevidsgay.com squirted.com *.squirted.com sweetheartvideo.com *.sweetheartvideo.com sweetsinner.com *.sweetsinner.com taboomale.com *.taboomale.com teenslovehugecocks.com *.teenslovehugecocks.com trannytubemate.com *.trannytubemate.com transangels.com *.transangels.com transangelsnetwork.com *.transangelsnetwork.com transharder.com *.transharder.com transsensual.com *.transsensual.com trueamateurs.com *.trueamateurs.com twinkpop.com *.twinkpop.com twistedfamilies.com *.twistedfamilies.com twistys.com *.twistys.com twistysnetwork.com *.twistysnetwork.com vidsmate.com *.vidsmate.com voyr.com *.voyr.com whynotbi.com *.whynotbi.com; report-uri /api/csp-report; 27 frame-ancestors 'self' https://*.akifast.com akifast.com 27 frame-ancestors 'self'; script-src https: 'unsafe-inline' 'unsafe-eval'; object-src 'none' 27 frame-ancestors 'self'; base-uri 'self' 26 frame-ancestors 'self' www.bookends.info *.bookends.info 26 object-src 'none'; base-uri 'self'; frame-ancestors 'self' 26 object-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests 26 object-src 'none'; 25 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' *;img-src 'self' data: blob: *;font-src 'self' data: *;connect-src 'self' *;media-src 'self' blob: *;frame-ancestors 'self' *.intcx.net *.paragonrels.com *.sigmacomputing.com *.bkfsconnect.com *.bkfstest.com *.opraplan.com *.theice.com *.ice.com *.nyse.com *.kcgbondpoint.com *.icedataservices.com *.appspace.com *.appspaceusercontent.com;frame-src *;worker-src 'self' blob: *;object-src 'self' *;manifest-src 'self' *;form-action 'self' https://*.theice.com https://*.intcx.net https://*.ice.com https://*.nyse.com https://*.kcgbondpoint.com https://*.icedataservices.com https://*.eloqua.com https://*.salesforce.com;upgrade-insecure-requests;base-uri 'self';script-src-attr 'none' 25 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: 25 base-uri 'self'; 25 default-src 'self' komocdn.com *.komocdn.com *.komo.site *.googlesyndication.com;style-src 'self' *.komo.site 'unsafe-inline' *.livenationinternational.com *.onetrust.com *.googleapis.com *.monetate.net *.amondo.com tagmanager.google.com platform.twitter.com use.fontawesome.com rsms.me fonts.bunny.net;img-src 'self' data: komocdn.com *.komocdn.com *.komo.site *.lne.prod.tmaws.eu *.lne.nonprod.public.tmaws.eu *.lne.nonprod.tmaws.eu *.livenationinternational.com www.lntvglobal.com *.2mdn.net *.betrad.com *.celtra.com *.doubleverify.com *.evidon.com *.facebook.com *.g.doubleclick.net *.googleapis.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.mgr.consensu.org *.monetate.net *.ticketm.net *.tmol.co *.quantserve.com *.youtube.com *.adzip.co *.twitter.com *.tiktokcdn.com *.scdn.co *.twimg.com *.analytics.google.com *.google-analytics.com ad.doubleclick.net ads.celtra.com adservice.google.com dt.adsafeprotected.com cache-ssl.celtra.com media.ticketmaster.com media.ticketmaster.co.uk pixel.adsafeprotected.com pixel.moatads.com px.moatads.com secure.adnxs.com tagmanager.google.com track.celtra.com www.google.co.uk www.google.com www.googletagmanager.com api.permutive.com cdn.permutive.com cdn.cookielaw.org insight.adsrvr.org match.adsrvr.org fxctag.com googlesync.permutive.com t.co tr.snapchat.com b97.yahoo.co.jp appboy-images.com braze-images.com cdn.braze.eu media.amondo.com static.amondo.com ids4.ad.gt ep1.adtrafficquality.google alb.reddit.com;script-src 'self' js-cdn.music.apple.com *.komo.site 'unsafe-inline' 'unsafe-eval' cdn.hadronid.net cdn1.anonymised.io *.livenationinternational.com *.2mdn.net static.anonymised.io anonymised.io *.bannersnack.com *.doubleverify.com *.evidon.com *.g.doubleclick.net *.google.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.lytics.io *.quantcount.com *.monetate.net *.universe.com *.adzip.co *.tiktok.com *.tiktokcdn.com *.amondo.com *.onetrust.com cdn.cookielaw.org cdn.ampproject.org ad.doubleclick.net ads.celtra.com adservice.google.co.uk adservice.google.com bam.nr-data.net cache-ssl.celtra.com connect.facebook.net evidon.mgr.consensu.org js-agent.newrelic.com pixel.adsafeprotected.com secure.adnxs.com secure.quantserve.com static.adsafeprotected.com tagmanager.google.com widget.ticketmaster.eu www.google-analytics.com www.googletagmanager.com z.moatads.com api.permutive.com cdn.permutive.com www.instagram.com analytics.twitter.com platform.twitter.com cdn.syndication.twimg.com secure.wufoo.com static.ads-twitter.com js.adsrvr.org fxctag.com sc-static.net tag.lexer.io www.googleadservices.com s.yimg.jp b92.yahoo.co.jp js.appboycdn.com tag.durationmedia.net be.durationmedia.net stage-be.durationmedia.net stage-tag.durationmedia.net tpc.googlesyndication.com securepubads.g.doubleclick.net googleads.g.doubleclick.net pagead2.googlesyndication.com safeframe.googlesyndication.com cdn.confiant-integrations.net rumcdn.geoedge.be tr.snapchat.com a.ad.gt id.hadron.ad.gt p.ad.gt pixels.ad.gt ep2.adtrafficquality.google ads.pubmatic.com tradablebits.com s.pinimg.com www.redditstatic.com ct.pinterest.com;connect-src 'self' *.komo.site cdn.cookielaw.org user-segments.anonymised.io *.be.durationmedia.net graphql-cached.amondo.com api.anonymised.io *.doubleverify.com material.anonymised.io aegis.anonymised.io *.evidon.com *.g.doubleclick.net *.googleapis.com *.googlesyndication.com *.permutive.com *.tmol.co *.tmol.io *.prmutv.co *.analytics.google.com *.google-analytics.com *.amondo.com be.durationmedia.net cdn.cookielaw.org *.onetrust.com csi.gstatic.com vendorlist.consensu.org widget.ticketmaster.eu www.googletagmanager.com track.celtra.com analytics.google.com analytics.tiktok.com ib.adnxs.com www.google.com sdk.iad-05.braze.com durationmedia-d.openx.net rtb.openx.net u.openx.net js-sec.indexww.com dsum.casalemedia.com htlb.casalemedia.com ssp.theadx.com bid.contextweb.com bh.contextweb.com t.pubmatic.com hbopenbid.pubmatic.com ads.pubmatic.com image8.pubmatic.com ads.servenobid.com public.servenobid.com sync.1rx.io ap.lijit.com sync.adkernel.com adservice.google.com www.ticketmaster.co.uk www.ticketmaster.co.nz www.ticketmaster.com.au www.ticketmaster.de tr.snapchat.com ep1.adtrafficquality.google a.ad.gt seg.ad.gt p.ad.gt ad.doubleclick.net www.facebook.com analytics-ipv6.tiktokw.us insight.adsrvr.org pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com ct.pinterest.com tr6.snapchat.com;font-src 'self' *.amondo.com *.livenationinternational.com *.onetrust.com fonts.gstatic.com widget.ticketmaster.eu use.fontawesome.com rsms.me static.amondo.com s3-res.amondo.com fonts.bunny.net;frame-src *.2mdn.net account.anonymised.io *.bannersnack.com static.anonm.io *.doubleverify.com *.dvtps.com *.evidon.com *.facebook.com *.fls.doubleclick.net *.googlesyndication.com *.googletagservices.com *.jebbit.com *.monetate.net *.ticketmaster.co.uk *.twitch.tv *.bilibili.com *.player.vimeo.com *.soundcloud.com *.instagram.com *.twitter.com *.spotify.com *.tiktok.com *.tiktokcdn.com *.youtube.com *.youtu.be cookies.onetrust.mgr.consensu.org music.163.com player.vimeo.com secureframe.doubleclick.net terriverhoeven.wufoo.com universe.queue-it.net v.qq.com www.google.com www.universe.com insight.adsrvr.org tr.snapchat.com static.amondo.com rsms.me www.googletagmanager.com td.doubleclick.net securepubads.g.doubleclick.net ep2.adtrafficquality.google proton.ad.gt www.googleadservices.com public.servenobid.com eu-u.openx.net ads.pubmatic.com match.adsrvr.org ct.pinterest.com;media-src 'self' *.amondo.com *.lne.nonprod.public.tmaws.eu *.lne.nonprod.tmaws.eu www.lntvglobal.com *.livenationinternational.com video.amondo.com;worker-src 'self' blob: 25 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.parsely.com *.eloqua.com *.en25.com *.oraclecloud.com https://api.mapbox.com https://gravityapi.com https://am.bnpparibas.com https://cm.teads.tv https://d1z2jf7jlzjs58.cloudfront.net https://p.teads.tv https://sentry.hcaptcha.com https://js.hcaptcha.com https://ampw-component.bnpparibas-am.com https://ampw-component.staging.bnpparibas-am.com https://nextgen.am.staging.bnpparibas https://nextgen.am.bnpparibas https://nextgen.am.dev.bnpparibas https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://md-scp.kampyle.com https://s0.wp.com https://bnpparibas-am-com.go-vip.net https://bnpparibas-am-com-staging.go-vip.net https://bnpparibas-am-com-develop.go-vip.net https://assets.adobedtm.com https://unpkg.com https://www.google-analytics.com https://9873963.fls.doubleclick.net https://resources.digital-cloud.medallia.eu https://m.clarity.ms https://stats.g.doubleclick.net https://www.clarity.ms https://analytics.newscred.com https://snap.licdn.com https://www.google-analytics.com https://www.stoneshot.com https://cdn.cookielaw.org https://www.googletagmanager.com https://api.bnpparibas-am.com https://api.staging.bnpparibas-am.com https://player.ausha.co https://apidata.staging.bnpparibas-am.com https://apidata.bnpparibas-am.com; font-src 'self' 'unsafe-inline' data: https://ampw-component.bnpparibas-am.com https://ampw-component.staging.bnpparibas-am.com https://nextgen.am.staging.bnpparibas https://nextgen.am.bnpparibas https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://s0.wp.com https://bnpparibas-am-com.go-vip.net https://bnpparibas-am-com-staging.go-vip.net https://bnpparibas-am-com-develop.go-vip.net https://fonts.gstatic.com https://api.staging.bnpparibas-am.com https://api.bnpparibas-am.com; img-src 'self' blob: https://storage.googleapis.com https://www.wiztopic.com https://t.bnpparibas-am.com https://media.umbraco.io/ https://am.bnpparibas.com https://cdn.api.video https://www.bnpparibas-am.com https://dpm.demdex.net https://cm.everesttech.net https://l.teads.tv https://t.teads.tv https://p1.parsely.com https://ampw-component.bnpparibas-am.com https://ampw-component.staging.bnpparibas-am.com https://nextgen.am.staging.bnpparibas https://nextgen.am.bnpparibas https://bnpparibas-am-com.go-vip.net https://bnpparibas-am.com https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://bnppampublicglobalprod.112.2o7.net https://diversification.bnpparibas-am.com https://pixel.wp.com https://secure.gravatar.com https://bnppampublicglobaldev.112.2o7.net https://ad.doubleclick.net https://www.linkedin.com https://udc-neb.kampyle.com data: https://resources.digital-cloud.medallia.eu https://px.ads.linkedin.com https://cdn.cookielaw.org https://www.stoneshot.com https://www.google-analytics.com https://pixel.welcomesoftware.com https://api.staging.bnpparibas-am.com https://api.bnpparibas-am.com; base-uri 'self'; object-src 'self'; media-src 'self' https://*.ausha.co https://ampw-component.bnpparibas-am.com https://ampw-component.staging.bnpparibas-am.com https://nextgen.am.staging.bnpparibas https://nextgen.am.bnpparibas https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://www.youtube.com https://bnpparibas-am-com.go-vip.net https://bnpparibas-am-com-staging.go-vip.net https://bnpparibas-am-com-develop.go-vip.net https://audio.ausha.co https://audiofiles.ausha.co; child-src 'self' https://bnppam.demdex.net https://newassets.hcaptcha.com https://ampw-component.bnpparibas-am.com https://ampw-component.staging.bnpparibas-am.com https://nextgen.am.staging.bnpparibas https://nextgen.am.bnpparibas https://widget.ausha.co https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://www.youtube.com https://widgets.wp.com https://bnpparibas-am-com.go-vip.net https://bnpparibas-am-com-staging.go-vip.net https://bnpparibas-am-com-develop.go-vip.net https://td.doubleclick.net https://9054818.fls.doubleclick.net https://www.youtube.com https://resources.digital-cloud.medallia.eu https://9873963.fls.doubleclick.net https://bnpparibas-am.libcast.com https://embed.api.video https://player.ausha.co; worker-src 'self' blob:;style-src 'self' 'unsafe-inline' https://ampw-component.bnpparibas-am.com https://ampw-component.staging.bnpparibas-am.com https://nextgen.am.staging.bnpparibas https://nextgen.am.bnpparibas https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://s0.wp.com https://bnpparibas-am-com.go-vip.net https://bnpparibas-am-com-staging.go-vip.net https://bnpparibas-am-com-develop.go-vip.net https://fonts.googleapis.com https://api.staging.bnpparibas-am.com https://api.bnpparibas-am.com; connect-src 'self' https://www.bnpparibas-am.com https://events.mapbox.com https://pre-cms.core.axa-im.com https://media.umbraco.io/ https://graphql.umbraco.io/ https://api.mapbox.com https://gravityapi.com https://docfinder.bnpparibas-am.com https://cm.teads.tv https://t.teads.tv https://p1.parsely.com https://t.teads.tv https://analytics-fe.digital-cloud.medallia.eu https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://ampw-component.bnpparibas-am.com https://ampw-component.staging.bnpparibas-am.com https://nextgen.am.staging.bnpparibas https://nextgen.am.bnpparibas https://canary-api.bnpparibas-am.com https://canary-api.staging.bnpparibas-am.com https://bnpparibas-am-com.go-vip.net https://bnpparibas-am-com-staging.go-vip.net https://bnpparibas-am-com-develop.go-vip.net https://bnp-privacy.my.onetrust.com https://cdn.linkedin.oribi.io https://udc-neb.kampyle.com https://region1.google-analytics.com https://dpm.demdex.net https://resources.digital-cloud.medallia.eu https://apidata.staging.bnpparibas-am.com https://apidata.bnpparibas-am.com https://stats.g.doubleclick.net https://api.staging.bnpparibas-am.com https://api.bnpparibas-am.com https://www.stoneshot.com https://cdn.cookielaw.org https://www.google-analytics.com https://www.google-analytics.com; 25 frame-ancestors 'self'; report-uri /_/commcsp?disposition=enforce 24 img-src 'self' *.twimg.com *.twitter.com img.youtube.com *.s3waas.gov.in dae.gov.in secure.gravatar.com data: maps.gstatic.com maps.googleapis.com cbpssubscriber.mygov.in translation-plugin.bhashini.co.in testvani-hyd.nic.in vani-hyd.nic.in img.freepik.com app.ailifebot.com;connect-src 'self' *.s3waas.gov.in maps.googleapis.com www.google-analytics.com translation-plugin.bhashini.co.in www.instagram.com vani-hyd.nic.in testvani-hyd.nic.in feedback.digifootprint.gov.in branding-resources.s3.ap-south-1.amazonaws.com app.ailifebot.com app.engati.com bb.branding-element.com api.ipify.org;object-src 'none';media-src 'self' *.s3waas.gov.in data: 'unsafe-inline' 'unsafe-eval' blob:;child-src *;frame-src *;form-action *.s3waas.gov.in 'self';frame-ancestors 'self' *.s3waas.gov.in ;upgrade-insecure-requests;worker-src 'self' *.s3waas.gov.in 24 frame-ancestors 24 default-src 'none'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com *.adform.net *.adnxs.com assets.adotmob.com *.adsrvr.org *.ads-twitter.com pixel.adsafeprotected.com *.adyen.com *.allpro-alliance.com zenloop-website-overlay-production.s3.amazonaws.com *.amazon-adsystem.com *.awin1.com impact.axite.app oc-cdn-public-eur.azureedge.net *.b2x-env.cloud apps.bazaarvoice.com *.bing.com *.bing.net *.clarity.ms *.cloudflare.com app.contentsquare.com t.contentsquare.net *.cookielaw.org *.criteo.com *.criteo.net digitizer.app *.dwin1.com *.g.doubleclick.net edge.curalate.com *.en25.com *.excentos.com nonce-csp-test *.facebook.net *.foxbase.de *.fullstory.com *.google-analytics.com *.googleadservices.com www.googleanalytics.com maps.googleapis.com *.googlesyndication.com www.googletagmanager.com *.google.com *.google.de *.gstatic.com rum.hlx.page *.hotjar.com *.iadvize.com cdn.jsdelivr.net s.kelkoogroup.net *.kk-resources.com *.kpcustomer.de *.kuponacdn.de snap.licdn.com *.media01.eu *.metricool.com *.newrelic.com bam.eu01.nr-data.net *.onetrust.com assets.oney.io *.openweathermap.org *.oracleinfinity.in *.outbrain.com *.pages02.net cdn.parcellab.com *.pinimg.com *.pinterest.com *.qualtrics.com *.redditstatic.com lantern.roeyecdn.com *.a.run.app *.sciencebehindecommerce.com *.seznam.cz *.solutenetwork.com *.soundcloud.com *.stihl.al *.stihl.ba *.stihl.de *.stihl.fr *.stihl.be *.stihl.nl *.stihl.lu *.stihl.es *.stihl.pt *.stihl.at *.stihl.bg *.stihl.ca *.stihl.ch *.stihl.cn *.stihl.co.jp *.stihl.co.ke *.stihl.co.nz *.stihl.co.uk *.stihl.co.za *.stihl.com *.stihl.com.ar *.stihl.com.au *.stihl.com.br *.stihl.com.co *.stihl.com.cy *.stihl.com.fj *.stihl.com.mx *.stihl.cz *.stihl.dk *.stihl.fi *.stihl.gr *.stihl.hr *.stihl.hu *.stihl.ie *.stihl.in *.stihl.it *.stihl.me *.stihl.mk *.stihl.nc *.stihl.no *.stihl.pe *.stihl.pl *.stihl.ro *.stihl.rs *.stihl.se *.stihl.si *.stihl.sk *.stihl.ua *.stihl-importer.ie *.stihl-timbersports.com *.stihlusa.com userprotect.de.stihl-dns.net *.dam.stihl.cloud *.taboola.com *.teads.tv *.tealiumiq.com analytics.tiktok.com *.tiktokw.us *.tiqcdn.com *.trbo.com *.trkkn.com s.uicdn.com d.c.cdnsrv.de typekit.net *.typekit.net unpkg.com *.unpkg.com *.assistant.watson.appdomain.cloud ocprodpubliceurgs.blob.core.windows.net *.xing.com *.xingcdn.com sp.analytics.yahoo.com *.youtube.com *.youtube-nocookie.com *.ytimg.com s.yimg.com *.zemanta.com *.zenaps.com *.zenloop.com js.stripe.com web-app-frontend-micro-po-t.azurewebsites.net stihl-videos.fullhaus.de *.wufoo.com app.stihl-preview.com; connect-src 'self' adobeioruntime.net *.adobeioruntime.net *.tracker.adotmob.com *.adyen.com *.adsrvr.org *.algolianet.com *.algolia.io *.algolia.net *.allpro-alliance.com zenloop-website-overlay-production.s3.amazonaws.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon stihl.api.axite.app impact.axite.app *.bazaarvoice.com *.bing.com *.bing.net *.clarity.ms *.cloudflare.com *.contentsquare.net *.conversionsapigateway.com *.cookielaw.org *.criteo.com *.criteo.net data: *.demdex.net *.digitizer.app *.doubleclick.net d.c.cdnsrv.de edge.curalate.com *.excentos.com ext.nonstoppartner.net *.facebook.com *.foxbase.de *.fullstory.com google.com *.google-analytics.com *.googleadservices.com *.googleapis.com pagead2.googlesyndication.com *.googletagmanager.com *.google.at *.google.be *.google.ch *.google.com *.google.de *.google.es *.google.fr *.google.gr *.google.hu *.google.it *.google.lu *.google.nl *.google.pl *.google.pt rum.hlx.page *.hotjar.com *.hotjar.io *.iadvize.com s.kelkoogroup.net *.kk-resources.com *.linkedin.com *.media01.eu eu-mobile.events.data.microsoft.com bam.eu01.nr-data.net *.omtrdc.net *.onetrust.com widget.oney.io *.oribi.io *.outbrain.com api.openweathermap.org *.parcellab.com *.phrase.com *.phraseapp.com *.pinimg.com *.pinterest.com *.qualtrics.com *.reddit.com *.redditstatic.com *.a.run.app *.thesciencebehindecommerce.com *.sciencebehindecommerce.com *.seznam.cz *.solutenetwork.com *.stihl.al *.stihl.ba *.stihl.be *.stihl.de *.stihl.es *.stihl.fr *.stihl.lu *.stihl.nl *.stihl.pt *.stihl.at *.stihl.bg *.stihl.ca *.stihl.ch *.stihl.cn *.stihl.co.jp *.stihl.co.ke *.stihl.co.nz *.stihl.co.uk *.stihl.co.za *.stihl.com *.stihl.com.ar *.stihl.com.au *.stihl.com.br *.stihl.com.co *.stihl.com.cy *.stihl.com.fj *.stihl.com.mx *.stihl.cz *.stihl.dk *.stihl.fi *.stihl.gr *.stihl.hr *.stihl.hu *.stihl.ie *.stihl.in *.stihl.it *.stihl.me *.stihl.mk *.stihl.nc *.stihl.no *.stihl.pe *.stihl.pl *.stihl.ro *.stihl.rs *.stihl.si *.stihl.sk *.stihl.se *.stihl.ua *.stihl-importer.ie *.stihl-timbersports.com *.stihlusa.com stihl-sso.com stihl.tui-servicelayers.io t.co *.taboola.com *.teads.tv collect.tealiumiq.com analytics.tiktok.com *.tiktokw.us *.trbo.com *.trkkn.com analytics.twitter.com typekit.net *.typekit.net *.assistant.watson.appdomain.cloud *.blob.core.windows.net *.xing.com *.xingcdn.com s.yimg.com *.youtube-nocookie.com wss://*.iadvize.com wss://*.hotjar.com www.wepowerconnections.com audience-api.wts-okube.com *.zenloop.com login.microsoftonline.com graph.microsoft.com *.b2clogin.com api.stripe.com q.stripe.com errors.stripe.com r.stripe.com m.stripe.network *.wufoo.com app.stihl-preview.com *.launchdarkly.com apim.stihl.cloud; img-src 'self' *.ad-stir.com *.1rx.io *.3ma79ae7cua.com 3ma79ae7cua.com *.360yield.com *.3lift.com *.addthis.com *.adform.net *.adingo.jp *.admixer.co.kr *.adnxs.com assets.adotmob.com *.tracker.adotmob.com *.adscale.de *.adsrvr.org *.adtdp.com *.advertising.com *.adyen.com *.agkn.com *.allpro-alliance.com zenloop-assets.s3.eu-west-1.amazonaws.com *.eu-central-1.amazonaws.com *.amazon-adsystem.com *.ants.vn *.appcelerate.ai *.aralego.com *.atdmt.com *.awin1.com *.azureedge.net *.b2x-env.cloud *.bazaarvoice.com segment.prod.bidr.io *.bidswitch.net *.billie.io *.bing.com *.bing.net blob: *.bluekai.com *.casalemedia.com *.clarity.ms *.clmbtech.com *.contentsquare.net *.cookielaw.org *.criteo.com *.criteo.net *.dable.io data: *.demdex.net *.dmxleo.com *.doubleclick.net *.dspx.tv *.dwin1.com *.e-planning.net edge.curalate.com *.emxdgt.com *.everesttech.net *.excentos.com *.facebook.com *.facebook.net *.foxbase.de *.fullstory.com *.fwnm.net *.google-analytics.com *.googleadservices.com maps.googleapis.com *.googlesyndication.com www.googletagmanager.com *.googleusercontent.com *.google.ad *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mi *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vu *.google.ws *.gstatic.com *.herrenseite.de *.hotjar.com *.iadvize.com *.id5-sync.com id5-sync.com event.tracker.inlabserving.com *.rediunid.imrworldwide.com *.ivitrack.com *.kargo.com s.kelkoogroup.net *.krxd.net *.liadm.com *.linkedin.com px.ads.linkedin.com *.mail.ru *.meba.kr *.media.net *.mediavine.com *.mediawallahscript.com *.metricool.com *.mgid.com *.microad.jp *.nate.com t.nativendo.de *.omnitagjs.com *.omtrdc.net assets.oney.io *.openx.net *.outbrain.com *.pages02.net *.parcellab.com *.pinimg.com *.pinterest.com *.pinterest.de *.postrelease.com *.pubmatic.com *.qualtrics.com *.reddit.com *.rambler.ru *.revcontent.com *.rlcdn.com *.rockysandstudio.com lantern.roeye.com *.rubiconproject.com *.the.sciencebehindecommerce.com t.uimserv.de *.seadform.net *.seznam.cz *.sharethrough.com *.smaato.net *.smartadserver.com *.smartclip.net *.socdm.com *.stickyadstv.com *.stihl.al *.stihl.ba *.stihl.de *.stihl.fr *.stihl.be *.stihl.nl *.stihl.lu *.stihl.es *.stihl.pt *.stihl.at *.stihl.bg *.stihl.ca *.stihl.ch *.stihl.cn *.stihl.co.jp *.stihl.co.ke *.stihl.co.nz *.stihl.co.uk *.stihl.co.za *.stihl.com *.stihl.com.ar *.stihl.com.au *.stihl.com.br *.stihl.com.co *.stihl.com.cy *.stihl.com.fj *.stihl.com.mx *.stihl.cz *.stihl.dk *.stihl.fi *.stihl.gr *.stihl.hr *.stihl.hu *.stihl.ie *.stihl.in *.stihl.it *.stihl.me *.stihl.mk *.stihl.nc *.stihl.no *.stihl.pe *.stihl.pl *.stihl.ro *.stihl.rs *.stihl.se *.stihl.si *.stihl.sk *.stihl.ua *.stihl-importer.ie *.stihl-timbersports.com *.stihlusa.com dam.stihl.cloud t.co *.taboola.com *.tapad.com *.teads.tv *.tealiumiq.com *.thebrighttag.com *.tiktokw.us *.toast.com *.tpmn.co.kr *.trbo.com *.tremorhub.com trk.beintoo.net *.turn.com *.twiago.com analytics.twitter.com typekit.net *.typekit.net sync.targeting.unrulymedia.com *.wepowerconnections.com *.windows.net storagetimbersportsdata.blob.core.windows.net *.xing.com *.xingcdn.com *.yahoo.com *.yahoo.net *.yandex.ru *.yieldlab.net *.yieldmo.com *.youtube-nocookie.com *.youtube.com *.ytimg.com *.zemanta.com *.zenaps.com stihl-videos.fullhaus.de *.zenloop.com *.stripe.com app.stihl-preview.com; media-src 'self'; style-src 'self' 'unsafe-inline' oc-cdn-public-eur.azureedge.net *.cookielaw.org digitizer.app *.excentos.com *.foxbase.de fonts.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.hotjar.com *.iadvize.com *.onetrust.com *.stihl.com *.trbo.com cdn.parcellab.com *.wufoo.com app.stihl-preview.com; font-src 'self' zenloop-assets.s3.eu-west-1.amazonaws.com web-chat.global.assistant.watson.appdomain.cloud apps.bazaarvoice.com cdnjs.cloudflare.com data: *.excentos.com *.foxbase.de fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.iadvize.com assets.oney.io cdn.parcellab.com *.stihl.com *.stihl.de *.trbo.com typekit.net *.typekit.net *.zenloop.com *.wufoo.com app.stihl-preview.com; frame-src 'self' *.ad-srv.net *.adform.net track.adform.net *.adsrvr.org *.adyen.com *.allpro-alliance.com *.awin1.com oc-cdn-public-eur.azureedge.net segment.prod.bidr.io blob: *.cookielaw.org *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.dwin1.com d.c.cdnsrv.de *.excentos.com *.facebook.com *.fullstory.com *.google.com *.googletagmanager.com *.iadvize.com *.jaggaer.com *.kuponacdn.de pixel.mathtag.com my.matterport.com secure.img-cdn.mediaplex.com *.pinterest.de *.pinterest.fr *.pinterest.at *.pinterest.it *.pinterest.com *.pinterest.co.uk *.pinterest.ru *.pinterest.ch *.pinterest.es *.pinterest.se *.pinterest.ca *.pinterest.dk *.pinterest.jp *.pinterest.ie *.pinterest.pt *.qualtrics.com *.redintelligence.net *.the.sciencebehindecommerce.com *.soundcloud.com static.stihl.com *.stihl.al *.stihl.at *.stihl.ba *.stihl.be *.stihl.bg *.stihl.ca *.stihl.ch *.dam.stihl.cloud *.stihl.cn *.stihl.co.jp *.stihl.co.ke *.stihl.co.nz *.stihl.co.uk *.stihl.co.za *.stihl.com *.stihl.com.ar *.stihl.com.au *.stihl.com.br *.stihl.com.co *.stihl.com.cy *.stihl.com.fj *.stihl.com.mx *.stihl.cz *.stihl.de *.stihl.dk *.stihl.es *.stihl.fi *.stihl.fr *.stihl.gr *.stihl.hr *.stihl.hu *.stihl.ie *.stihl.in *.stihl.it *.stihl.lu *.stihl.me *.stihl.mk *.stihl.nc *.stihl.nl *.stihl.no *.stihl.pe *.stihl.pl *.stihl.pt *.stihl.ro *.stihl.rs *.stihl.se *.stihl.si *.stihl.sk *.stihl.ua *.stihl-dns.net *.stihl-importer.ie *.stihl-timbersports.com *.stihlusa.com *.teads.tv *.trbo.com e.video-cdn.net *.youtube.com *.youtube-nocookie.com *.zenaps.com login.microsoftonline.com login.microsoftonline.com graph.microsoft.com js.stripe.com hooks.stripe.com m.stripe.network web-app-frontend-micro-po-t.azurewebsites.net stihl-videos.fullhaus.de *.wufoo.com pos-stihl.relatial.tech; frame-ancestors 'self' *.stihl.com *.stihl-preview.com; child-src 'self' blob: 24 frame-ancestors 'self' *.agriaffaires.pro *.machineryzone.pro *.agriaffaires.com *.machineryzone.fr *.machineryzone.com *.truckscorner.fr *.mbcore.io; report-uri https://api.leboncoin.fr/api/csp-report/v1/report/; 24 default-src https:; object-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; connect-src https: wss: data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data: blob:; worker-src 'self' https: blob:; frame-ancestors 'self' *.sitewrench.com *.speakcreative.com 24 * 24 default-src 'self';style-src 'self' 'unsafe-inline' *.g.doubleclick.net *.googletagmanager.com *.googlesyndication.com tagmanager.google.com fonts.googleapis.com *.googleapis.com cdnjs.cloudflare.com;img-src 'self' data: *.starbucks.ae *.starbucks.at *.starbucks.be *.starbucks.bg *.starbucks.ch *.starbucks.co.ma *.starbucks.co.uk *.starbucks.co.za *.starbucks.com.bh *.starbucks.com.co *.starbucks.com.jo *.starbucks.com.kw *.starbucks.com.lb *.starbucks.com.om *.starbucks.cz *.starbucks.de *.starbucks.eg *.starbucks.es *.starbucks.eu *.starbucks.fr *.starbucks.hu *.starbucks.ie *.starbucks.is *.starbucks.mt *.starbucks.nl *.starbucks.no *.starbucks.pl *.starbucks.pt *.starbucks.qa *.starbucks.ro *.starbucks.rs *.starbucks.sa *.starbucks.se *.starbucksslovakia.sk consent.trustarc.com *.g.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.gstatic.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.google.com immage.monks.tools *.googleapis.com *.google.com *.googleusercontent.com www.digitalassets.starbucks.eu *.starbucks.eu maps.gstatic.com maps.googleapis.com *.trustarc.com www.google-analytics.com region1.google-analytics.com region1.analytics.google.com;media-src 'self' *.starbucks.ae *.starbucks.at *.starbucks.be *.starbucks.bg *.starbucks.ch *.starbucks.co.ma *.starbucks.co.uk *.starbucks.co.za *.starbucks.com.bh *.starbucks.com.co *.starbucks.com.jo *.starbucks.com.kw *.starbucks.com.lb *.starbucks.com.om *.starbucks.cz *.starbucks.de *.starbucks.eg *.starbucks.es *.starbucks.eu *.starbucks.fr *.starbucks.hu *.starbucks.ie *.starbucks.is *.starbucks.mt *.starbucks.nl *.starbucks.no *.starbucks.pl *.starbucks.pt *.starbucks.qa *.starbucks.ro *.starbucks.rs *.starbucks.sa *.starbucks.se *.starbucksslovakia.sk;font-src 'self' fonts.gstatic.com *.gstatic.com *.trustarc.com data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.google.com *.g.doubleclick.net *.googletagmanager.com *.googlesyndication.com tagmanager.google.com aswpsdkus.com aswpsdkeu.com try.access.worldpay.com maps.googleapis.com *.youtube.com *.trustarc.com www.google-analytics.com cdnjs.cloudflare.com js-agent.newrelic.com bam.nr-data.net unpkg.com cdn.gbqofs.com *.cdn-net.com *.accdab.net *.worldpay.com https://static.cloudflareinsights.com;frame-src 'self' www.youtube-nocookie.com *.youtube.com starbucksjobs.de *.accdab.net consent-pref.trustarc.com *.google.com *.googletagmanager.com try.access.worldpay.com secure-test.worldpay.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.onecupbigchange.com *.starbucks.ae *.starbucks.at *.starbucks.be *.starbucks.bg *.starbucks.ch *.starbucks.co.ma *.starbucks.co.uk *.starbucks.co.za *.starbucks.com.bh *.starbucks.com.co *.starbucks.com.jo *.starbucks.com.kw *.starbucks.com.lb *.starbucks.com.om *.starbucks.cz *.starbucks.de *.starbucks.eg *.starbucks.es *.starbucks.eu *.starbucks.fr *.starbucks.hu *.starbucks.ie *.starbucks.is *.starbucks.mt *.starbucks.nl *.starbucks.no *.starbucks.pl *.starbucks.pt *.starbucks.qa *.starbucks.ro *.starbucks.rs *.starbucks.sa *.starbucks.se *.starbucksslovakia.sk gateway.switch.tj *.worldpay.com *.trustarc.com youtu.be *.wayin.com;frame-ancestors 'self' *.onecupbigchange.com *.starbucks.com cms.starbucks.ae cms.starbucks.at cms.starbucks.be cms.starbucks.bg cms.starbucks.ch cms.starbucks.co.ma cms.starbucks.co.uk cms.starbucks.co.za cms.starbucks.com.bh cms.starbucks.com.co cms.starbucks.com.jo cms.starbucks.com.kw cms.starbucks.com.lb cms.starbucks.com.om cms.starbucks.cz cms.starbucks.de cms.starbucks.eg cms.starbucks.es cms.starbucks.eu cms.starbucks.fr cms.starbucks.hu cms.starbucks.ie cms.starbucks.is cms.starbucks.mt cms.starbucks.nl cms.starbucks.no cms.starbucks.pl cms.starbucks.pt cms.starbucks.qa cms.starbucks.ro cms.starbucks.rs cms.starbucks.sa cms.starbucks.se cms.starbucksslovakia.sk;connect-src 'self' i.ytimg.com js-agent.newrelic.com *.trustarc.com aswpsdkus.com aswpsdkeu.com *.cdn-net.com *.accdab.net six.cdn-net.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.g.doubleclick.net google.com *.google.com aswpapius.com aswpapieu.com *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com *.worldpay.com bam.nr-data.net report.starbucks.gbqofs.io stats.g.doubleclick.net https://adservice.google.com maps.googleapis.com *.youtube.com;object-src 'none';base-uri 'none'; 24 default-src 'self' https: data: blob; img-src 'self' https: data: blob; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; trusted-types default 24 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.152media.info *.2mdn.net *.33across.com *.360yield.com *.4dex.io *.abkafurniture.com *.abt.s3.yandex.net *.ad-generation.jp *.ad-plus.com.tr *.ad-score.com *.adfor.io *.adform.com *.adform.net *.adhouse.pro *.admanmedia.com *.admatic.com.tr *.admixer.com *.admost.com *.adnow.com *.adnsafe.org *.adnxs.com *.adocean.pl *.adpush.com.tr *.adpushup.com *.adroll.com *.ads-twitter.com *.ads7-adnow.com *.adsafeprotected.com *.adsafescan.com *.adsboosters.xyz *.adsby.io *.adsmx.online *.adsturk.com *.adtarget.com.tr *.adtech.com *.adtelligent.com *.adtopia.com *.adtrafficquality.google *.advangelists.com *.advenuemedia.co.uk *.advertising.com *.adwmg.com *.air.tech *.aistekso.net *.alexametrics.com *.amazon-adsystem.com *.amazon.com *.ampproject.org *.amxrtb.com *.anura.io *.api-sports.io *.app.adjust.com *.appnexus.com *.aralego.com *.atombilisim.com.tr *.axonix.com *.azureedge.net *.baithoph.net *.beachfront.com *.bidswitch.net *.bidtellect.com *.bik.gov.tr *.bildirt.com *.binance.com *.bizzclick.com *.bringads.ru *.cdn.jsdelivr.net *.cdn.pixad.com.tr *.cdn.proadscdn.com *.cimri.com *.clarity.ms *.cleverwebserver.com *.cloudflare.com *.cloudflareinsights.com *.cmcm.com *.colossusssp.com *.connectad.io *.contextweb.com *.cookiebot.com *.coxmt.com *.criteo.com *.criteo.net *.cubepile.com *.dable.io *.dailymotion.com *.devotrans.com *.districtm.io *.doubleclick.net *.dreamwater.com.tr *.dsp-media.eskimi.com *.e-planning.net *.emxdgt.com *.engagebdr.com *.ep2.adtrafficquality.google *.ercdn.net *.erstream.com *.eskimi.com *.exponential.com *.facebook.com *.facebook.net *.flashtalking.com *.flowplayer.com *.foremedia.net *.freewheel.tv *.ftstatic.com *.gamoshi.io *.gemius.pl *.github.io *.google *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.growone.sg *.gstatic.com *.gtranslate.net *.gumgum.com *.hhkld.com *.ibillboard.com *.id5-sync.com *.idealmedia.io *.ijit.com *.improvedigital.com *.incehesap.com *.indexexchange.com *.inmobi.com *.instagram.com *.jewelbetting.co *.jewelbetting.net *.jquery.com *.jsdelivr.net *.jwpcdn.com *.karakasbezcanta.com *.krenora.com *.lijit.com *.linkedin.com *.linkwi.se *.lkqd.com *.lkqd.net *.loopme.me *.makroo.com *.maple-team.com *.mars.media *.mediabong.com *.meta.com *.mgid.com *.moatads.com *.monochat.ai *.monosnap.com *.mrf.io *.netmedyaajans.com.tr *.newborntown.com *.nnowa.com *.omnijay.com *.onesignal.com *.onetag-sys.com *.onnetwork.tv *.openstat.eu *.openweathermap.com *.openx.com *.openx.net *.optad360.io *.outbrain.com *.paytr.com *.peak226.com *.pinterest.com *.pixad.com.tr *.player.im *.player.viads.com *.preply.com *.programattik.com *.protagcdn.com *.publisher-network.com *.pubmatic.com *.push66.com.tr *.pushsaas.digital *.quantcount.com *.radyotelekom.com.tr *.radyotelekomtv.com *.reklamstore.com *.resultsmedia.com *.rhythmone.com *.rtb.pixad.com.tr *.rubiconproject.com *.sabio.us *.sanalofisonline.com *.say.ac *.schema.org *.script.ac *.serving-sys.com *.sharethis.com *.sharethrough.com *.smaato.com *.smartadserver.com *.smartyads.com *.smilewanted.com *.smrtb.com *.sonobi.com *.sovrn.com *.spotx.tv *.spotxchange.com *.springserve.com *.static.hotjar.com *.stickyadstv.com *.stroeer.com *.synacor.com *.t3vakfi.app *.taboola.com *.tagon.co *.tebilisim.com *.teimg.com *.teknofest.app *.tevideo.org *.thalespirlanta.com *.theadx.com *.thebrave.io *.themediagrid.com *.thubanoa.com *.tiktok.com *.tiviplayer.com *.tradingview.com *.tribalfusion.com *.trvdp.com *.ttwstatic.com *.twimg.com *.twitter.com *.ucfunnel.com *.uidapi.com *.unpkg.com *.unrulymedia.com *.us.com *.vdo.ai *.viads.com *.viads.net *.videoomy.com *.vidoomy.com *.vidyome.com *.vimeo.com *.viralize.tv *.virgul.com *.visitchange.com *.weatherwidget.io *.webeyemob.com *.wordego.com *.x.com *.yads.tech *.yahoo.com *.yandex.com *.yandex.net *.yandex.ru *.yastatic.net *.yayin.com.tr *.yieldmo.com *.youtu.be *.youtube.com *.ytimg.com *.zencdn.net a.bringads.ru ad-plus.com.tr ad.360yield.com adfor.io ads.vidoomy.com ads.viralize.tv adsby.io adsdkprod.azureedge.net adsmx.online adsturk.com adtrafficquality.google ajs-assets.ftstatic.com analytics.ahrefs.com anura.io api-maps.yandex.ru api.adnsafe.org api.genelpara.com bidlift.152media.info buttons-config.sharethis.com c1.imgiz.com cdn-auth.t3vakfi.app cdn.adhouse.pro cdn.adpushup.com cdn.adsafescan.com cdn.ampproject.org cdn.doubleverify.com cdn.flowplayer.com cdn.id5-sync.com cdn.jsdelivr.net cdn.jwplayer.com cdn.proadscdn.com cdn.ravenjs.com cdn.stickyadstv.com cdn2.bildirt.com cleverwebserver.com cm.adform.net cm.g.doubleclick.net connect.facebook.net consent.cookiebot.com cpm.programattik.com creative-measurement.quantcount.com csync.loopme.me dable.io display-static.yads.tech dsp-media.eskimi.com ep1.adtrafficquality.google ep2.adtrafficquality.google erpm-js.erstream.com euw2-a.amxrtb.com gdetr.hit.gemius.pl google.com gtranslate.net hbopenbid.pubmatic.com hhkld.com ib.adnxs.com id2.t3vakfi.app id5-sync.com instagram.com invstatic101.creativecdn.com ittpx.eskimi.com ittr.eskimi.com js.ad-score.com js.globalsun.io jsc.idealmedia.io jscdn.greeter.me jsdelivr.net krenora.com lidertv.radyotelekom.com.tr mc.yandex.com monitor.growone.sg monosnap.com mp.4dex.io mrf.io myvalice.com.tr n.nnowa.com netmedyaajans.com.tr nnowa.com oa.openxcdn.net onesignal.com onetag-sys.com openstat.eu pagead2.googlesyndication.com paytr.com pcode.yads.tech pghub.io platform-api.sharethis.com platform.foremedia.net player.im player.viads.com pool-eu.creative-serving.com prebid-server.rubiconproject.com prebid.smilewanted.com preply.com proadscdn.com protagcdn.com push66.com.tr pushsaas.digital radyotelekom.com.tr radyotelekomtv.com run.admost.com s0.2mdn.net sads.adsboosters.xyz say.ac script.4dex.io sdk.mrf.io securepubads.g.doubleclick.net sosyal.teknofest.app sp.ad-plus.com.tr ssb-global.smartadserver.com st-n.ads7-adnow.com st-n.nnowa.com static-maps.yandex.ru static.ads-twitter.com static.cdn.pixad.com.tr static.cloudflareinsights.com tags.crwdcntrl.net testerparfum.com theadsby.rtb.pixad.com.tr trgde.adocean.pl tv5-live.ercdn.net twimg.com u.openx.net unpkg.com user-sync.gamoshi.io vdo.ai viads.net videojs.com visitchange.com vjs.zencdn.net vpaid.springserve.com webchat.monochat.ai x.bidswitch.net yandex.com yandex.ru yastatic.net; 24 default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src * data: https://ii-package.de; img-src * data: https://ii-package.de 24 default-src https: wss: about: data: blob: 'unsafe-inline' 'unsafe-eval' 24 frame-ancestors 'self' https://omnidoctor.ru/ 24 default-src https: blob:; connect-src https: wss: blob:; font-src https: data:; frame-src https:; frame-ancestors 'self'; img-src https: blob: data:; media-src https: blob:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'unsafe-inline' https:; 23 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: yoti: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com 1868565294.rsc.cdn77.org static.cloudflareinsights.com www.google.com www.gstatic.com fonts.gstatic.com global.frcapi.com *.googleapis.com accounts.google.com *.cdn77.org *.nk-img.com *.segpay.com *.online-metrix.net *.vscdns.com *.vsmvideo.com *.mmcdn.com *.agego.com www.youtube.com *.videoxx.com info.xvideos.net www.tjk-njk.com *.yoti.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net *.acdn5165543.com *.aacdn.net martted.com *.opoxv.com *.analvids.com tour1.analvids.com bmedia-bunny.justservingfiles.net *.justservingfiles.net *.bkcdn.net *.bxcdn.net cdn-fc.com *.pemsrv.com cdn.rtbix.com *.rtbix.com pixel-sin.ls7ksp-rtbix.top *.ls7ksp-rtbix.top *.ad1n.net *.rtbsuperhub.com *.lux.rtbsuperhub.com www.exoclick.com *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com *.asf4f.us *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com *.gtflixtv.com wss://*.1ka.com https://*.1ka.com chat.1ka.com u.1ka.com chat-media.1ka.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.cdn77.org www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com data-cdn.pornbiz.com *.vscdns.com *.vsmvideo.com *.mmcdn.com *.doubleclick.net *.google.fr *.google.com *.segpay.com *.online-metrix.net cdn.asf4f.us storage.agego.com *.gtflixtv.com chat-media.1ka.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net bmedia.justservingfiles.net *.tf4srv.com *.aacdn.net xenoly7.com miraco7.com clariva5.com miraex6.com go2fridayroll.com solvix8.com linktoliraspin.com clyoro7.com volexa5.com dynara3.com veltor2.com *.trackingtraffo.com trackingtraffo.com *.nowsrv.com betoholictrack.net refpa2518.com refpa3665.com melbet-ma.com melbetegypt.com 1xlite-815256.bar *.staticfilesonly.com *.analvids.com tour1.analvids.com bmedia-bunny.justservingfiles.net *.justservingfiles.net *.bkcdn.net *.bxcdn.net cdn-fc.com *.pemsrv.com cdn.rtbix.com *.rtbix.com pixel-sin.ls7ksp-rtbix.top *.ls7ksp-rtbix.top *.ad1n.net *.rtbsuperhub.com *.lux.rtbsuperhub.com; report-uri https://www.xvideos.com/csp-reports; report-to csp-endpoint 23 default-src 'self' 'unsafe-inline' https://park.101datacenter.net https://*.deviceatlascloud.com/ https://cs.deviceatlas-cdn.com data: 23 report-uri https://99designs.report-uri.com/r/d/csp/enforce; frame-ancestors 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: blob: android-webview-video-poster:; upgrade-insecure-requests; 23 frame-ancestors 'self' https://medium.com 23 block-all-mixed-content; frame-ancestors 'self' 23 default-src https: 'unsafe-inline' 'unsafe-eval' data: blob:; block-all-mixed-content; connect-src * blob:; font-src https:; frame-ancestors 'self' https://preview.plaece.nl; frame-src *; img-src https: data: blob:; media-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; report-uri /nelmio/csp/report; worker-src https: blob: 23 frame-ancestors none 22 frame-ancestors 'self' https://app.storyblok.com; 22 sandbox allow-scripts; default-src 'self'; img-src https:; style-src 'unsafe-inline'; script-src 'unsafe-inline'; report-uri https://csp.yahoo.com/beacon/csp?src=redirect 22 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' https: https://accounts.google.com/gsi/; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: https://accounts.google.com/gsi/client; style-src data: 'unsafe-inline' https: https://accounts.google.com/gsi/style; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob: https://accounts.google.com/gsi/; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'self' 22 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; 22 frame-ancestors 'self' meisterdrucke.com meisterdrucke.de meisterdrucke.at; 22 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jus.br *.googleapis.com *.gstatic.com *.hcaptcha.com https://*.rybena.com.br *.youtube.com *.ytimg.com *.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.jus.br *.googleapis.com *.rybena.com.br; img-src 'self' data: blob: https:; font-src 'self' *.jus.br *.googleapis.com *.gstatic.com *.rybena.com.br; connect-src blob: 'self' *.jus.br *.hcaptcha.com *.google.com *.google-analytics.com stats.g.doubleclick.net; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.hcaptcha.com *.google.com *.jus.br *.rybena.com.br *.powerbi.com; object-src https: blob:; base-uri 'self'; form-action 'self'; media-src 'self' *.jus.br; worker-src 'self' blob:; upgrade-insecure-requests; 22 default-src 'self'; style-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com www.google.com az416426.vo.msecnd.net www.gstatic.com dc.services.visualstudio.com tagmanager.google.com https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org:* https://cdn.consentmanager.mgr.consensu.org/delivery/cmp.min.css; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.mxpnl.com https://action.metaffiliation.com https://*.googleapis.com www.googletagmanager.com www.google.com az416426.vo.msecnd.net www.gstatic.com dc.services.visualstudio.com tagmanager.google.com www.googleadservices.com *.google-analytics.com *.analytics.google.com static.hotjar.com static.hotjar.io bat.bing.com connect.facebook.net googleads.g.doubleclick.net script.hotjar.com script.hotjar.io www.dwin1.com/8427.js www.zenaps.com https://the.sciencebehindecommerce.com/d9core adclick.g.doubleclick.net https://cdn.consentmanager.mgr.consensu.org:* https://consentmanager.mgr.consensu.org:* https://cdn.consentmanager.net:* https://c.delivery.consentmanager.net:* https://ibn.yuzzu.be:* https://static.cdn.prismic.io https://d.delivery.consentmanager.net https://apps.mypurecloud.de https://ad.doubleclick.net/ccm/s/collect; font-src 'self' fonts.gstatic.com script.hotjar.com script.hotjar.io data:; frame-src 'self' img.metaffiliation.com bid.g.doubleclick.net www.google.com dc.services.visualstudio.com vars.hotjar.com vars.hotjar.io 11105234.fls.doubleclick.net https://tbl.tradedoubler.com/ www.zenaps.com https://cdn.consentmanager.net https://cdn.consentmanager.mgr.consensu.org:* https://td.doubleclick.net https://*.prismic.io https://www.googletagmanager.com https://sst.yuzzu.be https://apps.mypurecloud.de https://ad.doubleclick.net/ccm/s/collect; connect-src 'self' https://www.facebook.com https://bat.bing.net http://*.hotjar.io:* https://*.hotjar.io:* wss://*.hotjar.io http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://pagead2.googlesyndication.com https://www.google-analytics.com *.google-analytics.com *.analytics.google.com dc.services.visualstudio.com connect.facebook.net in.hotjar.com in.hotjar.io vc.hotjar.io inkstone-edge.haiku.ai api.mixpanel.com https://stats.g.doubleclick.net adclick.g.doubleclick.net https://surveystats.hotjar.io:* https://cdn.consentmanager.mgr.consensu.org:* https://consentmanager.mgr.consensu.org:* https://*.rockestate.be *.googleapis.com https://geoservices.wallonie.be https://action.metaffiliation.com:* https://ibn.yuzzu.be:* https://pagead2.googlesyndication.com:* https://www.google.com:* https://googleads.g.doubleclick.net https://bat.bing.com https://adservice.google.com https://www.googleadservices.com https://js.monitor.azure.com https://sst.yuzzu.be https://ad.doubleclick.net https://d.delivery.consentmanager.net https://api-cdn.mypurecloud.de wss://webmessaging.mypurecloud.de https://api.mypurecloud.de https://www.google.be www.googletagmanager.com https://westeurope-5.in.applicationinsights.azure.com https://ad.doubleclick.net/ccm/s/collect; img-src 'self' https://bat.bing.net https://delivery.consentmanager.net:* https://d.delivery.consentmanager.net https://cdn.consentmanager.net:* https://cdn.consentmanager.mgr.consensu.org:* https://consentmanager.mgr.consensu.org:* http://*.google.com https://*.google.com http://*.google.be https://*.google.be http://*.google.co.za https://*.google.co.za www.zenaps.com www.awin1.com ssl.gstatic.com www.gstatic.com 11105234.fls.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net https://ad.doubleclick.net script.hotjar.io www.facebook.com www.google.be https://*.google-analytics.com https://*.analytics.google.com bat.bing.com https://*.googleapis.com maps.gstatic.com www.w3.org https://*.rockestate.be https://geoservices.wallonie.be https://ibn.yuzzu.be:* https://affdc.yuzzu.be:* https://images.prismic.io https://prismic-io.s3.amazonaws.com data: https://yuzzu.be https://www.googletagmanager.com https://www.yuzzu.be https://sst.yuzzu.be https://yuzzu-cms.cdn.prismic.io https://ad.doubleclick.net/ccm/s/collect; child-src 'self' https://vars.hotjar.com https://vars.hotjar.io 22 default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; worker-src data: 22 frame-ancestors 'self' https://www.transparencia.gob.pe https://www.oefa.gob.pe https://opmr.pcm.gob.pe 21 frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com 21 img-src * data:; default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'none'; 21 default-src https: data: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 21 default-src 'self' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *;img-src 'self' data: *;connect-src 'self' *;worker-src 'self' blob: *;frame-src 'self' oauth.telegram.org *;frame-ancestors 'self' *;base-uri 'self';font-src 'self' https: data:;form-action 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 21 script-src * 'unsafe-inline' 'unsafe-eval' 21 frame-ancestors 'self' *.hexia.io *.zigtools.nl *.zig365.nl 21 object-src 'none'; base-uri 'self' 20 frame-ancestors 'self' *.smartagent.app *.jdmesh.co *.choicestore.com http://localhost:* https://localhost:*; form-action https:; script-src https: 'unsafe-inline' 'unsafe-eval';worker-src blob:; 20 object-src 'self' https://www.youtube.com/;frame-src 'self' mailto: tel: https://3cx.com https://player.vimeo.com/ https://vars.hotjar.com/ https://www.google.com https://cse.google.com https://mc.yandex.com/ https://services.3cx.com https://audioconverter.3cx.com https://login.3cx.com https://docs.google.com https://www.facebook.com https://td.doubleclick.net/ https://bid.g.doubleclick.net https://www.loom.com https://www.youtube.com https://www.youtube-nocookie.com/ https://www.googletagmanager.com https://portal.3cx.com; frame-ancestors 'self' 20 frame-ancestors 'self' https://app.stg.boxoffice.com https://app.boxoffice.com 20 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src https://www.google.com https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://www.youtube.com; frame-ancestors 'none' ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 20 object-src 'none'; form-action 'self'; frame-ancestors 'self'; 19 worker-src 'self'; 19 frame-ancestors 'self'; object-src 'none'; 19 font-src 'none' 19 block-all-mixed-content; upgrade-insecure-requests 19 frame-ancestors 'self' cloudlogin.co *.cloudlogin.co; 19 default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com 18 upgrade-insecure-requests; frame-ancestors 'none' 18 upgrade-insecure-requests; media-src https: blob:; child-src https: blob:; default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:; font-src https: data:; img-src https: data:; 18 frame-ancestors 'self'; object-src 'none'; upgrade-insecure-requests; 18 frame-src * 18 default-src 'self' http: https: data: blob: wss: 'unsafe-inline' 'unsafe-eval' 18 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss://ws.talkingpoints.live 18 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; 18 connect-src sync.datamind.ru geocode-maps.yandex.ru/1.x/ suggest-maps.yandex.ru *.datamind.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org eye.targetads.io top-fwz1.mail.ru an.yandex.ru pixel.gooroo.works api-qa.diginetica.net/v1/ rap.skcrtxr.com *.a.mts.ru sm.rtb.mts.ru vk.com 'self' *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.cdn-tinkoff.ru *.t-static.ru wss://*.tinkoff.ru wss://*.tcsbank.ru wss://*.tbank.ru api-maps.yandex.ru enterprise.api-maps.yandex.ru https://*.api-maps.yandex.ru *.maps.yandex.net yandex.ru *.time-messenger.ru https://gateway.atomyze.ru https://gw.atomyze.ru *.tinsurance.ru id.tbank.ru www.tbank.ru api-statist.tinkoff.ru cdn.tbank.ru cfg.tinkoff.ru business.tbank.ru baf.tinkoff.ru confucius-public-configs.t-static.ru cobrowsing.tbank.ru fallback-cdn.tbank.ru mobile-appinapp-static-prod.cdn-tinkoff.ru imgproxy.cdn-tinkoff.ru ded-pwa-static-pages.t-static.ru mddc.tinkoff.ru www.cdn-tinkoff.ru www.tinsurance.ru geocode-maps.yandex.ru delivery.tinkoff.ru broker-api.tinkoffinsurance.ru api-osago.tbank.ru bms-logo-prod.t-static.ru collection-phoenix.t-tech.team tmsg.tbank.ru tmsg.phoenix-ca.ru api.rosbank.ru pulse-image-avatar.cdn-tinkoff.ru invest-brands.cdn-tinkoff.ru webevent.tbank.ru ris.tbank.ru sales-tech-publication.tbank.ru fallback.cdn-tinkoff.ru; script-src sync.datamind.ru connect.ok.ru vk.com *.datamind.ru *.tinkoff.ru *.tcsbank.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net 'self' 'unsafe-eval' 'unsafe-inline' *.tbank-online.com tbank.ru *.tbank.ru *.cdn-tinkoff.ru *.t-static.ru blob: https://tinkoff.ru https://www.tinkoff.ru https://www.youtube.com api-maps.yandex.ru https://*.api-maps.yandex.ru enterprise.api-maps.yandex.ru suggest-maps.yandex.ru *.maps.yandex.net yandex.ru https://widget.cloudpayments.ru *.tinsurance.ru; img-src *.datamind.ru vk.com login.vk.com ad.mail.ru *.yandex.ru *.yandex.net *.sravni.ru www.banki.ru *.pool.datamind.ru statad.ru *.tinkoff.ru *.mail.ru dp.tinkoffinsurance.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz yastatic.net eye.targetads.io top-fwz1.mail.ru 'self' data: *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru https://tinkoff.ru https://www.tinkoff.ru http://img.youtube.com *.maps.yandex.net api-maps.yandex.ru https://*.api-maps.yandex.ru enterprise.api-maps.yandex.ru yandex.ru https://yastatic.net http://static.tinkoffinsurance.ru https://i.ytimg.com *.rosbank.ru *.depository.ru rap.skcrtxr.com agents.tcsbank.ru *.tinsurance.ru; frame-src vk.com static.datamind.ru connect.ok.ru *.datamind.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr webvisor.com *.webvisor.com 'self' blob: data: *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru https://www.youtube.com https://newatom.spaaace.io https://order.atom.auto https://widget.cloudpayments.ru rutube.ru t-j.ru yandex.ru tmsg.phoenix-ca.ru www.cdn-tinkoff.ru https://flo.uri.sh/ *.tinsurance.ru; report-uri https://www.tbank.ru/api/front/pwaplatform/log/csp-error?appName=pwaplatform&sentryDsnKey=b7cae0fa7dd74b4489cd05596a20df38&sentryApiId=142; default-src 'self' *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinkoff.ru data: *.tinsurance.ru; font-src 'self' *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinkoff.ru data: *.tinsurance.ru; style-src 'unsafe-inline' 'self' *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinsurance.ru yastatic.net; frame-ancestors 'self' tbank.ru www.tbank.ru *.tbank.ru *.tcsbank.ru tinkoff.ru *.tinkoff.ru *.tbank-online.com https://auto.ru www.auto.ru *.auto.ru auto.ru https://t-insurance.avito.com mc.yandex.ru metrika.yandex.ru www.rosbank.ru www.depository.ru *.bankline.ru bankline.ru offer.gdemoideti.ru tmsg.phoenix-ca.ru www.cdn-tinkoff.ru www.bankiros.ru bankiros.ru t-j.ru www.t-j.ru www.banki.ru; worker-src 'self' blob: https://www.tbank.ru www.tbank.ru https://api-maps.yandex.ru https://*.api-maps.yandex.ru https://yastatic.net 18 frame-ancestors 'self'; object-src 'none' 18 frame-ancestors 'self'; default-src 'self' http: https: ws: wss:; script-src 'self' http: https: 'unsafe-eval' 'unsafe-inline'; img-src 'self' http: https: data:; style-src 'unsafe-inline' http: https:; font-src 'self' http: https: data:; 18 default-src 'none'; connect-src yandex.ru https://*.yandex.ru https://*.yandex.net https://*.yandex.com https://fundingchoicesmessages.google.com http://pagead2.googlesyndication.com https://csi.gstatic.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net *.google-analytics.com https://clk.streamgo.ru 'report-sample'; font-src https://yastatic.net https://fonts.gstatic.com; frame-src https://yastatic.net https://*.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com 'report-sample'; img-src * data: 'report-sample'; manifest-src 'self'; media-src data: 'self' https://strm.yandex.ru https://*.strm.yandex.net https://cdn.streamgo.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yandex.ru https://yastatic.net https://fundingchoicesmessages.google.com http://pagead2.googlesyndication.com https://adservice.google.ae https://adservice.google.at https://adservice.google.az https://adservice.google.be https://adservice.google.bg https://adservice.google.bj https://adservice.google.by https://adservice.google.ca https://adservice.google.ch https://adservice.google.cl https://adservice.google.co.id https://adservice.google.co.il https://adservice.google.co.in https://adservice.google.co.jp https://adservice.google.co.kr https://adservice.google.co.uk https://adservice.google.co.uz https://adservice.google.co.za https://adservice.google.com https://adservice.google.com.ar https://adservice.google.com.au https://adservice.google.com.br https://adservice.google.com.cy https://adservice.google.com.eg https://adservice.google.com.gh https://adservice.google.com.ng https://adservice.google.com.pk https://adservice.google.com.sg https://adservice.google.com.tj https://adservice.google.com.tr https://adservice.google.com.tw https://adservice.google.com.ua https://adservice.google.com.vn https://adservice.google.cz https://adservice.google.de https://adservice.google.ee https://adservice.google.es https://adservice.google.fi https://adservice.google.fr https://adservice.google.ge https://adservice.google.gl https://adservice.google.gr https://adservice.google.hu https://adservice.google.ie https://adservice.google.iq https://adservice.google.it https://adservice.google.jo https://adservice.google.kg https://adservice.google.kz https://adservice.google.lt https://adservice.google.lu https://adservice.google.lv https://adservice.google.md https://adservice.google.mn https://adservice.google.mv https://adservice.google.nl https://adservice.google.no https://adservice.google.pl https://adservice.google.ps https://adservice.google.pt https://adservice.google.ro https://adservice.google.ru https://adservice.google.sc https://adservice.google.se https://adservice.google.sk https://adservice.google.sn https://adservice.google.tm https://pagead2.googlesyndication.com https://partner.googleadservices.com https://tpc.googlesyndication.com https://www.google-analytics.com https://www.googletagservices.com www.googletagmanager.com https://www.gstatic.com https://mc.yandex.ru https://mc.yandex.com 'report-sample'; style-src 'self' 'unsafe-inline' https://www.gstatic.com 'report-sample'; report-uri /csp-report.php 18 frame-ancestors 'self' https://epson.custhelp.com https://epson-es.custhelp.com https://epson-pt.custhelp.com *.goepson.com 18 default-src 'self'; object-src 'self' blob:; frame-ancestors 'self' flex.cybersource.com; worker-src blob: ; frame-src 'self' blob: *; media-src *; img-src * 'self' data: https: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' api.brainsins.com mw.brainsins.com d2xkqxdy6ewr93.cloudfront.net *.cloudfront.net cdn.pushassist.com trc.taboola.com *.collect.igodigital.com resources.convious-app.com client.convious-app.com cdn.taboola.com 510001631.collect.igodigital.com script.hotjar.com 510001630.collect.igodigital.com static.hotjar.com launch-9151dc1e0eb6-development mstat.acestream.net www.gstatic.com flex.cybersource.com pe-kw.store.kennywood.com pe-cp.store.castlepark.com www.google.com connect.facebook.net googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com www.google-analytics.com *.parquesreunidos.es *.optickssecurity.com *.opticksstatic.com *.opticksprotection.com opticksprotection.com assets.adobedtm.com amplify.review-alerts.com static-eu.payments-amazon.com maps.googleapis.com cdn.cookielaw.org geolocation.onetrust.com grpr.tt.omtrdc.net launch-9151dc1e0eb6-development cd.livechatin.com api-pre.adminos.parquesreunidos.com analytics.tiktok.com ts.tradetracker.net sleeknotecustomerscripts.sleeknote.com mstat.acestream.net pilaff-up.ru statusklic.info cdn.notifyon.com cdn.livechatinc.com eu5.bookingkit.de js.mollie.com www.paypal.com www.sandbox.paypal.com checkoutshopper-live.adyen.com applepay.cdn-apple.com sandbox.src.mastercard.com src.mastercard.com assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com twimg.com publish.twitter.com platform.linkedin.com track.adform.net static.criteo.net tagmanager.google.com ssl.google-analytics.com ajax.aspnetcdn.com d2cmqkwo8rxlr9.cloudfront.net ad.doubleclick.net apis.google.com www.youtube.com platform.twitter.com s.ytimg.com syndication.twitter.com api.livechatinc.com www.googleoptimize.com optimize.google.com trck.spoteffects.net i.realytics.io cdn-eu.realytics.net pe-kw.store.kennywood.com pe-cp.store.castlepark.com pe-rwsydney.store.ragingwaterssydney.com.au pe-sps.store.splishsplash.com pe-sl.store.storylandnh.com pe-na.store.noahsarkwaterpark.com pe-sc.store.sandcastlewaterpark.com pe-wc.store.watercountry.com pe-rwsd.store.ragingwaters.com static.zdassets.com *.optimonk.com sdks.shopifycdn.com ajax.googleapis.com webchat.masvoz.es static.b-ite.com cs-assets.b-ite.com pixel.mathtag.com bat.bing.com cdn.jsdelivr.net farm.plista.com j01l4h3n.com diffuser-cdn.app-us1.com www.rvty.net *.clarity.ms 5mcl.fr *.adnxs.com static.tacdn.com prism.app-us1.com trackcmp.net www.jscache.com *.scratcher.io s2.adform.net cdn.leadfamly.com www.tripadvisor.com www.tripadvisor.fr cpi.mirabilandia.it www.opinator.com pe-iw.store.idlewild.com js.adsrvr.org tracker.marinsm.com pe-dw.store.dutchwonderland.com static.zuora.com pe-waw.store.emeraldpointe.com pe-rwsc.store.rwsac.com pe-mn.store.malibunorcross.com *.quantummetric.com t.contentsquare.net pe-bps.store.boomerspalmsprings.com cdn.smooch.io adventurelandresort.secure-cdn.na.accessoticketing.com pe-bv.store.boomersvista.com pe-rwsj.store.rwsplash.com pe-lc.store.lakecompounce.com pe-mm.store.mountasiamarietta.com app.mews.com apps.mews.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com pay.google.com easyway-webchat.s3.eu-north-1.amazonaws.com *.smooch.io sc-static.net tr.snapchat.com *.sprinklr.com apps.mypurecloud.ie surveydynamix.com apps.mypurecloud.com osm.klarnaservices.com js.klarna.com pagead2.googlesyndication.com static.sojern.com *.outbrain.com tib2.tropical-islands.de sla3.slagharen.com mir8.mirabilandia.it mib9.mirabeach.mirabilandia.it war5.parquewarner.com wab6.parquewarnerbeach.parquewarner.com pam4.parquedeatracciones.es mpg3.movieparkgermany.de mar7.marineland.fr zoo2.zoomadrid.com fau4.faunia.es bjl1.bobbejaanland.be bld2.bonbonland.dk dwo7.dutchwonderland.com bnp8.bonoparques.es tus1.tusenfryd.no swa4.selwo.es swm9.selwomarina.es teb6.telefericobenalmadena.com mxa8.atlantisaquarium-madrid.es bel7.belantis.de blk3.blackpoolzoo.org.uk bos6.sommarland.no bor5.oceanarium.co.uk aqs1.aquasplash.fr car1.cartaya.aquopolis.es cda2.costa-dorada.aquopolis.es cul3.cullera.aquopolis.es tor4.torrevieja.aquopolis.es vil5.villanueva.aquopolis.es slp2.sealifeparkhawaii.com ctp3.castlepark.com knw4.kennywood.com adp5.adventurelandresort.com lkc8.lakecompounce.com cnh1.cartoonnetworkhotel.com sct1.sandcastlewaterpark.com stl6.storylandnh.com sny5.splishsplash.com lsa6.livingshores.com rla9.ragingwaters.com syd7.ragingwaterssydney.com.au wco2.watercountry.com wep3.emeraldpointe.com noa8.noahsarkwaterpark.com idw7.idlewild.com webchat.digitalcx.com *.aptrinsic.com *.datatrans.com *.recaptcha.net *.bookingkit.com *.paypalobjects.com *.trackingplan.com *.leadinfo.net *.moin.ai *.talkjs.com *.accdab.net staging.cdn-net.com six.cdn-net.com www.cdn-net.com demo.fareharbor.com fareharbor.com *.piwik.pro *.instagram.com *.equalweb.com img.mpay.samsung.com us-cdn-gpp.mcsvc.samsung.com *.stackadapt.com *.cookiebot.com; style-src * 'unsafe-inline' blob:; font-src * data:; connect-src * 18 default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; 18 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.tailwindcss.com https://sdk.cashfree.com https://www.gstatic.com https://apis.google.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none' 18 frame-ancestors 'self' *.plataformaneo.com.br 18 frame-ancestors 'self' https://shop.kaspersky.co.uk https://shop.kaspersky.ca https://cart.kaspersky.com.br https://loja.kaspersky.pt https://shop.africa.kaspersky.com https://shop.afrique.kaspersky.com https://shop.baltics.kaspersky.com https://shop.bg.kaspersky.com https://shop.hu.kaspersky.com https://shop.il.kaspersky.com https://shop.kaspersky.be https://shop.kaspersky.co.in https://shop.kaspersky.co.jp https://shop.kaspersky.co.kr https://shop.kaspersky.co.th https://shop.kaspersky.com https://shop.kaspersky.com.au https://shop.kaspersky.com.hk https://shop.kaspersky.com.tr https://shop.kaspersky.com.tw https://shop.kaspersky.com.vn https://shop.kaspersky.cz https://shop.kaspersky.de https://shop.kaspersky.dk https://shop.kaspersky.es https://shop.kaspersky.fi https://shop.kaspersky.fr https://shop.kaspersky.gr https://shop.kaspersky.it https://shop.kaspersky.kz https://shop.kaspersky.ma https://shop.kaspersky.nl https://shop.kaspersky.ro https://shop.kaspersky.rs https://shop.kaspersky.ru https://shop.kaspersky.se https://shop.me.kaspersky.com https://shop.no.kaspersky.com https://shop.sea.kaspersky.com https://shop.stan.kaspersky.com https://shop.usa.kaspersky.com https://shop-lt.latam.kaspersky.com https://shop-mx.latam.kaspersky.com https://checkout.kaspersky.gr https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com; 17 script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist 17 report-uri /v1/csplog; block-all-mixed-content; frame-ancestors https://*.grupawp.pl https://*.kube.dev.dcwp.pl https://*.wplatform.media; 17 script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://recaptcha-staging.corp.google.com/;report-uri /recaptcha/challengepage/_/RecaptchaChallengePageUi/cspreport/allowlist;base-uri www.google.com 17 frame-ancestors 'self' https://app.contentful.com; 17 frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://empde.app.baqend.com https://tags.creativecdn.com https://lensflare.vimeo.com https://arclight.vimeo.com https://player.vimeo.com https://cdn.cquotient.com https://www.googletagmanager.com https://services.postcodeanywhere.co.uk https://*.dynamicyield.com https://empme11111.pcapredict.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://*.google-analytics.com https://*.doubleclick.net https://*.dwin1.com https://*.facebook.net https://*.bing.com https://*.criteo.net https://*.stylight.net https://*.linkfire.com https://*.pinimg.com https://*.adsrvr.org https://sc-static.net https://*.tiktok.com https://*.kuponacdn.de https://*.ad-srv.net https://ad4m.at https://*.ad4m.at https://*.bounce-commerce.de https://*.usemaxserver.de https://*.soreto.com https://*.gsitrix.com https://*.snapchat.com https://*.clarity.ms https://*.criteo.com https://*.paypal.com https://*.scarabresearch.com https://*.cloudfront.net https://*.fatmedia.io https://*.payments-amazon.com https://hal9000.redintelligence.net https://*.klarnacdn.net https://*.adyen.com https://live.adyen.com https://www.googleadservices.com https://api.sovendus.com https://www.awin1.com https://*.sciencebehindecommerce.com https://*.amazonaws.com https://*.b-cdn.net https://*.klarnaservices.com https://*.cquotient.com https://www.glami.sk https://www.glami.cz https://creativecdn.com https://dmdi.pl https://emp-merchandising-gmbh.jobbase.io https://emp-merchandising-gmbh.onlyfy.jobs https://cdn.studentbeans.com/third-party/all.js https://amplify.outbrain.com/cp/obtp.js https://ai.trk42.net/ https://pixel.dmdi.pl/s/tr.js https://c.imedia.cz/js/retargeting.js https://*.osp.live https://widget.sendwise.sevensenders.com https://*.seznam.cz https://*.twitch.tv https://*.getback.ch http://*.static.getback.ch https://www.mainadv.com https://*.thebrighttag.com https://*.rubiconproject.com https://*.klarna.com https://*.pinterest.com https://*.kpcustomer.de https://www.facebook.com https://r.clarity.ms https://p.gsitrix.com https://tr6.snapchat.com https://www.sandbox.paypal.com https://trck.linkster.co https://*.preciso.net https://pixel.byspotify.com https://pixels.spotify.com https://api.recova.ai https://*.zbozi.cz https://jzixlqre.micpn-eu.com https://*.roeyecdn.com https://*.roeye.com blob:; 17 default-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; 17 frame-ancestors http://*.interactcp.com https://*.interactcp.com 'self' 17 frame-ancestors 'self' *.heartinternet.com:* *.heartinternet.co.uk:* *.heartinternet.uk:* *.heart-internet.com:* *.heart-internet.co.uk:* *.123-reg.co.uk:* *.vps-10.com:* *.ds-10.com:* *.managethisdomain.com:*; 17 frame-ancestors 'self' https://*.gamelounge.tech 17 block-all-mixed-content;connect-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: blob: wss:;default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: blob: wss: 'report-sample';font-src 'self' data: https: blob: wss: assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;frame-ancestors 'self' int1.msn.com ntp.msn.cn ntp.msn.com windows-int1.msn.com windows.msn.cn windows.msn.com www.bing.com www.msn.com mathsolver.microsoft.com mathsolver-dev.microsoft.com chrome-extension://lklfbkdigihjaaeamncibechhgalldgl;media-src 'self' https: blob:;report-to csp-endpoint;worker-src 'self' https: blob: 'report-sample'; 16 frame-ancestors 'self' https://premiersupport.intel.com https://c0.avaamo.com *.intel.com; object-src 'self'; 16 frame-ancestors https://app.storyblok.com 16 default-src 'self'; style-src 'self' * 'unsafe-inline';style-src-attr 'self' 'unsafe-inline' *; style-src-elem 'self' 'unsafe-inline' blob: *; font-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; connect-src *; img-src 'self' 'unsafe-inline' data: blob: *; manifest-src *; frame-src *; media-src * blob:; worker-src 'self' blob: 16 frame-ancestors none; 16 object-src 'none'; base-uri 'none'; frame-ancestors 'self'; upgrade-insecure-requests 16 script-src 'self' 16 default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://js.stripe.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://js.stripe.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://strapi.inbox.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://*.fjordmail.no https://*.recurrent.no; 16 default-src * self blob: data: gap:; style-src * self 'unsafe-inline' blob: data: gap:; script-src * 'self' 'unsafe-eval' 'unsafe-inline' blob: data: gap:; object-src * 'self' blob: data: gap:; img-src * self 'unsafe-inline' blob: data: gap:; connect-src self * 'unsafe-inline' blob: data: gap:; frame-src * self blob: data: gap:; 16 default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' 'unsafe-inline' 'unsafe-eval' data:; 16 upgrade-insecure-requests; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: ajax.googleapis.com vjs.zencdn.net admin.brightcove.com sc-static.net bat.bing.com cdnjs.cloudflare.com tags.tiqcdn.com cdn.optimizely.com sadmin.brightcove.com www.youtube.com sadmin.brightcove.com www.google-analytics.com www.google.com cdnssl.clicktale.net snap.licdn.com connect.facebook.net www.googletagmanager.com script.crazyegg.com s.ytimg.com snap.licdn.com visitor-service-eu-west-1.tealiumiq.com s1583749854.t.eloqua.com app.gatedcontent.com img.en25.com s1.adis.ws cdn.pricespider.com locate.pricespider.com wtbevents.pricespider.com c.la1-c1-frf.salesforceliveagent.com players.brightcove.net logx.optimizely.com collect-eu-west-1.tealiumiq.com stats.g.doubleclick.net insights.gatedcontent.com ajax.googleapis.com www.buzzsprout.com www.gstatic.com apps.bazaarvoice.com canon-test-comments.disqus.com tablesorter.com display.ugc.bazaarvoice.com analytics-static.ugc.bazaarvoice.com api.bazaarvoice.com network-eu.bazaarvoice.com visitor-service.tealiumiq.com app.optimizely.com c.evidon.com ds-aksb-a.akamaihd.net check.pricespider.com cdncache-a.akamaihd.net cdn3.optimizely.com turbo.qualaroo.com cdn-assets-prod.s3.amazonaws.com cdn.appdynamics.com s.adroll.com static.ads-twitter.com serve.albacross.com nexus.ensighten.com s.pinimg.com www.googleadservices.com analytics.tiktok.com dynamic.criteo.com adform.net ensighten.com pinimg.com dwin1.com cl.qualaroo.com ref.ccb-dev.com wirewax.s3.eu-west-1.amazonaws.com service.force.com comeandsee--devxq3.my.salesforce.com devxq3-canon-europe.cs169.force.com c.la2-c1cs-ia4.salesforceliveagent.com d.la2-c1cs-ia4.salesforceliveagent.com i1.adis.ws mpsnare.iesnare.com canoneu.saas.appdynamics.com cloud.typography.com network.bazaarvoice.com s3.amazonaws.com www.canon-europe.com www.facebook.com apps.nexus.bazaarvoice.com platform.twitter.com tiger-cdn.zoovu.com cdn.syndication.twimg.com js.adsrvr.org code.tidio.co widget-v4.tidiochat.com code.jquery.com comeandsee.my.salesforce.com d.la3-c1-fra.salesforceliveagent.com d.la1-c1-frf.salesforceliveagent.com api.tiles.mapbox.com static.lightning.force.com d.la3-c2-ph2.salesforceliveagent.com display-stg.ugc.bazaarvoice.com edge-player.wirewax.com edge-assets.wirewax.com edge-player5.wirewax.com teads.tv community.canon-europe.com cdn.hypemarks.com 3001.scriptcdn.net 7896543.s3.amazonaws.com googleads.g.doubleclick.net doubleclick.net googlesyndication.com my.tealiumiq.com pagead2.googlesyndication.com www.googleadservices.com t.clicktale.net app.contentsquare.com *.livechatinc.com analytics.twitter.com dqm.crownpeak.com assetscdn.stackla.com sys.datadrivenpromotion.com maps.googleapis.com d.adroll.com static.criteo.net assets.calendly.com edge-player5.wirewax.com ct.leady.com sslwidget.criteo.com www.tintup.com d.la3-c2-ia2.salesforceliveagent.com www.artfut.com my.tealiumiq.com t.contentsquare.net canon-europe.force.com tiger-cdn.zoovu.com orca-api.zoovu.com orca-runner-assets.zoovu.com orca-cdn.zoovu.com ajhgroup9516.file.core.windows.net d.la3-c1-cdg.salesforceliveagent.com sales-promotions.com sales-promotions.taxback.ess.ie *.pricespider.com *.mapbox.com pixel.byspotify.com unpkg.com img03.en25.com www.mczbf.com d.la1-core1.sfdc-lywfpd.salesforceliveagent.com tags.srv.stackadapt.com members.cj.com s2.adform.net c.la13-core1.sfdc-lywfpd.salesforceliveagent.com d.la13-core1.sfdc-lywfpd.salesforceliveagent.com c.la11-core1.sfdc-yzvdd4.salesforceliveagent.com d.la11-core1.sfdc-yzvdd4.salesforceliveagent.com comeandsee.my.site.com widgets.eu.ziftsolutions.com static.ziftsolutions.com dynamic.eu.ziftsolutions.com static.eu.ziftsolutions.com app.formulayt.com insights.formulayt.com cdn.bc0a.com canon.my.site.com embed.my-canvas.io files.my-canvas.io; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' blob: ajax.googleapis.com vjs.zencdn.net admin.brightcove.com sc-static.net bat.bing.com cdnjs.cloudflare.com tags.tiqcdn.com cdn.optimizely.com sadmin.brightcove.com www.youtube.com sadmin.brightcove.com www.google-analytics.com www.google.com cdnssl.clicktale.net snap.licdn.com connect.facebook.net www.googletagmanager.com script.crazyegg.com s.ytimg.com snap.licdn.com visitor-service-eu-west-1.tealiumiq.com s1583749854.t.eloqua.com app.gatedcontent.com img.en25.com s1.adis.ws cdn.pricespider.com locate.pricespider.com wtbevents.pricespider.com c.la1-c1-frf.salesforceliveagent.com players.brightcove.net logx.optimizely.com collect-eu-west-1.tealiumiq.com stats.g.doubleclick.net insights.gatedcontent.com ajax.googleapis.com www.buzzsprout.com www.gstatic.com apps.bazaarvoice.com canon-test-comments.disqus.com tablesorter.com display.ugc.bazaarvoice.com analytics-static.ugc.bazaarvoice.com api.bazaarvoice.com network-eu.bazaarvoice.com visitor-service.tealiumiq.com app.optimizely.com c.evidon.com ds-aksb-a.akamaihd.net check.pricespider.com cdncache-a.akamaihd.net cdn3.optimizely.com turbo.qualaroo.com cdn-assets-prod.s3.amazonaws.com cdn.appdynamics.com s.adroll.com static.ads-twitter.com serve.albacross.com nexus.ensighten.com s.pinimg.com www.googleadservices.com analytics.tiktok.com dynamic.criteo.com adform.net ensighten.com pinimg.com dwin1.com cl.qualaroo.com ref.ccb-dev.com wirewax.s3.eu-west-1.amazonaws.com service.force.com comeandsee--devxq3.my.salesforce.com devxq3-canon-europe.cs169.force.com c.la2-c1cs-ia4.salesforceliveagent.com d.la2-c1cs-ia4.salesforceliveagent.com i1.adis.ws mpsnare.iesnare.com canoneu.saas.appdynamics.com cloud.typography.com network.bazaarvoice.com s3.amazonaws.com www.canon-europe.com www.facebook.com apps.nexus.bazaarvoice.com platform.twitter.com tiger-cdn.zoovu.com cdn.syndication.twimg.com js.adsrvr.org code.tidio.co widget-v4.tidiochat.com code.jquery.com comeandsee.my.salesforce.com d.la3-c1-fra.salesforceliveagent.com d.la1-c1-frf.salesforceliveagent.com api.tiles.mapbox.com static.lightning.force.com d.la3-c2-ph2.salesforceliveagent.com display-stg.ugc.bazaarvoice.com edge-player.wirewax.com edge-assets.wirewax.com edge-player5.wirewax.com teads.tv community.canon-europe.com cdn.hypemarks.com 3001.scriptcdn.net 7896543.s3.amazonaws.com googleads.g.doubleclick.net doubleclick.net googlesyndication.com my.tealiumiq.com pagead2.googlesyndication.com www.googleadservices.com t.clicktale.net app.contentsquare.com *.livechatinc.com analytics.twitter.com dqm.crownpeak.com assetscdn.stackla.com sys.datadrivenpromotion.com maps.googleapis.com d.adroll.com static.criteo.net assets.calendly.com edge-player5.wirewax.com ct.leady.com sslwidget.criteo.com www.tintup.com d.la3-c2-ia2.salesforceliveagent.com www.artfut.com my.tealiumiq.com t.contentsquare.net canon-europe.force.com tiger-cdn.zoovu.com orca-api.zoovu.com orca-runner-assets.zoovu.com orca-cdn.zoovu.com ajhgroup9516.file.core.windows.net d.la3-c1-cdg.salesforceliveagent.com d.la3-c2-ia7.salesforceliveagent.com sales-promotions.com sales-promotions.taxback.ess.ie *.pricespider.com *.mapbox.com pixel.byspotify.com unpkg.com img03.en25.com www.mczbf.com d.la3-core1.sfdc-lywfpd.salesforceliveagent.com d.la1-core1.sfdc-yzvdd4.salesforceliveagent.com map.brightcove.com assets.map.brightcove.com d.la1-core1.sfdc-lywfpd.salesforceliveagent.com tags.srv.stackadapt.com members.cj.com *.adform.net *.kmtx.io c.la13-core1.sfdc-lywfpd.salesforceliveagent.com d.la13-core1.sfdc-lywfpd.salesforceliveagent.com c.la11-core1.sfdc-yzvdd4.salesforceliveagent.com d.la11-core1.sfdc-yzvdd4.salesforceliveagent.com tag.demandbase.com c.amazon-adsystem.com ct.pinterest.com comeandsee.my.site.com widgets.eu.ziftsolutions.com static.ziftsolutions.com dynamic.eu.ziftsolutions.com static.eu.ziftsolutions.com app.formulayt.com insights.formulayt.com cdn.bc0a.com canon.my.site.com embed.my-canvas.io files.my-canvas.io; 16 default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' https://corporatetools.zeroheight.com https://global-components.corptools.io 16 upgrade-insecure-requests; default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; object-src 'none'; img-src 'self' data:; 16 frame-ancestors 'self' https://*.akifast.com akifast.com https://*.akinoncloud.com akinoncloud.com 16 default-src 'self'; img-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; script-src-elem 'self' 'unsafe-inline' https: data: blob:; frame-src https:; frame-ancestors 'self'; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; 16 default-src * blob: data: 'unsafe-inline' 'unsafe-eval' 16 frame-ancestors 'self' *.awsapps.nvidia.com *.nvidia.com https://widget.stackla.com https://app-sj14.marketo.com https://www.youtube.com https://www.quadro-selector.com http://player.youku.com https://player.youku.com https://live.nvidia-china.com https://www.google.com *.nvidia.cn https://events.rainfocus.com https://www.twitch.tv https://store.nvidia.ru https://store.nvidia.in *.geforcenow.com https://salespro.hpe.com https://hpe.seismic.com https://cms.nvidia-docs-uat.lower.k3.m1.brightspot.cloud https://cms.nvidia-docs-qa3.lower.k3.m1.brightspot.cloud https://events.rainfocus.com https://docs.nvidia-docs-uat.lower.k3.m1.brightspot.cloud https://docs.nvidia-docs-qa3.lower.k3.m1.brightspot.cloud https://nvfile; 15 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: yoti: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com 1868565294.rsc.cdn77.org static.cloudflareinsights.com www.google.com www.gstatic.com fonts.gstatic.com global.frcapi.com *.googleapis.com accounts.google.com *.cdn77.org *.nk-img.com *.segpay.com *.online-metrix.net *.vscdns.com *.vsmvideo.com *.mmcdn.com *.agego.com www.youtube.com *.xnxxvideos.me info.xnxx.com www.tjk-njk.com *.yoti.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net *.acdn5165543.com *.aacdn.net martted.com *.opoxv.com *.analvids.com tour1.analvids.com bmedia-bunny.justservingfiles.net *.justservingfiles.net *.bkcdn.net *.bxcdn.net cdn-fc.com *.pemsrv.com cdn.rtbix.com *.rtbix.com pixel-sin.ls7ksp-rtbix.top *.ls7ksp-rtbix.top *.ad1n.net *.rtbsuperhub.com *.lux.rtbsuperhub.com www.exoclick.com *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com *.asf4f.us *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com *.gtflixtv.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.cdn77.org www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com data-cdn.pornbiz.com *.vscdns.com *.vsmvideo.com *.mmcdn.com *.doubleclick.net *.google.fr *.google.com *.segpay.com *.online-metrix.net cdn.asf4f.us storage.agego.com *.gtflixtv.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net bmedia.justservingfiles.net *.tf4srv.com *.aacdn.net xenoly7.com miraco7.com clariva5.com miraex6.com go2fridayroll.com solvix8.com linktoliraspin.com clyoro7.com volexa5.com dynara3.com veltor2.com *.trackingtraffo.com trackingtraffo.com *.nowsrv.com betoholictrack.net refpa2518.com refpa3665.com melbet-ma.com melbetegypt.com 1xlite-815256.bar *.staticfilesonly.com *.analvids.com tour1.analvids.com bmedia-bunny.justservingfiles.net *.justservingfiles.net *.bkcdn.net *.bxcdn.net cdn-fc.com *.pemsrv.com cdn.rtbix.com *.rtbix.com pixel-sin.ls7ksp-rtbix.top *.ls7ksp-rtbix.top *.ad1n.net *.rtbsuperhub.com *.lux.rtbsuperhub.com; report-uri https://www.xnxx.com/csp-reports; report-to csp-endpoint 15 default-src 'self' http: https: ws: wss: yoti: * *.faphouse.com; img-src * data: blob:; media-src * blob:; script-src 'self' 'unsafe-inline' blob: https://assets-nss.flixcdn.com www.google.com www.gstatic.com accounts.google.com *.google.com *.amplitude.com www.google-analytics.com www.googleanalytics.com www.googletagmanager.com www.googleoptimize.com optimize.google.com tagmanager.google.com *.hotjar.com https://pm-api.faphouse.com https://pm.faphouse.com/pm/ https://assets-nss.flixcdn.com/ *.flixcdn.com comments.faphouse.com studio.faphouse.com joinmy.fans 'unsafe-eval' challenges.cloudflare.com cdn.delight-vr.com www.yoti.com; style-src * 'unsafe-inline'; font-src * data: 'unsafe-inline'; frame-ancestors 'self' 15 default-src data: 'unsafe-inline' 'unsafe-eval' https: http:;script-src data: 'unsafe-inline' 'unsafe-eval' https: http: blob:;style-src data: 'unsafe-inline' https: http: blob:;img-src data: https: http: blob:;font-src data: https: http:;connect-src https: wss: ws: http: blob:;media-src https: blob: http:;object-src https: http:;child-src https: data: blob: http:;form-action https: http:;block-all-mixed-content; 15 frame-ancestors 'self' *.vercel.app *.rivt.com rivt.com *.outsideapi.com outsideapi.com *.pocketoutdoormedia.com outsideinc.com pocketoutdoormedia.com *.outsideinc.com velopress.com *.velopress.com *.mycoloradoparks.com mycoloradoparks.com *.rockandice.com rockandice.com *.theboxmag.com theboxmag.com *.nationalparktrips.com nationalparktrips.com *.nationalparktripsmedia.com nationalparktripsmedia.com *.betamtb.com betamtb.com *.mysmokymountainpark.com mysmokymountainpark.com *.myolympicpark.com myolympicpark.com *.climbing.com climbing.com *.backpacker.com backpacker.com *.podiumrunner.com podiumrunner.com *.skimag.com skimag.com myutahparks.com *.myutahparks.com *.mygrandcanyonpark.com mygrandcanyonpark.com *.oxygenmag.com oxygenmag.com *.triathlete.com triathlete.com velonews.com *.velonews.com muscleandperformance.com *.muscleandperformance.com *.outsidebusinessjournal.com outsidebusinessjournal.com snewsnet.com *.snewsnet.com gymclimber.com *.gymclimber.com livebeyoga.com *.yogajournal.com yogajournal.com *.livebeyoga.com womensrunning.com *.womensrunning.com trailrunnermag.com *.trailrunnermag.com outsideonline.com *.outsideonline.com *.betternutrition.com betternutrition.com vegetariantimes.com *.vegetariantimes.com cleaneating.com *.cleaneatingmag.com cleaneatingmag.com *.cleaneating.com *.thenaturx.com thenaturx.com *.yellowstonepark.com yellowstonepark.com *.myyellowstonepark.com myyellowstonepark.com myyosemitepark.com *.myyosemitepark.com *.rollmassif.com rollmassif.com *.getcairn.com getcairn.com *.athletereg.com athletereg.com *.finisherpix.com finisherpix.com *.pinkbike.com pinkbike.com *.pinkbike.org pinkbike.org *.bikereg.com bikereg.com *.runreg.com runreg.com *.trireg.com trireg.com *.skireg.com skireg.com *.pledgereg.com pledgereg.com *.gaiagps.com gaiagps.com *.trailforks.com trailforks.com 15 Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://*.bwin.com https://*.bwin.de https://*.bwin.dk https://*.bwin.es https://*.bwin.fr https://*.bwin.it https://*.bwin.gr https://*.bwin.se https://*.bwin.be https://*.bwin.co https://*.bwin.mx https://*.bwin.nl https://*.bwin.pl https://*.bwin.pt https://*.bwin.ro https://*.bwincasino.be https://*.bwindice.be https://*.betcity.nl https://*.betboo.bet.br https://*.br.betboo.com https://*.partypoker.com https://*.partypoker.cz https://*.partypoker.de https://*.partypoker.dk https://*.partypoker.es https://*.partypoker.fr https://*.partypoker.it https://*.partypoker.mx https://*.partypoker.nl https://*.partypoker.pt https://*.partypoker.se https://*.partypokerlive.com https://*.partypoker-sochi.com https://*.partycasino.com https://*.ab.partycasino.ca https://*.partycasino.ca https://*.partycasino.es https://*.partycasino.mx https://*.partycasino.nl https://*.partycasino.se https://*.partysports.com https://*.partysports.ca https://*.partysports.es https://*.partysports.mx https://*.partysports.nl https://*.galabingo.com https://*.galacasino.com https://*.galaspins.com https://*.cheekybingo.com https://*.foxybingo.com https://*.foxygames.com https://*.gamebookers.com https://*.gamebookers.de https://*.giocodigitale.it https://*.ladbrokes.com https://*.ladbrokes.de https://*.ninjacasino.se https://*.oddset.de https://*.on.betmgm.ca https://*.on.bwin.ca https://*.on.partycasino.ca https://*.on.partypoker.ca https://*.on.partysports.ca https://*.on.wheeloffortunecasino.com https://*.partyarcadegames.com https://*.premium.com https://*.bpremium.de https://*.sh.bwin.de https://*.slotclub.de https://*.partyslots.de https://*.sportingbet.com https://*.sportingbet.bet.br https://*.sportingbet.co.za https://*.sportingbet.de https://*.sportingbet.gr https://*.sportingbet.ro https://*.sportsinteraction.com https://*.on.sportsinteraction.com https://*.ab.sportsinteraction.com https://*.unikrn.com https://*.coral.co.uk https://*.vistabet.gr https://*.casinoclub.com https://*.da.partypoker.com https://*.danskespil.dk https://*.cms.test.env.works https://*.itsfogo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.bwin.com https://*.bwin.de https://*.bwin.dk https://*.bwin.es https://*.bwin.fr https://*.bwin.it https://*.bwin.gr https://*.bwin.se https://*.bwin.be https://*.bwin.co https://*.bwin.mx https://*.bwin.nl https://*.bwin.pl https://*.bwin.pt https://*.bwin.ro https://*.bwincasino.be https://*.bwindice.be https://*.betcity.nl https://*.betboo.bet.br https://*.br.betboo.com https://*.partypoker.com https://*.partypoker.cz https://*.partypoker.de https://*.partypoker.dk https://*.partypoker.es https://*.partypoker.fr https://*.partypoker.it https://*.partypoker.mx https://*.partypoker.nl https://*.partypoker.pt https://*.partypoker.se https://*.partypokerlive.com https://*.partypoker-sochi.com https://*.partycasino.com https://*.ab.partycasino.ca https://*.partycasino.ca https://*.partycasino.es https://*.partycasino.mx https://*.partycasino.nl https://*.partycasino.se https://*.partysports.com https://*.partysports.ca https://*.partysports.es https://*.partysports.mx https://*.partysports.nl https://*.galabingo.com https://*.galacasino.com https://*.galaspins.com https://*.cheekybingo.com https://*.foxybingo.com https://*.foxygames.com https://*.gamebookers.com https://*.gamebookers.de https://*.giocodigitale.it https://*.ladbrokes.com https://*.ladbrokes.de https://*.ninjacasino.se https://*.oddset.de https://*.on.betmgm.ca https://*.on.bwin.ca https://*.on.partycasino.ca https://*.on.partypoker.ca https://*.on.partysports.ca https://*.on.wheeloffortunecasino.com https://*.partyarcadegames.com https://*.premium.com https://*.bpremium.de https://*.sh.bwin.de https://*.slotclub.de https://*.partyslots.de https://*.sportingbet.com https://*.sportingbet.bet.br https://*.sportingbet.co.za https://*.sportingbet.de https://*.sportingbet.gr https://*.sportingbet.ro https://*.sportsinteraction.com https://*.on.sportsinteraction.com https://*.ab.sportsinteraction.com https://*.unikrn.com https://*.coral.co.uk https://*.vistabet.gr https://*.casinoclub.com https://*.da.partypoker.com https://help.danskespil.dk https://*.danskespil.dk https://*.cms.test.env.works https://*.itsfogo.com; 15 default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; connect-src *; media-src *; object-src *; child-src *; worker-src 'self' blob:; frame-ancestors 'self' https://gls-group.com/ https://gls-group.eu/ https://pilot.gls-group.eu/; form-action *; upgrade-insecure-requests; report-uri https://glsgroup.report-uri.io/r/default/csp/enforce; report-to https://glsgroup.report-uri.io/r/default/csp/enforce; 15 default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'sha256-wAXR5RheAh79Ehqg8utbBoZXWReUZthyE92R2w8QrbE='; style-src 'sha256-VAMrXWUxTODlnOSkewzVLrq6BkStZuOAJa9LIMcqRic='; img-src data: 'self'; frame-src 'none'; frame-ancestors 'none'; form-action 'none'; 15 frame-ancestors 'self' *.purpledshub.com 15 default-src 'self' dbsapp-test.azurewebsites.net cscmarketing-cscdbs-prod-container.azurewebsites.net *.cscdbs.com cscwebcontentstorage.blob.core.windows.net *.cscglobal.com ocp.cscglobal.com csc.global *.google.com *.google-analytics.com *.googletagmanager.com *.swiftypecdn.com *.swiftype.com geoip-js.com *.geoip-js.com *.crazyegg.com *.zoominfo.com *.pingdom.net *.doubleclick.net *.maxmind.com *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com *.oribi.io *.cookielaw.org *.onetrust.com *.zscalertwo.net *.googlesyndication.com *.linkedin.com *.hubspot.com *.hubapi.com *.optimizely.com js.usemessages.com static.hsappstatic.net *.contentsquare.net http://cscmarketing-cscdbs-prod-container.azurewebsites.net/blog/wp-json/; script-src 'self' dbsapp-test.azurewebsites.net cscmarketing-cscdbs-prod-container.azurewebsites.net *.cscdbs.com cscwebcontentstorage.blob.core.windows.net *.cscglobal.com ocp.cscglobal.com csc.global *.google.com *.google-analytics.com *.googletagmanager.com *.swiftypecdn.com *.swiftype.com *.maxmind.com *.crazyegg.com *.gstatic.com *.zoominfo.com *.pingdom.net *.googleadservices.com *.licdn.com *.hsforms.net hubspot-forms-static-embed.s3.amazonaws.com *.zscalertwo.net js.usemessages.com 'sha256-uEVZG2aKtvTnCiyd6KE5c0iP+naoyXFMNU6NZqWfTzk=' 'sha256-FTZUkywTeCare2C/3qESeGwIijE/FJIJzHs4QajBqVU=' 'sha256-6EYFRGyxum0IwH2kLdixEkMnfVbkqBt14VQFi8BCJRA=' 'sha256-NEJOYgS3wIia+ss6EnB/d2Kk/XqlS6ES36GronXzmbs=' *.cookielaw.org *.onetrust.com *.googlesyndication.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspot.com *.hsadspixel.net *.doubleclick.net *.optimizely.com js.usemessages.com *.contentsquare.net app.contentsquare.com blob: 'sha256-FYVcJ8j+aeiBImnoPSLVrA8jc6b/AUdJP0H7kMX8XRg=' 'sha256-2pe8k26MWlcKficOeMWZ75CKsCYpC8O7SWL1c80IevA=' 'sha256-xA+Nf+aCToDDa/FWlmohq36+g4wJDUNr/5Z99KzXHAQ=' 'sha256-Ekr4lImICDOvgVtzrLML7wjf3IM4V5Q3+ohyZq4Fi5w=' 'sha256-RF9rMwBknLb1oeLCScm/ALWwuTagCk5TMhixcBZIP38=' 'sha256-6NQCqzNsx7vstjQE9WO42yGZXgPx1tXt6Rdq20/JMcM='; style-src 'self' dbsapp-test.azurewebsites.net cscmarketing-cscdbs-prod-container.azurewebsites.net *.cscdbs.com cscwebcontentstorage.blob.core.windows.net *.cscglobal.com ocp.cscglobal.com csc.global *.google.com *.google-analytics.com *.googletagmanager.com *.swiftypecdn.com *.swiftype.com *.googleapis.com *.crazyegg.com 'unsafe-inline'; img-src 'self' dbsapp-test.azurewebsites.net cscmarketing-cscdbs-prod-container.azurewebsites.net *.cscdbs.com cscwebcontentstorage.blob.core.windows.net *.cscglobal.com ocp.cscglobal.com csc.global *.google.com *.google-analytics.com *.googletagmanager.com *.swiftypecdn.com *.swiftype.com data: seal-delaware.bbb.org *.linkedin.com *.hsforms.com s.w.org i.ytimg.com *.doubleclick.net *.cookielaw.org *.hubspot.com *.contentsquare.net; font-src 'self' dbsapp-test.azurewebsites.net cscmarketing-cscdbs-prod-container.azurewebsites.net *.cscdbs.com cscwebcontentstorage.blob.core.windows.net *.cscglobal.com ocp.cscglobal.com csc.global *.google.com *.google-analytics.com *.googletagmanager.com *.swiftypecdn.com *.swiftype.com *.gstatic.com data:; frame-src 'self' *.google.com *.youtube.com *.swiftypecdn.com *.swiftype.com *.googlesyndication.com *.hsforms.com *.doubleclick.net *.googletagmanager.com *.optimizely.com; connect-src 'self' cscwebcontentstorage.blob.core.windows.net *.pingdom.net *.google.com *.googleadservices.com *.google-analytics.com *.cookielaw.org *.onetrust.com static.hsappstatic.net *.hubspot.com *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com px.ads.linkedin.com *.contentsquare.net *.hubapi.com *.optimizely.com *.clarity.ms *.zoominfo.com *.doubleclick.net; object-src 'none' 15 object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 15 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src * data:; 15 default-src 'self' blob: *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com;connect-src 'self' blob: wss: *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com *.zdassets.com *.zendesk.com *.atlassian.com *.atl-paas.net *.metart.network *.google.com *.gstatic.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.metartmoney.com cdn.cookielaw.org *.visualwebsiteoptimizer.com *.vwo.com *.adtng.com *.atsptp.com *.spartez-software.com api.ipify.org *.s3.eu-central-1.amazonaws.com;style-src 'self' blob: 'unsafe-inline' *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com *.googleapis.com fonts.gstatic.com platform.twitter.com *.twimg.com maxcdn.bootstrapcdn.com *.google.com cdn.cookielaw.org *.visualwebsiteoptimizer.com *.vwo.com;font-src 'self' data: *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com *.zopim.com fonts.gstatic.com *.googleapis.com ssl.p.jwpcdn.com maxcdn.bootstrapcdn.com *.vwo.com;script-src 'self' 'unsafe-inline' *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com *.zdassets.com *.atlassian.com *.zopim.com *.twitter.com *.twimg.com ssl.p.jwpcdn.com *.googletagmanager.com *.google-analytics.com cdn.mouseflow.com *.google.com cdn.polyfill.io *.metart.network cdn.cookielaw.org code.jquery.com geolocation.onetrust.com *.mxpnl.com *.googleapis.com *.gstatic.com *.visualwebsiteoptimizer.com *.vwo.com *.adtng.com *.atsptp.com *.spartez-software.com *.magsrv.com;frame-src 'self' *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com *.twitter.com *.youtube.com *.vimeo.com *.atlassian.net *.metartmoney.com *.visualwebsiteoptimizer.com *.vwo.com *.google.com;img-src 'self' data: *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com *.icfcdn.com *.twimg.com *.twitter.com *.zopim.com *.jwpltx.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.google.com *.visualwebsiteoptimizer.com *.vwo.com *.vscdns.com *.strpst.com *.google.com *.magsrv.com *.pemsrv.com *.realsrv.com;media-src 'self' data: blob: *.cachefly.net *.b-cdn.net *.metartnetwork.com *.metart.com *.icfcdn.com *.zdassets.com *.visualwebsiteoptimizer.com *.vwo.com;worker-src 'self' data: blob: wss:;object-src 'none' 15 frame-ancestors whitelabel.camspower.com cams.dnxlive.com 15 default-src 'self' https: http: data: blob: *; base-uri 'self'; object-src 'none'; frame-ancestors 'self' *; frame-src 'self' * https: http: data: blob: *; img-src 'self' data: https: http: blob: * 'unsafe-inline'; style-src 'self' 'unsafe-inline' https: http: data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://libs.baidu.com https://res.wx.qq.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https: http: *; connect-src 'self' * https: http: ws: wss:; font-src 'self' data: https: http: blob: *; media-src 'self' https: http: blob: *; 15 default-src * 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://*; object-src 'self' data: blob: https://*; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline' 'self' https:; frame-src 'self' https: blob: data:; style-src * 'unsafe-inline'; 15 script-src-elem *.newrelic.com *.maxymiser.net *.googletagmanager.com *.oracleinfinity.io *.crazyegg.com *.facebook.net *.getblue.io *.air.tech *.google-analytics.com *.doubleclick.net *.kommunicate.io *.youtube.com *.soicos.com *.tiktok.com *.yandex.com *.onesignal.com onesignal.com *.verificado.ai https://cdn-mz-gj-vai.verificado.ai/widget/main.js *.google.com *.gstatic.com https://www.google.com/recaptcha/ *.googleadservices.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.lightwidget.com *.clarity.ms *.bing.com unpkg.com *.greencolumnart.com *.hotjar.com *.cloudfront.net *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net cdn.logrocket.io cdn.lr-ingest.io cdn.lr-in.com cdn.lr-in-prod.com cdn.lr-ingest.com cdn.ingest-lr.com cdn.lr-intake.com cdn.intake-lr.com cdn.logr-ingest.com cdn.lrkt-in.com cdn.lgrckt-in.com *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev *.kliper.cl rum.hlx.page *.amazonaws.com code.jquery.com stackpath.bootstrapcdn.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem fonts.googleapis.com *.kommunicate.io *.soicos.com *.verificado.ai *.cloudflare.com *.typekit.net https://www.google.com/recaptcha/ *.googletagmanager.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.crazyegg.com *.clarity.ms *.bing.com *.cdnfonts.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev stackpath.bootstrapcdn.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.cloudflare.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.fontawesome.com *.bananarepublic.cl/ *.brooksbrothers.cl *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com maxcdn.bootstrapcdn.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.propul.dev data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.googletagmanager.com *.facebook.com *.transbank.cl *.sabbi.cl *.bananarepublic.cl/ *.brooksbrothers.cl *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.cardinalcommerce.com *.paypal.com *.soicos.com *.verificado.ai https://www.google.com/recaptcha/ *.payulatam.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.mercadolibre.com https://mercadopago.com.br *.mercadopago.com.br *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com webpay3g.transbank.cl webpay3gint.transbank.cl *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev 'self' 'unsafe-inline'; frame-ancestors *.youtube.com *.vimeo.com *.bananarepublic.cl/ *.brooksbrothers.cl *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.mercadolibre.com https://mercadopago.com.br *.mercadopago.com.br *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.grupoaxo.com *.kipling.cl blog.andesgear.cl *.usercentrics.eu *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.weltpixel.com *.facebook.com https://web.facebook.com https://accounts.google.com/ *.cnetcontent.com *.vimeo.com https://event.getblue.io *.getblue.io *.flipsnack.com https://heyzine.com https://promogallonic.com https://front-notrack.indexado.production.pmbox.cloud https://fichashppervasive.blob.core.windows.net https://notrack.indexado.pmbox.cloud https://emersya.com *.lightwidget.com/ https://mc.yandex.ru/ https://mc.yandex.md/ https://firalivepro.blob.core.windows.net/ https://fira-live-player-pro.azurewebsites.net/ https://20839951p.rfihub.com/ *.googletagmanager.com *.doubleclick.net *.bananarepublic.cl/ *.brooksbrothers.cl *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.wufoo.com/ https://wufoo.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.soicos.com *.crazyegg.com *.verificado.ai https://komax-tracking.oms.linets.cl/ *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.mercadolibre.com https://mercadopago.com.br *.mercadopago.com.br mercadopago.cl/ *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.typeform.com *.propul.dev 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.gstatic.com *.cloudflare.com *.newrelic.com https://bam.nr-data.net *.facebook.com *.connect.facebook.net *.google.com *.google-analytics.com *.googleadservices.com *.paypal.com *.syndigo.com *.syndigo.cloud *.google.com.co *.google.com.pa *.teads.tv *.gap.cl https://fichashppervasive.blob.core.windows.net *.komaxchile.cl/ *.kliper.cl/ https://dc.oracleinfinity.io/ https://s3.amazonaws.com/ https://stags.bluekai.com/ https://cm.g.doubleclick.net https://rrstatic.retailrocket.net/ https://mc.yandex.ru/ https://an.yandex.ru/ https://mc.yandex.md/ *.maxymiser.net *.komaxchile.cl *.bananarepublic.cl *.brooksbrothers.cl *.dcshoes.cl *.kipling.cl *.kivul.cl *.kliper.cl *.marmot.cl *.mammut.cl *.oldnavy.cl *.stoked.cl *.surprice.cl *.thenorthface.cl *.ugg.cl *.bananarepublic.cl/ *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.kommunicate.io https://km-prod-s3-bucket.s3.amazonaws.com *.elfsight.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google.cl *.google.com.pe *.soicos.com *.crazyegg.com *.verificado.ai https://www.google.com/recaptcha/ *.gap.com.pe news-oldnavy.cl *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.mercadolibre.com https://mercadopago.com.br *.mercadopago.com.br *.clarity.ms *.bing.com *.oraclecloud.com *.guess.cl *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.googletagmanager.com *.doubleclick.net *.propul.dev komax-files.s3.amazonaws.com lh3.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net cdn.cs.1worldsync.com *.cloudflare.com *.newrelic.com https://bam.nr-data.net *.facebook.com *.facebook.net *.connect.facebook.net https://accounts.google.com/gsi/client *.gstatic.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.paypal.com *.bootstrapcdn.com *.pingdom.net *.woorank.com *.demdex.net *.cnetcontent.com *.syndigo.com *.syndigo.cloud https://event.getblue.io *.getblue.io https://p.teads.tv https://smetrics.verdugotienda.com *.maxymiser.net/ *.kommunicate.io *.retailrocket.net *.oracleinfinity.io *.crazyegg.com *.komaxchile.cl *.oraclecloud.com *.onesignal.com https://onesignal.com/ *.googleoptimize.com *.lightwidget.com *.air.tech *.rfihub.net *.hicloud.com *.tiktok.com *.hotjar.com *.bananarepublic.cl/ *.brooksbrothers.cl/ *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.elfsight.com https://mc.yandex.ru/ https://mc.yandex.md/ https://an.yandex.ru/ *.tenetcomm.com/ https://tenetcomm.com/ *.wufoo.com/ https://wufoo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.nr-data.net unpkg.com *.soicos.com *.verificado.ai *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.mercadolibre.com https://mercadopago.com.br *.mercadopago.com.br *.clarity.ms *.bing.com *.greencolumnart.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net cdn.logrocket.io cdn.lr-ingest.io cdn.lr-in.com cdn.lr-in-prod.com cdn.lr-ingest.com cdn.ingest-lr.com cdn.lr-intake.com cdn.intake-lr.com cdn.logr-ingest.com cdn.lrkt-in.com cdn.lgrckt-in.com *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com https://rum.hlx.page *.redditstatic.com *.reddit.com *.ads-twitter.com *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com *.doubleclick.net *.typeform.com *.propul.dev code.jquery.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.facebook.com *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com https://rrstatic.retailrocket.net/ https://widget.kommunicate.io/ *.fontawesome.com https://firalivepro.blob.core.windows.net *.brooksbrothers.cl/ https://*.komaxchile.cl *.bananarepublic.cl/ *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.kommunicate.io unsafe-inline *.soicos.com *.crazyegg.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.mercadolibre.com https://mercadopago.com.br *.mercadopago.com.br *.clarity.ms *.bing.com maxcdn.bootstrapcdn.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.propul.dev 'self' 'unsafe-inline'; object-src *.soicos.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev 'self' 'unsafe-inline'; media-src *.adobe.com *.syndigo.com *.syndigo.cloud https://emersya.com *.bananarepublic.cl/ *.brooksbrothers.cl/ *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.kommunicate.io *.soicos.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.youtube.com youtube.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev 'self' 'unsafe-inline'; manifest-src *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net wss://tm.filter:1502/ xml.ssreviewsportal.com *.cloudflare.com *.newrelic.com https://bam.nr-data.net *.facebook.com https://accounts.google.com/gsi/ *.paypal.com *.pingdom.net *.woorank.com *.demdex.net *.cnetcontent.com *.youtube.com *.syndigo.com *.syndigo.cloud product-feature-service.production.alquimio.cloud api.repositorio.production.alquimio.cloud orchestrator.production.aks.alquimio.cloud *.teads.tv *.doubleclick.net *.kommunicate.io *.oracleinfinity.io *.oraclecloud.com *.tiktok.com https://mc.yandex.ru/ https://an.yandex.ru https://mc.yandex.md/ *.bananarepublic.cl/ *.brooksbrothers.cl *.dcshoes.cl/ *.gap.cl/ *.kipling.cl/ *.kivul.cl/ *.kliper.cl/ *.mammut.cl/ *.marmot.cl/ *.oldnavy.cl/ *.stoked.cl/ *.surprice.cl/ *.thenorthface.cl/ *.ugg.cl/ wss://socket2.kommunicate.io/ws *.maxymiser.net/ *.elfsight.com https://analytics.pangle-ads.com/ *.tenetcomm.com/ https://tenetcomm.com/ *.wufoo.com/ https://wufoo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.crazyegg.com *.nr-data.net *.sentry.io *.google-analytics.com *.facebook.net google.com *.soicos.com *.yandex.com *.verificado.ai *.amazonaws.com https://www.google.com/recaptcha/ *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com wss://*.zendesk.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.mercadolibre.com https://mercadopago.com.br *.mercadopago.com.br *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com wss://ws.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.logrocket.io *.lr-ingest.io *.logrocket.com *.lr-in.com *.lr-in-prod.com *.lr-ingest.com *.ingest-lr.com *.lr-intake.com *.intake-lr.com *.logr-ingest.com *.lrkt-in.com *.lgrckt-in.com *.usercentrics.eu *.grupoaxo.com *.inspectlet.com wss://ws.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.analytics.google.com *.redditstatic.com *.reddit.com *.twitter.com *.ads-twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.run.app *.typeform.com *.propul.dev www.google.com *.bootstrapcdn.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com https://accounts.google.com/ *.propul.dev http: https: blob: 'self' 'unsafe-inline'; default-src *.maxymiser.net *.komaxchile.cl *.soicos.com *.crazyegg.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.com.pe *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.doofinder.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.jsdelivr.net *.usercentrics.eu *.grupoaxo.com *.inspectlet.com *.inspectlet.io *.fitit.ai *.cloudfunctions.net *.googleapis.com *.propul.dev 'self' 'unsafe-inline'; 15 upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: ws: *.abtasty.com *.bazaarvoice.com *.bumlam.com *.bing.com bat.bing.net *.crazyegg.com *.clarity.ms *.doubleclick.net *.google.com *.google.fr *.google-analytics.com *.googlesyndication.com *.gstatic.com *.googleapis.com www.googleadservices.com www.googletagmanager.com service.gstatic-cache.com lh3.googleusercontent.com *.mapbox.com *.mycheckstatus.com *.onetrust.com *.pinterest.com *.pmcprograms.com *.pricespider.com *.retargetly.com *.typeform.com *.taboola.com services.global.commerce-connector.com shoppable-assets.global.commerce-connector.com shoppable-configs.global.commerce-connector.com shoppable.commerce-connector.com ws.hotjar.com script.hotjar.com static.hotjar.com metrics.hotjar.io vc.hotjar.io content.hotjar.io *.jebbit.com www.youtube.com m.youtube.com www.youtube-nocookie.com allegra-pitstop-game-0046fd43d9e4.herokuapp.com testyourliver.abi.ai crescendoc.wufoo.com s3.amazonaws.com askyourliver.s3.eu-central-1.amazonaws.com beacon.deepintent.com ads-engagement.presage.io an.yandex.ru mc.yandex.com mc.yandex.ru yandex.ru analytics.tiktok.com analytics.twitter.com static.ads-twitter.com api-js.mixpanel.com api.amcreativemedia.com api.global-data-lab.com api.highdataanalytics.com api.lapis-analytics.com api.mkmediaworks.com api.permutive.com api.solaranalyticscorp.com cdn-eidpp.nitrocdn.com cdn-uicons.flaticon.com cdn.cookielaw.org cdn.flowcode.com cdn.jsdelivr.net cdn.krxd.net cdn.mouseflow.com cdn.trustpilot.net cdn.tailwindcss.com cdnjs.cloudflare.com clientstream.launchdarkly.com cloudjs.netlify.com code.jquery.com connect.facebook.net l.facebook.com www.facebook.com ara.paa-reporting-advertising.amazon auth.iws-hybrid.trendmicro.com data1.calicluo.com datenschutz.sanofi.de i.ytimg.com ib.adnxs.com secure.adnxs.com images.simplycodes.com kraken.rambler.ru r3.dotdigital-email.com r3.dotdigital-pages.com cs.frontend.weborama.fr sanofi.solution.weborama.fr deo.shopeemobile.com dev.visualwebsiteoptimizer.com diffuser-cdn.app-us1.com edge.fullstory.com fonts.cdnfonts.com gdehu.hit.gemius.pl grmtech.net hu-gmtdmp.mookie1.com hugde.adocean.pl insight.adsrvr.org js.adsrvr.org log-papago.naver.com login.microsoftonline.com mon16-normal-useast5.tiktokv.us o132438.ingest.sentry.io p.typekit.net use.typekit.net pixel.rubiconproject.com pollen.services.myilume.de pollenapps.com privacy-cs.mail.ru r3.mail.ru rs.mail.ru top-fwz1.mail.ru px.adhigh.net px.ads.linkedin.com rbtds.net retcode-us-west-1.arms.aliyuncs.com rules.quantcount.com s.adroll.com s.amazon-adsystem.com s.pinimg.com s.yimg.com sc-static.net secure.quantserve.com security-us.mimecast.com snap.licdn.com sp.analytics.yahoo.com spoppe-b.azureedge.net t-azmaps.azurelbs.com st.top100.ru static.ads-twitter.com t.co static.terratraf.io static2.sharepointonline.com sync.crwdcntrl.net sync.dmp.otm-r.com sync.upravel.com tr.snapchat.com tr6.snapchat.com racking.adsafety.net unpkg.com use.fontawesome.com vk.com ws.miqcommerce.com www.instagram.com www.rappi.com.co www.researchsolutions.com www.sanofi.us www.terracycle.com apiv2.popupsmart.com yt3.ggpht.com vimeo.com player.vimeo.com edge.curalate.com engage.telfast.com.au www.telfastcashback.com.au telfast-widget.ambeedata.com telfast-movie-ticket.kostaging.com.au telfast-movie-ticket.kopromos.com.au www.buscopanmoneyback.com.au lett.2buycdn.com embed.2b.uy *.teads.tv p.teads.tv *.amazon-adsystem.com *.run.app analytics-ipv6.tiktokw.us *.taggbox.com *.tagbox.com iaso-amer.dulcolax.com *.blueconic.net 2buy.site embed.2buy.site bit-arcades.web.app ambitious-bush-00d15ee1e.6.azurestaticapps.net www.w3schools.com bc26.actoralcare.com bc26.allegra.com bc26.dulcolax.com bc26.aspercreme.com bc26.cortizone10.com bc26.unisom.com bc26.selsunblue.com bc26.zantacotc.com bc26.xyzal.com bc26.nasacort.com bc26.icyhot.com cdn.wayvia.com; 15 frame-ancestors 'self'; object-src 'self' 15 default-src * blob: data: cid:; img-src * data: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline'; font-src * data: 15 upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/ 14 require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport 14 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval' 14 frame-ancestors 'self' https://*.kayak.com https://www.kayak.com.ar https://www.kayak.com.au https://www.kayak.bo https://www.kayak.com.br https://www.kayak.cat https://www.kayak.cl https://www.cn.kayak.com https://www.kayak.com.co https://www.kayak.co.cr https://www.kayak.dk https://www.kayak.com.do https://www.kayak.com.ec https://www.kayak.com.sv https://www.kayak.fr https://www.kayak.de https://www.kayak.com.gt https://www.kayak.com.hn https://www.kayak.com.hk https://www.kayak.co.in https://www.kayak.co.id https://www.kayak.ie https://www.kayak.it https://www.kayak.co.jp https://www.kayak.com.my https://www.kayak.com.mx https://www.kayak.nl https://www.kayak.com.ni https://www.kayak.no https://www.kayak.com.pa https://www.kayak.com.py https://www.kayak.com.pe https://www.kayak.com.ph https://www.kayak.pl https://www.kayak.pt https://www.kayak.com.pr https://www.en.kayak.sa https://www.kayak.sg https://www.kayak.co.kr https://www.kayak.es https://www.kayak.se https://www.kayak.ch https://www.kayak.co.th https://www.kayak.com.tr https://www.kayak.ae https://www.kayak.co.uk https://www.kayak.com.uy https://www.kayak.co.ve 14 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline';script-src * data: mediastream: blob: filesystem: about: 'unsafe-eval' 'unsafe-inline';connect-src * data: mediastream: blob: filesystem: about: 'unsafe-eval' 'unsafe-inline';frame-src * data: mediastream: blob: filesystem: about: 'unsafe-eval' 'unsafe-inline';frame-ancestors 'self' https://food.grab.com https://food.stg-myteksi.com 14 frame-ancestors 'self' https://*.joyn.de https://app.datadoghq.eu; 14 frame-ancestors 'self' *.funke.cue.cloud app.storyblok.com 14 frame-ancestors 'self' 14 frame-ancestors 'self' https://es.chevrolet.com 14 frame-ancestors 'self'; base-uri 'self'; 14 frame-ancestors https://app.contentful.com 14 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: * 14 default-src 'self' http: https: data: blob: 'unsafe-inline'; frame-ancestors 'self'; 14 frame-ancestors 'self' *.affino.com; 14 frame-ancestors 'self' https://test-screwfixspares.bloomreach.io/ https://screwfixspares.bloomreach.io/ 14 script-src * 'unsafe-inline' 'unsafe-eval' blob:; img-src * data:; media-src * mediastream: blob: filesystem: ; 14 frame-ancestors 'self' *.pedidosya.com *.pedidosya.cl *.pedidosya.cr *.pedidosya.com.ar *.pedidosya.com.bo *.pedidosya.com.do *.pedidosya.com.ec *.pedidosya.com.gt *.pedidosya.com.hn *.pedidosya.com.ni *.pedidosyani.com.ni *.pedidosya.com.pa *.pedidosya.com.pe *.pedidosya.com.py *.pedidosyasv.com.sv *.pedidosya.com.uy *.pedidosya.com.ve 14 default-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' https: data:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src * data:; media-src https: data: blob:; worker-src https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; upgrade-insecure-requests 14 default-src * 'unsafe-inline' 'unsafe-eval' data: gap: content: blob:; form-action *; upgrade-insecure-requests 14 default-src 'self'; script-src 'self' 'unsafe-inline' 14 frame-ancestors 'self' https://*.bsale.io https://*.bsale.cl https://*.bsale.com https://*.bsale.com.pe https://*.bsale.com.mx 14 default-src 'self' api-v2.psg777.com https://www.google.com *;script-src 'self' 'unsafe-eval' blob: cdnjs.cloudflare.com https://www.google.com;img-src 'self' * blob: data: https://www.google.com;connect-src 'self' api-v2.psg777.com https://www.google.com;frame-ancestors 'self' https://www.google.com;base-uri 'self';form-action 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 14 default-src 'self' *.via-mobilis.com api.via-mobilis.com http://media.viamobilis.export.doorlinkenvoorraad.nl https://stockway.pro *.gvt1.com accounts.google.com www.google.com *.googleadservices.com *.calendly.com *.drimify.com *.trustpilot.com *.googlesyndication.com *.googletagservices.com *.googleapis.com *.adtrafficquality.google *.static-viamobilis.com static-viamobilis.com *.ampproject.net https://acdn.adnxs.com/ *.g.doubleclick.net *.doubleclick.net *.criteo.com *.youtube.com youtube.com *.youtu.be youtu.be *.youtube-nocookie.com youtube-nocookie.com *.komoot.de photon.kamoot.de *.komoot.io photon.komoot.io *.hotjar.com *.usersnap.com criteo.net *.criteo.net *.tawk.to cloud.panono.com poulalion.eu *.vimeo.com www.recaptcha.net *.facebook.com https://platform.twitter.com ; img-src * *.google-analytics.com *.googletagmanager.com data: blob: 'self' ; script-src * *.googletagmanager.com *.googleanalytics.com *.google-analytics.com *.googleoptimize.com https://photon.komoot.de/ https://my.via-mobilis.com/ https://challenges.cloudflare.com 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'self' 'unsafe-inline' https://static-viamobilis.com; font-src * data:; frame-src * *.googletagmanager.com https://challenges.cloudflare.com; frame-ancestors *.europe-camions.com *.via-mobilis.com trux4me.com *.trux4me.com ; connect-src * *.googletagmanager.com *.google.com *.google-analytics.com *.analytics.google.com data: 'self'; base-uri 'self' ; worker-src * data: blob: 14 upgrade-insecure-requests; default-src https:; font-src https: data:; img-src https: data:; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; media-src https: blob:; worker-src 'self' blob:; 14 frame-ancestors 'self' https://*.bdo.global 14 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; frame-ancestors 'none'; font-src * 'self' data: https://fonts.gstatic.com; script-src * data: blob: 'unsafe-inline' 'unsafe-eval' https://plugins.flockler.com https://sdk.privacy-center.org/ https://api.privacy-center.org/ https://www.googleadservices.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.googletagmanager.com; style-src * 'self' 'unsafe-inline' https://fonts.googleapis.com https://sdk.privacy-center.org/ https://api.privacy-center.org/ 14 frame-ancestors 'self' oricohxr.works ricoh.oricohxr.works; 14 connect-src https: 'self'; img-src 'self' data: https://*; default-src blob: https: 'unsafe-inline' 'unsafe-eval' 14 frame-ancestors 'self' https://temaquevende.com.br https://vitrinedetemas.hostgator.com.br *.clearsale.com.br 14 default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 14 default-src 'self' 'unsafe-inline' https://* data: wss://*.hotjar.com; frame-ancestors 'none' 14 default-src https: wss://*.hotjar.com wss://wc.dcbprotect.com:8080 'unsafe-inline' 14 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https: nytresource:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: nytresource:; style-src data: 'unsafe-inline' https: nytresource:; img-src data: https: blob: android-webview-video-poster: nytresource:; font-src data: https: nytresource:; connect-src data: https: wss: blob: nytresource:; media-src data: https: blob: nytresource:; object-src https:; child-src https: data: blob: nytresource:; form-action https: nytimes: nytcooking: nytxwd:; report-uri https://csp.nytimes.com/report; 13 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 13 default-src https:; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' websupport.cz *.websupport.cz websupport.sk *.websupport.sk websupport.se *.websupport.se websupport.hu *.websupport.hu team.blue *.team.blue *.fw-cdn.com *.freshchat.com *.freshworks.com *.freshdesk.com *.iubenda.com *.redditstatic.com tracker.metricool.com cookiebot.com *.cookiebot.com googleapis.com *.googleapis.com trustpilot.com *.trustpilot.com googletagmanager.com *.googletagmanager.com *.google-analytics.com googleads.g.doubleclick.net *.googlesyndication.com *.google.sk google.sk *.googleadservices.com analytics.tiktok.com stats.g.doubleclick.net connect.facebook.net snap.licdn.com cdn.plyr.io bat.bing.com *.ads-twitter.com c.seznam.cz *.hotjar.com *.hotjar.io *.ladesk.com *.isy-teamblue.services *.motu-teamblue.services *.teamblue.services *.acsbapp.com *.acswapp.com *.adform.net *.youtube.com *.google.com google.com *.gstatic.com gstatic.com *.exponea.com; style-src 'self' 'report-sample' 'unsafe-inline' websupport.cz *.websupport.cz websupport.sk *.websupport.sk websupport.hu *.websupport.hu websupport.se *.websupport.se *.fw-cdn.com *.freshchat.com *.freshdesk.com *.googletagmanager.com cdn.iubenda.com cdn.plyr.io; object-src 'self'; base-uri 'self'; connect-src 'self' 'report-sample' data: ws://localhost:12387 websupport.cz *.websupport.cz websupport.hu *.websupport.hu websupport.sk *.websupport.sk websupport.se *.websupport.se *.fw-cdn.com *.freshchat.com *.freshworks.com *.freshdesk.com wss://*.freshchat.com wss://*.freshdesk.com *.iubenda.com *.redditstatic.com *.reddit.com googleapis.com *.googleapis.com *.google.com google.com *.gstatic.com gstatic.com *.google.sk google.sk pagead2.googlesyndication.com *.googleadservices.com px.ads.linkedin.com analytics.tiktok.com bat.bing.com *.google-analytics.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.acsbapp.com *.acswapp.com *.motu-teamblue.services *.teamblue.services h.seznam.cz noembed.com cdn.plyr.io autoform.ekosystem.slovensko.digital; font-src 'self' 'report-sample' 'unsafe-inline' data: websupport.cz *.websupport.cz websupport.sk *.websupport.sk websupport.se *.websupport.se websupport.hu *.websupport.hu *.gstatic.com gstatic.com; frame-ancestors 'self' *.websupport.sk cdn.hub-prod.team.blue; frame-src 'self' 'report-sample' *.websupport.sk websupport.sk *.websupport.cz websupport.cz *.websupport.hu websupport.hu *.websupport.se websupport.se blob: team.blue *.team.blue *.freshchat.com *.freshdesk.com ladesk.com *.ladesk.com cookiebot.com *.cookiebot.com youtube.com www.youtube-nocookie.com *.youtube.com *.gstatic.com gstatic.com *.google.com google.com *.googletagmanager.com *.doubleclick.net *.facebook.com public.infinario.com *.iubenda.com autoform.ekosystem.slovensko.digital cdn.hub-prod.team.blue; img-src 'self' 'report-sample' data: *.fw-cdn.com *.freshchat.com *.freshdesk.com cookiebot.com *.cookiebot.com *.reddit.com tracker.metricool.com gravatar.com *.gravatar.com gstatic.com *.gstatic.com *.google.com *.google.at *.google.cz *.google.hu *.google.pl *.google.se *.google.sk *.google.rs *.facebook.com *.googletagmanager.com *.g.doubleclick.net *.google-analytics.com *.googleadservices.com *.linkedin.com t.co analytics.twitter.com bat.bing.com c.seznam.cz *.ytimg.com *.motu-teamblue.services *.teamblue.services brxcdn.com websupport.cz *.websupport.cz websupport.sk *.websupport.sk websupport.hu *.websupport.hu websupport.se *.websupport.se; manifest-src 'self'; media-src 'self'; worker-src 'self'; 13 upgrade-insecure-requests, upgrade-insecure-requests 13 frame-ancestors 'self' *.google.com; 13 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' 13 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: about: *; 13 worker-src * blob: data: 'unsafe-eval' 'unsafe-inline'; object-src data: ; base-uri 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://dashboard.mintlify.com https://app.mintlify.com; form-action 'self' https://codesandbox.io; 13 frame-ancestors 'self' *.verbraucherzentrale.de verbraucherzentrale.de gemeinschaftsredaktion.de *.gemeinschaftsredaktion.de vzbv.de www.vzbv.de test.vzbv.de www.fakeshoperkennung.de www.fake-shop-erkennung.de www.fakeshop-finder.de warnung.fakeshop-finder.de 13 object-src 'self' 13 form-action 'self'; 13 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; connect-src 'self' https:; frame-src 'self' https:; upgrade-insecure-requests 13 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; connect-src 'self' https:; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; 13 script-src 'self' 'unsafe-inline' 'unsafe-eval' checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com cspl-corpweb-site-asia-production-revamp.s3.ap-southeast-1.amazonaws.com www.instagram.com *.ttwstatic.com youtube.com tiktok.com www.tiktok.com web.cmp.usercentrics.eu p.teads.tv *.freshchat.com in.fw-cdn.com analytics.tiktok.com vimeo.com www.vimeo.com www.youtube.com *.treasuredata.com snap.licdn.com connect.facebook.net tagmanager.google.com maps.googleapis.com www.googleadservices.com www.google-analytics.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net www.gstatic.com *.cdn.adyen.com; object-src 'none'; child-src 'self' checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com www.instagram.com *.ttwstatic.com tiktok.com www.tiktok.com *.freshchat.com www.youtube.com youtube.com www.google.com google.com *.doubleclick.net player.vimeo.com www.googletagmanager.com *.cdn.adyen.com maps.google.com.sg www.google.com maps.google.com goo.gl google.com www.facebook.com; frame-ancestors 'self'; block-all-mixed-content; upgrade-insecure-requests 13 default-src 'self' https://niccicms.raj.nic.in/ https://maxcdn.bootstrapcdn.com/ 'unsafe-inline' 'unsafe-eval' data:; 13 script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://ajax.googleapis.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /_/PlayStoreUi/cspreport/allowlist 13 frame-ancestors 'self' https://*.tableau.com 13 font-src *.trustedshops.com *.trustindex.io *.cookiebot.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.typekit.net *.googleapis.com *.bootstrapcdn.com *.hotjar.io *.hotjar.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://static.addtoany.com/ *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com https://*.dpdconnect.nl *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.twitter.com *.google.com *.addthis.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: *.trustedshops.com *.trustindex.io *.cookiebot.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com https://www.magezon.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.twitter.com *.google.nl *.usercentrics.eu *.etrusted.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.trustedshops.com *.trustindex.io *.cookiebot.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://*.dpdconnect.nl *.avada.io *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com googletagmanager.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com graph.facebook.com widgets.pinterest.com *.clarity.ms *.hotjar.io *.hotjar.com *.usercentrics.eu *.cloudwaysapps.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.trustedshops.com *.trustindex.io *.cookiebot.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com *.multisafepay.com unsafe-inline assets.braintreegateway.com *.cloudflare.com *.twitter.com *.typekit.net *.bootstrapcdn.com *.etrusted.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.trustedshops.com *.trustindex.io *.cookiebot.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://stats.addtoany.com/menu *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.cloudflare.com *.twitter.com *.clarity.ms *.usercentrics.eu *.hotjar.io *.hotjar.com wss://*.hotjar.com *.cloudwaysapps.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 13 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 13 default-src 'self' https://*.abgemea.com https://fonts.googleapis.com https://use.fontawesome.com ws.sharethis.com unpkg.com https://maxcdn.bootstrapcdn.com dpm.demdex.net avisbudgetgroup.tt.omtrdc.net https://*.bing.com https://*.virtualearth.net; object-src *; img-src data: *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src *; connect-src *; font-src 'self' data: https://*.abgemea.com https://fonts.gstatic.com https://*.bing.com https://use.fontawesome.com https://*.virtualearth.net https://maxcdn.bootstrapcdn.com; worker-src 'self' blob: 13 script-src * 'self' 'unsafe-inline' 'unsafe-eval' wistia.com youtube.com blob: 13 frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com *.inspiredvss.co.uk 13 default-src * 'unsafe-eval' 'unsafe-inline' data: mediastream: blob: filesystem:; 13 block-all-mixed-content;upgrade-insecure-requests; 13 block-all-mixed-content; frame-ancestors 'self'; upgrade-insecure-requests; 13 frame-ancestors https://*.login.smartweb.test https://*.login.smartweb.test:8080 https://*.admin.shop-sftest.io https://*.webshop-admin.scannet.dk https://*.admin.hostedshop.io https://*.admin.hostedcms.io https://*.webshop.dandomain.dk 13 default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' blob:; frame-ancestors 'self'; upgrade-insecure-requests ; report-uri https://www.acc.axa.ch/servlets/external/csp-reports.csp 13 default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru okcdn.ru http://*.okcdn.ru https://*.okcdn.ru mycdn.me http://*.mycdn.me https://*.mycdn.me http://st-ok.cdn-vk.ru https://st-ok.cdn-vk.ru http://st-ok-pts.cdn-vk.ru https://st-ok-pts.cdn-vk.ru wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://cdn.consentmanager.net https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru static.dzeninfra.ru connect.ok.ru https://connect.ok.ru *.odkl.ru https://*.odkl.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru okcdn.ru http://*.okcdn.ru https://*.okcdn.ru http://st-ok.cdn-vk.ru https://st-ok.cdn-vk.ru http://st-ok-pts.cdn-vk.ru https://st-ok-pts.cdn-vk.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://*.consentmanager.net https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru static.dzeninfra.ru *.adtrafficquality.google *.odkl.ru https://*.odkl.ru appleid.cdn-apple.com; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report; 12 default-src 'none' ; connect-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ; 12 frame-ancestors 'self' https://*.useberry.com 12 default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://munchkin.marketo.net https://app-abj.marketo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://geoip-js.com https://ads.avocet.io https://trk.techtarget.com https://j.6sc.co https://tags.srv.stackadapt.com https://ads.avct.cloud https://js.driftt.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.jsdelivr.net https://js.adsrvr.org https://go.affec.tv https://bat.bing.com https://s7.addthis.com https://m.addthis.com https://z.moatads.com https://snap.licdn.com https://tracking.g2crowd.com https://connect.facebook.net *.visualwebsiteoptimizer.com https://app.vwo.com *.sharethis.com https://unpkg.com https://d1hgczpbubj217.cloudfront.net https://app-static.turtl.co https://js.zi-scripts.com *.mutinycdn.com https://www.clarity.ms https://scripts.clarity.ms *.roundprinceweb.com https://www.redditstatic.com https://go.proofpoint.com https://www.google.com https://www.gstatic.com https://www.buzzsprout.com *.vimeocdn.com https://storage.googleapis.com https://js.navattic.com *.qualified.com https://wpaassets.blob.core.windows.net *.youtube.com vimeo.com *.vimeo.com cdn.cookielaw.org *.onetrust.com *.proofpoint.com https://live.rezync.com; object-src 'self'; style-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' data: blob: *; media-src 'self' *.qualified.com; frame-src 'self' 'unsafe-inline' *; frame-ancestors 'self' app.mutinyhq.com; child-src 'self' 'unsafe-inline' blob: *.qualified.com; worker-src 'self' blob:; font-src 'self' 'unsafe-inline' data: *; connect-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation 12 script-src 'self' blob: data: https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' ws: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; object-src 'none'; worker-src blob:; img-src 'self' blob: data: https:; frame-src 'self' blob: data: https:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 12 frame-ancestors 'self' https://www.thomsonreuters.com 12 default-src https:; img-src * data:; script-src https:* http: 'unsafe-inline' 'unsafe-eval'; style-src http: 'unsafe-inline'; connect-src https: wss:; frame-src https:; font-src https: data:; 12 frame-ancestors 'self' https://localhost:* https://*.bustle.com https://*.bdg.com 12 upgrade-insecure-requests; frame-ancestors 'self' https://explore.apptio.com https://explore.ibm.com 12 default-src 'self' ; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.comici.jp https://*.corkbooks.com https://*.rimacomiplus.jp https://*.bigcomics.jp https://*.googleapis.com https://*.facebook.net https://*.facebook.com https://*.stripe.com https://*.cloudflare.com https://*.twitter.com https://*.ads-twitter.com https://*.x.com https://*.valuecommerce.com https://*.line-website.com https://*.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.googletagmanager.com https://*.adtrafficquality.google https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://cdn.cookielaw.org https://analytics.google.com https://*.g.doubleclick.net https://*.hotjar.com https://*.tiktok.com https://*.cookiebot.com https://tag.flvcdn.net ; frame-src 'self' https://comici.jp https://*.comici.jp https://corkbooks.com https://*.corkbooks.com https://*.rimacomiplus.jp https://*.bigcomics.jp https://*.stripe.com https://*.googletagmanager.com https://*.adtrafficquality.google https://*.google.com https://*.googlesyndication.com https://www.youtube.com https://*.doubleclick.net https://static.ads-twitter.com https://*.twitter.com https://*.facebook.com/ https://consentcdn.cookiebot.com ; connect-src 'self' https://*.comici.jp https://*.corkbooks.com https://*.rimacomiplus.jp https://*.bigcomics.jp https://*.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.stripe.com https://www.googletagmanager.com https://analytics.google.com https://*.google-analytics.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.doubleclick.net https://www.google.com https://www.google.co.jp https://analytics.tiktok.com https://*.cookielaw.org https://stbfep.sps-system.com https://*.hotjar.io https://www.facebook.com https://analytics-ipv6.tiktokw.us https://consentcdn.cookiebot.com https://consent.cookiebot.com https://apm.yahoo.co.jp ; style-src 'self' 'unsafe-inline' https://*.comici.jp https://*.corkbooks.com https://*.rimacomiplus.jp https://*.bigcomics.jp https://*.rimacomiplus.jp https://*.cloudflare.com https://*.googleapis.com ; worker-src 'self' blob: ; img-src * 'self' data: blob: ; font-src 'self' data: https://*.gstatic.com ; frame-ancestors 'self' https://*.google.com ; 12 default-src 'self' *.idrive.com *.idrivesync.com https://graph.facebook.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.dropbox.com https://cdnjs.cloudflare.com https://cmp.osano.com https://*.idriveonlinebackup.com https://*.chatbot.com https://www.clarity.ms https://*.bing.com https://maxaccess-api.onlineada.workers.dev https://snap.licdn.com https://px.ads.linkedin.com https://cdn.jsdelivr.net https://js.zohocdn.com https://salesiq.zoho.com https://embed.tawk.to https://app.chatsupport.co https://*.zendesk.com https://static.zdassets.com https://tagmanager.google.com https://static.idriveonlinebackup.com https://js.hcaptcha.com https://*.facebook.com https://bmrsignal.idrivelite.com https://*.google.com https://apis.google.com https://accounts.google.com https://alcdn.msauth.net https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://*.criteo.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.criteo.net https://cdn.livechatinc.com https://gum.criteo.com https://sslwidget.criteo.com https://*.livechatinc.com https://ajax.googleapis.com https://html5shim.googlecode.com https://s.adroll.com https://a.adroll.com https://d.adroll.com https://www.google.com https://www.idrivedownloads.com http://ssl.p.jwpcdn.com https://www.youtube.com https://px.spiceworks.com https://connect.facebook.net https://5358683.fls.doubleclick.net https://platform.twitter.com https://www.googleadservices.com https://www.gstatic.com https://ssl.google-analytics.com https://code.jquery.com https://js.stripe.com https://www.googletagmanager.com https://api.maxaccess.io https://googleads.g.doubleclick.net https://bat.bing.com https://scripts.clarity.ms; img-src https://* 'self' data: blob: www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://bat.bing.com https://*.clarity.ms;style-src 'self' 'unsafe-inline' 'unsafe-eval' https://embed.tawk.to https://css.zohocdn.com https://tagmanager.google.com https://static.idriveonlinebackup.com https://fonts.googleapis.com https://ssl.google-analytics.com https://code.jquery.com; font-src https://* https://fonts.gstatic.com data: ; object-src 'self' https://secure.livechatinc.com; frame-src https://* 'self' data: blob:; media-src https://* blob:; worker-src https://* blob:; connect-src 'self' wss: https://* blob: https://www.google-analytics.com https://bat.bing.com https://*.clarity.ms; frame-ancestors 'self'; 12 script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; frame-src 'self' https:; frame-ancestors 'self'; img-src 'self' https: data:; media-src 'self' https: data: blob:; object-src 'none'; font-src 'self' https: data:; default-src 'self' https: wss:; base-uri 'none'; 12 frame-ancestors 'self' https://d2f1fdg7bifbxk.cloudfront.net default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://api.cloudflare.com *.kargo.com tag.bounceexchange.com tag.wknd.ai assets.bounceexchange.com api.bounceexchange.com dev.bounceexchange.com dash.bounceexchange.com dash-staging.bounceexchange.com *.rfihub.com *.rfihub.net *.sixflags.com *.googletagmanager.com *.googlesyndication.com storage.googleapis.com *.youtube.com *.ujet.co *.sentry-cdn.com *.algolia.net *.algolianet.com *.sixflags.net *.abtasty.com *.osano.com *.api.osano.com *.datasubject.com *.quantummetric.com *.clarity.ms core.sanity-cdn.com acsbapp.com unpkg.com *.ondigitalocean.app *.attractions.io *.pinterest.com connect.facebook.net *.buy.sixflags.com *.store.sixflags.com s.pinimg.com *.g.doubleclick.net cdn.attn.tv *.attn.tv https://bat.bing.com/bat.js https://live.rezync.com https://cdn.boomtrain.com https://bat.bing.com https://bat.bing.com/p/action https://bat.bing.com/p/action/247012320.js https://connect.facebook.net/en_US/fbevents.js https://try.abtasty.com https://www.google.com https://analytics.google.com https://www.gstatic.com *.taboola.com https://cloudpresskit.com *.tiktok.com *.clickandchat.com https://js.ipredictive.com; style-src 'self' 'unsafe-inline' *.abtasty.com assets.bounceexchange.com *.clickandchat.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com; img-src 'self' data: blob: assets.bounceexchange.com events.bouncex.net trkn.us *.cdnwidget.com pippio.com *.store.sixflags.com *.liadm.com *.clarity.ms *.buy.sixflags.com https://www.google.com https://i.liadm.com https://ad.doubleclick.net https://analytics.google.com https://www.facebook.com *.g.doubleclick.net https://live.rezync.com https://bat.bing.com https://trc.taboola.com *.wistia.com *.youtube.com *.googlesyndication.com *.moengage.com *.googletagmanager.com *.ytimg.com *.abtasty.com https://cloudpresskit.com https://static.cloudpresskit.com https://bat.bing.com/action events.attentivemobile.com *.attn.tv *.clickandchat.com https://js.ipredictive.com cdn.sanity.io static.sixflags.com six-flags.s3.amazonaws.com assets.sixflags.com; font-src 'self' data: *.clickandchat.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://cloudpresskit.com assets.bounceexchange.com; object-src 'none'; base-uri 'self'; form-action 'self' api.bounceexchange.com dev.bounceexchange.com; frame-ancestors 'self'; frame-src * www.google.com recaptcha.google.com assets.bounceexchange.com dash.bounceexchange.com dash-staging.bounceexchange.com *.google.com *.buy.sixflags.com *.store.sixflags.com creatives.attn.tv *.attn.tv; worker-src blob:; child-src blob: assets.bounceexchange.com; connect-src 'self' ws: https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://firebaseremoteconfig.googleapis.com https://www.googleapis.com cognito-idp.us-east-2.amazonaws.com api.bounceexchange.com *.kargo.com coupons.bounceexchange.com events.bouncex.net *.cdnwidget.com *.cdnbasket.net *.boomtrain.com *.clarity.ms *.doubleclick.net https://www.facebook.com https://analytics.google.com https://bat.bing.com https://bat.bing.com/p/action https://bat.bing.com/p/action/247012320.js *.wistia.com *.acsbapp.com *.moengage.com *.sixflags2024.dev *.quantummetric.com api.sixflags.net *.store.sixflags.com *.buy.sixflags.com *.youtube.com *.api.osano.com *.osano.com *.algolia.net *.algolianet.com *.sixflags.net *.abtasty.com *.pinterest.com https://s.pinimg.com *.taboola.com *.ondigitalocean.app *.attractions.io *.googletagmanager.com *.intentia.com fg8vvsvnieiv3ej16jby.litix.io *.googleadservices.com events.attentivemobile.com *.attn.tv https://fims.prod.six-mt.com https://prod.six-mt.com https://content.prod.six-mt.com https://live.rezync.com https://www.google.com https://static.cloudpresskit.com https://www.google-analytics.com https://us-central1-missi-six-prod.cloudfunctions.net https://cloudpresskit.com *.cloudfront.net *.tiktok.com https://analytics-ipv6.tiktokw.us *.clickandchat.com; manifest-src 'self' accounts.google.com *.abtasty.com; media-src 'self' blob: *.youtube.com *.clickandchat.com; upgrade-insecure-requests; 12 frame-ancestors 'self' *.laccd.edu *.elac.edu *.wlac.edu *.lapc.edu *.lamission.edu *.lavc.edu *.lasc.edu *.lahc.edu *.lacc.edu *.lattc.edu 12 default-src 'self' https://*; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*; style-src 'self' 'unsafe-inline' https://*; img-src 'self' blob: data: https://*; media-src 'self' blob: data: https://*; connect-src 'self' https://* wss://webmessaging.mypurecloud.com wss://form.virtualq.tech; frame-ancestors 'self'; report-uri /cspreporting.php; report-to csp-endpoint; 12 frame-ancestors nuanceaudio.com *.nuanceaudio.com *.luxgroup.net https://cms-prod.brxm.grandvision.io 12 frame-ancestors 'self' https://*.fynd.com 12 default-src 'self'; img-src 'self' s3.ap-northeast-1.amazonaws.com s3-ap-northeast-1.amazonaws.com *.cloudfront.net *.tixpo.jp; media-src 'self' s3.ap-northeast-1.amazonaws.com s3-ap-northeast-1.amazonaws.com *.cloudfront.net *.tixpo.jp; style-src 'self' 'nonce-yiyABNgr0rFv5i+sndZpFTeyWOw=' fonts.googleapis.com cdn.jsdelivr.net *.cloudfront.net *.tixpo.jp; style-src-attr 'self' 'nonce-yiyABNgr0rFv5iasndZpFTeyWOw='; script-src 'self' 'nonce-acga38w6Qa0Xoa7JsaBE0xAWWP0=' www.gstatic.com www.googletagmanager.com cdn.jsdelivr.net ajax.googleapis.com *.cloudfront.net *.mul-pay.jp *.tixpo.jp *.emtg.co.jp; font-src 'self' data: fonts.gstatic.com fonts.googleapi.com *.cloudfront.net *.tixpo.jp; form-action 'self' *.mul-pay.jp *.emtg.co.jp; connect-src 'self' www.google-analytics.com analytics.google.com firebaseinstallations.googleapis.com fcmregistrations.googleapis.com www.gstatic.com *.tixpo.jp; frame-ancestors 'self'; 12 upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'none'; 12 frame-ancestors 'self' http://admin.bonami.cz 12 default-src * blob: data: cid:; img-src * data: blob: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data: 12 frame-ancestors 'self' https://gtranslate.io; 12 default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 12 frame-ancestors 'self' https://customer.educations.com https://event.virtualdays.com 12 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https: http:; img-src 'self' data: https: http:; font-src 'self' data: https: http:; media-src 'self' data: https: http: blob:; frame-src 'self' https: http:; connect-src 'self' https: http: wss: ws:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 12 script-src 'unsafe-eval' blob: 'self' meta.wikimedia.org *.wikimedia.org *.wikipedia.org *.wikinews.org *.wiktionary.org *.wikibooks.org *.wikiversity.org *.wikisource.org wikisource.org *.wikiquote.org *.wikidata.org *.wikifunctions.org *.wikivoyage.org *.mediawiki.org mediawiki.org wikimedia.org *.wmflabs.org *.wmcloud.org *.toolforge.org wss://*.toolforge.org *.jsdelivr.net unpkg.com cdnjs.cloudflare.com raw.githubusercontent.com *.github.com code.jquery.com cdn.mathjax.org use.typekit.net fonts.cdnfonts.com use.fontawesome.com i.ytimg.com rsms.me doi.org localhost https://localhost:* http://localhost:* wss://localhost:* ws://localhost:* *.google.com *.gstatic.com *.googleapis.com *.translate.yandex.net yastatic.net ya.ru radically.github.io cdn.sammdot.ca cdn.fontshare.com viaf.org publicai-proxy.alaexis.workers.dev iiif.archive.org api.flickr.com live.staticflickr.com api.anthropic.com api.openai.com api.publicai.co catalogo.pusc.it parsifal.urbe.it opac.sbn.it overpass-api.de api.openrouteservice.org archive.org *.openstreetmap.org *.waymarkedtrails.org *.thunderforest.com registry.ipe.wiki analytics.ipe.wiki qlever.dev app.goacoustic.com wikipedia-archive.ourworldindata.org api.inaturalist.org inaturalist-open-data.s3.amazonaws.com validator.w3.org db.onlinewebfonts.com fontlibrary.org 'unsafe-inline' auth.wikimedia.org; default-src 'self' data: blob: upload.wikimedia.org https://commons.wikimedia.org meta.wikimedia.org *.wikimedia.org *.wikipedia.org *.wikinews.org *.wiktionary.org *.wikibooks.org *.wikiversity.org *.wikisource.org wikisource.org *.wikiquote.org *.wikidata.org *.wikifunctions.org *.wikivoyage.org *.mediawiki.org mediawiki.org wikimedia.org *.wmflabs.org *.wmcloud.org *.toolforge.org wss://*.toolforge.org *.jsdelivr.net unpkg.com cdnjs.cloudflare.com raw.githubusercontent.com *.github.com code.jquery.com cdn.mathjax.org use.typekit.net fonts.cdnfonts.com use.fontawesome.com i.ytimg.com rsms.me doi.org localhost https://localhost:* http://localhost:* wss://localhost:* ws://localhost:* *.google.com *.gstatic.com *.googleapis.com *.translate.yandex.net yastatic.net ya.ru radically.github.io cdn.sammdot.ca cdn.fontshare.com viaf.org publicai-proxy.alaexis.workers.dev iiif.archive.org api.flickr.com live.staticflickr.com api.anthropic.com api.openai.com api.publicai.co catalogo.pusc.it parsifal.urbe.it opac.sbn.it overpass-api.de api.openrouteservice.org archive.org *.openstreetmap.org *.waymarkedtrails.org *.thunderforest.com registry.ipe.wiki analytics.ipe.wiki qlever.dev app.goacoustic.com wikipedia-archive.ourworldindata.org api.inaturalist.org inaturalist-open-data.s3.amazonaws.com validator.w3.org db.onlinewebfonts.com fontlibrary.org en.wikibooks.org en.wikinews.org en.wikiquote.org en.wikisource.org en.wikiversity.org en.wikivoyage.org en.wiktionary.org www.mediawiki.org commons.wikimedia.org foundation.wikimedia.org incubator.wikimedia.org species.wikimedia.org wikimania.wikimedia.org www.wikidata.org www.wikifunctions.org auth.wikimedia.org; style-src 'self' data: blob: upload.wikimedia.org https://commons.wikimedia.org meta.wikimedia.org *.wikimedia.org *.wikipedia.org *.wikinews.org *.wiktionary.org *.wikibooks.org *.wikiversity.org *.wikisource.org wikisource.org *.wikiquote.org *.wikidata.org *.wikifunctions.org *.wikivoyage.org *.mediawiki.org mediawiki.org wikimedia.org *.wmflabs.org *.wmcloud.org *.toolforge.org wss://*.toolforge.org *.jsdelivr.net unpkg.com cdnjs.cloudflare.com raw.githubusercontent.com *.github.com code.jquery.com cdn.mathjax.org use.typekit.net fonts.cdnfonts.com use.fontawesome.com i.ytimg.com rsms.me doi.org localhost https://localhost:* http://localhost:* wss://localhost:* ws://localhost:* *.google.com *.gstatic.com *.googleapis.com *.translate.yandex.net yastatic.net ya.ru radically.github.io cdn.sammdot.ca cdn.fontshare.com viaf.org publicai-proxy.alaexis.workers.dev iiif.archive.org api.flickr.com live.staticflickr.com api.anthropic.com api.openai.com api.publicai.co catalogo.pusc.it parsifal.urbe.it opac.sbn.it overpass-api.de api.openrouteservice.org archive.org *.openstreetmap.org *.waymarkedtrails.org *.thunderforest.com registry.ipe.wiki analytics.ipe.wiki qlever.dev app.goacoustic.com wikipedia-archive.ourworldindata.org api.inaturalist.org inaturalist-open-data.s3.amazonaws.com validator.w3.org db.onlinewebfonts.com fontlibrary.org 'unsafe-inline'; object-src 'none'; report-uri /w/api.php?action=cspreport&format=json; report-to csp-report-to-endpoint 12 default-src 'self'; style-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com www.google.com az416426.vo.msecnd.net www.gstatic.com dc.services.visualstudio.com tagmanager.google.com https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org:* https://cdn.consentmanager.mgr.consensu.org/delivery/cmp.min.css; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.mxpnl.com https://action.metaffiliation.com https://*.googleapis.com www.googletagmanager.com www.google.com az416426.vo.msecnd.net www.gstatic.com dc.services.visualstudio.com tagmanager.google.com www.googleadservices.com *.google-analytics.com *.analytics.google.com static.hotjar.com static.hotjar.io bat.bing.com connect.facebook.net googleads.g.doubleclick.net script.hotjar.com script.hotjar.io www.dwin1.com/8427.js www.zenaps.com https://the.sciencebehindecommerce.com/d9core adclick.g.doubleclick.net https://cdn.consentmanager.mgr.consensu.org:* https://consentmanager.mgr.consensu.org:* https://cdn.consentmanager.net:* https://c.delivery.consentmanager.net:* https://ibn.yuzzu.be:* https://static.cdn.prismic.io https://d.delivery.consentmanager.net https://apps.mypurecloud.de https://ad.doubleclick.net/ccm/s/collect; font-src 'self' fonts.gstatic.com script.hotjar.com script.hotjar.io data:; frame-src 'self' img.metaffiliation.com bid.g.doubleclick.net www.google.com dc.services.visualstudio.com vars.hotjar.com vars.hotjar.io 11105234.fls.doubleclick.net https://tbl.tradedoubler.com/ www.zenaps.com https://cdn.consentmanager.net https://cdn.consentmanager.mgr.consensu.org:* https://td.doubleclick.net https://*.prismic.io https://www.googletagmanager.com https://sst.yuzzu.be https://apps.mypurecloud.de https://ad.doubleclick.net/ccm/s/collect; connect-src 'self' https://www.facebook.com https://bat.bing.net http://*.hotjar.io:* https://*.hotjar.io:* wss://*.hotjar.io http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://pagead2.googlesyndication.com https://www.google-analytics.com *.google-analytics.com *.analytics.google.com dc.services.visualstudio.com connect.facebook.net in.hotjar.com in.hotjar.io vc.hotjar.io inkstone-edge.haiku.ai api.mixpanel.com https://stats.g.doubleclick.net adclick.g.doubleclick.net https://surveystats.hotjar.io:* https://cdn.consentmanager.mgr.consensu.org:* https://consentmanager.mgr.consensu.org:* https://*.rockestate.be *.googleapis.com https://geoservices.wallonie.be https://action.metaffiliation.com:* https://ibn.yuzzu.be:* https://pagead2.googlesyndication.com:* https://www.google.com:* https://googleads.g.doubleclick.net https://bat.bing.com https://adservice.google.com https://www.googleadservices.com https://js.monitor.azure.com https://sst.yuzzu.be https://ad.doubleclick.net https://d.delivery.consentmanager.net https://api-cdn.mypurecloud.de wss://webmessaging.mypurecloud.de https://api.mypurecloud.de https://www.google.be www.googletagmanager.com https://westeurope-5.in.applicationinsights.azure.com https://ad.doubleclick.net/ccm/s/collect https://apps.mypurecloud.de/; img-src 'self' https://bat.bing.net https://delivery.consentmanager.net:* https://d.delivery.consentmanager.net https://cdn.consentmanager.net:* https://cdn.consentmanager.mgr.consensu.org:* https://consentmanager.mgr.consensu.org:* http://*.google.com https://*.google.com http://*.google.be https://*.google.be http://*.google.co.za https://*.google.co.za www.zenaps.com www.awin1.com ssl.gstatic.com www.gstatic.com 11105234.fls.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net https://ad.doubleclick.net script.hotjar.io www.facebook.com www.google.be https://*.google-analytics.com https://*.analytics.google.com bat.bing.com https://*.googleapis.com maps.gstatic.com www.w3.org https://*.rockestate.be https://geoservices.wallonie.be https://ibn.yuzzu.be:* https://affdc.yuzzu.be:* https://images.prismic.io https://prismic-io.s3.amazonaws.com data: https://yuzzu.be https://www.googletagmanager.com https://www.yuzzu.be https://sst.yuzzu.be https://yuzzu-cms.cdn.prismic.io https://ad.doubleclick.net/ccm/s/collect; child-src 'self' https://vars.hotjar.com https://vars.hotjar.io 12 sandbox allow-same-origin allow-scripts allow-orientation-lock allow-pointer-lock allow-forms allow-popups allow-top-navigation-by-user-activation; 12 upgrade-insecure-requests; base-uri 'none'; 12 frame-ancestors 'none'; report-to default 12 default-src 'none'; base-uri 'self'; object-src 'self'; connect-src 'self' data: vkcalls: https://*.vk.com https://vk.com https://vk.ru https://*.vk.ru https://*.vkvideo.ru wss://eh.vk.com wss://*.cs7777.vk.com wss://videowebrtc.okcdn.ru wss://videowebrtc.okcdn.ru:23433 wss://*.okcdn.ru https://*.okcdn.ru:23432 https://*.okcdn.ru:23456 https://*.calls-test.oneme.ru https://*.calls-test.oneme.ru:23432 wss://*.calls-test.oneme.ru wss://*.calls-test.oneme.ru:23432 wss://pubsub.live.vkvideo.ru wss://ovsu.mycdn.me wss://mc.yandex.com wss://mc.yandex.ru https://videowebrtc.okcdn.ru:23432 https://ad.mail.ru https://vc.go.mail.ru https://akashi.vk-portal.net https://api.ok.ru https://events.maps.vk.com https://privacy-cs.mail.ru https://r0.mail.ru https://st.mycdn.me https://tiles.maps.vk.com https://*.ms.vk.com https://*.mycdn.me https://*.okcdn.ru https://*.userapi.com https://*.vkuseraudio.net https://*.vkuseraudio.ru https://stacks.vk-portal.net https://r0.mradx.net https://r.mradx.net https://sdk-api.apptracer.ru https://stats.vk-portal.net https://tns-counter.ru https://top-fwz1.mail.ru https://api.cloud.vkplay.ru https://rv.mail.ru https://rs.mail.ru https://ad.mail.ru https://yandex.ru https://an.yandex.ru https://mc.yandex.ru https://amc.yandex.ru https://mc.yandex.com https://yastatic.net https://api.vkvideo.ru https://vkvideo.ru https://browser.translate.yandex.net https://analytics.google.com https://*.emgsound.ru https://*.hostingradio.ru https://*.vkuser.net https://*.vkuserphoto.ru https://top-fwz1.mail.ru https://log.strm.yandex.ru https://*.strm.yandex.net https://vst.videolink.host https://wcm.weborama-tech.ru https://ad.adriver.ru https://bs.serving-sys.ru https://hls.newradio.ru https://hls.studio21.ru https://*.radio-holding.ru https://pixel.adlooxtracking.ru https://whitei.net https://gstatic.com/generate_204 https://connectivitycheck.gstatic.com/generate_204 https://captive.apple.com https://edge.microsoft.com/captiveportal/generate_204 https://cloudflareok.com https://detectportal.firefox.com/canonical.html https://video-ai-assistant.one-infra.ru https://vst.dfn-network.pro https://*.odkl.ru https://object2-ac.vk-apps.com https://*.ms.dzen.ru; img-src 'self' blob: data: https://*.vk.com https://*.vk.ru https://vk.ru https://vk.com https://ok.ru https://*.ok.ru https://*.vkuserphoto.ru https://tiles.maps.vk.com https://vk-callback.go.mail.ru https://i.mycdn.me https://st.mycdn.me https://*.mail.ru https://*.mradx.net https://*.mds.yandex.net https://wcm.weborama-tech.ru https://www.tns-counter.ru https://top-fwz1.mail.ru https://*.userapi.com https://yandex.ru https://amc.yandex.ru https://mc.yandex.ru https://mc.yandex.com https://favicon.yandex.net https://eye.targetads.io https://ad.adriver.ru https://ev.adriver.ru https://*.ms.vk.com https://core-renderer-tiles.maps.yandex.net https://*.api-maps.yandex.ru https://yastatic.net https://pixel.adlooxtracking.ru https://bs.serving-sys.ru https://vkplay.ru https://vkvideo.ru https://*.vkvideo.ru https://cdn.culture.ru https://fonts.gstatic.com https://i.vimeocdn.com https://i.ytimg.com https://sb.scorecardresearch.com https://zonkpro.ru https://pp.vk.me https://assets.yclients.com https://avatars.dzeninfra.ru https://bs.serving-sys.ru https://static-maps.yandex.ru https://static.tapclap.com https://*.amgradio.ru https://*.cdn-vk.ru https://iv.okcdn.ru https://vst.dfn-network.pro https://*.admon.pro https://*.telecid.ru https://*.tns-counter.ru https://*.traceon.ru https://object2-ac.vk-apps.com; font-src 'self' data: blob: https://vk.com https://*.vk.com https://*.mradx.net https://*.gstatic.com https://yastatic.net https://*.vk.ru https://vkvideo.ru https://*.vkvideo.ru https://cdn.megabonus.com https://rsms.me; media-src * blob: data:; manifest-src 'self' https://m.vk.com https://m.vkvideo.ru https://m.vk.ru; worker-src 'self' blob: https://vk.com https://vk.ru; frame-src * vkcalls: blob:; form-action 'self' about: https://cloud.mail.ru https://pu.vk.com https://vk.com https://vu.vk.com https://m.vk.com https://vk.ru https://m.vk.ru https://co.vkpay.io https://co.vkpay.ru https://cpg.money.mail.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://mail.ru https://*.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://yandex.ru https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.ru https://*.serving-sys.ru https://*.weborama-tech.ru https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://yastatic.net https://analytics.tiktok.com https://*.vkvideo.ru; style-src 'self' 'unsafe-inline' https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://r.mradx.net https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com https://*.vkvideo.ru https://yastatic.net; upgrade-insecure-requests; report-uri https://vk.com/csp; report-to csp-endpoint; 11 upgrade-insecure-requests; default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src 'self' https://assets.guim.co.uk https://pasteup.guim.co.uk https://interactive.guim.co.uk https://dashboard.ophan.co.uk https://cdn.braze.eu data:; connect-src https: wss: blob:; child-src https: blob:; object-src 'none'; base-uri 'none' 11 frame-ancestors 'self' https://www.fortinet.com https://fortinet.pathfactory.com 11 frame-ancestors 'self' https://*.elastic.co https://elasticsandbox.docebosaas.com https://elastic.docebosaas.com https://www.gather.town; 11 default-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://sdk.token.logpay.de https://*.payone.com https://maps.googleapis.com blob: https://www.jsctool.com https://jsctool.com https://*.optimizely.com https://secure.pay1.de https://dbpayment.deutschebahn.com https://payment.deutschebahn.com https://www.img-bahn.de https://cms.static-bahn.de https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com https://*.bahn.de https://*.bahn.com https://app.crossengage.io https://ucm-eu.verint-cdn.com; connect-src 'self' https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://www.gstatic.com data: blob: https://p11.techlab-cdn.com https://www.jsctool.com https://jsctool.com https://assets.static-bahn.de https://dmp.adform.net https://siteintercept.qualtrics.com https://logx.optimizely.com https://*.optimizely.com https://collect.tealiumiq.com https://trk-api.crossengage.io https://accounts.bahn.de https://ucm-eu.verint-cdn.com https://hoover-eu.verint-api.com wss://hoover-eu.verint-api.com https://kiana.services-bahn.de; frame-src 'self' https://s-bahn-hh.specials-bahn.de/ https://cms.static-bahn.de https://secure.pay1.de https://dbpayment.deutschebahn.com https://payment.deutschebahn.com https://dbpayment.dbv.service.deutschebahn.com https://payment.dbv.service.deutschebahn.com https://*.bahn.de https://www.abo-bahn.de https://db.novafind.eu https://transport.novafind.eu https://a791773171.cdn.optimizely.com/ https://s-bahn-muenchen-live.de https://assets1-eur.mkt.dynamics.com https://assets-eur.mkt.dynamics.com https://accounts.bahn.de https://db-bordgastronomie.de https://ersatzkarte-dbregiobusnord.de https://analytics.geops.de https://*.sbahnm.geops.de https://fipo.deutschebahn.com https://regioforce.my.salesforce-sites.com https://regioforce.my.site.com https://www.jugendticket-nds.de https://a1.adform.net https://dbstreckenagent.de https://www.dbstreckenagent.de https://tour.services-bahn.de; frame-ancestors 'self'; style-src 'self' https://ucm-eu.verint-cdn.com https://fonts.googleapis.com https://www.jsctool.com https://jsctool.com 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' https://*.static-bahn.de https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://maps.gstatic.com https://www.awin1.com https://partner-bahn.de https://cm.g.doubleclick.net https://fcmatch.google.com https://fcmatch.youtube.com https://dmp.adform.net https://cdn.optimizely.com https://*.qualtrics.com https://assets.static-bahn.de https://*.bahn.de https://assets-ri.extranet.deutschebahn.com https://cms.static-bahn.de data:; media-src 'self' https://assets.static-bahn.de https://*.bahn.de https://cms.static-bahn.de; 11 default-src * data: blob: 'unsafe-inline' 'unsafe-eval' frame-ancestors: 'self' *.mheducation.com; 11 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' https://*.genesys.com https://*.genesyscsdt.com https://*.genesyscsdteng.com https://*.genesys.cloud https://resources.genesys.com https://*.seismic.com https://genesys.seismic.com https://know.genesys.com https://help.genesys.com https://*.contentsquare.net https://apps.mypurecloud.com https://genesys.lightning.force.com https://genesys.file.force.com; 11 default-src https: data: wss://*.hotjar.com wss://*.crazyegg.com *.crazyegg.com wss://*.zohopublic.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; media-src 'self' blob: data: https:; 11 frame-ancestors 'self'; base-uri 'self'; object-src 'none' 11 default-src=self; 11 frame-ancestors *.mgmresorts.com 11 default-src 'self' https:; script-src 'self' https: https://assets.adoberesources.net https://documentcloud.adobe.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' https://*.typekit.net; img-src 'self' https: data: https://assets.adoberesources.net https://lh3.googleusercontent.com; connect-src 'self' https: https://was-nam-us-prd-bhapi.azurewebsites.net wss://*.qualified.com wss://directline.botframework.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://bhgateway.azurewebsites.net https://assets.adoberesources.net https://documentcloud.adobe.com https://*.adobe.io wss://*.adobe.io; font-src 'self' https: https://*.typekit.net; frame-ancestors 'self' https:; frame-src 'self' https: https://documentcloud.adobe.com; 11 default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://hossa.inwx.com https://zammad.inwx.de *.zammad.inwx.de ws: wss: *.hossa.inwx.com https://static.inwx.com; worker-src 'self' blob: 11 default-src 'self'; connect-src 'self' *.yoast.com *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com *.authorize.net *.facebook.com stats.addtoany.com *.google.com *.google-analytics.com cdn.cookielaw.org *.hotjar.com:* vc.hotjar.io:* wss://*.hotjar.com s3.eu-west-1.amazonaws.com *.marker.io stats.g.doubleclick.net *.clarity.ms *.mktoresp.com *.ziftsolutions.com *.ziftone.com *.ziftmarcom.com *.onetrust.com *.cookielaw.org *.newrelic.com bam.nr-data.net *.googlesyndication.com *.gstatic.com scout.salesloft.com cdn.linkedin.oribi.io *.mktoutil.com *.bonterratech.com *.6sc.co *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.com.co *.google.co.cr *.google.com.cu *.google.cz *.google.com.do *.google.com.ec *.google.es *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat go.bonterratech.com bat.bing.com *.convertexperiments.com *.instagram.com *.linkedin.com aorta.clickagy.com hemsync.clickagy.com ws.zoominfo.com *.onetrust.com js.zi-scripts.com ws-assets.zoominfo.com *.onetrust.com ct.capterra.com *.marketo.com google.com learn.bonterratech.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.vimeo.com *.cloudinary.com https://www.google-analytics.com https://www.googletagmanager.com https://*.googleadservices.com *.byspotify.com *.spotify.com *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech *.us-east-2.on.aws *.us-central1.run.app; font-src 'self' data: fonts.googleapis.com *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com cdnjs.cloudflare.com ct.capterra.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.vimeo.com *.cloudinary.com https://www.googleadservices.com *.byspotify.com *.spotify.com *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; frame-src 'self' app.marker.io *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com *.instagram.com *.driftt.com *.doubleclick.net *.google.com players.brightcove.net *.youtube.com *.googletagmanager.com *.zensource.cloud vars.hotjar.com *.desire2learncapture.com *.everyaction.com *.mktoresp.com *.spotify.com *.googlesyndication.com tpc.googlesyndication.com *.googleads.com *.googleapis.com go.bonterratech.com hemsync.clickagy.com everyaction.widget.insent.ai ct.capterra.com learn.bonterratech.com *.marketo.com google.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.vimeo.com *.cloudinary.com https://www.googleadservices.com *.byspotify.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; img-src 'self' *.vimeocdn.com *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com *.wpengine.com *.w.org secure.gravatar.com data: *.bonterratech.com test-bonterra-corporate-v2.pantheonsite.io live-bonterra-corporate-v2.pantheonsite.io *.driftt.com maps.googleapis.com px.marchex.io *.facebook.com *.google.com *.gstatic.com cdn.rawgit.com raw.githubusercontent.com *.g.doubleclick.net *.google-analytics.com *.googletagmanager.com zensource-salisbury.s3.amazonaws.com chat.mcsoftware.com *.timevaluecalculators.com *.ytimg.com *.ziftsolutions.com *.ziftone.com *.cookielaw.org *.googlesyndication.com www.google-analytics.com googleads.g.doubleclick.net www.google.com ad.doubleclick.net ade.googlesyndication.com *.bing.com px.ads.linkedin.com www.linkedin.com c.clarity.ms cdn.kimbia.com *.6sc.co *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.com.co *.google.co.cr *.google.com.cu *.google.cz *.google.com.do *.google.com.ec *.google.es *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat go.bonterratech.com *.clarity.ms *.linkedin.com *.google.ca ct.capterra.com *.marketo.com google.com learn.bonterratech.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.vimeo.com *.cloudinary.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com *.byspotify.com *.spotify.com *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; media-src 'self' *.vimeo.com *.zi-scripts.com *.onetrust.com *.zoominfo.com *.clickagy.com *.youtube.com *.spotify.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.cloudinary.com https://www.googleadservices.com *.byspotify.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; object-src 'self' *.oembed.com *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com *.vimeo.com *.youtube.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.cloudinary.com https://www.googleadservices.com *.byspotify.com *.spotify.com *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; script-src 'self' 'unsafe-eval' https://cdn.cookielaw.org *.marker.io *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com *.driftt.com *.authorize.net *.google.com cdnjs.cloudflare.com cdn.rawgit.com maps.googleapis.com rw1.marchex.io connect.facebook.net googleads.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com cdn.jsdelivr.net *.youtube.com *.vimeo.com s.ytimg.com *.googlesyndication.com *.hotjar.com unpkg.com *.timevaluecalculators.com *.w55c.net *.chatbeacon.io *.marketo.net google.com *.everyaction.com *.mktoresp.com *.ziftsolutions.com cdn.cookielaw.org go.bonterratech.com js.zi-scripts.com ws.zoominfo.com *.onetrust.com tags.clickagy.com ws-assets.zoominfo.com everyaction.widget.insent.ai ct.capterra.com *.marketo.com google.com learn.bonterratech.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.cloudinary.com cdn-4.convertexperiments.com *.instagram.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://d8ejoa1fys2rk.cloudfront.net https://storage.googleapis.com https://unpkg.com https://www.google.com https://scripts.clarity.ms https://www.googleadservices.com *.byspotify.com *.spotify.com https://d34r8q7sht0t9k.cloudfront.net *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com *.google.com *.gstatic.com *.googleapis.com *.driftt.com munchkin.marketo.net *.ziftsolutions.com cdn.cookielaw.org widgets.kimbia.com cdn.kimbia.com *.newrelic.com go.everyaction.com *.googlesyndication.com snap.licdn.com bat.bing.com scout-cdn.salesloft.com www.clarity.ms connect.facebook.net googleads.g.doubleclick.net *.convertexperiments.com *.instagram.com go.bonterratech.com www.googleadservices.com *.6sc.co ws.zoominfo.com *.onetrust.com js.zi-scripts.com ws-assets.zoominfo.com everyaction.widget.insent.ai ct.capterra.com *.marketo.com google.com learn.bonterratech.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.vimeo.com *.cloudinary.com cdn-4.convertexperiments.com *.instagram.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://d8ejoa1fys2rk.cloudfront.net https://storage.googleapis.com https://unpkg.com https://www.google.com https://scripts.clarity.ms https://www.googleadservices.com *.byspotify.com *.spotify.com https://d34r8q7sht0t9k.cloudfront.net *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; script-src-attr 'self' 'unsafe-inline' https://www.googleadservices.com *.byspotify.com *.spotify.com https://d34r8q7sht0t9k.cloudfront.net *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; style-src 'self' fonts.googleapis.com *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com tagmanager.google.com *.gstatic.com *.typekit.net maxcdn.bootstrapcdn.com *.timevaluecalculators.com *.marketo.net google.com *.everyaction.com *.mktoresp.com *.ziftsolutions.com *.driftt.com go.everyaction.com cdn.cookielaw.org go.bonterratech.com ct.capterra.com learn.bonterratech.com *.marketo.com google.com jsd-widget.atlassian.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.vimeo.com *.cloudinary.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com 'unsafe-inline' https://www.googleadservices.com *.byspotify.com *.spotify.com *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; style-src-elem 'self' 'unsafe-inline' *.typekit.net *.zi-scripts.com *.zoominfo.com *.onetrust.com *.clickagy.com https://www.googletagmanager.com go.everyaction.com fonts.googleapis.com *.ziftsolutions.com cdn.kimbia.com go.bonterratech.com ct.capterra.com learn.bonterratech.com *.marketo.com jsd-widget.atlassian.com google.com *.wistia.com *.6sense.com *.wistia.net s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com pro.ip-api.com alocdn.com *.execute-api.us-west-2.amazonaws.com rp4.liadm.com bonterratech.com blob: *.qualified.com wss://*.qualified.com *.facebook.com *.vimeo.com *.cloudinary.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.googleadservices.com *.byspotify.com *.spotify.com *.podscribe.com vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech; frame-ancestors 'self' vimeo.com *.tofuhq.com *.influ2.com *.midbound.net *.usbrowserspeed.com *.mdb.tools *.sitelytics.tech 11 frame-ancestors https://*.flexera.com https://*.flexera.de https://*.revenera.com https://*.revenera.de https://ecommerce-flexeracommunity.cs201.force.com https://staging-flexeracommunity.cs203.force.com *.visualwebsiteoptimizer.com app.vwo.com; default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss: useruploads.vwo.io *.visualwebsiteoptimizer.com app.vwo.com; form-action 'self'; script-src * 'unsafe-eval' 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com 'self' blob:; style-src * 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com https: 11 frame-ancestors 'self' https://*.fun.com 11 frame-ancestors 'self' https://app.eu.contentful.com; 11 form-action 'self' 11 require-trusted-types-for 'script';report-uri /recaptcha/challengepage/_/RecaptchaChallengePageUi/cspreport 11 base-uri 'self'; object-src 'none'; frame-ancestors 'self' 11 default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: *; frame-ancestors 'self' https://gameloader.11218marsbahis.com https://gameloader.player-module.com 11 frame-ancestors 'self' https://*.solidpixels.net https://*.solidpixels.com https://*.solidpixels.cz; report-uri https://o4510499984769024.ingest.de.sentry.io/api/4510499988373584/security/?sentry_key=79fdf04e7859269363a6a291a44f1978 11 frame-ancestors 'self' https://go.accessacloud.com; 11 frame-ancestors 'self' https://shopproxy.p-s-s.de https://home.interzum.com https://home.interzum.de 11 default-src * https: data: blob: android-webview-video-poster: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-ancestors 'self'; 11 default-src *; img-src * data: blob:; media-src * data: blob:; script-src 'unsafe-inline' 'unsafe-eval' * data: blob:; worker-src 'unsafe-inline' 'unsafe-eval' * data: blob:; connect-src *; font-src * data: blob:; frame-src *; object-src * data: blob:; style-src 'unsafe-inline' * data: blob: 11 script-src 'unsafe-inline' 'unsafe-eval' http: https: 11 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;script-src * 'unsafe-inline' 'unsafe-eval' data: blob:;script-src-elem * 'unsafe-inline' 'unsafe-eval' data: blob:;style-src * 'unsafe-inline' 'unsafe-eval' data: blob:;style-src-attr * 'unsafe-inline' 'unsafe-eval' data: blob:;style-src-elem * 'unsafe-inline' 'unsafe-eval' data: blob:;img-src * 'unsafe-inline' 'unsafe-eval' data: blob:;font-src * 'unsafe-inline' 'unsafe-eval' data: blob:;object-src * 'unsafe-inline' 'unsafe-eval' data: blob:;media-src * 'unsafe-inline' 'unsafe-eval' data: blob:;frame-src * 'unsafe-inline' 'unsafe-eval' data: blob:;frame-ancestors *;connect-src * 'unsafe-inline' 'unsafe-eval' data: blob:;worker-src * 'unsafe-inline' 'unsafe-eval' data: blob:;upgrade-insecure-requests 11 frame-ancestors 'self' https://*.knowbe4.com; 11 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https:; object-src 'none'; base-uri 'self'; frame-src 'self' https:; frame-ancestors 'self' 11 frame-ancestors 'self' https://familywatchdog.us https://*.familywatchdog.us ; 11 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https://challenges.cloudflare.com https://*.posthog.com https://posthog.doma.xyz https://posthog-devnet.doma.xyz https://posthog-mainnet.doma.xyz https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://api.hypelab.com https://r2.ixncdn.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.doma.xyz https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz; style-src 'self' 'unsafe-inline' https://*.posthog.com https://posthog.doma.xyz https://posthog-devnet.doma.xyz https://posthog-mainnet.doma.xyz https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.doma.xyz https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz; img-src 'self' data: blob: https://*.posthog.com https://posthog.doma.xyz https://posthog-devnet.doma.xyz https://posthog-mainnet.doma.xyz https://ddcdn.sfo3.cdn.digitaloceanspaces.com https://doma.xyz https://opsjet.cloudflareaccess.com https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz https://cdn.doma.xyz https://walletconnect.org https://walletconnect.com https://secure.walletconnect.com https://secure.walletconnect.org https://tokens-data.1inch.io https://tokens.1inch.io https://ipfs.io https://cdn.zerion.io https://explorer-api.walletconnect.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.meld.io https://images-country.meld.io; font-src 'self' data: https://*.posthog.com https://posthog.doma.xyz https://posthog-devnet.doma.xyz https://posthog-mainnet.doma.xyz https://fonts.gstatic.com https://cdn.doma.xyz https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz; media-src 'self' https://*.posthog.com https://posthog.doma.xyz https://posthog-devnet.doma.xyz https://posthog-mainnet.doma.xyz https://cdn.doma.xyz https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; child-src blob: https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org; frame-src 'self' https://d46c9e6b-09c8-4e8d-a5b4-97161086bcf8.bridges.rollbridge.app https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://challenges.cloudflare.com https://secure.walletconnect.com https://secure.walletconnect.org https://privy.doma.xyz https://privy.dashboard-dev.doma.xyz/ https://privy.dashboard-testnet.doma.xyz/ https://meldcrypto.com https://hcaptcha.com https://*.hcaptcha.com https://*.meshconnect.com data: blob:; connect-src 'self' https://*.google-analytics.com https://www.google-analytics.com https://cloudflare-ipfs https://arweave.net https://graph.doma.xyz https://nodegraph-mainnet.doma.xyz https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz https://cdn.doma.xyz https://*.coingecko.com/ https://*.uniswap.org https://o314338.ingest.us.sentry.io https://o4509077008678912.ingest.us.sentry.io https://auth.privy.io https://privy.doma.xyz https://api.doma.xyz https://*.rpc.privy.systems https://*.posthog.com https://posthog.doma.xyz https://posthog-devnet.doma.xyz https://posthog-mainnet.doma.xyz https://*.conduit.xyz https://*.infura.io https://*.drpc.org https://*.rpc.thirdweb.com wss://relay.walletconnect.com wss://relay.walletconnect.org wss://www.walletlink.org https://rpc.walletconnect.com https://rpc.walletconnect.org https://relay.walletconnect.com https://relay.walletconnect.org https://pulse.walletconnect.com https://pulse.walletconnect.org https://api.web3modal.com https://api.web3modal.org https://keys.walletconnect.com https://keys.walletconnect.org https://notify.walletconnect.com https://notify.walletconnect.org https://echo.walletconnect.com https://echo.walletconnect.org https://push.walletconnect.com https://push.walletconnect.org https://explorer-api.walletconnect.com https://cloudflare-eth.com https://rpc2.sepolia.org https://sepolia.base.org https://mainnet.base.org/ https://mainnet.optimism.io https://arb1.arbitrum.io https://eth.merkle.io https://chain-proxy.wallet.coinbase.com https://rpc-testnet.doma.xyz/ https://rpc.doma.xyz/ wss://rpc-testnet.doma.xyz/ wss://rpc.doma.xyz/ https://rpc-devnet.doma.xyz/ wss://rpc-devnet.doma.xyz/ https://rpc.viction.xyz https://www.shibrpc.com https://rpc.coredao.org https://apechain.calderachain.xyz/http https://api.avax.network/ext/bc/C/rpc https://curtis.rpc.caldera.xyz/http https://puppynet.shibrpc.com https://rpc.ankr.com https://api.devnet.solana.com https://api.mainnet-beta.solana.com wss://api.devnet.solana.com wss://api.mainnet-beta.solana.com https://solana-mainnet.gateway.tatum.io https://solana-rpc.publicnode.com https://mainnet.helius-rpc.com https://wileen-ytgdn6-fast-mainnet.helius-rpc.com https://solana.drpc.org wss://solana-rpc.publicnode.com wss://mainnet.helius-rpc.com wss://wileen-ytgdn6-fast-mainnet.helius-rpc.com https://cloudflare-dns.com https://dnssec-oracle.ens.domains/ https://stargate.finance https://pqzyj9pnj7.execute-api.us-west-1.amazonaws.com https://8h73yks5x6.execute-api.us-east-2.amazonaws.com https://bsc-dataseed.binance.org https://api.relay.link https://api.testnets.relay.link https://xplore.api.v2.routerprotocol.com https://api.gaianet.ai https://api.hypelab.com https://r2.ixncdn.com https://api.country.is https://hcaptcha.com https://*.hcaptcha.com https://keetmans.omadhina.co.na/ https://restwhois.ngtld.cn/ https://rdap.verisign.com https://data.iana.org https://pubapi.registry.google/ https://rdap.identitydigital.services/ https://rdap.centralnic.com/; worker-src 'self' blob:; manifest-src 'self' 11 default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https:; img-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; 11 base-uri 'self'; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com https://www.gstatic.com https://fonts.gstatic.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com use.fontawesome.com data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-ancestors www.paypalobjects.com https://auth.services.adobe.com/ *.certcapture.com 'self'; form-action https://enews.dynatrap.com/ https://enews.terro.com/ https://enews.victorpest.com/ https://enews.havahart.com/ https://enews.mosquitomagnet.com/ https://enews.perkypet.com/ https://enews.saferbrand.com/ https://enews.zarebasystems.com/ https://enews.vlink.victorpest.com/ https://enews.woodstreambrands.ca/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; style-src api.tiles.mapbox.com widget.freshworks.com *.usablenet.com *.udev1a.net https://fonts.googleapis.com/ https://*.typekit.net/ *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com assets.braintreegateway.com *.certcapture.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com *.gstatic.com use.fontawesome.com cdn.listrakbi.com cdn.pricespider.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; script-src *.pricespider.com api.tiles.mapbox.com snap.licdn.com widget.freshworks.com *.udev1a.net https://www.google.com/ https://www.gstatic.com/ https://commerce.adobedtm.com/ https://app.jazz.co/ *.marketingcloudfx.com c.amazon-adsystem.com https://s.pinimg.com/ct/core.js ct.pinterest.com s.pinimg.com/ct/ *.usablenet.com bam.nr-data.net js-agent.newrelic.com assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.certcapture.com https://*.google.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.klevu.com *.ksearchnet.com maps.googleapis.com *.googleapis.com *.maxmind.com services.listrak.com *.listrakbi.com *.tiktok.com *.bing.com *.hotjar.com connect.facebook.net wtbevents.pricespider.com locate.pricespider.com cdn.leadmanagerfx.com agent.marketingcloudfx.com use.fontawesome.com *.truevaultcdn.com https://insight.adsrvr.org https://cdn.cluepixel.com shop.terro.com shop.victorpest.com shop.saferbrand.com shop.perkypet.com shop.dynatrap.com app.link api2.branch.io 'self' 'unsafe-inline' 'unsafe-eval'; media-src *.cdninstagram.com *.adobe.com player.vimeo.com download-video.akamaized.net https://download-video-ak.vimeocdn.com/v3-1/playback/9fd159ef-cfc8-425b-b81d-00002b57d3dd/9f99cd6f-bf6cd135 https://perky-pet-int-bucket-shared-video.s3.amazonaws.com https://perky-pet-uat-bucket-shared-video.s3.amazonaws.com/ https://perky-pet-prod-bucket-shared-video.s3.amazonaws.com 'self' 'unsafe-inline'; img-src bat.bing.com *.google.ca *.pricespider.com px.ads.linkedin.com *.cdninstagram.com *.mapbox.com cdnjs.cloudflare.com polaris.truevaultcdn.com https://samples.woodstream.com/ *.google.com.ua *.google.pl assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.certcapture.com magefan.com cm.magefan.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.klevu.com *.ksearchnet.com flagpedia.net maps.gstatic.com www.facebook.com *.google.com *.usablenet.com www.dynatrap.com *.listrakbi.com www.gstatic.com www.zarebasystems.com maps.googleapis.com www.woodstream.com www.woodstreampartnerportal.com www.woodstreampartnerportal.ca www.terro.com www.victorpest.com www.havahart.com www.mosquitomagnet.com www.perkypet.com www.saferbrand.com vlink.victorpest.com www.woodstreambrands.ca storage.googleapis.com mediacdn.espssl.com *.woodstreampartnerportal.com s7d2.scene7.com https://cdn.cluepixel.com https://*.adsrvr.org https://*.rubiconproject.com https://*.dnxs.com media.brandclub.com data: 'self' 'unsafe-inline'; frame-src www.paypalobjects.com s.amazon-adsystem.com https://a40.usablenet.com/ https://ws-nameplate-printer.netlify.app/ services.listrak.com player.flipsnack.com https://auth.services.adobe.com/ www.facebook.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.certcapture.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googleapis.com *.weltpixel.com *.usablenet.com 'self' 'unsafe-inline'; connect-src stats.g.doubleclick.net content.hotjar.io *.hotjar.com bat.bing.com cdn.linkedin.oribi.io widget.freshworks.com vc.hotjar.io woodstream.freshdesk.com https://commerce.adobedc.net/ https://commerce.adobe.io/ https://graph.instagram.com/ https://prod-29.westus.logic.azure.com/ *.webpagefx.org https://us-central1-ws-m2-dev-migration-map.cloudfunctions.net https://instagramfeed-lvc56rmsca-uc.a.run.app *.pricespider.com cdnjs.cloudflare.com https://pagead2.googlesyndication.com/ https://prod-180.westus.logic.azure.com/ googleads.g.doubleclick.net js.go2sdk.com *.amazon-adsystem.com ara.paa-reporting-advertising.amazon *.google-analytics.com https://www.facebook.com/ *.truevaultcdn.com *.mapbox.com *.marketingcloudfx.com *.leadmanagerfx.com bam.nr-data.net *.tiktok.com recs.listrakbi.com *.mmapiws.com paypal.com *.googleapis.com maps.googleapis.com https://ct.pinterest.com/v3/ https://ct.pinterest.com/user/ ws://localhost:* https://prod-40.westus.logic.azure.com/ https://int-app.perkypetsmartfeeder.com https://uat-app.perkypetsmartfeeder.com https://app.perkypetsmartfeeder.com dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.certcapture.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.klevu.com *.ksearchnet.com www.gstatic.com places.googleapis.com *.tiktok.com recs.listrakbi.com bl.listrakbi.com/api/ wss://*.hotjar.com/ https://cdn.cluepixel.com https://*.adsrvr.org https://*.rubiconproject.com https://*.dnxs.com shop.terro.com shop.victorpest.com shop.saferbrand.com shop.perkypet.com shop.dynatrap.com sdk.split.io auth.split.io streaming.split.io api2.branch.io events.split.io 'self' 'unsafe-inline'; 11 upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self'; 11 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com wss://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https:; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://*.cloudflarestream.com https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests 10 default-src https: data: 'unsafe-eval' 'unsafe-inline' https://*.smassets.net https://www.google.com https://www.gstatic.com https://www.recaptcha.net wss://*.hotjar.com wss://*.qualified.com https://api.amplitude.com https://api2.amplitude.com https://*.crazyegg.com; upgrade-insecure-requests; connect-src https: wss: https://rum-ingest.us1.signalfx.com/ https://api.schedule.zoominfo.com https://ws.zoominfo.com 'self'; script-src https: blob: 'unsafe-eval' 'unsafe-inline' https://js.zi-scripts.com https://schedule.zoominfo.com https://ws-assets.zoominfo.com 'self'; worker-src https: blob: 'self'; media-src https: blob: 'self'; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.office.com https://*.office365.com https://*.microsoft365.com https://*.cloud.microsoft 10 sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation-by-user-activation; frame-ancestors 'self' *.huffpost.com *.huffingtonpost.com *.huffpost.net *.buzzfeed.com clients.opinary.com compass.pressekompass.net *.newsbreak.com *.newsbreakapp.com *.upday-content.com *.upday.com *.samsung-news.com; report-uri https://huffpost.report-uri.com/r/d/csp/enforce; 10 upgrade-insecure-requests; frame-ancestors 'self' https://explore.bitdefender.com/; object-src 'none'; script-src 'unsafe-eval' 'self' 'nonce-DhcnhD3khTMePgXw' 'strict-dynamic' 'unsafe-hashes' 'sha256-RjileO61mmx5C3Z0ub77ckR3sl153RlKqUC+EcKaVQc=' ; 10 frame-ancestors 'self' *.kameleoon.com 10 frame-ancestors 'self' https://metrika.yandex.ru/ 10 frame-ancestors iinet.net.au:* *.iinet.net.au:* westnet.com.au:* *.westnet.com.au:* tpg.com.au:* *.tpg.com.au:* tpgtelecom.com.au:* tpgtelecom.com.au:* *.tpgtelecom.com.au:* internode.on.net:* *.internode.on.net:*; 10 form-action 'self' www.facebook.com; report-uri /_internal/security/report-csp-violation?gp-web=true; frame-ancestors 'self' 10 frame-ancestors *; upgrade-insecure-requests; object-src 'none' 10 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss:; media-src https: blob: 'self' data:; object-src 'none'; child-src https: data: blob:; form-action https:; block-all-mixed-content; 10 default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 10 default-src * 'unsafe-inline' 'unsafe-eval' 10 frame-ancestors 'self' https://app.contentful.com https://app.eu.contentful.com 10 frame-ancestors 'self' https://nurture.solarwinds.com/ https://solarwinds.pathfactory.com/ https://orangematter.solarwinds.com/ https://thwack.solarwinds.com/ https://www.solarwinds.com/ https://try.solarwinds.com/ https://customerportal.solarwinds.com/ https://www.g2.com/ https://app.mutinyhq.com/ https://app.optimizely.com https://*.optimizely.com 10 frame-ancestors 'self' *.ci360.sas.com app.contentstack.com login.celebrations.com www.1800flowers.com www.1800baskets.com www.berries.com www.cheryls.com www.florists.com www.plants.com www.fruitbouquets.com www.harryanddavid.com www.simplychocolate.com www.thepopcornfactory.com www.vitalchoice.com www.wolfermans.com www.celebrations.com prod-celebrations-chained.18f.tech pmallstore.pmalladmin.com 10 worker-src 'self' blob:;frame-ancestors 'self';default-src 'self' *;script-src 'self' * 'unsafe-inline' 'unsafe-eval';script-src-attr 'unsafe-inline';style-src 'self' * 'unsafe-inline';img-src 'self' * data:;connect-src 'self' *;font-src 'self' * data:;frame-src 'self' *;media-src 'self' *;object-src 'none';base-uri 'self';form-action 'self' 10 upgrade-insecure-requests;frame-ancestors 'self'; 10 frame-ancestors 'self' https://service.ariba.com https://service-2.ariba.com https://certservice.ariba.com https://certservice-2.ariba.com https://s1.ariba.com https://s2.ariba.com https://usertest.sciquest.com https://uitweb.sciquest.com https://neo.sciquest.com https://solutions.sciquest.com https://cloud.punchoutexpress.com https://dev.cloud.punchoutexpress.com https://cloud.pexlocal.com https://cloud.mpexlocal.com; 10 frame-ancestors 'self' https://*.sella.it https://*.axerve.com https://*.gestpay.it 10 frame-ancestors 'self' www.charleskeith.com www.pedroshoes.com 10 frame-ancestors 'self' app.contentstack.com; upgrade-insecure-requests; 10 frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content 10 script-src 'self' www.google-analytics.com www.googletagmanager.com static.cloudflareinsights.com cdn.shareaholic.net cdn.openshareweb.com partner.shareaholic.com 'sha256-xrAXrOY+vbRBqDmgZaRaAkCXcYa6i7XrdPSlOPQiY2E=' platform.twitter.com https://www.google.com/recaptcha/api.js www.gstatic.com; frame-ancestors 'none'; 10 base-uri 'self' https://d6tizftlrpuof.cloudfront.net/live/; font-src 'self' data: *.cloudfront.net applepay.cdn-apple.com; form-action 'self'; frame-ancestors 'self' *.mycleverpush.com; img-src * data:; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' *.cloudfront.net *.usabilla.com *.getback.ch *.abtasty.com saiz-recommender.com *.saiz-recommender.com saiz-recommender-staging.com *.saiz-recommender-staging.com saiz-extensions.com *.saiz-extensions.com staging-saiz-extensions.com *.staging-saiz-extensions.com static.trbo.com; upgrade-insecure-requests; worker-src blob: 'self' *.cleverpush.com 10 frame-src 'self' https://cflscoreboard.cfl.ca/ http://cflscoreboard.cfl.ca/ https://*.googlesyndication.com https://www.facebook.com/ https://www.google.com/ https://players.brightcove.net/ https://*.doubleclick.net https://player.simplecast.com/ https://*.oseg.ca https://www.youtube.com/ https://*.fevo.com/ https://forums.cfl.ca/ https://*.argonauts.ca/ https://player.vimeo.com/ https://w.soundcloud.com/ https://*.f2p.media.geniussports.com/ https://cdn.flipsnack.com/ https://mlse.formstack.com/ https://issuu.com/ https://gsm-widgets.betstream.betgenius.com/ https://chat.satis.fi/ https://tradablebits.com/ https://embed.waze.com/ https://gamezone.cfl.ca/ https://platform.twitter.com/ https://www.instagram.com/ https://www.tiktok.com/ https://interland3.donorperfect.net/ https://chartbeat.com/ https://static2.chartbeat.com/ https://*.acuityscheduling.com/ https://*.tagboard.com/ https://caimgs.s3-ca-central-1.amazonaws.com/ https://cdn.userway.org/ https://www.surveymonkey.com/ https://player.streamguys.com/ https://www.buzzsprout.com https://www.googleadservices.com/ https://console.googletagservices.com/ https://play.ottawaredblacks.com/ https://www.googletagservices.com/ https://www.tdplace.ca/ https://www.placetd.ca/ https://fevo-enterprise.com/ https://x.adroll.com/ https://www.googletagmanager.com/ https://ep2.adtrafficquality.google/ https://winnipegfootballclub.jotform.com/ https://embed.radio.co/ https://open.spotify.com/ https://pop0-ccs-webchat-api.serverdata.net/ https://logwork.com/ https://app.hubspot.com/ https://cfl.sportzoneforms.com/ https://ticketingchatbot.mlsedigital.com/; 10 frame-ancestors 'self' http://*.tp.com https://*.tp.com http://insights.tp.com https://insights.tp.com 10 img-src data: 'self' https: blob: https://www.facebook.com https://content-eu-central-1.knowunity.com https://content-eu-central-1.knowunity.dev; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src * data: blob:; object-src data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://apis.google.com https://www.google.com https://appleid.cdn-apple.com https://js.hcaptcha.com https://analytics.tiktok.com https://sc-static.net https://js.stripe.com https://cdnjs.cloudflare.com https://apps.elfsight.com https://static.elfsight.com https://accounts.google.com/gsi/client https://snap.licdn.com/li.lms-analytics/insight.min.js https://www.clarity.ms https://www.paypal.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://assets.calendly.com/assets/external/widget.js https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style; style-src-elem 'self' https://accounts.google.com/gsi/style 'unsafe-inline' https://cdn.paddle.com/paddle/v2/assets/css/paddle.css https://cdn.jsdelivr.net/npm/katex@0.16.25/dist/katex.min.css; script-src-elem * 'unsafe-inline' blob: 'self'; media-src https: 'self' blob:; default-src 'self'; worker-src 'self' blob:; frame-ancestors 'self'; frame-src https://www.youtube.com https://accounts.google.com https://newassets.hcaptcha.com https://appleid.apple.com https://js.stripe.com https://www.facebook.com https://drive.google.com/ https://js.stripe.com https://hooks.stripe.com https://cloudflarestream.com https://customer-8ik8x9s31pwtfi7p.cloudflarestream.com https://accounts.google.com/gsi/ https://calendly.com https://www.sandbox.paypal.com https://www.paypal.com https://www.googletagmanager.com/ https://embed.podcasts.apple.com/ https://www.googletagmanager.com/ https://buy.paddle.com https://sandbox-buy.paddle.com; 10 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 10 script-src 'unsafe-inline' self; 10 frame-ancestors 'self'; base-uri 'self'; object-src 'none'; 10 default-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob:; frame-ancestors 'self'; 10 default-src 'self' https://* data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://* data: blob:; style-src 'self' 'unsafe-inline' https://* data: blob:; frame-src 'self' https://*; img-src 'self' https://* data: blob: ;media-src 'self' https://* data: blob: ;font-src 'self' https://* data: blob:;frame-ancestors 'self'; 10 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org 10 unsafe-inline 10 default-src *; img-src * data:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; base-uri 'self'; form-action *; frame-ancestors 'self' 10 default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.microsoft.com *.adnxs.com login.microsoftonline.com; script-src 'report-sample' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-RFqsjmAF1N5LnfpaHFvPqFlVkeIS/DtTAFor+JjJJVc=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-FlukkU82ZNE00G2TrHsH/yPyxOM3w+ZxvfuhvuFPnUw=' 'sha256-2zZW4Jcwd05ccL428yqAJrFBz0W+zZ84jSu9AoKa75Q=' 'sha256-3RIGhhApBii1KY+aW1xk7kFyoQY8vSVE5DfT7E9SJUc=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-JfJ82reKxtqugVbfRGw/O/1x1Lm1I09rHueXSwvbRws=' 'sha256-BbV1i75oYRtLtfDWs7tnA8QLF5EOO1dVHKL0prVd/fQ=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' 'sha256-wy4DvlEW9PHPIGvQJW6Wv4woBSa/0LJHs8LHsBVVXCs=' 'sha256-065A0cJTDQ+hyKvufSL/flW02hIbgLndOINLRWux6To=' 'sha256-Ga5SLB8hPdWUE8Wb6LgZ05D9Z5vrdLAaPbDBW2m3BI8=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com merchantpool1.linkedin.com/mdt.js; img-src data: blob: * 'self' *.licdn.com android-webview-video-poster:; font-src data: * 'self' *.licdn.com; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com edge-auth.microsoft.com flo.uri.sh li.protechts.net *.xlgmedia.com *.px-cloud.net merchantpool1.linkedin.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=d 10 frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://webvisor.com https://*.webvisor.com 10 worker-src https://api.wcx.cloud https://f.wcentrix.com; font-src https://components-bnpl-pe-bbva-moprestamo-com.s3.amazonaws.com https://f.wcentrix.com fonts.gstatic.com *.fontawesome.com *.alothemes.com *.magepow.com 'self' data: *.typekit.net *.moprestamo.com *.connectif.cloud data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' business.facebook.com webpay3g.transbank.cl webpay3gint.transbank.cl *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.moprestamo.com *.opencontrol.mx *.kaptcha.com *.openpay.pe https://api.wcx.cloud https://f.wcentrix.com *.doubleclick.net *.google.com *.google.com.pe https://analytics-ipv6.tiktokw.us *.weltpixel.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com business.facebook.com *.paynet.com.mx *.openpay.mx *.openpay.co c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com assets.fintoc.com https://assets.fintoc.com *.moprestamo.com *.apurata.com *.google.com https://www.google.com.ar https://www.google.cl https://www.google.com.pe https://www.google.co.ve https://coliseumstorehelp.zendesk.com https://api.wcx.cloud https://f.wcentrix.com *.doubleclick.net https://analytics-ipv6.tiktokw.us *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com maps.gstatic.com khmdb.googleapis.com geo0.ggpht.com *.alothemes.com *.magepow.com business.facebook.com *.postimg.cc *.openpay.mx 'self' data: *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.paypal.com *.facebook.com *.apptrian.com *.scene7.com p.typekit.net *.gstatic.com *.googleapis.com *.google.cl *.hotjar.com *.google.com.co *.mercadopago.cl *.mercadopago.com.pe *.bing.com *.clarity.ms *.notifications-icommkt.com *.track-icommkt.com *.connectif.cloud *.converse.cl *.converse.com.pe *.newbalance.com.pe *.merrell.com.pe *.stevemadden.com.pe *.catlifestyle.pe coliseumstore.cl *.coliseumstore.cl *.coliseum.com.pe www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.moprestamo.com *.apurata.com https://coliseumstorehelp.zendesk.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ https://api.smooch.io https://api.smooch.io/faye https://api.wcx.cloud https://f.wcentrix.com https://wcentrix.net *.doubleclick.net *.google.com *.google.com.pe https://analytics-ipv6.tiktokw.us *.neurun.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com maps.gstatic.com *.woowup.com *.alothemes.com *.magepow.com *.facebook.net business.facebook.com unpkg.com cdn.jsdelivr.net *.magento-datasolutions.com *.magento-ds.com amcglobal.sc.omtrdc.net use.typekit.net *.online-metrix.net *.converse.cl *.google.cl *.hotjar.com *.getblue.io *.connectif.cloud *.tiktok.com *.bing.com *.emarsys.net *.clarity.ms *.cloudfront.net *.crazyegg.com *.zdassets.com *.vnforapps.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.moprestamo.com https://f.wcentrix.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com fonts.googleapis.com *.fontawesome.com *.alothemes.com *.magepow.com *.google.com *.typekit.net unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://res.cloudinary.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.apurata.com https://coliseumstorehelp.zendesk.com *.openpay.mx *.openpay.co *.openpay.pe wss://api.smooch.io https://api.wcx.cloud https://f.wcentrix.com *.moprestamo.com components-bnpl-pe-bbva-beta.moprestamo.com *.run.app *.conversionsapigateway.com *.doubleclick.net *.google.com *.google.com.pe https://analytics-ipv6.tiktokw.us *.neurun.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com *.alothemes.com *.magepow.com business.facebook.com *.google-analytics.com *.paypal.com api.mercadopago.com tm.filter:* *.snplow.net *.pingdom.net *.woorank.com *.adobe.io *.adobedc.net *.youtube.com *.googleapis.com *.magento-ds.com performance.typekit.net *.sentry.io *.converse.cl *.google.cl *.hotjar.com wss://ws.hotjar.com *.hotjar.io stats.g.doubleclick.net *.google.com.co *.tiktok.com *.connectif.cloud *.bing.com notifications-icommkt.com track-icommkt.com *.crazyegg.com *.clarity.ms *.zdassets.com *.powerpay.pe apurata.com *.woowup.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 10 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; 10 default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app-fnsp-matomo-analytics-prod.azurewebsites.net https://cdn.jsdelivr.net https://cdn.tiny.cloud https://cdnjs.cloudflare.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://statistikk.fnsp.no https://web-sdk-eu.aptrinsic.com https://www.cdisol.blog https://ajax.googleapis.com/ https://analytics.silktide.com https://js.monitor.azure.com; object-src 'none'; manifest-src https://www.cdisol.blog; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://web-sdk-eu.aptrinsic.com https://www.cdisol.blog; font-src 'self' data: https://dhm5hy2vn8l0l.cloudfront.net https://fonts.gstatic.com https://web-sdk-eu.aptrinsic.com https://cdn.jsdelivr.net; img-src 'self' data: https://*.nhn.no https://www.ahus.no https://www.antibiotika.no https://www.betanienhospital.no https://www.betaniensykehus.no https://www.bjorkeli.no https://www.diakonhjemmetsykehus.no https://wwww.dovblindhet.no https://fellesinnhold.fnsp.nhn.no https://www.finnmarkssykehuset.no https://www.fnsp.no https://www.haraldsplass.no https://www.hdo.no https://www.helgelandssykehuset.no https://www.helse-bergen.no https://www.helse-fonna.no https://www.helse-forde.no https://www.helse-midt.no https://www.helse-mr.no https://www.helse-nord.no https://www.helse-sorost.no https://www.helse-stavanger.no https://www.helse-vest-ikt.no https://www.helse-vest.no https://www.helsenordikt.no https://www.helseplattformen.no https://www.hemit.no https://www.hnt.no https://www.hsr.as https://www.jdps.no https://www.kloverasen.no https://www.kvalitetsregistre.no https://www.lovisenbergsykehus.no https://www.luftambulanse.no https://www.martinahansen.no https://norcrin.fnsp.nhn.no https://www.nordlandssykehuset.no https://www.nortrials.no https://www.nyemetoder.no https://www.olaviken.no https://www.oslo-universitetssykehus.no https://www.pasientreiser.no https://www.revmatismesykehuset.no https://rvtsvest.fnsp.nhn.no https://www.saman.no https://samhandlingsbarometeret.fnsp.nhn.no https://www.sifer.no https://www.siv.no https://www.sjukehusapoteka-vest.no https://www.skde.no https://www.solli.no https://www.spesialisthelsetjenesten.no https://www.sshf.no https://www.sthf.no https://www.stolav.no https://www.sunnaas.no https://www.sykehusapotek-nord.no https://www.sykehusapotekene.no https://www.sykehusapoteket.no https://www.sykehusbygg.no https://www.sykehuset-innlandet.no https://www.sykehuset-ostfold.no https://www.sykehusinnkjop.no https://www.sykehuspartner.no https://www.tryggakuttmedisin.no https://www.tryggprat.no https://www.unn.no https://www.vestreviken.no https://sp.tinymce.com; media-src 'self' https://*.nhn.no https://www.ahus.no https://www.antibiotika.no https://www.betanienhospital.no https://www.betaniensykehus.no https://www.bjorkeli.no https://www.diakonhjemmetsykehus.no https://www.dovblindhet.no https://fellesinnhold.fnsp.nhn.no https://www.finnmarkssykehuset.no https://www.fnsp.no https://www.haraldsplass.no https://www.hdo.no https://www.helgelandssykehuset.no https://www.helse-bergen.no https://www.helse-fonna.no https://www.helse-forde.no https://www.helse-midt.no https://www.helse-mr.no https://www.helse-nord.no https://www.helse-sorost.no https://www.helse-stavanger.no https://www.helse-vest-ikt.no https://www.helse-vest.no https://www.helsenordikt.no https://www.helseplattformen.no https://www.hemit.no https://www.hnt.no https://www.hsr.as https://www.jdps.no https://www.kloverasen.no https://www.kvalitetsregistre.no https://www.lovisenbergsykehus.no https://www.luftambulanse.no https://www.martinahansen.no https://norcrin.fnsp.nhn.no https://www.nordlandssykehuset.no https://www.nortrials.no https://www.nyemetoder.no https://www.olaviken.no https://www.oslo-universitetssykehus.no https://www.pasientreiser.no https://www.revmatismesykehuset.no https://rvtsvest.fnsp.nhn.no https://www.saman.no https://samhandlingsbarometeret.fnsp.nhn.no https://www.sifer.no https://www.siv.no https://www.sjukehusapoteka-vest.no https://www.skde.no https://www.solli.no https://www.spesialisthelsetjenesten.no https://www.sshf.no https://www.sthf.no https://www.stolav.no https://www.sunnaas.no https://www.sykehusapotek-nord.no https://www.sykehusapotekene.no https://www.sykehusapoteket.no https://www.sykehusbygg.no https://www.sykehuset-innlandet.no https://www.sykehuset-ostfold.no https://www.sykehusinnkjop.no https://www.sykehuspartner.no https://www.tryggakuttmedisin.no https://tryggprat.fnsp.nhn.no https://www.unn.no https://www.vestreviken.no; connect-src 'self' https://app-fnsp-matomo-analytics-prod.azurewebsites.net https://fellesinnhold.fnsp.nhn.no https://cg.optimizely.com https://js.monitor.azure.com/ https://a.eu.silktide.com https://pui.episerver.net/ https://dc.services.visualstudio.com/; frame-src 'self' https://*.fnsp.nhn.no https://acast.com/ https://app-fnsp-matomo-analytics-prod.azurewebsites.net/ https://app.powerbi.com https://apps.skde.no https://dashboard.find.episerver.net/ https://data.stolav.no/ https://ekstranett.helse-midt.no/ https://fellesinnhold.fnsp.nhn.no https://film.oslo-universitetssykehus.no/ https://fnsp.fnsp.nhn.no https://login.microsoftonline.com https://medfilm.se/ https://navikt.github.io https://ntnu.cloud.panopto.eu/ https://open.spotify.com/ https://player.vimeo.com https://players.brightcove.net/ https://podcasts.apple.com https://prat.fnsp.no https://prod-tabellverk.skde.org/ https://skde.org https://sketchfab.com https://test.skde.no https://uib.cloud.panopto.eu/ https://vimeo.com/ https://www.acast.com/ https://www.fnsp.no https://www.youtube-nocookie.com https://www.youtube.com https://use.mazemap.com https://rise.articulate.com/ https://forms.office.com/ https://csb10033fff971bc7e5.z6.web.core.windows.net/ https://youtu.be/ https://cg.optimizely.com https://wevideo.com https://kunde.byggekamera.no https://tv.nrk.no https://nrksuper.no https://www.wevideo.com; frame-ancestors 'self'; 10 frame-ancestors https://app.contentful.com https://dash.cloudflare.com 10 frame-ancestors *; report-uri /_/commcsp?disposition=enforce; 10 default-src 'self' *.axa.be;script-src 'self' https://static.experimentation.dev https://*.contentsquare.com https://cdn.mxpnl.com https://api-js.mxpnl.com https://api-eu.mxpnl.com https://*.kameleoon.com https://*.axa.be https://*.infrontservices.com https://www.googletagmanager.com https://js.monitor.azure.com https://cdn.trustcommander.net https://tag.aticdn.net https://load.sst.fo.axa.be https://*.kameleoon.eu https://*.facebook.net https://*.facebook.com https://unpkg.com https://deploy.mopinion.com https://www.youtube.com https://*.coveo.com https://maps.googleapis.com https://*.taboola.com https://bat.bing.com https://*.contentsquare.net https://acdn.adnxs.com https://www.google.com https://*.doubleclick.net https://js-cdn.dynatrace.com https://collect.mopinion.com 'unsafe-inline' 'unsafe-eval';style-src 'self' https://static.experimentation.dev https://*.kameleoon.com https://*.axa.be https://wtk.infrontservices.com https://fonts.googleapis.com https://*.kameleoon.eu https://www.googletagmanager.com https://fonts.mopinion.com 'unsafe-inline';img-src 'self' https://static.experimentation.dev https://*.axa.be https://www.facebook.com https://www.googletagmanager.com https://sw-assets.ekomiapps.de https://*.facebook.net https://*.facebook.com https://www.googleadservices.com https://www.google.com https://www.google.be https://i.ytimg.com https://img.youtube.com https://maps.gstatic.com https://maps.googleapis.com https://bat.bing.com https://*.contentsquare.net https://adservice.google.com https://ib.adnxs.com https://*.kameleoon.eu https://*.kameleoon.com https://*.infrontservices.com https://googleads.g.doubleclick.net ad.doubleclick.net https://collect.mopinion.com data:;font-src 'self' https://*.axa.be https://fonts.gstatic.com https://gstatic.mopinion.com data:;connect-src 'self' https://eu-data.experimentation.dev https://sdk-config.experimentation.dev https://static.experimentation.dev https://cdn.mxpnl.com https://api-js.mxpnl.com https://api-eu.mxpnl.com https://*.axa.be https://*.kameleoon.eu https://*.kameleoon.com https://*.dynatrace.com https://deploy.mopinion.com https://noembed.com https://*.coveo.com https://maps.googleapis.com https://privacy.commander1.com https://privacy.trustcommander.net https://*.infrontservices.com wss://*.infrontservices.com https://*.infrontfinance.com https://*.vwdservices.com https://*.contentsquare.net https://bat.bing.net https://bat.bing.com https://logs1412.xiti.com https://*.taboola.com https://www.google.com https://www.googleadservices.com https://ib.adnxs.com https://*.facebook.net https://*.facebook.com https://*.googlesyndication.com https://*.doubleclick.net https://*.g.doubleclick.net ad.doubleclick.net https://cdn.plyr.io https://img.youtube.com https://i.ytimg.com https://*.mopinion.com https://*.google.be https://*.taboola.com https://*.adnxs.com;frame-src 'self' https://static.experimentation.dev *.axa.be https://www.youtube.com https://cdn.trustcommander.net blob:;frame-ancestors 'self' https://static.experimentation.dev *.axa.be https://*.kameleoon.com https://*.kameleoon.eu;worker-src 'self' blob:; 10 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 10 upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 10 default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: blob: https:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 10 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; 10 frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co 9 upgrade-insecure-requests; frame-ancestors 'self' https://stackexchange.com 9 default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src https:; frame-src http: https: data:; upgrade-insecure-requests 9 upgrade-insecure-requests;report-uri /csp-violation-report-endpoint/ 9 connect-src 'self' wss: *.adyen.com bat.bing.com bat.bing.net browser-intake-datadoghq.eu *.browser-intake-datadoghq.eu www.ceneo.pl ssl.ceneo.pl common-services.cidaas.de *.clarity.ms cke4.ckeditor.com *.cloudflare.com cdn.cookielaw.org ams.creativecdn.com *.doubleclick.net *.facebook.com www.google.at google.com adservice.google.com *.analytics.google.com apis.google.com pay.google.com tez.google.com www.google.com www.google.cz www.google.de www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.sk *.google-analytics.com *.googleadservices.com *.googleapis.com pagead2.googlesyndication.com www.googletagmanager.com harvester.ocm.heureka.group retazove-pily.heureka.sk code.jquery.com *.kaufland.at account.kaufland.com *.kaufland.cz *.kaufland.de *.kaufland.es *.kaufland.fr *.kaufland.it *.kaufland.nl *.kaufland.pl *.kaufland.sk js.klarna.com x.klarnacdn.net eu.klarnaevt.com availability.loadbee.com src.mastercard.com *.mopinion.com *.onetrust.com *.paypal.com *.paypalobjects.com spay.samsung.com *.seznam.cz jsapi.simplesurance.de *.sovendus.com *.theadex.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.userwerk.com *.venmo.com assets.secure.checkout.visa.com; default-src https: 'unsafe-inline' 'unsafe-eval' 'self' data: blob:; font-src 'self' data: https:; frame-ancestors 'self' account.kaufland.com www.kaufland.at www.kaufland.cz www.kaufland.de www.kaufland.es www.kaufland.fr www.kaufland.it www.kaufland.nl www.kaufland.pl www.kaufland.sk; frame-src 'self' https: http:; img-src 'self' blob: data: https: http: chrome-extension:; object-src 'self' https: http:; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=puba4ff6837563e0a6289c852e7c147d8db&dd-evp-origin=content-security-policy&ddsource=csp-report&service=csp-report&ddtags=env:prod; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: track.adform.net js.adsrvr.org bat.bing.com *.cash.app applepay.cdn-apple.com ssl.ceneo.pl cdn.ckeditor.com *.clarity.ms *.cloudflare.com cdn.cookielaw.org tags.creativecdn.com cdn.datatables.net googleads.g.doubleclick.net connect.facebook.net edge.eu1.fullstory.com cdn.getivy.de apis.google.com pay.google.com translate.google.com www.google.com *.googleadservices.com *.googleapis.com www.googleoptimize.com pagead2.googlesyndication.com *.googletagmanager.com tagmanager.google.com www.heureka.cz cdn.heureka.group www.heureka.sk code.jquery.com *.kaufland.at *.kaufland.cz *.kaufland.de kaufland.de *.kaufland.es *.kaufland.fr *.kaufland.it *.kaufland.nl *.kaufland.pl *.kaufland.sk js.klarna.com x.klarnacdn.net *.loadbee.com src.mastercard.com *.mopinion.com *.payments-amazon.com *.paypal.com *.paypalobjects.com *.ratepay.com *.seznam.cz jsapi.simplesurance.de api.sovendus.com cdn.speedcurve.com speedcurve.com *.theadex.com tps.trovaprezzi.it www.trovaprezzi.it analytics.tiktok.com *.int.userwerk.com *.venmo.com assets.secure.checkout.visa.com www.youtube.com www.zbozi.cz; style-src 'self' 'unsafe-inline' https:; worker-src blob: 'self' 9 block-all-mixed-content; frame-ancestors 'self' https://payload.anker-in.com; upgrade-insecure-requests; 9 frame-ancestors *.ivanti.com https://ivanti.highspot.com https://dash.cloudflare.com 9 frame-ancestors 'self' https://serviceplatform.seismic.com/; default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; style-src 'self' go.zetaglobal.com https://code.jquery.com https://www.googletagmanager.com https://www.lightboxcdn.com https://ams.wpml.org https://netdna.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net/ 'unsafe-inline'; script-src 'self' blob: *.netmng.com https://d34r8q7sht0t9k.cloudfront.net/tag.js *.liadm.com https://fast.wistia.net/ https://view.ceros.com/scroll-proxy.min.js https://ams.wpml.org https://app.spara.co/ https://browser.sentry-cdn.com/9.6.1/bundle.min.js https://code.jquery.com https://cdn.cookielaw.org https://disqus.com https://j.6sc.co https://boards.greenhouse.io https://p.adsymptotic.com https://www.googleadservices.com https://px4.ads.linkedin.com https://c1.rfihub.net https://connect.facebook.net https://lightboxapi.azurewebsites.net https://d.adroll.com https://px.ads.linkedin.com https://googleads.g.doubleclick.net https://snap.licdn.com https://com-zglobal.netmng.com https://munchkin.marketo.net https://s.adroll.com 'unsafe-inline' 'unsafe-eval' googletagmanager.com *.googletagmanager.com bootstrapcdn.com *.bootstrapcdn.com googleapis.com *.googleapis.com cloudflare.com *.cloudflare.com rezync.com *.rezync.com hsforms.net *.hsforms.net lightboxcdn.com *.lightboxcdn.com gstatic.com *.gstatic.com vimeo.com *.vimeo.com wistia.com *.wistia.com hs-scripts.com *.hs-scripts.com google.com *.google.com capterra.com *.capterra.com hscollectedforms.net *.hscollectedforms.net hsadspixel.net *.hsadspixel.net hubspot.com *.hubspot.com hsforms.com *.hsforms.com hs-analytics.net *.hs-analytics.net usemessages.com *.usemessages.com hs-banner.com *.hs-banner.com licdn.com *.licdn.com google-analytics.com *.google-analytics.com boomtrain.com *.boomtrain.com https://www.youtube.com https://www.googleoptimize.com https://s7.addthis.com/ https://unpkg.com/ https://cdn.jsdelivr.net https://dev.visualwebsiteoptimizer.com https://app.vwo.com https://js.driftt.com https://cdn.calibermind.com/ go.zetaglobal.com 9 frame-ancestors 'self'; report-uri https://3533eaa516fe10a59521ffab0a98b9a4.report-uri.com/r/t/csp/enforce 9 frame-src *; 9 upgrade-insecure-requests; frame-ancestors 'none'; 9 manifest-src 'self'; 9 default-src 'self'; script-src https://cdnjs.cloudflare.com https://autosug.ebay.com https://suggestqueries.google.com https://www.google-analytics.com https://www.googletagmanager.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://bam.nr-data.net https://www.google.com https://s.flocdn.com https://*.s1search.co https://swurl.com 'unsafe-inline' 'unsafe-eval' 'self'; style-src https://cdnjs.cloudflare.com 'unsafe-inline' 'self'; connect-src https://api.picclick.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.googletagmanager.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://bam.nr-data.net https://*.s1search.co https://soflopxl.com https://swurl.com 'self'; img-src *; font-src https://cdnjs.cloudflare.com data: 'self'; 9 script-src 'self' 'unsafe-inline' 'unsafe-eval' * 9 frame-ancestors 'self' letmedate.com www.letmedate.com 9 frame-ancestors 'self' https://dato-plugin-seven.vercel.app https://factorial-next.admin.datocms.com *.factorial.co *.factorial.es *.factorial.mx *.factorial.fr *.factorial.it *.factorialhr.co.uk *.factorialhr.co *.factorialhr.de *.factorial.ch *.factorial.be *.factorialhr.pt *.factorialhr.com.br *.factorialhr.com.ar *.factorialhr.ar *.factorialhr.cl *.factorialhr.com.de *.factorial.pl *.factorial.ke *.factorialhr.com 9 frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 9 default-src 'self' https://www.weex.com https://stg-www.weex.tech https://www-rc.weex.tech; img-src 'self' https://* https://app-sensor.janapw.com:8106 blob: data:; child-src 'self' https://*; connect-src 'self' https://* wss://* https://app-sensor.janapw.com:8106; frame-ancestors 'self'; frame-src 'self' https://www.weex-tr.com https://stg-tr-www.wxio.site https://rc-tr-www.wxio.site https://www.weex.com https://stg-www.weex.tech https://www-rc.weex.tech blob: https://*; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*; style-src 'self' 'unsafe-inline' https://*; font-src 'self' blob: data: https://*; object-src 'self' blob: data: https://*; media-src 'self' blob: data: https://*; worker-src 'self' blob: data: https://* 9 script-src 'self' https://itunes.apple.com www.youtube.com https://www.youtube-nocookie.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.youtube-nocookie.com; font-src https://fonts.gstatic.com; 9 frame-ancestors 'self'; object-src 'self'; 9 frame-ancestors 'self' *.hivelocity.net 9 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: 9 default-src * blob: data: about:; worker-src * blob:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob:; img-src * data:; style-src * 'self' 'unsafe-inline'; base-uri 'self' https://cdn.justpremium.com; form-action 'self' 9 default-src 'self' data: blob: ; worker-src 'self' data: blob: ; font-src 'self' fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com consent.trustarc.com https://*.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net fonts.googleapis.com maxcdn.bootstrapcdn.com consent.trustarc.com *.google-analytics.com *.arkoselabs.com *.trustev.com mpsnare.iesnare.com https://ht.blackhawknetwork.com *.newrelic.com *.nr-data.net *.datadome.co *.captcha-delivery.com *.googletagmanager.com *.jquery.com *.cloudflare.com s3.amazonaws.com testing.conversionteam.com *.blackhawknetwork.com *.sardine.ai https://*.hotjar.com *.blackhawknetwork.com *.bhn.cards assets.adobedtm.com; script-src-attr 'unsafe-inline' *.blackhawknetwork.com; connect-src 'self' *.trustarc.com *.trustev.com *.google-analytics.com wss://mpsnare.iesnare.com *.nr-data.net stats.g.doubleclick.net *.datadome.co *.blackhawknetwork.com *.sardine.ai https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com adobedc.demdex.net metrics.mycardwallet.com *.bhn.cards; img-src 'self' *.trustarc.com https://ht.blackhawknetwork.com www.google-analytics.com www.google.com data: s3.amazonaws.com testing.conversionteam.com *.blackhawknetwork.com https://*.hotjar.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com www.googletagmanager.com https://*.hotjar.com; frame-src *; object-src 'none'; media-src 'self' *.iesnare.com data:; frame-ancestors 'self' cardholder.jokercard.ca;base-uri 'self'; form-action 'self'; upgrade-insecure-requests 9 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; script-src-elem 'self' 'unsafe-inline' *; worker-src 'self' blob: *; style-src 'self' 'unsafe-inline' *; img-src * data: blob:; connect-src *; font-src * data:; frame-src *; object-src 'none'; frame-ancestors 'self'; 9 default-src 'self';connect-src 'self' *.habbo.com https://hcaptcha.com https://*.hcaptcha.com cookie-cdn.cookiepro.com privacyportal.cookiepro.com cookies.onetrust.mgr.consensu.org geolocation.onetrust.com www.facebook.com https://accounts.google.com/gsi/ *.google-analytics.com www.googletagmanager.com csi.gstatic.com habboo-a.akamaihd.net d29usylhdk1xyu.cloudfront.net https://auth.immutable.com https://auth.magic.link https://api.sandbox.immutable.com https://api.immutable.com https://rpc.immutable.com https://rpc.testnet.immutable.com;img-src 'self' data: *.habbo.com *.varoke.net cookie-cdn.cookiepro.com habbo-stories-content.s3.amazonaws.com www.facebook.com *.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com habboo-a.akamaihd.net images.habbogroup.com docj27ko03fnu.cloudfront.net d3hmp0045zy3cs.cloudfront.net quilt-cdn.janrain.com cdn.rpxnow.com pay.openbucks.com trck.spoteffects.net;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.habbo.com https://appleid.cdn-apple.com https://hcaptcha.com https://*.hcaptcha.com cookie-cdn.cookiepro.com connect.facebook.net https://accounts.google.com/gsi/client *.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com apis.google.com rpxnow.com d29usylhdk1xyu.cloudfront.net trck.spoteffects.net;style-src 'self' 'unsafe-inline' *.habbo.com https://hcaptcha.com https://*.hcaptcha.com www.gstatic.com fonts.googleapis.com d3hmp0045zy3cs.cloudfront.net quilt-cdn.janrain.com;child-src 'self' https://hcaptcha.com https://*.hcaptcha.com *.habbo.com *.facebook.com www.google.com habboo-a.akamaihd.net www.youtube.com www.offertoro.com torox.io *.k-id.com https://auth.immutable.com https://auth.magic.link;frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com *.habbo.com *.facebook.com www.google.com habboo-a.akamaihd.net www.youtube.com www.offertoro.com torox.io *.k-id.com https://auth.immutable.com https://auth.magic.link;font-src 'self' fonts.gstatic.com habboo-a.akamaihd.net *.habbo.com data:;frame-ancestors 'self' *.idcgames.com www.funnygames.fi www.funnygames.es www.funnygames.nl www.funnygames.fr www.funnygames.it www.funnygames.us www.funnygames.eu www.funnygames.biz www.funnygames.com.br www.funnygames.org *.gamesxl.com keygames.com www.games.co.za www.bgames.com starbie.co.uk nyckelspel.se www.games.co.uk www.a10.com www.gry.pl www.spela.se www.gamesgames.com www.ourgames.ru www.permainan.co.id www.games.co.id www.agame.com www.flashgames.ru www.mousebreaker.com kizi.com yepi.com www.integrations.partner.spilgames.com www.teens-integrations.partner.spilgames.com www.youdagames.com www.elkspel.nl www.spele.nl www.spele.be www.spelletjesoverzicht.nl *.orangegames.com hyvesgames.nl spele.nl www.spelletjes.nl www.spel.nl *.giochixl.it www.1001giochi.it minigioco.it www.gioco.it www.giochi.it *.jeuxdelajungle.fr www.1001games.fr jouerjouer.com spele.be www.jeux.fr www.jeu.fr oyun.mynet.com gamecell.com www.gamecell.com oyungemisi.com www.oyunskor.com *.1001pelit.com pelaaleikkia.com www.isladejuegos.es clavejuegos.com www.juegos.com *.1001spiele.de www.jetztspielen.ws www.jetztspielen.de www.spielaffe.de *.spielspiele.de spielspiele.de www.spielen.com *.1001jogos.pt jogojogar.com www.ojogos.com.br;form-action 'self' https://login.habbo.com https://help.habbo.com https://help.habbo.de https://help.habbo.es https://help.habbo.fi https://help.habbo.fr https://help.habbo.it https://help.habbo.nl https://help.habbo.com.br https://help.habbo.com.tr habbohelpbr.zendesk.com habbohelpen.zendesk.com habbohelpde.zendesk.com habbohelpes.zendesk.com habbohelpfi.zendesk.com habbohelpfr.zendesk.com habbohelpit.zendesk.com habbohelpnl.zendesk.com habbohelptr.zendesk.com;upgrade-insecure-requests ;report-uri /csp/report 9 object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' 9 object-src 'none'; default-src * 'unsafe-inline' blob: data:; img-src * 'self' data: https:; media-src * 'unsafe-inline' blob: data:; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; font-src * data: 9 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 9 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 9 img-src 'self' *.google-analytics.com img.youtube.com *.s3waas.gov.in secure.gravatar.com *.twimg.com *.twitter.com translation-plugin.bhashini.co.in data:;connect-src 'self' *.s3waas.gov.in *.google-analytics.com translation-plugin.bhashini.co.in dhruva-api.bhashini.gov.in;object-src 'none';media-src 'self' *.s3waas.gov.in data:;child-src 'self';frame-src 'self' www.google.com platform.twitter.com www.facebook.com syndication.twitter.com www.youtube.com;form-action *.s3waas.gov.in 'self';frame-ancestors 'self' *.s3waas.gov.in ;upgrade-insecure-requests;worker-src 'self' *.s3waas.gov.in data: 9 base-uri 'none'; font-src 'self' https: data:; form-action 'self' https://payment.preprod.payone.com https://payment.payone.com 'self' https://payment.preprod.payone.com https://payment.payone.com 'self' https://payment.preprod.payone.com https://payment.payone.com; frame-ancestors https://app.kontent.ai https://app.kontent.ai https://app.kontent.ai; img-src 'self' data: https: 'self' data: https: 'self' data: https:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-eval' https: 'unsafe-inline' 'unsafe-eval' https: 'unsafe-inline' 'unsafe-eval' https:; upgrade-insecure-requests; 9 default-src https:; connect-src https: wss: http:; font-src https: data:; img-src https: data: blob:; frame-src https: blob:; frame-ancestors 'self'; worker-src blob: https: data: 'unsafe-inline' 'unsafe-eval'; form-action https: javascript:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval';style-src https: data: 'unsafe-inline'; base-uri 'self'; 9 upgrade-insecure-requests; base-uri 'self'; 9 img-src 'self' data:; 9 frame-ancestors 'self' *.bambuser.com 9 'self' ; 9 default-src 'self' https: ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' ; script-src-elem 'self' https: 'unsafe-inline' 'unsafe-eval' ; style-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: ; form-action 'self' https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https: ; worker-src 'self' blob: ; media-src 'self' blob: https: ; 9 frame-ancestors 'self' azeu.marketing.adobe.com 9 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://*.rackspeed.de https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com https://*.doubleclick.net https://connect.facebook.net https://*.facebook.net https://snap.licdn.com https://*.licdn.com https://assets.calendly.com; style-src 'self' 'unsafe-inline' https://assets.calendly.com; img-src 'self' data: https://*.rackspeed.de https://*.googletagmanager.com https://*.google.com https://*.google.de https://*.doubleclick.net https://*.googlesyndication.com https://*.facebook.com https://*.licdn.com https://px.ads.linkedin.com https://assets.calendly.com https://*.calendly.com https://calendly.com; font-src 'self' data: https://assets.calendly.com; connect-src 'self' https://*.rackspeed.de https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleadservices.com https://*.google.com https://*.doubleclick.net https://connect.facebook.net https://*.facebook.com https://snap.licdn.com https://*.licdn.com https://px.ads.linkedin.com https://calendly.com https://*.calendly.com; frame-src 'self' https://calendly.com https://*.calendly.com https://*.doubleclick.net https://*.facebook.com 9 default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' https://rum-static.pingdom.net/ https://www.googletagmanager.com https://www.google-analytics.com https://web.cmp.usercentrics.eu; style-src 'report-sample' 'self' 'unsafe-inline' https://web.cmp.usercentrics.eu; connect-src 'self' https://app.qweb.nl https://www.foxxl.hosting https://*.google-analytics.com https://*.pingdom.net https://v1.api.service.cmp.usercentrics.eu; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://fonts.gstatic.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self' https://app.qweb.nl; frame-ancestors 'self' qweb.nl qweb.net *.qweb.nl *.qweb.net 9 default-src 'self' https://*.wpenginepowered.com https://rldatix.com https://*.rldatix.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://doubleclick.net https://store.tms-plugins.com https://acumbamail.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wpenginepowered.com https://rldatix.com https://*.rldatix.com https://rldatixgcs.com https://*.rldatixgcs.com https://www.googletagmanager.com https://js-eu1.hsforms.net https://js-eu1.hs-scripts.com https://js-eu1.hscollectedforms.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hsadspixel.net https://js-eu1.hubspot.com https://js-eu1.usemessages.com https://js.hsforms.net https://js.hscollectedforms.net https://js.hsadspixel.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://cmp.osano.com https://maps.googleapis.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://snap.licdn.com https://cdn.dreamdata.cloud https://ajax.googleapis.com https://googleads.g.doubleclick.net https://js.driftt.com https://player.vimeo.com https://acumbamail.com https://store.tms-plugins.com https://content.hotjar.io https://www.linkedin.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://app.splithero.com https://stapecdn.com https://static.hsappstatic.net; worker-src 'self' blob:; font-src 'self' data: https://res.cdn.office.net https://static2.sharepointonline.com https://fonts.gstatic.com; img-src 'self' data: blob: https://*.wpenginepowered.com https://rldatix.com https://*.rldatix.com https://www.wpo365.com https://secure.gravatar.com https://forms-eu1.hsforms.com https://perf-eu1.hsforms.com https://track-eu1.hubspot.com https://s.w.org https://px.ads.linkedin.com https://www.googletagmanager.com https://www.linkedin.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.it https://i.vimeocdn.com https://i.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.google.co.uk https://www.google.at https://www.google.mk https://stats.g.doubleclick.net https://*.hotjar.com https://*.hsforms.com https://*.hubspot.com https://plugin-updates.wpengine.com https://wpe-plugin-updates.wpengine.com https://fonts.gstatic.com https://load.live-st.rldatix.com https://load.live-st.rldatixgcs.com https://connect.advancedcustomfields.com https://deliciousbrains.com; connect-src 'self' data: https://*.wpenginepowered.com https://rldatix.com https://*.rldatix.com https://forms-eu1.hscollectedforms.net https://maps.googleapis.com https://www.google.com https://www.googletagmanager.com https://www.google.at https://www.google.mk https://px.ads.linkedin.com https://api-eu1.hubapi.com https://api-eu1.hubspot.com https://cdn.dreamdata.cloud https://region1.google-analytics.com https://region1.analytics.google.com https://cta-eu1.hubspot.com https://consent.api.osano.com https://tattle.api.osano.com https://cmp.osano.com https://yoast.com https://forms.hsforms.com https://forms-eu1.hsforms.com https://emlsend.com https://static.hsappstatic.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ad.doubleclick.net wss://ws.hotjar.com https://*.hotjar.io https://*.hotjar.com https://*.hubspot.com https://*.hubapi.com https://live-st.rldatix.com https://live-st.rldatixgcs.com; frame-src 'self' blob: https://*.wpenginepowered.com https://rldatix.com https://*.rldatix.com https://app-eu1.hubspot.com https://forms-eu1.hsforms.com https://www.youtube.com https://www.vimeo.com https://player.vimeo.com https://js.driftt.com https://googleads.g.doubleclick.net https://*.hubspot.com https://embed.podcasts.apple.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://forms-eu1.hsforms.com https://forms.hsforms.com; 9 default-src https: 'unsafe-eval' 'unsafe-inline' data: blob: wss://*.pricespider.com http://*.pricespider.com https://*.zdassets.com; script-src https: 'unsafe-eval' 'unsafe-inline' data: blob: wss://*.pricespider.com http://*.pricespider.com; connect-src https: 'unsafe-eval' 'unsafe-inline' data: blob: wss://*.pricespider.com http://*.pricespider.com wss://*.zopim.com https://*.zdassets.com; upgrade-insecure-requests; report-uri /csp.cgi; 9 frame-ancestors 'self' https://www.mtbiker.sk; 9 worker-src 'self' blob:; 9 frame-ancestors 'self'; upgrade-insecure-requests; object-src 'none'; script-src 'sha256-7/fy7EjXUskn9MLHbin/b0A7LQ32mACPQ2SdNj/O/vA=' 'unsafe-inline'; require-trusted-types-for 'script'; 9 upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * 9 frame-ancestors 'self'; upgrade-insecure-requests; default-src 'self' https: data: http://adsys.insert.bg; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' data: blob: 'report-sample' www.glami.bg glamipixel.com; script-src-elem 'self' 'unsafe-inline' https: data: blob:; style-src 'self' https: 'unsafe-inline'; img-src * data: blob:; base-uri 'self' www.glami.bg glamipixel.com; object-src 'self' blob:; connect-src 'self' https: wss: http://localhost:8001; report-uri /csp_log.php 9 default-src *; font-src 'self' data: https://static.opencityitalia.it https://fonts.gstatic.com https://acsbapp.com https://maxcdn.bootstrapcdn.com https://cdn-embed.comuni-chiamo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src * 'self' data: https: blob: 9 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; 9 default-src * data: 'unsafe-inline' 'unsafe-eval' 9 default-src 'self' https:; img-src 'self' data: https:; style-src-elem 'self' 'unsafe-inline' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src-attr 'unsafe-inline'; font-src 'self' data: https:; frame-ancestors https://volkswagen-admin.porsche-holding.com; connect-src 'self' https: wss: ws: data:; manifest-src 'self' https:; media-src 'self' https: data: blob; frame-src 'self' https:; upgrade-insecure-requests 9 default-src https: blob: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' ;img-src https: blob: data:;font-src https: data:;connect-src https: wss:;worker-src https: blob:; 9 default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-ancestors 'self' *.webvisor.com metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr 9 default-src https: data: wss: blob: 'unsafe-inline' 'unsafe-eval' ; object-src 'none' ; frame-ancestors 'self' ; base-uri 'self' ; img-src https: data: ; 9 default-src * data: 'unsafe-inline' 'unsafe-eval' 'self' blob:; media-src * blob:; img-src * data: 'unsafe-inline' blob: *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com *.heapanalytics.com https://*.qualtrics.com; font-src * data: 'unsafe-inline'; frame-ancestors https://amway-esan-agent.ada.support/ *.amway.de; connect-src 'self' api-js.datadome.co *.amway.eu https://siteintercept.qualtrics.com https://maps.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com https://*.clarity.ms https://c.bing.com *.auryc.com https://amway-api.exponea.com https://*.ada.support https://*.qualtrics.com https://edge.api.brightcove.com http://manifest.prod.boltdns.net https://*.brightcovecdn.com; frame-src *.captcha-delivery.com https://*.elf.site https://players.brightcove.net geo.captcha-delivery.com https://coreplus.amwayglobal.com https://coreplus-qa.amwayglobal.com https://coreplus-regional.gmb-preprod.corp.amway.net https://coreplus-stage.amwayglobal.com *.qualtrics.com https://bonus.amway-services.com https://online.flippingbook.com https://amway-achievers.web.app https://amway-achievers-gallery.web.app https://amway-achievers-profile.web.app app.vwo.com *.visualwebsiteoptimizer.com https://www.youtube.com static.ada.support https://amway-esan-agent.ada.support/ https://amwaycommon.github.io https://bookish-adventure-n3pvwoe.pages.github.io https://*.pages.github.io https://*.qualtrics.com https://export-file-storage-prod.s3.us-east-1.amazonaws.com https://view.genially.com https://*.3ways.com https://github.com; worker-src 'self' blob:; script-src 'unsafe-eval' 'unsafe-inline' 'self' app.vwo.com cdn.pushcrew.com https://*.bf.dynatrace.com https://vjs.zencdn.net; script-src-elem 'self' 'unsafe-inline' js.datadome.co ct.captcha-delivery.com tags.tiqcdn.com players.brightcove.net https://amway-api.exponea.com *.heapanalytics.com https://*.qualtrics.com *.visualwebsiteoptimizer.com *.clarity.ms *.googleapis.com *.gstatic.com *.ada.support; style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com s3.amazonaws.com *.googleapis.com *.gstatic.com 9 default-src 'self'; script-src 'self'; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /csp-report-endpoint/ 9 default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com images.ctfassets.net/8aevphvgewt8/; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com assets.ctfassets.net/8aevphvgewt8/ videos.ctfassets.net/8aevphvgewt8/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ 8 frame-ancestors 'self' accounts.login.idm.telekom.com; 8 default-src 'self' * data: 'unsafe-inline' 'unsafe-eval' 8 frame-ancestors 'self' *.wallet.airpay.co.id *.shopee.kr *.airpay.co.id *.shopeemobile.com *.shopee.co.id *.shopee.cn *.shopee.io *.facebook.com *.dailyshopee.vn migoo.ai; 8 default-src 'self' vercel.com *.vercel.com assets.vercel.com *.vercel.sh vercel.live wss://*.vercel.com *.codesandbox.io localhost:* chrome-extension://* https://www.youtube-nocookie.com https://risk.clearbit.com https://react-tweet.vercel.app/*;script-src 'self' 'unsafe-eval' 'unsafe-inline' 'inline-speculation-rules' https://snap.licdn.com https://www.youtube.com cdn.vercel-insights.com va.vercel-scripts.com vercel.com *.vercel.com assets.vercel.com *.vercel.sh vercel.live wss://*.vercel.com *.codesandbox.io localhost:* chrome-extension://* https://www.youtube-nocookie.com https://risk.clearbit.com https://react-tweet.vercel.app/* cdp.vercel.com;style-src 'self' 'unsafe-inline' vercel.com *.vercel.com assets.vercel.com *.vercel.sh vercel.live wss://*.vercel.com *.codesandbox.io localhost:* chrome-extension://* https://www.youtube-nocookie.com https://risk.clearbit.com https://react-tweet.vercel.app/*;img-src 'self' blob: data: *.github.io avatars.githubusercontent.com user-images.githubusercontent.com vercel.com vercel.live *.vercel.sh assets.vercel.com cdn.raster.app https://images.ctfassets.net https://www.google.com https://i.ytimg.com https://s3.amazonaws.com pbs.twimg.com https://www.gravatar.com https://lishhsx6kmthaacj.public.blob.vercel-storage.com https://fvqcrhkhgatlyl2m.public.blob.vercel-storage.com;media-src 'self' blob: data: vercel.com *.vercel.com assets.vercel.com *.vercel.sh vercel.live wss://*.vercel.com *.codesandbox.io localhost:* chrome-extension://* https://www.youtube-nocookie.com https://risk.clearbit.com https://react-tweet.vercel.app/*;connect-src 'self' data: *.ingest.sentry.io *.ingest.us.sentry.io wss://ws-us3.pusher.com sockjs-use3.pusher.com react-tweet.vercel.app https://*.contentful.com www.vercel-status.com unpkg.com vercel.com *.vercel.com assets.vercel.com *.vercel.sh vercel.live wss://*.vercel.com *.codesandbox.io localhost:* chrome-extension://* https://www.youtube-nocookie.com https://risk.clearbit.com https://react-tweet.vercel.app/* cdp.vercel.com;font-src 'self' vercel.com assets.vercel.com vercel.live fonts.gstatic.com *.vercel.sh;frame-ancestors 'self' https://vercel.com https://app.contentful.com https://*.contentful.com https://*.vercel.sh https://*.vercel.com 8 upgrade-insecure-requests; frame-ancestors *.lumen.com *.lumentech.com *.brightspeed.com http://static.virtualroi.com/; 8 frame-ancestors https://*.ringcentral.com https://*.ringcentral.ca https://*.ringcentral.co.uk https://*.ringcentral.com.au https://*.ringcentral.eu https://support.ringcentral.biz https://outlook.live.com https://outlook.office365.com https://outlook.office.com 8 frame-ancestors 'self' *.ffxblue.com.au *.ffx.io *.smh.com.au *.theage.com.au *.brisbanetimes.com.au *.watoday.com.au *.cdn.ampproject.org *.platform.ink; upgrade-insecure-requests 8 frame-ancestors 'self' https://*.ziggo.nl https://*.vodafone.nl https://*.vfz-services.nl https://*.prod.aws.ziggo.io https://*.acc.aws.ziggo.io https://*.dev.aws.ziggo.io https://*.hollandsnieuwe.nl https://vodafoneziggo.portal.mobilewater.nl; 8 object-src https://liveshareeast3.seismic.com https://cvent.seismic.com https://explore.cvent.com http://explore.cvent.com https://*.speedrfp.com https://speedrfp.com https://*.elitemeetings.com https://elitemeetings.com https://*.hotelprofiler.com https://www.lanyon.com http://www.lanyon.com http://*.cvent.cloud https://*.cvent.cloud; frame-ancestors 'self' https://liveshareeast3.seismic.com https://cvent.seismic.com https://explore.cvent.com http://explore.cvent.com https://*.speedrfp.com https://speedrfp.com https://*.elitemeetings.com https://elitemeetings.com https://*.hotelprofiler.com https://www.lanyon.com http://www.lanyon.com https://*.cvent.com http://*.cvent.com http://*.cvent.cloud https://*.cvent.cloud; report-uri /report-csp-violation 8 default-src 'unsafe-eval' 'unsafe-inline' * blob:; script-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * data:; connect-src *; font-src * data:; upgrade-insecure-requests; block-all-mixed-content 8 default-src https: data: 'unsafe-inline' 'unsafe-eval'; media-src 'self' blob: https://videos.porsche.com https://videos.porsche.cn; connect-src https: wss://umd.userlike.com data:; img-src https: data:; 8 frame-ancestors 'self' https://webvisor.com 8 default-src 'self' https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; object-src 'none'; frame-ancestors 'self'; 8 default-src 'self' *.jfrog.com *.visualwebsiteoptimizer.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.jfrog.com https://geoip-js.com https://www.googletagmanager.com https://cdn.cookielaw.org *.nagich.co.il https://www.recaptcha.net https://sec.webeyez.com https://pagead2.googlesyndication.com https://www.gstatic.com https://www.gstatic.cn https://dev.visualwebsiteoptimizer.com https://gtm.jfrog.com https://munchkin.marketo.net *.marketo.com https://ws.zoominfo.com https://ws-assets.zoominfo.com https://js.zi-scripts.com https://static.ads-twitter.com https://snap.licdn.com https://connect.facebook.net https://www.redditstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com blob: https://tracking.g2crowd.com https://platform.twitter.com https://www.google.com *.6sc.co https://cdn.heapanalytics.com *.zuora.com https://256-fnz-187.mktoutil.com https://js-eu1.hsforms.net https://www2.bluesnap.com https://jfrogforms.formtitan.com *.algolia.net *.algolianet.com https://app.vwo.com transcend.io *.transcend.io transcend-cdn.com *.transcend-cdn.com https://www.influ2.com https://a.usbrowserspeed.com https://tr.capterra.com/ https://tracking-api.g2.com https://www.youtube.com *.revsure.cloud *.revsure-eu.cloud https://bat.bing.net https://bzrcdn.openai.com *.1mind.com; connect-src 'self' *.jfrog.com https://send.webeyez.com https://ingest.webeyez.com *.nagich.co.il https://cdn.cookielaw.org https://www.gstatic.com https://pagead2.googlesyndication.com *.visualwebsiteoptimizer.com https://gtm.jfrog.com https://www.google.com *.marketo.com https://ws.zoominfo.com https://js.zi-scripts.com https://pixel-config.reddit.com https://www.redditstatic.com https://px.ads.linkedin.com https://256-fnz-187.mktoresp.com https://www.google-analytics.com *.6sc.co *.onetrust.com https://tracking.g2crowd.com https://geoip-js.com *.6sense.com https://www.googleapis.com *.g2.com https://heapanalytics.com https://256-fnz-187.mktoutil.com *.hsforms.com https://hubspot-forms-static-embed-eu1.s3.amazonaws.com *.hubspot.com https://www.googleadservices.com https://www2.bluesnap.com *.algolia.net *.algolianet.com https://app.vwo.com https://www.recaptcha.net transcend.io *.transcend.io transcend-cdn.com *.transcend-cdn.com https://www.facebook.com https://t.influ2.com/ https://google.com https://tr.capterra.com/ https://www.googletagmanager.com *.revsure.cloud *.revsure-eu.cloud https://bat.bing.com https://bzrcdn.openai.com *.1mind.com https://api.rudderstack.com; style-src 'self' 'unsafe-inline' *.jfrog.com https://rtp-static.marketo.com https://fonts.googleapis.com https://access.nagich.co.il https://app.vwo.com *.visualwebsiteoptimizer.com transcend-cdn.com; font-src 'self' *.jfrog.com https://fonts.gstatic.com data:; img-src * blob: data: transcend.io *.transcend.io transcend-cdn.com *.transcend-cdn.com https://bzrcdn.openai.com; media-src 'self' *.jfrog.com; frame-src 'self' *.jfrog.com https://sec.webeyez.com https://www.googletagmanager.com https://www.recaptcha.net https://td.doubleclick.net https://www.google.com https://www.facebook.com https://www.youtube.com *.zuora.com *.hsforms.com https://jfrogforms.formtitan.com https://jfrog.chilipiper.com https://hackerone.com https://jfrog.force.com https://jfrogprm.my.salesforce-sites.com https://app.vwo.com *.visualwebsiteoptimizer.com https://jfrogcpq.formtitan.com https://sandbox-jfrog.chilipiper.com https://apps.chilipiper.com https://access.nagich.co.il *.1mind.com; frame-ancestors 'self' https://partners.jfrog.com https://supportjfrog.force.com/; worker-src 'self' *.jfrog.com https://sec.webeyez.com blob:; 8 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: blob: ws:; frame-ancestors 'self'; upgrade-insecure-requests; base-uri 'self'; 8 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 8 frame-ancestors 'self' *.mebis.info 8 upgrade-insecure-requests; object-src 'none' 8 report-uri https://www.homeaffairs.gov.au; frame-ancestors https://app.monsido.com https://*.immi.gov.au https://*.border.gov.au https://*.customs.gov.au https://*.abf.gov.au https://*.homeaffairs.gov.au https://*.harmony.gov.au https://*.nationalsecurity.gov.au https://*.idmatch.gov.au https://*.disasterassist.gov.au https://*.livingsafetogether.gov.au https://*.organisationalresilience.gov.au https://*.tisn.gov.au https://*.triplezero.gov.au https://*.cicentre.gov.au https://*.mara.gov.au https://*.auscheck.gov.au https://*.CISC.gov.au https://*.cetc.gov.au https://*.osi.gov.au https://*.gov.au https://bordertv.au.vbrickrev.com https://*.translation.gov.au https://*.odwt.app https://*.auscheck-5.preprod.govcms.gov.au 8 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: legacy.questdiagnostics.com rum.hlx.page *.scene7.com www.questdiagnostics.com www.googletagmanager.com www.youtube.com analytics.js *.google-analytics.com qualtrics.com siteintercept.qualtrics.com *.siteintercept.qualtrics.com img04.en25.com cdn.cookielaw.org maps.googleapis.com *.questdiagnostics.com tag.demandbase.com tag-logger.demandbase.com scripts.demandbase.com api.company-target.com company-target.com segments.company-target.com s.company-target.com rlcdn.com js.hs-analytics.net secure.quantserve.com bs.serving-sys.com api.fouanalytics.com snap.licdn.com licdn.com px.ads.linkedin.com analytics.linkedin.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com api.mixpanel.com api-js.mixpanel.com cdn.mxpnl.com js-cdn.dynatrace.com vbk56183.live.dynatrace.com ucg59307.live.dynatrace.com tagmanager.google.com pc-quest-collect.tealiumiq.com pc-quest-visitor-service-us-west-2.tealiumiq.com tags.tiqcdn.com https://d8j4om1fqg.kameleoon.io https://static.kameleoon.com https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://client-config.kameleoon.com https://sdk-config.kameleoon.eu https://electra.kameleoon.com wayfinder.stage.gsw.agency collaboratewithquest.com; connect-src 'self' target.questdiagnostics.com *.scene7.com *.google-analytics.com stats.g.doubleclick.net qualtrics.com siteintercept.qualtrics.com *.siteintercept.qualtrics.com cdn.cookielaw.org cdn.cookielaw.org cookie-cdn.cookiepro.com privacyportal.onetrust.com geolocation.onetrust.com developer.onetrust.com maps.googleapis.com *.questdiagnostics.com dpm.demdex.net wss: directline.botframework.com api.company-target.com api.fouanalytics.com tag.demandbase.com tag-logger.demandbase.com scripts.demandbase.com api.company-target.com company-target.com segments.company-target.com s.company-target.com rlcdn.com snap.licdn.com licdn.com px.ads.linkedin.com analytics.linkedin.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com api.mixpanel.com api-js.mixpanel.com cdn.mxpnl.com js-cdn.dynatrace.com vbk56183.live.dynatrace.com ucg59307.live.dynatrace.com tagmanager.google.com pc-quest-collect.tealiumiq.com pc-quest-visitor-service-us-west-2.tealiumiq.com tags.tiqcdn.com https://d8j4om1fqg.kameleoon.io https://static.kameleoon.com https://data.kameleoon.io https://data.kameleoon.eu https://eu-data.kameleoon.io https://eu-data.kameleoon.eu https://na-data.kameleoon.io https://na-data.kameleoon.eu https://editor.kameleoon.com https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://api.kameleoon.com https://customers.kameleoon.com https://logger.kameleoon.io https://client-config.kameleoon.com https://sdk-config.kameleoon.eu https://api.products.kameleoon.com wayfinder.stage.gsw.agency collaboratewithquest.com; frame-ancestors 'self' *.questdiagnostics.com *.qdx.com; 8 frame-ancestors 'self' https://*.refinitiv.com https://*.lseg.com; 8 upgrade-insecure-requests; frame-ancestors *.cisco.com *.jasper.com *.ciscospark.com *.ciscolive.com http://cisco.lookbookhq.com https://cisco.lookbookhq.com testcisco.marketing.adobe.com cisco.marketing.adobe.com ciscosales.my.salesforce.com test.salesforce.com zedo.com hindustantimes.com economictimes.indiatimes.com *.webex.com *.cdw.com *.cdwg.com *.cdw.ca *.meraki-go.com http://ciscopartners.lookbookhq.com https://ciscopartners.lookbookhq.com ciscolearningsystem.com ciscocustomer.lookbookhq.com cisco.lookbookhq.com ccsmedia.com *.itquotes.ie dteonline.com ampito-cisco.com arkphire.com *.insight.com *.ccsmedia.com *.ebuyer.com *.lambda-tek.com *.storm-technologies.com *.vohkus.com *.bechtle.com *.rainfocus.com *.broadbandbuyer.com *.hardware.com shop.redpontem.com *.miro.com cisco.techdatavendors.be *.service-now.com *.thousandeyes.com *.duo.com duo.com *.umbrella.com *.pricespider.com *.mapbox.com *.vercel.app cdnjs.cloudflare.com https://community.cisco.com/; 8 default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss: 8 require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport 8 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://kit.fontawesome.com https://vlibras.gov.br https://www.vlibras.gov.br https://www.googletagmanager.com https://atlas.microsoft.com https://www.google-analytics.com https://cdn.jsdelivr.net https://www.google.com https://www.gstatic.com https://www.ba.gov.br https://ba.gov.br https://use.fontawesome.com https://www.chatbase.co https://www.instagram.com https://platform.twitter.com https://*.clarity.ms https://code.jquery.com; script-src-elem 'self' 'unsafe-inline' blob: https://kit.fontawesome.com https://vlibras.gov.br https://www.vlibras.gov.br https://www.googletagmanager.com https://atlas.microsoft.com https://www.google-analytics.com https://cdn.jsdelivr.net https://www.google.com https://www.gstatic.com https://apis.google.com https://use.fontawesome.com https://www.chatbase.co https://www.instagram.com https://platform.twitter.com https://unpkg.com https://*.clarity.ms https://regin.pscs.com.br https://code.jquery.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://www.ba.gov.br https://ba.gov.br https://cdn.jsdelivr.net https://unpkg.com https://ka-f.fontawesome.com https://atlas.microsoft.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://atlas.microsoft.com https://vlibras.gov.br https://www.vlibras.gov.br https://ka-f.fontawesome.com; connect-src 'self' https://ka-f.fontawesome.com https://atlas.microsoft.com https://servicosaocidadao.ba.gov.br https://www.google-analytics.com https://www.googletagmanager.com https://dc.services.visualstudio.com https://acessos.vlibras.gov.br https://dicionario2.vlibras.gov.br https://vlibras.gov.br https://cdn.jsdelivr.net https://traducao2.vlibras.gov.br https://www.google.com https://apis.google.com https://www.chatbase.co https://saojoaodabahia.ba.gov.br https://*.clarity.ms https://chatbot.pscs.com.br wss://chatbot.pscs.com.br; frame-src 'self' https://www.youtube.com https://www.google.com https://nuvidio.com https://app.powerbi.com https://prodeb-sac-digital.firebaseapp.com https://gestor.meioambiente.ba.gov.br https://www.chatbase.co https://platform.twitter.com https://www.instagram.com https://publicacao.egba.ba.gov.br https://www.transparencia.ba.gov.br https://calendar.google.com https://copilotstudio.microsoft.com https://services.pge.ba.gov.br https://piloto.egba.ba.gov.br https://rtmp.irdeb.ba.gov.br; frame-ancestors 'self' https://www.google.com; worker-src 'self' blob:; 8 connect-src 'self' inetchat.zoner.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com www.google-analytics.com *.smartlook.cloud *.doubleclick.net https://web.facebook.com https://www.facebook.com https://manychat.com https://socialplugin.facebook.net *.google-analytics.com https://search.zonercloud.cz https://*.clarity.ms www.google.com google.com https://pagead2.googlesyndication.com https://cdn.linkedin.oribi.io adservice.google.com www.google.cz *.analytics.google.com px.ads.linkedin.com googletagmanager.com https://maps.googleapis.com https://ai-dev.zarea.net:4003 c.imedia.cz;default-src 'self' www.google-analytics.com www.google.com inetchat.zoner.com;font-src 'self' data: fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;img-src 'self' data: stats.g.doubleclick.net admin.czechia.com www.google-analytics.com www.google.cz www.google.com inetchat.zoner.com www.facebook.com c.imedia.cz http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.inpage.cz https://www.inpage.sk https://c.seznam.cz https://i.ytimg.com *.twitter.com https://seal.digicert.com ad.czechia.com api.thegreenwebfoundation.org www.abuseipdb.com www.googletagmanager.com https://px.ads.linkedin.com https://c.bing.com https://c.clarity.ms www.google.sk www.google.es www.google.de www.google.sn https://maps.gstatic.com www.czechia.com mailing.zoner.eu;manifest-src 'self';script-src 'self' 'unsafe-inline' data: www.google.com www.gstatic.com googleads.g.doubleclick.net www.google-analytics.com www.googleadservices.com www.googletagmanager.com inetchat.zoner.com partner.zonercloud.sk partner.zonercloud.cz connect.facebook.net c.imedia.cz rec.smartlook.com *.twitter.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://seal.digicert.com ad.czechia.com https://c.seznam.cz https://widget.manychat.com https://mccdn.me www.clarity.ms https://search.zonercloud.cz https://snap.licdn.com https://*.clarity.ms https://maps.googleapis.com/ https://mujtest.eu https://cdn.amcharts.com https://cdn.datatables.net https://martinturek.dev 'unsafe-eval';style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.datatables.net;frame-ancestors 'none';form-action 'self' admin.regzone.hu admin.czechia.com admin.slovaknet.sk admin.regzone.cz *.csob.cz *.tatrabanka.sk www.googletagmanager.com www.facebook.com;base-uri 'self';object-src 'none';frame-src 'self' *.inpage.cz *.inpage.sk *.inpageweb.com www.youtube.com www.google.com maps.google.com inetchat.zoner.com partner.zonercloud.sk partner.zonercloud.cz https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.twitter.com www.metercustom.net https://web.facebook.com https://www.facebook.com *.doubleclick.net https://docs.google.com mailing.zoner.eu www.googletagmanager.com https://mujtest.eu;report-uri /csp-report-endpoint; 8 default-src 'self' 'unsafe-inline'; img-src 'self' data: 8 frame-ancestors *; report-uri /_/commcsp?disposition=enforce 8 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' form.lidl.com *.youtube.com *.google-analytics.com google-analytics.com *.googletagmanager.com googletagmanager.com googleads.g.doubleclick.net *.googleadservices.com googleadservices.com *.googletagservices.com googletagservices.com cdn.cookielaw.org ibe.uphotel.agency https://www.google.com https://www.gstatic.com *.virtualearth.net *.bing.com bing.com unpkg.com *.pagestrip.com onepagebooking.com cdnjs.cloudflare.com *.walls.io walls.io connect.facebook.net *.facebook.net facebook.net snap.licdn.com *.linkedin.com linkedin.com *.azureedge.net hrplattformprod-rocketapply-prod-scos-rocketapply.cfapps.eu20.hana.ondemand.com *.cmp.schwarz *.dynamics.com assets.adobedtm.com *.adoberesources.net *.demdex.net *.adobedc.net *.jochat.ai; img-src 'self' data: *.object.storage.eu01.onstackit.cloud *.google-analytics.com *.google.de www.googletagmanager.com googleads.g.doubleclick.net *.google.com fonts.gstatic.com form.lidl.com *.google-analytics.com ibe-frontend-production-frontend.s3-eu-west-1.amazonaws.com s3-eu-west-1.amazonaws.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com *.tile.openstreetmap.org *.tiles.virtualearth.net *.bing.com http://*.tile.osm.org unpkg.com *.pagestrip.com cdn.cookielaw.org onepagebooking.com api.scon-assets.schwarz www.facebook.com px.ads.linkedin.com dc.ads.linkedin.com www.googleadservices.com *.img.schwarz hrplattformprod-rocketapply-prod-scos-rocketapply.cfapps.eu20.hana.ondemand.com *.dynamics.com *.azureedge.net *.linkedin.com *.bing.net *.googlesyndication.com *.adoberesources.net *.demdex.net *.adobedc.net *.jochat.ai *.cloudfront.net; style-src 'self' 'unsafe-inline' www.googletagmanager.com fonts.googleapis.com form.lidl.com *.fonts.net ibe.uphotel.agency https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com *.bing.com unpkg.com *.pagestrip.com onepagebooking.com hrplattformprod-rocketapply-prod-scos-rocketapply.cfapps.eu20.hana.ondemand.com *.smartrecruiters.com; font-src 'self' 'unsafe-inline' data: fonts.gstatic.com form.lidl.com ibe.uphotel.agency *.pagestrip.com hrplattformprod-rocketapply-prod-scos-rocketapply.cfapps.eu20.hana.ondemand.com; frame-src 'self' 'unsafe-inline' www.youtube.com form.lidl.com *.google-analytics.com google-analytics.com *.googletagmanager.com googletagmanager.com *.googleadservices.com googleadservices.com *.googletagservices.com googletagservices.com *.facebook.net facebook.net *.linkedin.com linkedin.com *.bing.com bing.com *.youtube-nocookie.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://www.google.com *.walls.io walls.io form.schwarz-digits.de form.beschaffung.schwarz *.jochat.ai *.smartrecruiters.com *.stackit.com; connect-src 'self' www.googletagmanager.com *.google-analytics.com *.google.com *.google.de *.googleadservices.com www.googleadservices.com stats.g.doubleclick.net form.lidl.com *.uphotel.agency cdn.cookielaw.org *.onetrust.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com *.openstreetmap.org *.bing.com pagestrip.com *.pagestrip.com *.scon.schwarz wss://endpoint-prod.scon.schwarz scon-assets-hub-prod.apps.01.cf.eu01.stackit.cloud api.scon-assets.schwarz px.ads.linkedin.com dc.ads.linkedin.com *.facebook.com *.facebook.net *.azureedge.net *.dynamics.com hrplattformprod-rocketapply-prod-scos-rocketapply.cfapps.eu20.hana.ondemand.com api.friendlycaptcha.com *.cmp.schwarz *.googlesyndication.com assets.adobedtm.com *.adoberesources.net *.demdex.net *.adobedc.net *.jochat.ai; frame-ancestors 'self' *.googletagmanager.com form.lidl.com *.google-analytics.com; worker-src 'self' blob:; 8 script-src 'self' 'unsafe-inline' 'unsafe-eval' api.salemove.com api.salemove.eu ui.customsearch.ai analytics.twitter.com assets.adobedtm.com connect.facebook.net static.ads-twitter.com www.googleadservices.com maps.googleapis.com cdn.tt.omtrdc.net absa.tt.omtrdc.net www.google.com www.gstatic.com analytics.analytics-egain.com abdemo.egain.cloud absablog-dev.disqus.com absablog-sit.disqus.com absablog-uat.disqus.com absablog-prod.disqus.com ajax.googleapis.com platform.twitter.com platform.linkedin.com assets.pinterest.com c.disquscdn.com disqus.com secure.rating-widget.com log.pinterest.com rating-widget.com s.ytimg.com www.youtube.com youtube.com esb.ext.api.uat.absa.co.za client.crisp.chat googleads.g.doubleclick.net www.google.co.za www.google.pl dsp-aud.eskimi.com dsp.eskimi.com dsp-pix.eskimi.com dsp-media.eskimi.com cdn.syndication.twimg.com cse.google.com api-iam.intercom.io api.salemove.eu app.salemove.eu asset-proxy.salemove.eu assets.salemove.eu chunderw-gll.twilio.com chunderw-vpc-gll.twilio.com client-logger.salemove.eu eventgw.twilio.com fonts.googleapis.com fonts.gstatic.com io.salemove.eu js.intercomcdn.com kluster.ws.salemove.eu libs.salemove.com maps.googleapis.com maps.gstatic.com media.twiliocdn.com nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io s3-eu-west-1.amazonaws.com s3.amazonaws.com uplot.salemove.eu widget.intercom.io googletagmanager.com www.googletagmanager.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net fls.doubleclick.net tt.mbww.com pixel.mathtag.com snap.licdn.com sc-static.net analytics.tiktok.com bat.bing.com fpt.absa.co.za fpt.absa.com.gh fpt.absabank.co.ke fpt.absabank.mu fpt.absa.co.mz fpt.absa.sc fpt.absa.co.tz fpt.absa.co.ug fpt.absa.co.zm fpt.absa.co.bw capi.absa.co.za s2s.absa.co.za p.teads.tv absa2--a2sadcdev.sandbox.my.site.com absa2--a2sadcdev.sandbox.my.salesforce-scrt.com absa2--a2uat.sandbox.my.site.com absa2--a2uat.sandbox.my.salesforce-scrt.com absa2.my.site.com absa2.my.salesforce-scrt.com absa-en-za-stage-webview-library-service.kitsys.net absa-en-za-stage.kitsys.net 8 default-src https: 'unsafe-inline' 8 default-src * data: 'unsafe-inline' 'unsafe-eval'; script-src * data: 'unsafe-inline' 'unsafe-eval'; connect-src * data: 'unsafe-inline'; img-src * blob: data: 'unsafe-inline'; frame-src * data:; style-src * data: 'unsafe-inline'; font-src * data: 'unsafe-inline'; frame-ancestors * data:; 8 frame-ancestors https://*.myshopify.com https://admin.shopify.com 8 default-src 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; 8 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss: blob:; child-src https: blob:; worker-src 'self' blob:; 8 frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com 8 upgrade-insecure-requests; frame-ancestors 'self' https://signicat.com https://*.signicat.com https://dokobit.com https://*.dokobit.com 8 default-src https: ws: data: blob: 'unsafe-inline' 'unsafe-eval' 8 script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.clarivate.com https://*.clarivate.com https://clarivate.com https://*.nr-data.net *.en25.com https://js.zi-scripts.com https://epsilon.6sense.com/ https://www.redditstatic.com *.yahoo.co.jp tag.flvcdn.net https://static.lightning.force.com https://*.clarity.ms https://*.salesforceliveagent.com https://analytics.decisionresourcesgroup.com *.demandbase.com https://analytics.twitter.com *.turtl.co https://app.gatedcontent.com https://app.icontact.com https://assets.vidyard.com https://assistant.woorank.com https://bam-cell.nr-data.net https://bat.bing.com https://cdn.bizible.com https://cdn.cookielaw.org https://cdn.jifo.co https://cdnjs.cloudflare.com https://clarivateanalytics.my.salesforce.com https://clarivateanalytics.my.site.com https://clarivatecommunities.force.com https://preview-clarivatecommunities.cs16.force.com https://code.jquery.com https://connect.facebook.net https://derwent.com *.visualwebsiteoptimizer.com https://e.infogram.com https://embed.acast.com https://googleads.g.doubleclick.net https://img06.en25.com https://j.6sc.co https://js-agent.newrelic.com https://maps.googleapis.com https://maps.gstatic.com https://platform.twitter.com https://play.vidyard.com https://public.flourish.studio https://publons.com https://s786780033.t.eloqua.com https://s.infogram.com https://scholaroneideas.secure.force.com https://script.hotjar.com https://secure.eloqua.com https://snap.licdn.com https://static.addtoany.com https://static.ads-twitter.com *.criteo.net https://static.doubleclick.net https://static.hotjar.com https://unpkg.com https://widget.sndcdn.com https://www.3blmedia.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com *.criteo.com https://www.google-analytics.com https://cdn.jsdelivr.net https://app.vwo.com https://*.googlesyndication.com https://*.zoominfo.com https://translate.google.com https://*.googleapis.com https://*.amcharts.com https://*.qualtrics.com; frame-ancestors 'self' *.clarivate.com *.compumark.com *.compumark.cn 8 frame-ancestors 'none'; object-src 'none'; 8 default-src 'unsafe-inline' 'unsafe-eval' data: blob: https: wss:; frame-ancestors 'self' 8 frame-ancestors 'self';; upgrade-insecure-requests 8 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; media-src 'self' https: blob:; upgrade-insecure-requests; 8 frame-ancestors *.lotvue.com *.insearch-ds.net resource.ecisolutions.com ecisoftwaresolutions.pathfactory.com 'self' 8 default-src 'self';frame-src 'self' *.youtube.com youtu.be *.smartertools.com docs.google.com;script-src * 'unsafe-inline';font-src * 'unsafe-inline' data:;img-src * 'unsafe-inline' data: blob:;style-src * 'unsafe-inline';media-src *;frame-ancestors 'self';connect-src *; 8 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval';frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; connect-src * data: blob: 'unsafe-inline'; 8 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: wss: 8 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'none'; 8 default-src * 'unsafe-inline' 'unsafe-eval' data: 8 default-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' https: data:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src *; media-src https: data: blob:; worker-src https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; upgrade-insecure-requests 8 frame-ancestors 'self' https://*.etracker.com 8 default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data:; font-src *; object-src 'self' data:; frame-src 'self' data:; media-src 'self' data:; 8 frame-ancestors 'self' https://dlinz.sharepoint.com; 8 default-src https: 'unsafe-inline' 'unsafe-eval' data: 8 frame-ancestors 'self' https://dev.genesis.ba http://dev.genesis.ba 8 default-src 'self' 'unsafe-inline' 'unsafe-eval' *; img-src * data:; 8 frame-ancestors https://app.storyblok.com/ 8 default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; object-src 'none'; 8 upgrade-insecure-requests; object-src 'none'; frame-ancestors 'none'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://i.checkmybus.com https://dev1assets.checkmybus.com https://assets.checkmybus.com https://testassets.checkmybus.com https://cdn.priv.center https://prod-origin.truendo.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://*.bstatic.com https://*.services.visualstudio.com https://script.crazyegg.com https://*.msecnd.net https://cdn.jsdelivr.net https://*.doubleclick.net https://securepubads.g.doubleclick.net https://adservice.google.de https://script.crazyegg.com https://tpc.googlesyndication.com https://*.google.com https://*.googleusercontent.com https://*.gstatic.com https://www.googleadservices.com https://cdn.ampproject.org https://*.facebook.net https://*.facebook.com https://*.fontawesome.com https://monitor.azure.com https://*.monitor.azure.com https://e-js.zonka.co https://www.clarity.ms https://unpkg.com https://bat.bing.com https://www.atmrum.net https://cdn.debugbear.com https://ep2.adtrafficquality.google securepubads.g.doubleclick.net https://faro-collector-prod-eu-west-2.grafana.net https://scripts.clarity.ms https://static.clicktripz.com https://www.clicktripz.com; style-src 'self' 'unsafe-inline' https://i.checkmybus.com https://dev1assets.checkmybus.com https://assets.checkmybus.com https://testassets.checkmybus.com https://fonts.googleapis.com https://*.fontawesome.com https://accounts.google.com https://*.googletagmanager.com; frame-src 'self' https://*.googletagmanager.com https://*.doubleclick.net https://securepubads.g.doubleclick.net https://*.googlesyndication.com https://www.booking.com https://*.bstatic.com https://cdnjs.cloudflare.com https://*.gstatic.com https://*.google.com https://*.youtube.com/ https://*.facebook.com https://*.msecnd.net https://*.services.visualstudio.com https://e.zonka.co https://ep2.adtrafficquality.google https://www.clicktripz.com; worker-src 'self' blob: 'unsafe-eval' 'unsafe-inline' www.checkmybus.com; form-action 'self' www.checkmybus.com.ar www.checkmybus.com.br https://www.checkmybus.com.br/artigo www.checkmybus.cz www.checkmybus.cl www.checkmybus.co www.checkmybus.de https://www.checkmybus.de/beitrag www.checkmybus.co.uk https://www.checkmybus.co.uk/article www.checkmybus.com https://www.checkmybus.com/article www.checkmybus.es www.checkmybus.fr https://www.checkmybus.fr/article www.checkmybus.hr www.checkmybus.it https://www.checkmybus.it/articolo www.checkmybus.my www.checkmybus.com.mx www.checkmybus.nl www.checkmybus.at www.checkmybus.pe www.checkmybus.pl https://www.checkmybus.pl/artykul www.checkmybus.pt www.checkmybus.ch www.checkmybus.com.tr partner-bahn.de reiseauskunft.bahn.de; base-uri 'self' i.checkmybus.com 8 default-src 'none'; script-src 'unsafe-inline'; base-uri 'none'; form-action 'none'; frame-ancestors 'none' 8 default-src 'self' https: data: blob:; connect-src https: wss:;script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' blob:; frame-ancestors 'self'; upgrade-insecure-requests; 8 script-src https://www.gstatic.com/ https://translate.google.com/ https://translate.googleapis.com/ https://translate-pa.googleapis.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://www.gstatic.com/ https://translate.googleapis.com/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; default-src 'self'; frame-src https://docs.e-iepdata.com 'self'; font-src https://www.gstatic.com/ https://fonts.gstatic.com/ 'self'; img-src data: https: 'self'; connect-src https://*.e-iepdata.com https://www.gstatic.com/ https://csp.withgoogle.com https://translate.googleapis.com/ https://translate-pa.googleapis.com 'self'; 8 upgrade-insecure-requests; frame-ancestors 'self' https://www.motor.es/tasar-coche https://www.cea-online.es/ https://cea-online.es/ https://grupoalhambra.com/; 8 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' blob: data: https:; font-src 'self' data: https:; worker-src blob: 8 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon *; frame-ancestors 'self' ekat.festool.de *.festool.com 8 frame-ancestors 'self' *.hondaofthornhill.com:* *.autoaubaine.com:* *.d2cmedia.ca:* *.google.ca:* *.google.com:* *.dealerinspire.com:*; 8 default-src * https: data: blob: 'unsafe-inline' 'unsafe-eval'; 8 frame-ancestors 'self' https://trustseal.enamad.ir 8 style-src * 'unsafe-inline'; font-src * data:; img-src * data:; connect-src *; object-src 'self'; frame-ancestors 'self'; 8 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' unsafe-inline; script-src 'self' * data: blob: unsafe-inline 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: unsafe-inline 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: unsafe-inline 'unsafe-inline'; img-src * data: blob: unsafe-inline 'unsafe-inline'; media-src * data: blob: unsafe-inline 'unsafe-inline'; frame-src * data: blob:; style-src * data: blob: unsafe-inline 'unsafe-inline'; font-src * data: blob: unsafe-inline 'unsafe-inline'; frame-ancestors 'none' 8 upgrade-insecure-requests; frame-ancestors: self 8 default-src * data: blob: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: wss: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; report-uri https://912c98659423667ae9a3372f78cdda6d.report-uri.com/r/d/csp/enforce 8 default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ v.clarity.ms/collect *.microsoft.com *.adnxs.com *.tealiumiq.com login.microsoftonline.com bat.bing.com lnkd.tt.omtrdc.net/rest/v1/delivery www.google.com google.com adservice.google.com pagead2.googlesyndication.com td.doubleclick.net www.googletagmanager.com www.googleadservices.com ad.doubleclick.net googleads.g.doubleclick.net; script-src 'report-sample' 'sha256-th47JTnh6tX15SUn/I+GGmsOSXpa7dh5Skner77gxlY=' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-RFqsjmAF1N5LnfpaHFvPqFlVkeIS/DtTAFor+JjJJVc=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-JfJ82reKxtqugVbfRGw/O/1x1Lm1I09rHueXSwvbRws=' 'sha256-BbV1i75oYRtLtfDWs7tnA8QLF5EOO1dVHKL0prVd/fQ=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' 'sha256-3RIGhhApBii1KY+aW1xk7kFyoQY8vSVE5DfT7E9SJUc=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com www.google.com/recaptcha/enterprise.js www.gstatic.com/recaptcha/releases/ www.googletagmanager.com/gtag/js www.googletagmanager.com/gtag/destination googleads.g.doubleclick.net/pagead/viewthroughconversion/ merchantpool1.linkedin.com/mdt.js; img-src data: blob: * 'self' *.licdn.com android-webview-video-poster:; font-src data: * 'self' *.licdn.com; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com edge-auth.microsoft.com flo.uri.sh play.vidyard.com www.google.com/recaptcha/ aat-acr-web-prod.azurewebsites.net *.fls.doubleclick.net www.googletagmanager.com td.doubleclick.net li.protechts.net *.xlgmedia.com *.px-cloud.net merchantpool1.linkedin.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=gg 7 script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*; 7 default-src www.youtube.com *.navattic.com hackerone.com f5-aira.netlify.app f5networks.demdex.net view.ceros.com capture.navattic.com consent.trustarc.com *.doubleclick.net *.adsrvr.org f5.my.salesforce-sites.com secureacceptance.cybersource.com *.f5.com 'self'; frame-ancestors 'self' www.f5.com f5.com studio.f5.com cdn.studio.f5.com k6fem79d.api.sanity.io f5.com.cn www.f5.com.cn mktg.tags.f5.com mktg.collect.f5.com; script-src mktg.tags.f5.com my.tealiumiq.com www.trustradius.com cdn.bizible.com *.amplitude.com munchkin.marketo.net cdn.speedcurve.com j.6sc.co static.cloud.coveo.com tags.tiqcdn.com snap.licdn.com cdn.cookie.sync.usonar.jp js.clrt.ai www.googletagmanager.com scripts.demandbase.com img.ak.impact-ad.jp visitorapi.js at.js *.app.easyling.com app.easyling.com consent.trustarc.com view.ceros.com www.youtube.com api.company-target.com vault.pactsafe.io code.jquery.com cdn.jsdelivr.net js.adsrvr.org *.cdn.easyling.com googleads.g.doubleclick.net cookie.sync.usonar.jp penta.a.one.impact-ad.jp *.f5.com blob: 'self' 'unsafe-inline'; style-src *.f5.com *.amplitude.com *.trustarc.com 'self' 'unsafe-inline'; img-src cdn.studio.f5.com *.trustarc.com sync.mathtag.com cdn.bizible.com dpm.demdex.net cdn.sanity.io r.turn.com *.google.com px.ads.linkedin.com b.6sc.co aw.dw.impact-ad.jp lux.speedcurve.com *.f5.com www.googletagmanager.com i.ytimg.com data: 'self'; connect-src *.amplitude.com www.googletagmanager.com www.googleadservices.com mktg.collect.f5.com dpm.demdex.net my.tealiumiq.com www.trustradius.com f5networks.demdex.net *.omtrdc.net www.google-analytics.com px.ads.linkedin.com k6fem79d.api.sanity.io k6fem79d.apicdn.sanity.io www.google.com ad.doubleclick.net scripts.demandbase.com *.adsrvr.org consent.trustarc.com *.app.easyling.com app.easyling.com mboxedge35.tt.omtrdc.net *.cdn.easyling.com *.clrt.ai *.mktoresp.com ipv6.6sc.co epsilon.6sense.com *.id5-sync.com id5-sync.com beacon.speedcurve.com f5networkx1h1607h.org.coveo.com f5networkx1h1607h.analytics.org.coveo.com f5networksproduction5vkhn00h.analytics.org.coveo.com f5networksproduction5vkhn00h.org.coveo.com f5networksnonproduction1xqykzabw.analytics.org.coveo.com f5networksnonproduction1xqykzabw.org.coveo.com pactsafe.io cdn.jsdelivr.net *.f5networks.net *.f5.com 'self'; object-src 'none'; base-uri 'self'; form-action 'self' *.f5.com secureacceptance.cybersource.com *.salesforce.com f5.my.salesforce-sites.com; 7 frame-ancestors *.mi.com; 7 frame-ancestors 'self' https://*.globo.com https://*.globoi.com https://*.i.globo https://*.techtudo.com.br always; 7 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.redhat.com *.redhatstatic.com *.intercomcdn.com *.intercom.io *.qualtrics.com *.mountain.com *.trkn.us *.basis.net *.sitescout.com *.mktoresp.com *.sentry-cdn.com *.integrate.com *.d41.co *.contentsquare.net analytics.twitter.com assets.adobedtm.com bam.nr-data.net connect.facebook.net consent.trustarc.com googleads.g.doubleclick.net hm.baidu.com img.en25.com in.ml314.com js.driftt.com ml314.com pixel.mintigo.com px.ads.linkedin.com s.ytimg.com script.hotjar.com snap.licdn.com static.ads-twitter.com static.hotjar.com www.googleadservices.com www.googletagmanager.com www.youtube.com dpm.demdex.net platform.twitter.com bat.bing.com j.6sc.co epsilon.6sense.com pubads.g.doubleclick.net munchkin.marketo.net widget.usersnap.com resources.usersnap.com cdn5.userzoom.com app.contentsquare.com js.zi-scripts.com scripts.zoominfo.com ws.zoominfo.com tags.clickagy.com www.trustradius.com d30ia583fbtg8i.cloudfront.net https://static.redhat.com https://www.dev.redhat.com https://www.preprod.redhat.com https://www.redhat.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' blob: *.redhat.com *.redhatstatic.com *.intercomcdn.com *.intercom.io *.qualtrics.com *.mountain.com *.trkn.us *.basis.net *.sitescout.com *.mktoresp.com *.sentry-cdn.com *.integrate.com *.d41.co *.contentsquare.net analytics.twitter.com assets.adobedtm.com bam.nr-data.net connect.facebook.net consent.trustarc.com googleads.g.doubleclick.net hm.baidu.com img.en25.com in.ml314.com js.driftt.com ml314.com pixel.mintigo.com px.ads.linkedin.com s.ytimg.com script.hotjar.com snap.licdn.com static.ads-twitter.com static.hotjar.com www.googleadservices.com www.googletagmanager.com www.youtube.com dpm.demdex.net platform.twitter.com bat.bing.com j.6sc.co epsilon.6sense.com pubads.g.doubleclick.net munchkin.marketo.net widget.usersnap.com resources.usersnap.com cdn5.userzoom.com app.contentsquare.com js.zi-scripts.com scripts.zoominfo.com ws.zoominfo.com tags.clickagy.com www.trustradius.com d30ia583fbtg8i.cloudfront.net https://static.redhat.com https://www.dev.redhat.com https://www.preprod.redhat.com https://www.redhat.com; style-src 'self' 'unsafe-inline' *.redhat.com fonts.googleapis.com js.driftt.com www.trustradius.com d30ia583fbtg8i.cloudfront.net https://cdnjs.cloudflare.com https://static.redhat.com https://use.fontawesome.com https://www.redhat.com; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' tracks.redhat.com; report-uri https://o425042.ingest.sentry.io/api/5370002/security/?sentry_key=676ea2c2d4a147c2834066d24c04a9e4&sentry_environment=prod 7 default-src 'self'; base-uri 'self'; font-src 'self' data:; report-uri /report-csp; img-src 'self' data: *.brightcove.com *.prod.boltdns.net *.cookielaw.org *.sc.omtrdc.net; object-src 'none'; script-src 'strict-dynamic' 'sha256-CGpdaFkwpoN/Y4QoqLo0RdJmj5+2hbbSOQshfoM+KXM=' 'sha256-2+icPynVPC9uutr7Imows2GJpq46gPHv83MlPKqwj1M=' 'sha256-kLnArxja6Bs6U2Il+xfeJn8veuH81wPxrw/ixeqvDT8=' 'sha256-Sh79HpVcRWbbh8F4vWgVVkmc5kGu923LZAOeMWUh2w0=' 'sha256-Sh79HpVcRWbbh8F4vWgVVkmc5kGu923LZAOeMWUh2w0=' 'sha256-BOxqnVkiNQRZ/YQbyX2YYYgZNFLr8Hhq4FlZQRC3GeE=' 'sha256-DzahDayNFEoUz+wus3ioBIpoQDQ08i/zH3pCScqWICY=' 'sha256-+qB++cp4k+Izi7u8vVq0ycjxNzwKmKmud31l0gCfwPk=' 'sha256-XfhXbgLiZndw4wQttCtlwRntxTnAXXHXH5oZdlTiCkc=' 'sha256-PkiHtGuW8aOw2cCDmzzFj6UZ7sXa/KVHkqmlnHZ4x4A=' 'sha256-hidYv5GSCJogLz3UGEEmARJxgAbrsWut73o1cO2IL0c=' 'sha256-NHOoud63+2cBtSNi2IKnSBavAjzFYLOcGvkm/uiAZA4=' 'sha256-9cxvFRJs+pkTqyLJYARzDPz1UmNhF2zMtugmVy8FPHM=' 'sha256-TbWeTDEIxBhTCQ/lm4IexwU7qnX1hMXWnZH1JzonFtM=' 'sha256-ZZk/LrH7rKIyCirJiYDdNHSADxzxwez30zDWZ+xtJiE=' 'sha256-NpUPt2qP28I73wfCI3RYpnGKuvXH/YsFikZCehPe2Lk=' 'sha256-SRRUCF20jnbOSMxPsDmSPq4nvKhvMa2yvjk0XJfIsDo=' 'sha256-vgbyrtup5Zf0fsMf05uoiQbgbvZbwT65HGfynKZkLfs=' 'sha256-OXG4fREviCJ4WD8UaJictQ1xdsxyiMDuOfBOVEQRXkY=' 'sha256-6XzdT+DSQl0u2P5dVGpEMQxALGg7ZnNy6K6JX4xHJsg=' 'sha256-cmJzrLNYMW2M0/y6+H8KdvGzJLUK9SykvJyjk7vb6bo=' 'sha256-fv2bhzAHHYNWo95ONrfreaGyWu6cTnYKkk2umIApjLQ='; style-src 'self' 'unsafe-inline'; connect-src 'self' *.akamaihd.net *.brightcove.com *.prod.boltdns.net *.cookielaw.org *.onetrust.com *.cludo.com *.greenhouse.io *.sc.omtrdc.net smetrics.verisign.com dpm.demdex.net; frame-src *.brightcove.net *.greenhouse.io; worker-src blob: 7 frame-ancestors 'self' https://*.nbcnews.com https://*.today.com https://*.msnbc.com https://*.telemundo.com https://*.nbcnewstools.net https://*.eonline.com https://*.cnbc.com; 7 frame-ancestors 'self' media.rakr.net rackspace.pathfactory.com docs.google.com; report-uri https://www.rackspace.com/report-uri/enforce 7 default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:; 7 frame-ancestors 'self' https://*.fastcompany.com https://*.inc.com https://*.mansueto.com; 7 default-src 'self' *.2o7.net *.accenture.cn *.accenture.com *.accenture.jp *.accenture.test *.accenturealumni.com *.adnxs.com *.adobe.com *.adobeaemcloud.com *.adobedc.net *.adobedtm.com *.ads-twitter.com *.adsrvr.org *.adsymptotic.com *.amazonaws.com *.appcast.io *.apple.com *.assestsadobe.com *.azurewebsites.net *.bidswitch.net *.bing.com *.bootstrapcdn.com *.bnr.nl *.casalemedia.com *.captcha.com *.clarity.ms *.clicktale.net *.cloudflare.com *.cocubesprod.com *.company-target.com *.companytarget.com *.confirmit.com *.contentsquare.com *.contentsquare.net *.cookielaw.org *.crwdcntrl.net *.d3js.org *.datadoghq-browser-agent.com *.day.com *.demandbase.com *.delvenetworks.com *.demdex.net *.doubleclick.net *.echocdn.com *.echosign.com *.embed.ly *.en25.com *.everesttech.net *.facebook.com *.facebook.net *.flipsnack.com *.fontawesome.com *.ggpht.com *.glassdoor.com *.google.ca *.google.co.in *.google.co.za *.google.com *.google.com.ph *.google.com.sg *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.ietf.org *.javelingroup.com *.jsdelivr.net *.knotch-cdn.com *.knotch.it *.libsyn.com *.licdn.com *.lightinfosys.com *.linkedin.com *.login.live.com *.marketo.net *.mettl.de *.ml314.com *.monster.com *.mktgcdn.com *.newsroom.accenture.de *.novetta.com *.on24.com *.omtrdc.net *.onetrust.com *.oribi.io *.pagetiger.com *.pubmatic.com *.reddit.com *.redditstatic.com *.rlcdn.com *.rosettastone.com *.rubiconproject.com *.salesforce.com *.scene7.com *.schema.org *.siteimprove.com *.slidesharecdn.com *.sndcdn.com *.soundcloud.com *.tableau.com *.trtl.co *.twimg.com *.typekit.net *.unpkg.com *.vidyard.com *.virtualearth.net *.yahoo.com *.youtube.com *.youtube-nocookie.com *.youtubenocookie.com *.ytimg.com https://t.co *.ionicframework.com *.flourish.studio https://flo.uri.sh https://unpkg.com *.delvenetworks.com *.slideshare.net *.jquery.com *.assetsadobe.com *.fintechinnovationlab.com *.pcdn.co *.wistia.net *.intraworlds.com *.wistia.com *.powerbi.com https://browser-intake-datadoghq.com https://d25zu39ynyitwy.cloudfront.net *.paradox.ai https://dokumfe7mps0i.cloudfront.net *.lfeeder.com *.leadfeeder.com blob:; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2o7.net *.accenture.cn *.accenture.com *.accenture.jp *.accenture.test *.accenturealumni.com *.adnxs.com *.adobe.com *.adobeaemcloud.com *.adobedc.net *.adobedtm.com *.ads-twitter.com *.adsrvr.org *.adsymptotic.com *.amazonaws.com *.appcast.io *.apple.com *.assestsadobe.com *.azurewebsites.net *.bidswitch.net *.bing.com *.bootstrapcdn.com *.bnr.nl *.casalemedia.com *.captcha.com *.clarity.ms *.clicktale.net *.cloudflare.com *.cocubesprod.com *.company-target.com *.companytarget.com *.confirmit.com *.contentsquare.com *.contentsquare.net *.cookielaw.org *.crwdcntrl.net *.d3js.org *.datadoghq-browser-agent.com *.day.com *.demandbase.com *.delvenetworks.com *.demdex.net *.doubleclick.net *.echocdn.com *.echosign.com *.embed.ly *.en25.com *.everesttech.net *.facebook.com *.facebook.net *.flipsnack.com *.fontawesome.com *.ggpht.com *.glassdoor.com *.google.ca *.google.co.in *.google.co.za *.google.com *.google.com.ph *.google.com.sg *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.ietf.org *.javelingroup.com *.jsdelivr.net *.knotch-cdn.com *.knotch.it *.libsyn.com *.licdn.com *.lightinfosys.com *.linkedin.com *.login.live.com *.marketo.net *.mettl.de *.ml314.com *.monster.com *.mktgcdn.com *.newsroom.accenture.de *.novetta.com *.on24.com *.omtrdc.net *.onetrust.com *.oribi.io *.pagetiger.com *.pubmatic.com *.reddit.com *.redditstatic.com *.rlcdn.com *.rosettastone.com *.rubiconproject.com *.salesforce.com *.scene7.com *.schema.org *.siteimprove.com *.slidesharecdn.com *.sndcdn.com *.soundcloud.com *.tableau.com *.trtl.co *.twimg.com *.typekit.net *.unpkg.com *.vidyard.com *.virtualearth.net *.yahoo.com *.youtube.com *.youtube-nocookie.com *.youtubenocookie.com *.ytimg.com https://t.co *.ionicframework.com *.flourish.studio https://flo.uri.sh https://unpkg.com *.delvenetworks.com *.slideshare.net *.jquery.com *.assetsadobe.com *.fintechinnovationlab.com *.pcdn.co *.wistia.net *.intraworlds.com *.wistia.com *.powerbi.com https://d25zu39ynyitwy.cloudfront.net *.paradox.ai https://dokumfe7mps0i.cloudfront.net *.lfeeder.com *.leadfeeder.com blob:; style-src 'self' 'unsafe-inline' *.2o7.net *.accenture.cn *.accenture.com *.accenture.jp *.accenture.test *.accenturealumni.com *.adnxs.com *.adobe.com *.adobeaemcloud.com *.adobedc.net *.adobedtm.com *.ads-twitter.com *.adsrvr.org *.adsymptotic.com *.amazonaws.com *.appcast.io *.apple.com *.assestsadobe.com *.azurewebsites.net *.bidswitch.net *.bing.com *.bootstrapcdn.com *.bnr.nl *.casalemedia.com *.captcha.com *.clarity.ms *.clicktale.net *.cloudflare.com *.cocubesprod.com *.company-target.com *.companytarget.com *.confirmit.com *.contentsquare.com *.contentsquare.net *.cookielaw.org *.crwdcntrl.net *.d3js.org *.datadoghq-browser-agent.com *.day.com *.demandbase.com *.delvenetworks.com *.demdex.net *.doubleclick.net *.echocdn.com *.echosign.com *.embed.ly *.en25.com *.everesttech.net *.facebook.com *.facebook.net *.flipsnack.com *.fontawesome.com *.ggpht.com *.glassdoor.com *.google.ca *.google.co.in *.google.co.za *.google.com *.google.com.ph *.google.com.sg *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.ietf.org *.javelingroup.com *.jsdelivr.net *.knotch-cdn.com *.knotch.it *.libsyn.com *.licdn.com *.lightinfosys.com *.linkedin.com *.login.live.com *.marketo.net *.mettl.de *.ml314.com *.monster.com *.mktgcdn.com *.newsroom.accenture.de *.novetta.com *.on24.com *.omtrdc.net *.onetrust.com *.oribi.io *.pagetiger.com *.pubmatic.com *.reddit.com *.redditstatic.com *.rlcdn.com *.rosettastone.com *.rubiconproject.com *.salesforce.com *.scene7.com *.schema.org *.siteimprove.com *.slidesharecdn.com *.sndcdn.com *.soundcloud.com *.tableau.com *.trtl.co *.twimg.com *.typekit.net *.unpkg.com *.vidyard.com *.virtualearth.net *.yahoo.com *.youtube.com *.youtube-nocookie.com *.youtubenocookie.com *.ytimg.com https://t.co *.ionicframework.com *.flourish.studio https://flo.uri.sh https://unpkg.com *.delvenetworks.com *.slideshare.net *.jquery.com *.assetsadobe.com *.fintechinnovationlab.com *.pcdn.co *.wistia.net *.intraworlds.com *.wistia.com *.powerbi.com https://d25zu39ynyitwy.cloudfront.net *.paradox.ai https://dokumfe7mps0i.cloudfront.net *.lfeeder.com *.leadfeeder.com blob:; img-src 'self' data: *.2o7.net *.accenture.cn *.accenture.com *.accenture.jp *.accenture.test *.accenturealumni.com *.adnxs.com *.adobe.com *.adobeaemcloud.com *.adobedc.net *.adobedtm.com *.ads-twitter.com *.adsrvr.org *.adsymptotic.com *.amazonaws.com *.appcast.io *.apple.com *.assestsadobe.com *.azurewebsites.net *.bidswitch.net *.bing.com *.bootstrapcdn.com *.bnr.nl *.casalemedia.com *.captcha.com *.clarity.ms *.clicktale.net *.cloudflare.com *.cocubesprod.com *.company-target.com *.companytarget.com *.confirmit.com *.contentsquare.com *.contentsquare.net *.cookielaw.org *.crwdcntrl.net *.d3js.org *.datadoghq-browser-agent.com *.day.com *.demandbase.com *.delvenetworks.com *.demdex.net *.doubleclick.net *.echocdn.com *.echosign.com *.embed.ly *.en25.com *.everesttech.net *.facebook.com *.facebook.net *.flipsnack.com *.fontawesome.com *.ggpht.com *.glassdoor.com *.google.ca *.google.co.in *.google.co.za *.google.com *.google.com.ph *.google.com.sg *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.ietf.org *.javelingroup.com *.jsdelivr.net *.knotch-cdn.com *.knotch.it *.libsyn.com *.licdn.com *.lightinfosys.com *.linkedin.com *.login.live.com *.marketo.net *.mettl.de *.ml314.com *.monster.com *.mktgcdn.com *.newsroom.accenture.de *.novetta.com *.on24.com *.omtrdc.net *.onetrust.com *.oribi.io *.pagetiger.com *.pubmatic.com *.reddit.com *.redditstatic.com *.rlcdn.com *.rosettastone.com *.rubiconproject.com *.salesforce.com *.scene7.com *.schema.org *.siteimprove.com *.slidesharecdn.com *.sndcdn.com *.soundcloud.com *.tableau.com *.trtl.co *.twimg.com *.typekit.net *.unpkg.com *.vidyard.com *.virtualearth.net *.yahoo.com *.youtube.com *.youtube-nocookie.com *.youtubenocookie.com *.ytimg.com https://t.co *.ionicframework.com *.flourish.studio https://flo.uri.sh https://unpkg.com *.delvenetworks.com *.slideshare.net *.jquery.com *.assetsadobe.com *.fintechinnovationlab.com *.pcdn.co *.wistia.net *.intraworlds.com *.wistia.com *.powerbi.com https://browser-intake-datadoghq.com https://d25zu39ynyitwy.cloudfront.net *.paradox.ai https://dokumfe7mps0i.cloudfront.net *.lfeeder.com *.leadfeeder.com blob:; img-src * data:; connect-src *; font-src * data:; upgrade-insecure-requests; block-all-mixed-content 7 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://cdn-app.pathfactoryeu.com *.google.com *.pathfactoryeu.com *.gstatic.com *.sportradar.com https://bugcrowd.com/ https://connect.facebook.net https://www.google-analytics.com https://www.youtube.com https://www.facebook.com https://pi.pardot.com https://snap.licdn.com https://googleads.g.doubleclick.net https://prod-origin.truendo.com https://analytics.tiktok.com https://tag.demandbase.com https://j.6sc.co https://cdn.priv.center https://cdn-geo.priv.center https://cdn-glo.priv.center *.containers.piwik.pro *.smartrecruiters.com *.googletagmanager.com *.hotjar.com https://nitroscripts.com/ *.nitrocdn.com; frame-src 'self' 'unsafe-inline' https://darkhorse.sh https://s.company-target.com/ https://bugcrowd.com/ https://a.sportradarserving.com https://td.doubleclick.net *.youtube.com *.youtu.be *.smartrecruiters.com *.priv.center *.pathfactoryeu.com *.linkedin.com *.piwik.pro https://analytics.tiktok.com tag.demandbase.com *.atriumsports.com *.facebook.net https://xss.hex.run/ https://www.smartrecruiters.com/ https://static.smartrecruiters.com/ *.sportradar.com https://googletagmanager.com www.gstatic.com www.googletagmanager.com *.google.com *.recaptcha.net https://www.google-analytics.com www.google-analytics.com https://fonts.googleapis.com https://cdn.priv.center/ https://www.googleadservices.com https://static.hotjar.com https://snap.licdn.com https://pi.pardot.com https://prod-origin.truendo.com https://googleads.g.doubleclick.net *.onetrust.com/; img-src * data: 'self' blob:; media-src * 'self'; connect-src * https://www.google-analytics.com www.google-analytics.com; font-src * data: 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://use.typekit.net; style-src * 'unsafe-inline' https://fonts.googleapis.com; object-src 'none'; 7 frame-ancestors 'self' *.nokia.com *.ceros.com nokia.lookbookhq.com; report-uri /report-csp-violation 7 base-uri 'self'; font-src 'self' https: data:; form-action 'self' https://www.facebook.com *.visualwebsiteoptimizer.com https://forms.hsforms.com; frame-ancestors 'self' https://cms.hosting.com; img-src 'self' https: data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://stablechat.mysecurecloudhost.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net; upgrade-insecure-requests; worker-src blob:; 7 frame-ancestors *.detik.com *.cnnindonesia.com *.cnbcindonesia.com *.haibunda.com *.insertlive.com *.beautynesia.id *.cxomedia.id *.detikpublishing.com *.ctcorpmpc.com *.allobank.com *.detiknetwork.com *.transtudiobali.com *.transtudiocibubur.com *.transtudiobandung.com *.transsnowworld.com *.transentertainment.com *.berbuatbaik.id *.buzznesia.id pubads.g.doubleclick.net 7 default-src * 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' nic.bradesco imprensa.bradesco vivaprime.bradesco assets.bradesco *.prebanco.com.br *.adobedtm.com *.bing.com *.google.com *.google.com.br *.facebook.com *.facebook.net *.youtube.com *.youtube.com.br *.tiktok.com *.googleapis.com https://fonts.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com https://canalconsorciado.bradesco.com.br *.googleoptimize.com static.ads-twitter.com *.doubleclick.net *.rybena.com.br *.navdmp.com t.co https://banco.bradesco *.bradesco.com.br *.banco.bradesco *.interneth.bradesco.com.br *.bradescopessoajuridica.com.br *.bradescocelular.com.br *.omny.fm *.ggpht.com *.ytimg.com https://turn2c-sandbox.com https://wa.onelink.me https://apps.sae1.pure.cloud *.virtualearth.net https://bancobradesco.tt.omtrdc.net https://dpm.demdex.net https://www.unibrad.com.br; img-src * 'self' data: https:; font-src * 'self' data:; media-src * 'self' data: 7 base-uri 'self'; frame-ancestors 'self'; object-src 'none' 7 block-all-mixed-content;frame-ancestors *.mail.com 7 frame-ancestors 'none'; object-src 'none'; upgrade-insecure-requests; 7 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 7 default-src https: 'unsafe-eval' 'unsafe-inline' 'self' ws: data:; worker-src blob:; object-src 'none'; frame-ancestors 'none' 7 img-src 'self' cbpssubscriber.mygov.in img.youtube.com *.s3waas.gov.in secure.gravatar.com data: www.nic.in informatics.nic.in personnel.nic.in xn--m1bet4hqd2b.xn--h2brj9c xn--m1bet4hqd2b.xn--h2brj9c translation-plugin.bhashini.co.in;connect-src 'self' *.s3waas.gov.in www.google-analytics.com translation-plugin.bhashini.co.in dhruva-api.bhashini.gov.in;object-src 'none' ;media-src 'self' *.s3waas.gov.in data:;child-src *;frame-src *;form-action *.s3waas.gov.in 'self';frame-ancestors 'self' *.s3waas.gov.in ;upgrade-insecure-requests;worker-src 'self' *.s3waas.gov.in data: blob: 7 frame-ancestors 'self' *.ci360.sas.com; 7 frame-ancestors 'self' https://crm.test.doublefs.com https://crm.prod.doublefs.com; 7 default-src https: wss:; frame-src https: blob:; script-src https: 'unsafe-inline' 'unsafe-eval'; script-src-elem https: 'unsafe-inline' data:; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; object-src 'none'; worker-src 'self' blob:; block-all-mixed-content 7 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob: ; font-src https: data:; img-src https: data: blob:; media-src https: data: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 7 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: 'unsafe-inline' 'unsafe-eval';connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline';frame-ancestors * data: blob: ; 7 ; 7 frame-ancestors 'none'; base-uri 'self'; 7 block-all-mixed-content; upgrade-insecure-requests; 7 frame-ancestors 'self' https://builder.io 7 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; 7 frame-ancestors 'self' https://www.johnsoncontrols.com 7 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: 7 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://p2-chat-use1.starcenter.star2star.com/ https://googleads.g.doubleclick.net/ https://www.google.ca/ https://privacy-proxy.usercentrics.eu/ https://www.youtube.com/ https://app.usercentrics.eu/ https://info.sangomaus.local/ https://info.staging.sangoma.com/ https://info.sangoma.com/ https://script.hotjar.com/ https://static.hotjar.com/ https://snap.licdn.com/ https://cdn.howuku.com/ https://api.howuku.com/ https://js.hs-analytics.net/ https://js.hs-scripts.com/ https://js.hs-banner.com/ https://js.hubspot.com/ https://js.hsforms.net/ https://www.googletagmanager.com/ https://www.google.com/ https://www.gstatic.com/ https://play.google.com/ https://www.googleadservices.com/ https://s3.tradingview.com/ https://www.workable.com/ https://dcvxs6ggqztsa.cloudfront.net/ https://apply.workable.com/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' blob: data: https://www.google.ca/ https://secure.gravatar.com/ https://privacy-proxy-server.usercentrics.eu/ https://staging.sangoma.com/ https://app.usercentrics.eu/ https://px.ads.linkedin.com/ https://px4.ads.linkedin.com/ https://perf-na1.hsforms.com/ https://track.hubspot.com/ https://forms-na1.hsforms.com/ https://www.googletagmanager.com/ https://www.linkedin.com/ https://www.x.com/ https://uct.service.usercentrics.eu/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://www.google.com/ https://i.ytimg.com/ ; font-src 'self' data: https://fonts.gstatic.com/; connect-src 'self' https://pagead2.googlesyndication.com/ https://aggregator.service.usercentrics.eu/ https://privacy-proxy.usercentrics.eu/ https://privacy-proxy-server.usercentrics.eu/ https://uct.service.usercentrics.eu/ wss://ws.hotjar.com/ https://api.hsforms.com/ https://api.usercentrics.eu/ https://px.ads.linkedin.com/ https://api.howuku.com/ https://cta-service-cms2.hubspot.com/ https://content.hotjar.io/ https://p2-chat-use1.starcenter.star2star.com/ https://forms.hsforms.com/ https://hubspot-forms-static-embed.s3.amazonaws.com/ https://www.google-analytics.com/ https://www.linkedin.com/ https://www.google.com/ https://www.workable.com/ https://www.youtube.com/ https://www.x.com/ https://metrics.hotjar.io/ https://api.howuku.com/ https://api.howuku.com/ https://vc.hotjar.io/ https://consent-api.service.consent.usercentrics.eu/ https://google.com/ https://www.googleadservices.com/ ;worker-src 'self' blob: https://www.google.com/ ;frame-src 'self' https://p2-chat-use1.starcenter.star2star.com/ https://teamhub-phi.vercel.app/ https://td.doubleclick.net/ https://www.googletagmanager.com/ https://www.google.com/ https://www.youtube.com/ https://forms.hsforms.com/ https://www.tradingview-widget.com/ ;frame-ancestors 'self' https://www.google.com/ ; 7 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.dynamics.com *.cloudinary.com api.stockdio.com *.googletagmanager.com *.azureedge.net *.monitor.azure.com *.livechatinc.com https://static.meiqia.com secure-fra.livechatinc.com *.google.com *.gstatic.com/ procentec.com *.procentec.com https://cdn.matomo.cloud https://hms.matomo.cloud https://cdn.cookielaw.org/ https://snap.licdn.com/ https://cdn.leadinfo.net https://*.ldnfrpl.com https://cdnjs.cloudflare.com https://googleads.g.doubleclick.net/ https://www.googleadservices.com/ *.baidu.com use.typekit.net google.com cdn.jsdelivr.net *.meiqia.com https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api https://cdn.matomo.cloud; font-src 'self' data: api.stockdio.com *.googletagmanager.com *.gstatic.com https://at.alicdn.com/ https://cdn.leadinfo.net use.typekit.net; connect-src 'self' *.dynamics.com *.cloudinary.com api.stockdio.com *.googletagmanager.com *.onetrust.com dc.services.visualstudio.com *.azureedge.net *.hms-networks.com https://api.instatus.com *.meiqia.com procentec.com *.procentec.com *.livechatinc.com https://hms.matomo.cloud/ https://cdn.cookielaw.org/ https://px.ads.linkedin.com/ wss://camorope-client-a.meiqia.com/ https://collector.leadinfo.net www.hms-networks.cn https://api.leadinfo.com https://*.ldnfrpl.com https://li-replay.s3-accelerate.amazonaws.com https://www.google.com/ https://pagead2.googlesyndication.com *.baidu.com https://mobile.events.data.microsoft.com/ https://www.googleadservices.com/ https://collector4.leadinfo.net/ performance.typekit.net use.typekit.net p.typekit.net *.google.com https://*.meiqiacloud.com wss://*.meiqia.com *.meiqiacloud.com wss://*.meiqiacloud.com https://meiqia-upload-temp.oss-cn-zhangjiakou.aliyuncs.com/ https://meiqia-video.oss-cn-shanghai.aliyuncs.com/ https://*.insight.sitefinity.com https://*.dec.sitefinity.com; img-src data: 'self' blob: * *.cookielaw.org https://cdn.cookielaw.org/ https://hm.baidu.com/ https://px.ads.linkedin.com/ https://tenant-assets.meiqiausercontent.com/ https://cdn.livechat-static.com/ https://cdn.livechat-files.com/ https://*.meiqiausercontent.com https://cdn.files-text.com/ https://collector.leadinfo.net https://cdn.leadinfo.net https://www.google.com/ p.typekit.net https://cdn.insight.sitefinity.com; style-src 'unsafe-inline' 'self' api.stockdio.com *.googletagmanager.com *.googleapis.com https://cdn.leadinfo.net use.typekit.net https://cdn.insight.sitefinity.com; frame-src 'self' *.dynamics.com *.cloudinary.com api.stockdio.com *.googletagmanager.com *.azureedge.net *.bihl-wiedemann.de secure-fra.livechatinc.com *.google.com https://www.youtube.com warranty.hms-networks-data.com https://td.doubleclick.net/ *.baidu.com; media-src 'self' data: blob: *.cloudinary.com api.stockdio.com *.googletagmanager.com *.hms-networks.com *.azureedge.net https://static.meiqia.com/ *.meiqia.com https://meiqia-video.meiqiausercontent.com/; child-src 'self' blob: *.dynamics.com *.cloudinary.com api.stockdio.com *.googletagmanager.com *.hms-networks.com *.bihl-wiedemann.de; style-src-elem 'unsafe-inline' 'self' use.typekit.net p.typekit.net cdn.jsdelivr.net 7 default-src 'self' 'unsafe-inline' 'unsafe-eval' 7 default-src 'self' atlassian-companion:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.recaptcha.net tracking.risk.lexisnexis.com code.jquery.com www.gstatic.com player.vimeo.com cdn.cookielaw.org *.clickagy.com *.adsrvr.org www.buzzsprout.com *.6sc.co *.6sense.com *.nrich.ai blob: *.visualwebsiteoptimizer.com cdnjs.cloudflare.com platform.twitter.com connect.facebook.net img.en25.com assets.adobedtm.com js.zi-scripts.com *.zoominfo.com www.googletagmanager.com *.google-analytics.com www.youtube.com www.youtube-nocookie.com s.ytimg.com *.lexisnexis.com *.lexisnexis.co.uk *.lexisnexis.es *.lexisnexis.com.br *.lexisnexis.co.jp *.liadm.com *.qualified.com *.doubleclick.net bat.bing.com *.licdn.com *.linkedin.com *.microad.jp *.baidu.com pagead2.googlesyndication.com www.google.com/recaptcha/; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com fast.fonts.net cdnjs.cloudflare.com *.visualwebsiteoptimizer.com; img-src 'self' data: blob: img.en25.com bat.bing.com *.ytimg.com pbs.twimg.com *.lexisnexis.com *.lexisnexis.co.uk pixel.wp.com *.lexisnexis.es *.lexisnexis.com.br *.lexisnexis.co.jp analytics.lexisnexisrisk.com *.google-analytics.com *.doubleclick.net *.everesttech.net *.demdex.net cdn.cookielaw.org tracking.risk.lexisnexis.com *.pagead2.googlesyndication.com *.clickagy.com *.openx.net *.liadm.com idsync.rlcdn.com *.agkn.com *.visualwebsiteoptimizer.com *.microad.jp pixel-sync.sitescout.com *.linkedin.com *.google.com www.google.co.in *.facebook.com *.adsrvr.org pixel.rubiconproject.com *.6sc.co *.6sense.com www.google.com/recaptcha/ *.nrich.ai; font-src 'self' fonts.gstatic.com *.agkn.com wordpress.com *.tmxcyber.com *.adnxs.com; connect-src 'self' *.microad.jp www.google.co.in *.googleadservices.com browser-intake-datadoghq.com *.visualwebsiteoptimizer.com *.zoominfo.com *.google-analytics.com *.algolia.net *.algolianet.com analytics.lexisnexisrisk.com js.zi-scripts.com *.demdex.net *.everesttech.net www.recaptcha.net cdn.cookielaw.org geolocation.onetrust.com *.lexisnexis.com *.lexisnexis.co.uk *.lexisnexis.es *.lexisnexis.com.br *.lexisnexis.co.jp *.clickagy.com *.adsrvr.org *.liadm.com *.qualified.com wss://*.qualified.com *.google.com bat.bing.com px.ads.linkedin.com *.facebook.com privacyportal.onetrust.com cdnjs.cloudflare.com pagead2.googlesyndication.com *.baidu.com *.6sc.co *.6sense.com www.google.com/recaptcha/ *.nrich.ai; frame-src 'self' atlassian-companion: *.visualwebsiteoptimizer.com www.youtube.com www.comparably.com *.blueflamingo.solutions *.tmxcyber.com app.teamwalnut.com *.doubleclick.net www.buzzsprout.com *.turtl.co www.youtube-nocookie.com platform.twitter.com player.vimeo.com *.demdex.net gateway.on24.com www.recaptcha.net www.google.com/recaptcha/ *.adsrvr.org *.liadm.com www.googletagmanager.com *.qualified.com *.microad.jp cdn.cookielaw.org dpm.demdex.net *.linkedin.com www.kitchco.com nam11.safelinks.protection.outlook.com; media-src 'self' *.cloudfront.net *.qualified.com; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://now.eloqua.com/e/f2; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /cdn-cgi/script_monitor/report 7 default-src https: *; script-src https: 'unsafe-inline' 'unsafe-eval' *;img-src data: https:;font-src data: https:;style-src https: 'unsafe-inline' *;upgrade-insecure-requests;frame-ancestors 'self'; base-uri 'none'; frame-src mailto: *; worker-src blob: *; child-src blob: ; 7 frame-ancestors 'self' https://cms.nextmedia.com.au; 7 default-src https://assets.gameduell.de https://mein.gameduell.de https://my.gameduell.com https://mon.gameduell.fr https://mijn.gameduell.nl https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es https://gameduell.de https://gameduell.com https://gameduell.fr https://gameduell.nl https://gameduell.co.uk https://gameduell.se https://gameduell.dk https://gameduell.at https://gameduell.ca https://gameduell.es; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: asset: https://assets.gameduell.de *.google-analytics.com https://webchat.helpshift.com https://seal.digicert.com https://seal-goldengate.bbb.org https://connect.facebook.net https://www.redditstatic.com https://www.dwin1.com https://www.awin1.com https://lantern.roeyecdn.com https://the.sciencebehindecommerce.com https://*.micropayment.de https://*.checkout.com 'report-sample'; img-src 'self' data: blob: https://mein.gameduell.de https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es blob: https://assets.gameduell.de https://media.gameduell.de https://www.gstatic.com https://fonts.gstatic.com https://fonts.googleapis.com https://lh3.google.com https://lh3.googleusercontent.com https://seal.digicert.com https://d2duuy9yo5pldo.cloudfront.net https://www.facebook.com https://alb.reddit.com https://www.awin1.com https://lantern.roeye.com https://lantern.roeyecdn.com https://www.wepowerconnections.com 'report-sample'; style-src 'self' blob: 'unsafe-inline' https://assets.gameduell.de https://seal-blue.bbb.org; object-src 'self' https://*.gameduell.de https://assets.gameduell.de; connect-src 'self' wss://*.gameduell.de wss://my.gameduell.com wss://mon.gameduell.fr wss://mijn.gameduell.nl wss://www.gameduell.de wss://www.gameduell.com wss://www.gameduell.fr wss://www.gameduell.nl wss://www.gameduell.co.uk wss://www.gameduell.se wss://www.gameduell.dk wss://www.gameduell.at wss://www.gameduell.ca wss://www.gameduell.es https://*.gameduell.de blob: https://assets.gameduell.de https://cdp.cloud.unity3d.com https://config.uca.cloud.unity3d.com https://perf-events.cloud.unity3d.com https://www.redditstatic.com https://pixel-config.reddit.com https://conversions-config.reddit.com https://the.sciencebehindecommerce.com https://*.checkout.com https://*.boku.com; form-action 'self' https://mein.gameduell.de https://my.gameduell.com https://mon.gameduell.fr https://mijn.gameduell.nl https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es 'report-sample'; child-src 'self' blob: https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es https://mein.gameduell.de https://my.gameduell.com https://mon.gameduell.fr https://mijn.gameduell.nl https://assets.gameduell.de https://*.helpshift.com https://*.micropayment.de https://*.checkout.com https://*.boku.com; font-src 'self' data: blob: https://assets.gameduell.de https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es https://mein.gameduell.de https://my.gameduell.com https://mon.gameduell.fr https://mijn.gameduell.nl https://assets.gameduell.de https://*.helpshift.com https://www.awin1.com https://*.micropayment.de https://*.checkout.com https://*.boku.com https://orange.w-ha.com https://3dsecure-vrp.de; worker-src 'self' blob:; media-src 'self' data: blob: https://assets.gameduell.de; frame-ancestors 'self' https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es https://admintool.gameduell.de; base-uri 'self' https://assets.gameduell.de https://mein.gameduell.de https://my.gameduell.com https://mon.gameduell.fr https://mijn.gameduell.nl https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es; manifest-src blob: 'self' https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es; report-uri /gd/rest/jslog/csp 7 frame-ancestors https://*.teknikproffset.se https://pj-guiding-content.sanity.studio 'self' 7 default-src 'self' 'unsafe-inline'; 7 frame-ancestors 'self' https://virtual-tours.msccruises.com; 7 frame-ancestors 'self' https://www.quironsalud.com https://betaweb.quironsalud.es https://international.quironsalud.com https://olympia.quironsalud.com https://olympia.quironsalud.es https://overweightinstitute.fjd.es https://pacientes.healthdiagnostic.es https://rare-genomics.com https://teknon.quironsalud.com https://www.cirujanosdelcorazon.es https://www.clinicadelpilar.org https://www.clinicavalles.com https://www.cuidamosdelamujer.es https://www.diverhospital.es https://www.e-quironsalud.com https://www.fjd.es https://www.fundacionquironsalud.org https://www.hgc.es https://www.hgvillalba.es https://www.hope-documental.es https://www.hospitalinfantaelena.es https://www.hospitalpublicocolladovillalba.es https://www.hospitalreyjuancarlos.es https://www.hscor.com https://www.idcsaludenfermeria.es https://www.idcsalud.es https://www.imbanaco.com https://www.jornadaspbp.es https://www.lungscreen.eu https://www.oncohealth.eu https://www.porquesabeselegir.es https://www.quironsalud.es https://www.quironsalud-hospitals.com https://www.rare-genomics.com https://www.recetaenergia.es https://www.redneurosalud.es https://www.ruber.es https://www.ruberinternacional.es https://www.teknonbarcelona.com https://www.teknonbarcelona.it https://www.teknonbarcelona.ru https://www.tucanaldesalud.com 7 upgrade-insecure-requests; object-src 'none'; 7 frame-ancestors 'self';base-uri 'self';font-src 'self' https: data:;object-src 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 7 default-src 'self' https://static-cdn.cruzeirodosul.edu.br; frame-ancestors 'none'; upgrade-insecure-requests; 7 frame-ancestors self; 7 frame-ancestors 'self' https://*.ticombo.ae https://*.ticombo.al https://*.ticombo.ar https://*.ticombo.at https://*.ticombo.be https://*.ticombo.bg https://*.ticombo.ch https://*.ticombo.cn https://*.ticombo.com https://*.ticombo.com.br https://*.ticombo.com.tr https://*.ticombo.cz https://*.ticombo.de https://*.ticombo.dk https://*.ticombo.ee https://*.ticombo.es https://*.ticombo.eu https://*.ticombo.fi https://*.ticombo.fr https://*.ticombo.ge https://*.ticombo.gr https://*.ticombo.hk https://*.ticombo.hr https://*.ticombo.hu https://*.ticombo.ie https://*.ticombo.in https://*.ticombo.is https://*.ticombo.it https://*.ticombo.jp https://*.ticombo.kr https://*.ticombo.lt https://*.ticombo.lv https://*.ticombo.mk https://*.ticombo.mx https://*.ticombo.net https://*.ticombo.nl https://*.ticombo.no https://*.ticombo.pl https://*.ticombo.pt https://*.ticombo.qa https://*.ticombo.ro https://*.ticombo.rs https://*.ticombo.se https://*.ticombo.si https://*.ticombo.sk https://*.ticombo.sr https://*.ticombo.us https://*.ticomboinfo.hk; 7 default-src *; script-src * 'unsafe-eval' 'self' 'unsafe-inline' https:; style-src * 'unsafe-inline'; object-src 'self' *.youtube.com youtube.com; img-src * data:; frame-src * blob:; font-src * data:; connect-src *; media-src * blob:; worker-src 'self' blob:; 7 object-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content 7 frame-ancestors 'self' https://*.unbounce.com https://app.unbounce.com https://unbouncepages.com https://*.daysmart.com https://*.vettersoftware.com https://vettersoftware.com 7 frame-ancestors 'none'; upgrade-insecure-requests; 7 frame-src 'self' https: data:; 7 default-src 'none'; style-src 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; script-src 'unsafe-inline'; connect-src https://api.ipify.org; base-uri 'none' 7 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://code.jquery.com http://s7.addthis.com https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; img-src 'self' https:; frame-src 'self' https: https://www.google.com; object-src 'none'; frame-ancestors 'self';connect-src 'self' https://www.google-analytics.com https://analytics.google.com https:; 7 default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' https://analytics.filen.io/js/plausible.js https://challenges.cloudflare.com;style-src 'report-sample' 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https://analytics.filen.io https://challenges.cloudflare.com; font-src 'self'; frame-src 'self' https://challenges.cloudflare.com; img-src 'self' https://blog.filen.io https://api.dicebear.com https://cdn.discordapp.com https://filen.io data:; manifest-src 'self'; media-src 'self'; worker-src 'none'; 7 worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: *.typekit.net *.audioeye.com cdn.shopify.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'self' 'unsafe-inline'; frame-ancestors *.googletagmanager.com *.gstatic.com *.jst.ai ajax.googleapis.com *.affirm.com *.launchdarkly.com connect.facebook.net *.audioeye.com *.imgur.com web.hyro.ws wss://web.hyro.ws 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.google.com *.demdex.net www.googletagmanager.com *.instagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.vimeo.com *.hotjar.com *.doubleclick.net *.jst.ai *.paymetric.com *.affirm.com *.audioeye.com *.imgur.com web.hyro.ws wss://web.hyro.ws *.zdassets.com *.visualwebsiteoptimizer.com app.vwo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net validator.swagger.io *.cdninstagram.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com via.placeholder.com *.klaviyo.com *.google.com *.google.ca *.facebook.com *.fls.doubleclick.net googleapis.com *.affirm.com *.jst.ai cdn.cookielaw.org *.audioeye.com *.imgur.com blob: *.bing.com *.clarity.ms web.hyro.ws wss://web.hyro.ws *.zdassets.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io https://imgs.signifyd.com https://*.online-metrix.net s7d9.scene7.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com *.google.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com https://rum.hlx.page *.instagram.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com api.airbud.io demo.airbud.io ajax.googleapis.com *.klaviyo.com cdnjs.cloudflare.com js-agent.newrelic.com bam.nr-data.net player.vimeo.com *.typekit.net *.hotjar.com *.jst.ai *.kmail-lists.com *.affirm.com *.launchdarkly.com *.audioeye.com *.imgur.com cdn.cookielaw.org *.bing.com *.clarity.ms web.hyro.ws wss://web.hyro.ws *.zdassets.com api.smooch.io wss://api.smooch.io app.vwo.com *.visualwebsiteoptimizer.com *.mountain.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net https://static.klaviyo.com unsafe-inline assets.braintreegateway.com api.airbud.io demo.airbud.io *.klaviyo.com *.typekit.net *.affirm.com *.launchdarkly.com connect.facebook.net *.jst.ai *.audioeye.com web.hyro.ws *.zdassets.com *.visualwebsiteoptimizer.com app.vwo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.cdninstagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.imgur.com blob: web.hyro.ws *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.klaviyo.com prod.airbud.io bam.nr-data.net *.google-analytics.com *.doubleclick.net *.kmail-lists.com *.youtube.com *.affirm.com *.launchdarkly.com *.jst.ai *.audioeye.com *.imgur.com hyropublic.blob.core.windows.net *.cookielaw.org *.onetrust.com *.clarity.ms *.bing.com web.hyro.ws wss://web.hyro.ws wss://widget-mediator.zopim.com *.zdassets.com *.adobedtm.com api.smooch.io wss://api.smooch.io wheelpros.tt.omtrdc.net *.visualwebsiteoptimizer.com app.vwo.com 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; 7 frame-ancestors 'self' https://*.contentstack.com 7 default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts; 7 object-src 'none'; frame-ancestors 'self'; block-all-mixed-content; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-downloads; base-uri 'self'; 7 default-src 'self'; connect-src *; font-src data: *; frame-src *; img-src data: *; media-src *; object-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'self' 'unsafe-inline'; 7 default-src *;script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline';img-src * data: blob:;child-src * blob:;connect-src *;font-src * data:;object-src *;media-src *;frame-src *;base-uri *;form-action *;frame-ancestors *;script-src-attr *;upgrade-insecure-requests 7 default-src 'self'; connect-src *; font-src 'self' data:; frame-src *; img-src data: *; media-src *; object-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'self' 'unsafe-inline'; 7 default-src https: wss: data: 'unsafe-inline' 'unsafe-eval' 7 script-src 'self'; object-src 'none' 7 base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com https://cdn.mouseflow.com https://*.klaviyo.com; form-action 'self' https://*.adyen.com https://www.facebook.com; frame-ancestors 'self' https://*.weleda.bloomreach.cloud https://www.weleda.fr; img-src 'self' data: https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://*.google-analytics.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://cdn.cookielaw.org https://i.ytimg.com https://*.adyen.com https://*.paypalobjects.com https://*.weleda.bloomreach.cloud https://*.weleda.com https://*.weleda.com.au https://*.mimecast.com https://insight.adsrvr.org https://shopper.shop.pe https://*.bing.net https://*.taboola.com https://*.tvsquared.com https://s.pinimg.com https://*.facebook.com https://*.gstatic.com https://assets.local:8080 https://*.liadm.com https://partner.mediawallahscript.com https://*.bing.com https://i.imgur.com https://lh3.googleusercontent.com https://connect.facebook.net https://analytics.tiktok.com https://log.pinterest.com https://*.adnxs.com https://maps.googleapis.com/ https://*.teads.tv https://action.metaffiliation.com https://*.criteo.com https://*.criteo.net https://www.capitalkoala.com https://*.weleda.fr https://*.snapchat.com https://*.datnova.com https://*.pubmatic.com https://*.casalemedia.com https://*.media.net https://*.bidswitch.net https://*.1rx.io https://*.tremorhub.com https://*.smartadserver.com https://*.outbrain.com https://*.postrelease.com https://*.mediavine.com https://*.360yield.com https://*.id5-sync.com https://id5-sync.com https://*.3lift.com https://*.yieldlab.net https://*.linksynergy.com *.bazaarvoice.com https://px.ads.linkedin.com https://*.clarity.ms https://d3k81ch9hvuctc.cloudfront.net https://*.seznam.cz https://*.seadform.net https://*.rcvtag.com https://*.rcvlink.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' https: data: 'unsafe-inline' http://fonts.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.weleda.bloomreach.cloud https://*.googletagmanager.com https://googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com https://*.google.com https://*.googleadservices.com https://s.pinimg.com https://cdn.cookielaw.org https://*.gstatic.com https://tag.rmp.rakuten.com https://connect.facebook.net https://analytics.tiktok.com https://shop.pe https://*.shop.pe https://addshoppers.s3.amazonaws.com https://www.upsellit.com https://*.cloudfront.net https://ct.pinterest.com https://*.mouseflow.com https://*.bing.com https://*.taboola.com https://*.paypal.com https://*.tvsquared.com https://*.youtube.com https://translate.yandex.net https://service2.daguands.cn https://applepay.cdn-apple.com https://acdn.adnxs.com https://*.adform.net https://adform.net https://maps.googleapis.com/ https://*.criteo.com https://*.teads.tv https://*.amazon-adsystem.com https://zew.weleda.fr https://*.perfmaker.net https://*.cookieless-data.com https://*.sddan.com https://*.optimalpeople.fr https://sc-static.net https://*.snapchat.com https://*.datnova.com https://*.sirdata.io *.bazaarvoice.com *.bv.com https://widget.packeta.com https://snap.licdn.com https://*.klaviyo.com https://*.hotjar.com https://*.clarity.ms https://*.seznam.cz https://*.dognet.sk; upgrade-insecure-requests; connect-src 'self' https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://*.weleda.bloomreach.cloud https://*.googleapis.com https://*.googlesyndication.com https://*.google-analytics.com https://*.googleadservices.com https://*.googletagmanager.com https://*.merchant-center-analytics.goog https://cdn.cookielaw.org https://*.doubleclick.net https://*.weleda.com https://*.weleda.com.au https://*.weleda.de https://*.weleda.at https://*.weleda.be https://*.weleda.ch https://*.weleda.nl https://*.weleda.se https://*.weleda.es https://*.weleda.it https://*.weleda.fr https://*.weleda.co.nz https://*.weleda.co.uk https://*.weleda.ge https://*.weleda.gr https://*.weleda.hr https://*.weleda.hu https://*.weleda.com.ro https://*.weleda.si https://*.weleda.co.za https://*.weleda.dk https://*.weleda.fi https://*.weleda.is https://*.weleda.no https://*.weleda.cz https://*.weleda.sk https://*.weleda.kr https://*.weleda.ua https://*.weleda.pl https://*.paypal.com https://analytics.tiktok.com https://*.bing.net https://*.taboola.com https://ct.pinterest.com https://s.pinimg.com https://manage.safeopt.com https://*.adyen.com https://*.shop.pe https://*.onetrust.com https://*.mouseflow.com https://www.facebook.com https://connect.facebook.net https://*.bing.com https://infragrid.v.network https://api.addressy.com https://ib.adnxs.com https://*.teads.tv https://*.amazon-adsystem.com https://action.metaffiliation.com https://*.perfmaker.net https://*.criteo.com https://*.criteo.net https://*.optimalpeople.fr https://*.paa-reporting-advertising.amazon https://*.snapchat.com https://*.sirdata.io *.bazaarvoice.com https://widget.packeta.com https://px.ads.linkedin.com https://*.klaviyo.com https://*.hotjar.com https://*.hotjar.io https://*.clarity.ms https://*.seznam.cz https://*.rcvtag.com https://*.rcvlink.com; media-src 'self' https://*.googleapis.com https://*.doubleclick.net; frame-src 'self' https://*.google.com https://*.googletagmanager.com https://*.doubleclick.net https://*.adyen.com https://*.paypal.com https://*.youtube-nocookie.com https://*.youtube.com https://*.weleda.de https://*.weleda.at https://*.weleda.be https://*.weleda.ch https://*.weleda.nl https://*.weleda.se https://*.weleda.com https://*.weleda.es https://*.weleda.it https://*.weleda.fr https://*.weleda.co.nz https://*.weleda.co.uk https://*.weleda.com.au https://*.weleda.ge https://*.weleda.gr https://*.weleda.hr https://*.weleda.hu https://*.weleda.com.ro https://*.weleda.si https://*.weleda.co.za https://*.weleda.dk https://*.weleda.fi https://*.weleda.is https://*.weleda.no https://*.weleda.cz https://*.weleda.sk https://*.weleda.kr https://*.weleda.ua https://*.weleda.pl https://cdn.taboola.com https://s.pinimg.com https://*.pinterest.com https://www.facebook.com https://applepay.cdn-apple.com https://*.adform.net https://*.criteo.com https://*.criteo.net https://*.perfmaker.net https://*.amazon-adsystem.com https://*.snapchat.com https://*.nytrng.com https://nytrng.com https://widget.packeta.com https://backup.widget.packeta.com/ https://*.jotform.com; report-uri /api/csp-report; 7 frame-ancestors 'self' https://tagassistant.google.com 7 default-src https: 'unsafe-inline' 'unsafe-eval' 7 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://padlet.com https://singhealth-rheumatology.app.keyreply.com https://kkh.app.keyreply.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.gstatic.com https://kkh-edubot.app.keyreply.com https://connect.facebook.net https://ndcs.app.keyreply.com https://singhealth.app.keyreply.com https://shp.app.keyreply.com https://singhealth-rheumatology.app.keyreply.com https://api.sgp2.ovp.kaltura.com https://mediaweb.ap.panopto.com *.google-analytics.com *.googletagmanager.com *.youtube.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com; img-src 'self' data: https://padlet.net https://keyreplykkh.blob.core.windows.net https://keyreplykkhedubotuat.blob.core.windows.net https://keyreplysinghealth.blob.core.windows.net https://keyreplyshpuat.blob.core.windows.net https://keyreplykkhedubot.blob.core.windows.net https://keyreplyshpuat.blob.core.windows.net https://keyreplykkhedubot.blob.core.windows.net https://rheumatologyprod.blob.core.windows.net https://www.google.com https://www.gstatic.com https://fonts.gstatic.com https://www.google.co.in https://keyreplyndcs.blob.core.windows.net https://keyreply.blob.core.windows.net https://assets.uat-hhm.hhtest.sg https://ch-api.healthhub.sg https://keyreplysinghealthuat.blob.core.windows.net *.google-analytics.com *.googletagmanager.com *.youtube.com; connect-src 'self' https://www.google.com https://padlet.com https://singhealth-rheumatology.app.keyreply.com https://kkh.app.keyreply.com https://kkh-edubot.app.keyreply.com https://analytics.google.com https://stats.g.doubleclick.net https://www.gstatic.com https://translate.googleapis.com https://translate-pa.googleapis.com https://connect.facebook.net https://www.facebook.com https://ndcs.app.keyreply.com https://singhealth-rheumatology.app.keyreply.com https://singhealth.app.keyreply.com https://shp.app.keyreply.com https://*.keyreply.com https://customercare-webapi.azurewebsites.net wss://customercare-webapi.azurewebsites.net wss://ndcs.app.keyreply.com https://api.sgp2.ovp.kaltura.com https://mediaweb.ap.panopto.com *.google-analytics.com *.googletagmanager.com *.youtube.com; font-src 'self' data: https://webchat.keyreply.com; media-src 'self' https://keyreply.blob.core.windows.net; object-src 'none'; frame-src 'self' https://padlet.com https://www.google.com https://translate-pa.googleapis.com https://singhealth-rheumatology.app.keyreply.com https://kkh.app.keyreply.com https://singhealth.app.keyreply.com https://singhealth-rheumatology.app.keyreply.com https://shp.app.keyreply.com https://kkh-edubot.app.keyreply.com https://momento360.com https://*.momento360.com https://api.sgp2.ovp.kaltura.com https://mediaweb.ap.panopto.com *.google-analytics.com *.googletagmanager.com *.youtube.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; 7 frame-ancestors 'self' facebook.com 7 base-uri 'self'; font-src 'self' data: https:; img-src 'self' data: https:; object-src 'none'; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss: blob:; child-src 'self' https: wss: blob:; frame-src 'self' https:; form-action 'self' https: 7 upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://*.erwinhymergroup.com https://*.laika.it 7 default-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.domain-robot.org https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.usercentrics.eu https://aggregator.service.usercentrics.eu https://www.google.com https://*.usercentrics.eu https://www.googleadservices.com https://snap.licdn.com https://*.facebook.net https://googleads.g.doubleclick.net https://*.ads-twitter.com https://*.twitter.com https://*.hotjar.com https://*.hotjar.io https://*.linkedin.com https://t.co https://*.google.de https://*.google.com https://*.facebook.com https://seal.digicert.com blob: data: https://fonts.googleapis.com/css;font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; 7 frame-ancestors app.storyblok.com 7 frame-ancestors 'self'; report-uri https://stoklasa.report-uri.io/r/default/csp/enforce 7 default-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob:; frame-ancestors 'self'; form-action 'self' 7 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none'; worker-src 'self' blob:; upgrade-insecure-requests 7 default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' blob: 7 base-uri 'none'; font-src 'self' https: data:; form-action self https://cart.penguinrandomhouse.com https://www.facebook.com; frame-ancestors 'self'; img-src 'self' data: https://sites.prh.com https://www.penguinrandomhouse.com https://images.penguinrandomhouse.com https://images.randomhouse.com https://res.cloudinary.com https://i.ytimg.com https://i.vimeocdn.com https://s.amazon-adsystem.com https://px.ads.linkedin.com https://www.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://pixel.sitescout.com https://c.lytics.io/ https://cm.everesttech.net https://dpm.demdex.net https://attribution.sitescout.com https://alb.reddit.com https://www.googletagmanager.com https://scode.randomhouse.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' tags.tiqcdn.com https://c.lytics.io https://www.googleadservices.com https://www.googletagmanager.com https://s.pinimg.com https://snap.licdn.com/ https://analytics.tiktok.com https://sc-static.net https://connect.facebook.net https://b-code.liadm.com https://cdn01.basis.net https://visitor-service-us-east-1.tealiumiq.com https://googleads.g.doubleclick.net https://tr.snapchat.com https://ct.pinterest.com https://rum-static.pingdom.net https://www.redditstatic.com https://pixel.byspotify.com https://visitor-service.tealiumiq.com; upgrade-insecure-requests; 7 default-src 'self'; script-src 'self' 'strict-dynamic' 'sha256-l3tfobNGSDsiWwzSdX9QqvprTaL+kQGzfRzpdkbM1m0=' 'sha256-aXFWSsQLd4kfpqpWNQwLKFmiDgjd+I1iaw3mCViRRUc=' 'unsafe-inline' 'wasm-unsafe-eval' https://vrt.be https://*.vrt.be https://*.sentry-cdn.com https://assets.adobedtm.com https://cdn.cxense.com/cx.js https://api.cxense.com https://cdn.jsdelivr.net/npm/@snowplow/browser-plugin-performance-timing@latest/dist/index.umd.min.js https://gabe.hit.gemius.pl https://imasdk.googleapis.com/js/sdkloader/ima3.js https://www.gstatic.com https://*.opecloud.com https://cdn.jsdelivr.net/npm/ua-parser-js@1.0.35/src/ua-parser.min.js https://www.clarity.ms; style-src 'self' 'unsafe-inline' https://vrt.be https://*.vrt.be https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' wss://messaging-dev.vrt.be wss://messaging-stag.vrt.be wss://messaging.vrt.be https://aiqqdf60ri.execute-api.eu-west-1.amazonaws.com/v1 https://c6e53c9nif.execute-api.eu-west-1.amazonaws.com/v1 https://bw6h6v242d.execute-api.eu-west-1.amazonaws.com/v1 https://chat.stream-io-api.com wss://chat.stream-io-api.com wss://api-dev.vrt.radio/socket.io/ wss://api-stag.vrt.radio/socket.io/ wss://api.vrt.radio/socket.io/ https://vrt.be https://*.vrt.be https://*.vrtcdn.be https://vrtmax.stag.a51.be https://*.omtrdc.net https://o140591.ingest.sentry.io https://dpm.demdex.net https://widevine-proxy.drm.technology/proxy https://*.privacymanager.io https://gabe.hit.gemius.pl https://fairplay-license.drm.technology https://*.jwplayer.com https://*.mediatailor.us-east-1.amazonaws.com https://vrt-live.cdn.vustreams.com https://api-dev.vrt.radio https://api-stag.vrt.radio https://api.vrt.radio https://cdn.jsdelivr.net/npm/ua-parser-js@1.0.35/src/ua-parser.min.js https://*.opecloud.com https://*.clarity.ms https://sporza-api.stag.a51.be https://api.sporza.be https://resources.vudrm.tech https://cdnjs.cloudflare.com/polyfill/v3/ https://growthbook-api.datascience.a51.be https://*.streamabc.net https://cdn.jsdelivr.net/npm/shaka-player@4.16.6/ https://cdn.jsdelivr.net/npm/shaka-player@4.16.16/ https://cdn.jsdelivr.net/npm/shaka-player@4.16.35/ https://cdn.jsdelivr.net/npm/hls.js@1.6.13/ https://cdn.jsdelivr.net/npm/hls.min.js https://cdn.jsdelivr.net/npm/hls.min.js.map https://cdn.jsdelivr.net/npm/emojibase-data@latest/ https://cdn.jsdelivr.net/npm/bitmovin-analytics@2.53.2/ https://analytics-ingress-global.bitmovin.com; font-src 'self' https://vrt.be https://*.vrt.be; frame-ancestors 'self' https://vrt.be https://*.vrt.be https://*.prepr.io; frame-src 'self' https://vrt.be https://*.vrt.be https://*.ketnet.be https://vrtbe.demdex.net https://cdn.cxense.com https://*.privacymanager.io https://ls.hit.gemius.pl https://unpkg.com/ https://interactief.radio2.be https://interactief.radio1.be https://interactief.mnm.be https://interactief.stubru.be https://interactief.een.be https://interactief.klara.be; img-src 'self' data: https://aiqqdf60ri.execute-api.eu-west-1.amazonaws.com/v1 https://c6e53c9nif.execute-api.eu-west-1.amazonaws.com/v1 https://bw6h6v242d.execute-api.eu-west-1.amazonaws.com/v1 https://getstream.imgix.net/images/emoji-sprite.png https://vrt.be https://*.vrt.be https://vrt.sc.omtrdc.net https://comcluster.cxense.com https://*.postrelease.com https://*.cxense.com https://*.demdex.net https://*.opecloud.com https://storage.googleapis.com/wallofmoments-stubru-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-mnm-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-klara-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-radio1-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-radio2-adhoc.appspot.com/ https://storage.googleapis.com/wom-detijdloze-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-stubru.appspot.com/ https://storage.googleapis.com/wallofmoments-mnm.appspot.com/ https://storage.googleapis.com/wallofmoments-klara.appspot.com/ https://storage.googleapis.com/wallofmoments-radio1.appspot.com/ https://storage.googleapis.com/wallofmoments-radio2.appspot.com/ https://storage.googleapis.com/wom-detijdloze.appspot.com/ https://storage.googleapis.com/wom---radio2-benebene.appspot.com/ https://storage.googleapis.com/wom-dww.appspot.com/ https://dublin.stream-io-cdn.com/; manifest-src 'self'; media-src 'self' blob: data: https://*.vrt.be https://*.vrtcdn.be https://*.jwplayer.com https://*.mediatailor.us-east-1.amazonaws.com https://storage.googleapis.com/wallofmoments-stubru-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-mnm-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-klara-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-radio1-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-radio2-adhoc.appspot.com/ https://storage.googleapis.com/wom-detijdloze-adhoc.appspot.com/ https://storage.googleapis.com/wallofmoments-stubru.appspot.com/ https://storage.googleapis.com/wallofmoments-mnm.appspot.com/ https://storage.googleapis.com/wallofmoments-klara.appspot.com/ https://storage.googleapis.com/wallofmoments-radio1.appspot.com/ https://storage.googleapis.com/wallofmoments-radio2.appspot.com/ https://storage.googleapis.com/wom-detijdloze.appspot.com/ https://storage.googleapis.com/wom---radio2-benebene.appspot.com/ https://storage.googleapis.com/wom-dww.appspot.com/ https://*.googletagservices.com https://resources.vudrm.tech https://vrt.simplecastaudio.com https://*.stream-io-cdn.com; worker-src 'self' blob:; 7 frame-ancestors 'self' http://*.elsevier.es/ 7 frame-ancestors 'self' https://t.easystreetrealty.com http://t.easystreetrealty.com https://t.highgarden.com http://t.highgarden.com 7 default-src https: data: wss: blob: 'unsafe-inline' 'unsafe-eval' 7 upgrade-insecure-requests; font-src data: https:; img-src data: https:; default-src https: blob: 'unsafe-inline' 'unsafe-eval' 7 frame-ancestors 'self' *.plentymarkets-cloud-ie.com *.my.plentysystems.com 7 default-src * blob: data: cid:; img-src * data: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data: 7 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 7 frame-ancestors 'self' https://*.negocom-atlantique.com, base-uri 'self', script-src 'self' 'unsafe-inline' 'unsafe-eval' *.negocom-atlantique.com *.point-sys.com *.googletagmanager.com *.google-analytics.com *.google.fr *.googleapis.com *.youtube.com *.dmcdn.net *.jsdelivr.net *.clarity.ms *.mapbox.com blob: 7 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; 7 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdn01l.vaillant-group.com *.adalyser.com *.adform.com *.adform.net *.adroll.com *.bing.com *.consentmanager.net *.contentsquare.net *.criteo.com *.doubleclick.net *.facebook.com *.facebook.net *.g.doubleclick.net *.glp8.net *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vu *.google.ws *.googleadservices.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.hotjar.com *.ibm.com *.loyjoy.com *.optimizely.com *.outbrain.com *.pinterest.com *.presage.io *.redditstatic.com *.clarity.ms *.serving-sys.com *.taboola.com *.tiktok.com *.tiktokw.us *.xo-matic.com *.youtube.com *.zenloop.com a.mgid.com acdn.adnxs.com c.seznam.cz c1.rfihub.net cdn-assets-prod.s3.amazonaws.com cdn.inis360.com cdn.oribi.io cdn.prod.uidapi.com cdn.userway.org cloudrizon.formstack.com contactis.ua graph.facebook.com heizungonline.vaillant.de heyzine.com io.fusedeck.net js.adsrvr.org mes-devis.saunierduval.fr mojklient.vaillant.pl offer.vaillant.be offerte.bulex.be offre.bulex.be optimizely.s3.amazonaws.com popup.campaign.playable.com preventivi.vaillant.it s.pinimg.com s.yimg.com snap.licdn.com static.ads-twitter.com static.cleverpush.com static.criteo.net tags.creativecdn.com toolbox-gb-glowworm.prod.cloud.heatingonline.de toolbox.be-bulex.live-2.vaillant.neoskop.cloud toolbox.it-vaillant.development.heatingonline.cloud toolbox.it-vaillant.staging.heatingonline.cloud toolbox.vaillant.de vaillantp.ubiqubit.it verkoopkansen.vaillant.nl widget.trustpilot.com www.clarity.ms www.google-analytics.com www.googletagmanager.com www.instalxpert.be www.recaptcha.net; connect-src 'self' ws: *.adform.net *.analytics.google.com *.bing.com *.bing.net *.clarity.ms *.contentsquare.net *.criteo.com *.delivery.consentmanager.net *.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.facebook.com *.facebook.net *.glp8.net *.hotjar.com *.hotjar.io *.linkedin.com *.loyjoy.com *.optimizely.com *.outbrain.com *.pinterest.com *.prod.uidapi.com *.reddit.com *.redditstatic.com *.serving-sys.com *.taboola.com *.tiktok.com *.tiktokw.us *.xo-matic.com ams.creativecdn.com api.cleverpush.com capi.vaillant.es capig.stape.cc heizungonline.vaillant.de ib.adnxs.com ice.360yield.com insight.adsrvr.org logx.optimizely.com mes-devis.saunierduval.fr mojklient.vaillant.pl offer.vaillant.be offerte.bulex.be offre.bulex.be operator-integ.uidapi.com premiumstory.bvz.at premiumstory.noen.at branded-content.tt.com preventivi.vaillant.it prod.uidapi.com s.yimg.com story.nachrichten.at story.vienna.at story.vol.at toolbox-gb-glowworm.prod.cloud.heatingonline.de toolbox.be-bulex.live-2.vaillant.neoskop.cloud toolbox.it-vaillant.development.heatingonline.cloud toolbox.it-vaillant.staging.heatingonline.cloud toolbox.vaillant.de verkoopkansen.vaillant.nl; style-src 'self' 'unsafe-inline' *.loyjoy.com *.glp8.net *.zenloop.com app.optimizely.com cdn01l.vaillant-group.com cloudrizon.formstack.com contactis.ua fonts.googleapis.com heizungonline.vaillant.de mes-devis.saunierduval.fr mojklient.vaillant.pl offer.vaillant.be offerte.bulex.be offre.bulex.be preventivi.vaillant.it tagmanager.google.com toolbox-gb-glowworm.prod.cloud.heatingonline.de toolbox.be-bulex.live-2.vaillant.neoskop.cloud toolbox.it-vaillant.development.heatingonline.cloud toolbox.it-vaillant.staging.heatingonline.cloud toolbox.vaillant.de verkoopkansen.vaillant.nl www.googletagmanager.com www.instalxpert.be; img-src 'self' blob: data: *.1rx.io *.adalyser.com *.adform.net *.adlmerge.com *.adroll.com *.agkn.com *.atemda.com *.bidswitch.net *.bing.com *.bing.net *.clarity.ms *.consentmanager.net *.contentsquare.net *.creativecdn.com *.doubleclick.net *.facebook.com *.facebook.net *.g.doubleclick.net *.glp8.net *.google-analytics.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vu *.google.ws *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hit.gemius.pl *.linkedin.com *.loyjoy.com *.outbrain.com *.presage.io *.pubmatic.com *.reddit.com *.taboola.com *.xo-matic.com a.mgid.com a.twiago.com aax-eu.amazon-adsystem.com ad.360yield.com ad.as.amanad.adtdp.com ad.mail.ru ad.tpmn.co.kr ad.yieldlab.net ad.yieldlab.net adasta-pbs.relevant-digital.com adlmerge.com adn.caprofitx.com ads.betweendigital.com ads.betweendigital.com ads.enjoy4fun.com ads.stickyadstv.com ads.yieldmo.com an.yandex.ru an.yandex.ru analytics.ad.daum.net api.gov-img.site app.optimizely.com atemda.com bbnaut.ibillboard.com bbnaut.ibillboard.com bh.contextweb.com bh.contextweb.com c.seznam.cz c1.adform.net capturemedia-assets.com cdn.optimizely.com cdn.performax.cz cdn.userway.org cdn01l.vaillant-group.com ce.lijit.com clientes.saunierduval.es clientes.vaillant.es cm.adform.net cm.g.doubleclick.net cm.gammaplatform.com cm.gammaplatform.com cm.mgid.com cmeu.hit.gemius.pl cm-exchange.toast.com cmrtbhpl.hit.gemius.pl contactis.ua contextual.media.net cookiesync.axis-marketplace.com cookiesyncgotham.com criteo-partners.tremorhub.com criteo-sync.teads.tv cs.adingo.jp cs.gssprt.jp cs.gssprt.jp cs.mobfox.com cs.yellowblue.io cstb.adsinteractive.com csync.loopme.me csync.smilewanted.com delivery.swid.switchads.com delivery.swid.switchads.com dis.criteo.com dmx.districtm.io dot.wp.pl dpm.demdex.net dsum-sec.casalemedia.com dsum-sec.casalemedia.com e1.emxdgt.com e1.emxdgt.com eb2.3lift.com eb2.3lift.com eexsync.com elb.the-ozone-project.com exchange.mediavine.com fast.nexx360.io fusedeck.com glp8.net goo.gamx.io gum.criteo.com hb.adtarget.com.tr hb.r2b2.cz hb.r2b2.io hb.yahoo.net hb.yahoo.net hbx.media.net heizungonline.vaillant.de ib.adnxs.com ib.adnxs.com insight.adsrvr.org ice.360yield.com ice.360yield.com id5-sync.com idsync.admixer.co.kr idsync.rlcdn.com ih.adscale.de ih.adscale.de inv-nets.admixer.net jadserve.postrelease.com localhost mapping.lacunads.com match.c8.net.ua match.c8.net.ua match.sharethrough.com match.sharethrough.com matching.ivitrack.com mes-devis.saunierduval.fr mixer.mobon.net mkt.saunierduval.es mkt.vaillant.es mojklient.vaillant.pl ms-cookie-sync.presage.io mynet-pbs.theadx.com offer.vaillant.be offerte.bulex.be offre.bulex.be onetag-sys.com optimics-ads.aimatch.com pbjs.digitalmatter.services pbs.optidigital.com pbs.yahoo.com pixel.rubiconproject.com pixel.rubiconproject.com pixel.s3xified.com pixel.tapad.com prebid.admatic.de prebid.adocean.pl prebid.adtarget.com.tr prebid.jixie.io prebid.monetixads.com prebid.pixad.com.tr prebid.serve.admatic.com.tr prebid-s2s.media.net prebid-server.pbstck.com prebid-server.rtbhouse.net prebid-server.rubiconproject.com prebid-stag.setupad.net preventivi.vaillant.it profile.ssp.rambler.ru profile.ssp.rambler.ru public-prod-dspcookiematching.dmxleo.com r.casalemedia.com res.cloudinary.com rm.em.nscontext.eu rm.em.nscontext.eu router.infolinks.com rt.marphezis.com rt.udmserve.net rtb.adxpremium.services rtb-csync.smartadserver.com rtb-server.valuad.io s.ad.smaato.net s.amazon-adsystem.com s.seedtag.com s2s.yieldbird.com s-cs.rmp.rakuten.com s-cs.send.microad.jp s-cs.send.microad.jp server.seadform.net simage2.pubmatic.com simage2.pubmatic.com sofia.trustx.org sp.analytics.yahoo.com sp.gmossp-sp.jp ssc-cms.33across.com ssp.adriver.ru ssp.adriver.ru ssp.api.tappx.com ssp.wp.pl ssp-csync.smartadserver.com ssp-csync.smartadserver.com static.cleverpush.com sync.1rx.io sync.addlv.smt.docomo.ne.jp sync.adkernel.com sync.ad-stir.com sync.adtech.ink sync.adtelligent.com sync.aniview.com sync.bidence.net sync.bidmatic.io sync.cenarius.orangeclickmedia.com sync.connectad.io sync.console.adtarget.com.tr sync.cootlogix.com sync.dmp.otm-r.com sync.e-planning.net sync.go.sonobi.com sync.inmobi.com sync.kueezrtb.com sync.outbrain.com sync.pubrise.ai sync.taboola.com sync.teads.tv sync-criteo.ads.yieldmo.com sync-service.net t.adx.opera.com t.visx.net tg.socdm.com tg.socdm.com toolbox.be-bulex.live-2.vaillant.neoskop.cloud toolbox.it-vaillant.development.heatingonline.cloud toolbox.it-vaillant.staging.heatingonline.cloud toolbox.vaillant.de toolbox-gb-glowworm.prod.cloud.heatingonline.de u.4dex.io ups.analytics.yahoo.com us.ck-ie.com us.ck-ie.com us.shb-sync.com us-east-pbs.automatad.com usersync.gumgum.com usersync-america.rtblab.net us-u.openx.net us-u.openx.net verkoopkansen.vaillant.nl vid.vidoomy.com visitor.omnitagjs.com visitor.omnitagjs.com x.bidswitch.net z.cdn.adtarget.market; font-src 'self' data: *.loyjoy.com *.glp8.net cdn01l.vaillant-group.com fonts.cdnfonts.com heizungonline.vaillant.de mes-devis.saunierduval.fr mojklient.vaillant.pl offer.vaillant.be offerte.bulex.be offre.bulex.be preventivi.vaillant.it script.hotjar.com toolbox-gb-glowworm.prod.cloud.heatingonline.de toolbox.be-bulex.live-2.vaillant.neoskop.cloud toolbox.it-vaillant.development.heatingonline.cloud toolbox.it-vaillant.staging.heatingonline.cloud toolbox.vaillant.de verkoopkansen.vaillant.nl; object-src 'none'; base-uri 'self'; form-action 'self' *.columbusconnect.it *.facebook.com *.officego.de *.plansoft-online.de *.saunierduval.es *.vaillant-group.com *.vaillant.es eshopspares.protherm.sk http://sso.wigam.com http://www.columbusconnect.it https://sso.wigam.com:8016 pontbevaltas.saunierduval.hu self-service.vaillant.de shop.vaillant.at sso.wigam.com; frame-src 'self' *.adform.net *.adroll.com *.adsrvr.org *.captivate.fm *.cdn-pci.optimizely.com *.cdn.optimizely.com *.consentmanager.net *.criteo.com *.doubleclick.net *.elf.site *.facebook.com *.g.doubleclick.net *.glp8.net *.google.com *.oplead.com *.pinterest.com *.protherm.cz *.rfihub.com *.saunierduval-piecedetachee.fr *.saunierduval.es *.taboola.com *.xo-matic.com *.vaillant-systeme.de *.vaillant.es *.vaillant.ua *.vaillantkotle.cz *.vanmarcke.com 27052801.hs-sites-eu1.com aides.saunierduval.fr ams.creativecdn.com anzeigen.premium.salzburg24.at anzeigen.premium.sn.at apps.vaillantgroup.org bayi.demirdokum.net cat.hermann-saunierduval.it cat.vaillant.it cloud.at.vgmarketingcloud.com contotermicohsd.vaillantgroup.it contotermicovaillant.vaillantgroup.it customer.vaillant.com.tr epaper.paper2web.ch fiches-qce.saunierduval.fr foerdermittelsuche.betatool.de form.jotform.com forms.iframes-saunierduval.es forms.office.com gutschein.vaillant.de heyzine.com identity.vaillant-group.com iframe.vaillantbayiminternette.com iqg.vaillant.com mapapartnerov.protherm.sk marktraum.betatool.de mkt.saunierduval.es optimum.vaillant.at optimum.vaillant.pl pompe-a-chaleur.saunierduval.fr portal.vaillant.ua powerfinder.hermann-saunierduval.it powerfinder.vaillant.it servicevaillant.wufoo.com servis.demirdokum.net servis.protherm.sk share-eu1.hsforms.com simulator.vaillant.com tarif-public.saunierduval.fr tools.vaillant.nl ucretsizkesif.demirdokum.com.tr urunler.demirdokum.com.tr vaillant-group.campaign.playable.com vaillant-systeme.de vaillant.cleverpush.com vaillant.cyber-time.at vaillantclub.vaillant.com.tr vf.r3f.technology widget.trustpilot.com wpcalc.vaillant.ch www.foerderdata.at www.foerdermittelauskunft.de www.googletagmanager.com www.kalkulator-vaillant.pl www.mepcontent.com www.recaptcha.net www.youtube.com wwwvaillantbe.mycleverpush.com; upgrade-insecure-requests; 7 base-uri 'self'; img-src data: https:; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; 7 base-uri 'self';frame-ancestors 'self' 7 font-src 'self'; 7 style-src * 'unsafe-inline'; font-src * data:; img-src * data:; connect-src *; object-src none; frame-ancestors 'self'; 7 frame-ancestors 'self' *.commercevision.biz *.commercevision.com.au 7 frame-ancestors 'self' *.mydukaan.io; 7 frame-ancestors 'self'; report-uri /log/csp-violation 7 frame-ancestors 'self'; report-uri https://reuters.report-uri.com/r/t/csp/enforce; report-to report-uri 6 default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/ https://*.steamstatic.com https://*.steamcontent.com https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.cqloud.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net https://api.steampowered.com https://steamvideo-a.akamaihd.net https://video.st.dl.eccdnx.com https://vd.queniujq.cn https://video.cdn.steamchina.eccdnx.com https://video.cdn.queniuqe.com https://video.cdn.steamchina.queniuam.com https://*.storage.googleapis.com; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://checkout.steampowered.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://steamcommunity.com/; frame-ancestors 'none'; 6 frame-ancestors 'self' *.dynatrace.org *.dynatrace.com *.dynatrace.cn 6 frame-ancestors 'self' *.optimizely.com https://app-opti01saas4uc99p001.cms.optimizely.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: d1igp3oop3iho5.cloudfront.net *.optimizely.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://snap.licdn.com https://connect.facebook.net https://www.redditstatic.com https://a.quora.com https://*.clarity.ms https://munchkin.marketo.net https://js.adsrvr.org https://js.qualified.com https://cdn.calibermind.com https://js.zi-scripts.com https://bzrcdn.openai.com https://j.6sc.co https://capi-automation.s3.us-east-2.amazonaws.com https://va.vercel-scripts.com; worker-src 'self' blob:; connect-src 'self' *.zaius.com d1igp3oop3iho5.cloudfront.net *.optimizely.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://*.ads.linkedin.com https://*.facebook.com https://connect.facebook.net https://*.reddit.com https://q.quora.com https://a.quora.com https://*.clarity.ms https://*.marketo.net https://*.mktoresp.com https://*.adsrvr.org https://*.qualified.com wss://*.qualified.com https://*.calibermind.com https://*.zi-scripts.com https://*.zoominfo.com https://*.openai.com https://*.6sense.com https://*.6sc.co https://va.vercel-scripts.com https://vitals.vercel-insights.com 6 default-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com fsa.merrilledge.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com glancecdn.net www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com idsync.rlcdn.com glancecdn.net www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.merrilledge.com; 6 frame-ancestors 'self' xerox.com *.xerox.com carear.app 6 frame-ancestors 'self' http://localhost:* https://*.aftonbladet-cdn.se https://*.aftonbladet.dev https://*.aftonbladet.localhost https://*.aftonbladet.se https://*.apple-mapkit.com https://*.plan3.se https://*.plan3dev.se https://*.schibsted.media https://*.svd.se https://*.vg.no https://admarket.no https://admarket.schibsted.se https://schibsted.dredition.aptoma.no; manifest-src 'self' https://www.vg.no https://static.vg.no/; font-src 'self' data: https://cdn.aftenposten.no https://cdn.aftonbladet.se https://cdn.bt.no https://cdn.aftenbladet.no https://cdn.stream.schibsted.media https://cdn.vev.design https://core-header.schibsted.tech https://default.sacdn.no https://e24.no https://e24.vgc.no https://fonts.vev.design https://fonts.gstatic.com https://static.svd.se https://static.vg.no https://vgc.no https://www.aftenbladet.no https://www.aftenposten.no https://www.bt.no https://www.vg.no; upgrade-insecure-requests; object-src 'none'; 6 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.cloudflare.com https://cdn.cookielaw.org https://cdn.mouseflow.com https://static.cloudflareinsights.com https://assets.adobedtm.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.googletagmanager.com https://tag.demandbase.com https://googleads.g.doubleclick.net https://connect.facebook.net https://snap.licdn.com https://pi.pardot.com https://static.ads-twitter.com https://go.elsevier.com https://script.leadboxer.com https://activitymap.adobe.com https://www.googleadservices.com https://digitalfeedback.us.confirmit.com https://www.surveygizmo.eu https://dotcom.tags.elsevier.com https://app.optimizely.com https://cdn.optimizely.com https://cdn3.optimizely.com https://cdn.opal.optimizely.com https://*.app.optimizely.com; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com https://*.optimizely.com; img-src 'self' data: https://secure-ecsd.elsevier.com images.ctfassets.net https://smetrics.elsevier.com metrics.elsevier.com https://cm.everesttech.net https://cdn.cookielaw.org https://cdn.nonprod.3d4medical.com https://cdn.3d4medical.com *.google-analytics.com https://dpm.demdex.net https://px.ads.linkedin.com https://www.linkedin.com https://www.google.com https://www.google.co.uk https://www.google.nl https://t.co https://analytics.twitter.com https://id.rlcdn.com https://www.facebook.com https://googleads.g.doubleclick.net https://bam.nr-data.net https://osmose-it.s3.amazonaws.com https://survey.us.confirmit.com https://px4.ads.linkedin.com https://www.googleadservices.com https://www.googletagmanager.com https://dotcom.tags.elsevier.com https://s3.amazonaws.com https://cdn-assets-eu.frontify.com https://media.ffycdn.net https://mns-content.np.elsevierperformancemanager.com https://app.optimizely.com https://cdn.opal.optimizely.com; font-src 'self' https://app.optimizely.com https://cdn.opal.optimizely.com; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://dpm.demdex.net elsevierlimited.tt.omtrdc.net https://smetrics.elsevier.com https://bam.nr-data.net *.notify.elsevier.com *.google-analytics.com https://account.elsevier.com https://account.staging.ecommerce.elsevier.com https://cdn.linkedin.oribi.io https://www.facebook.com https://api.company-target.com localhost:* *.snplow.net https://tag-logger.demandbase.com https://kibana.leadboxer.com https://pagead2.googlesyndication.com https://digitalfeedback.us.confirmit.com https://adservice.google.com https://px.ads.linkedin.com https://o2.mouseflow.com https://widgixeu-beacon.s3.amazonaws.com https://business.api.elsevier.com https://gtm-dotcom.staging.webpresence.elsevier.com https://dotcom.tags.elsevier.com https://www.google.com https://eu01.rec.mouseflow.com https://app.optimizely.com https://*.app.optimizely.com https://cdn.optimizely.com https://logx.optimizely.com https://opal.optimizely.com https://opal-backend.optimizely.com https://tapi.optimizely.com wss://opal-tools.optimizely.com wss://userflow.app.optimizely.com wss://ws.opal.optimizely.com https://cdn.segment.com https://*.braze.eu; media-src 'self' videos.ctfassets.net assets.ctfassets.net cdn-assets-eu.frontify.com media.ffycdn.net mns-progressivecontent.np.elsevierperformancemanager.com mns-mediacontent.np.elsevierperformancemanager.com; object-src 'none'; frame-ancestors 'self' https://app.contentful.com https://3d4medical.com https://completeanatomy.cn; frame-src 'self' https://elsevierlimited.tt.omtrdc.net https://campaigns.elsevier.com https://www.googletagmanager.com https://elsevier.demdex.net https://www.facebook.com https://s.company-target.com https://activitymap.adobe.com https://td.doubleclick.net https://survey.alchemer.eu https://dotcom.tags.elsevier.com https://a29442590540.cdn.optimizely.com; base-uri 'self'; form-action 'self'; 6 frame-ancestors 'self' *.zdnet.com; default-src https: blob: 'unsafe-inline' 'unsafe-eval' data:; font-src https: blob: data:; img-src https: data: android-webview-video-poster: blob:; form-action https:; block-all-mixed-content; media-src https: blob: data:; 6 script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://billing-ads-qa-devel.corp.google.com https://payments.google.com/ https://www.youtube.com https://youtube.googleapis.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://ajax.googleapis.com https://mannequin.storage.googleapis.com https://static.corp.google.com https://storage.googleapis.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://payments.sandbox.google.com https://www.googleadservices.com https://maps.googleapis.com https://www.google.com/js/bg/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/Gstore/cspreport/allowlist;worker-src blob: 6 frame-ancestors 'self' https://tenable.com https://*.tenable.com https://tenablecloud.cn https://www.tenablecloud.cn; 6 frame-ancestors 'self' https://console-dev.ps.kz https://console.ps.kz https://*.ps.kz https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://webvisor.com https://*.webvisor.com 6 default-src 'self'; media-src https://static.zdassets.com https://res.cloudinary.com https://pmecdn.protonweb.com; connect-src 'self' wss: https://protonmail.zendesk.com https://ekr.zdassets.com blob: https://account.proton.me https://reports.proton.me https://telemetry.proton.me https://*.algolia.net https://*.algolianet.com https://go.getproton.me https://noembed.com https://boards-api.greenhouse.io https://proton.me https://*.paypal.com https://*.paypalobjects.com https://growth.proton.me ; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' https://static.zdassets.com https://pmecdn.protonweb.com https://www.youtube.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://pmecdn.protonweb.com https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://pmecdn.protonweb.com; img-src 'self' data: blob: https:; frame-src 'self' data: blob: https://www.youtube-nocookie.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; object-src 'self' data: blob:; child-src 'self' data: blob: https://*.paypal.com https://*.paypalobjects.com; report-uri https://reports.proton.me/reports/csp; frame-ancestors 'self' https://*.proton.me; 6 object-src *; script-src * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; 6 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' data: blob: https:; object-src 'none'; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.citi.com *.google.com *.qualtrics.com bat.bing.com ct.pinterest.com www.youtube.com cdn.plaid.com code.jquery.com pwm-image.trendmicro.com *.google-analytics.com js.adsrvr.org s.pinimg.com assets.adobedtm.com *.liveperson.com nexus.ensighten.com cdn.boomtrain.com lptag.liveperson.net s.yimg.com gc.kis.v2.scr.kaspersky-labs.com script.crazyegg.com maps.googleapis.com www.googletagmanager.com live.rezync.com mpsnare.iesnare.com negbar.ad-blocker.org video.limelight.com cdn.gbqofs.com ds-aksb-a.akamaihd.net googleads.g.doubleclick.net get663.com c1.rfihub.net www.adobetag.com c.tvpixel.com www.googleadservices.com tpc.googlesyndication.com bcdn-god.we-stats.com a.rfihub.com services-dev.sdiapi.com *.online-metrix.net data.privacy.ensighten.com connect.facebook.net s.rfihub.com/meta blob: p11.techlab-cdn.com p11.techlab-cdn.com; object-src 'none'; frame-ancestors https://*.citi.com https://*.citigroup.net https://*.nsroot.net 6 default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; style-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; frame-ancestors 'self'; frame-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; worker-src 'self' data: blob:; 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' addsearch.com assets.adobedtm.com *.adroll.com c.amazon-adsystem.com *.barracuda.com *.bing.com *.brighttalk.com *.chtbl.com *.clarity.ms *.cookielaw.org *.demandbase.com *.doubleclick.net *.dpmsrv.com *.driftt.com esw.min.js *.facebook.net *.force.com *.google.com *.google-analytics.com *.googleadservices.com *.googleoptimize.com *.googletagmanager.com *.highcharts.com *.hotjar.com js.hsforms.net ib.adnxs.com *.invoca.net *.jsdelivr.net *.licdn.com *.livehelpnow.net munchkin.marketo.net *.mxpnl.com *.my.site.com *.pdst.fm *.pixeltracker.co qualified.com assets.qualified.com js.qualified.com *.redditstatic.com *.salesforce.com *.salesforce-sites.com *.salesforceliveagent.com *.searchcdn.com *.techtarget.com unpkg.com *.vidyard.com *.youtube.com *.zi-scripts.com 6 frame-ancestors 'self' https://nurture.solarwinds.com/ 6 default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; connect-src *; img-src * data:; font-src * data:; media-src *; object-src *; connect-src *; frame-src *; 6 default-src 'self' data: blob:; 6 frame-ancestors 'self' https://login.mtb.com https://businessbanking.mtb.com https://login-tc.mtb.com https://login-ics.mtb.com https://secure.wilmingtontrust.com https://zelle.mtb.com 6 frame-ancestors test.lightstream.com www.lightstream.com *.truist.com *.truist-tst.com *.truist-prd.com; 6 default-src 'self'; connect-src 'self' https://*.ingest.sentry.io https://*.sentry-cdn.com https://*.streamlock.net https://*.zdassets.com https://*.zendesk.com https://*.zeturf.fr https://*.zeturf.com https://*.zeturf.be https://*.zeturf.nl https://*.zeturf.es https://*.zeturf.sn https://*.zeturf.org https://consentcdn.cookiebot.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://region1.analytics.google.com https://www.google.com https://google.com https://pay.google.com wss://*.zendesk.com https://*.bing.com https://*.clarity.ms https://*.commander1.com https://*.facebook.com https://*.facebook.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.snapchat.com https://*.trustcommander.net https://*.xiti.com https://analytics.twitter.com https://cdn.tagcommander.com https://manager.tagcommander.com https://dqxcjhc.pa-cd.com https://gwkqcts.pa-cd.com https://www.googletagmanager.com https://zz.connextra.com; frame-src 'self' https://*.snapchat.com https://*.zendesk.com https://cdn.trustcommander.net https://consentcdn.cookiebot.com https://td.doubleclick.net https://vision.prod.thebetmakers.com https://www.facebook.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' data: blob: https://*.adnxs.com https://*.bidr.io https://*.cookiebot.com https://*.googleusercontent.com https://*.zdassets.com https://*.zendesk.com https://*.zdusercontent.com https://*.zeturf.be https://*.zeturf.com https://*.ytimg.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com https://t.co https://www.google.com https://www.google.fr https://www.paypalobjects.com https://applepay.cdn-apple.com https://www.gstatic.com https://*.bing.com https://*.clarity.ms https://*.commander1.com https://*.facebook.com https://*.facebook.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.snapchat.com https://*.trustcommander.net https://*.xiti.com https://analytics.twitter.com https://cdn.tagcommander.com https://manager.tagcommander.com https://dqxcjhc.pa-cd.com https://gwkqcts.pa-cd.com https://www.googletagmanager.com https://zz.connextra.com; font-src 'self' https://*.snapchat.com https://*.zeturf.be https://*.zeturf.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://github.com https://applepay.cdn-apple.com; media-src 'self' https://*.streamlock.net https://*.zeturf.be https://*.zeturf.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://*.cookiebot.com https://*.sentry-cdn.com https://*.zdassets.com https://*.zendesk.com https://*.zeturf.be https://*.zeturf.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ga.jspm.io https://maps.googleapis.com https://sc-static.net https://static.ads-twitter.com https://tag.aticdn.net https://www.googleadservices.com https://applepay.cdn-apple.com https://pay.google.com https://*.bing.com https://*.clarity.ms https://*.commander1.com https://*.facebook.com https://*.facebook.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.snapchat.com https://*.trustcommander.net https://*.xiti.com https://analytics.twitter.com https://cdn.tagcommander.com https://manager.tagcommander.com https://dqxcjhc.pa-cd.com https://gwkqcts.pa-cd.com https://www.googletagmanager.com https://zz.connextra.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://fonts.googleapis.com/ https://*.zeturf.com https://*.zeturf.be https://*.snapchat.com 6 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.arbeitsagentur.de *.assono.de *.b-ite.com *.betterplace.org *.callbert.ai *.canto.global *.cdninstagram.com *.chatcaptain.com *.chathero.ai *.cookiebot.com *.cookiebot.eu *.customer.callbert.ai *.digitizer.app *.distill-lausitz.de *.dvinci-hr.com *.dwcdn.net *.easy-feedback.com *.etracker.com *.etracker.de *.eu-west-1.playback.live-video.net *.eventis.online *.exmap.de *.facebook.com *.fbcdn.net *.fontawesome.com *.foxbase.de *.google-analytics.com *.google.com *.google.de *.googleapis.com *.highcharts.com *.hk24.de *.ihk-baustellen-portal.de *.ihk-berlin.org *.ihk.de *.ihk24.de *.ihk24.ihk.de *.jobcluster.de *.jobs.personio.com *.jobs.personio.de *.julephosting.de *.kununu.com *.lineupr.com *.linkedin-ei.com *.linkedin.com *.mateforevents.com *.microsoft.com *.office.com *.office365.com *.openstreetmap.de *.openstreetmap.org *.podigee-cdn.net *.podigee.io *.powerappsportals.com *.rang-und-namen.de *.signalize.com *.spotify.com *.stage.bio *.stream24.net *.sweap.io *.sylphen.com *.thinglink.com *.thinglink.me *.toubiz.de *.tourenplaner-rheinland-pfalz.de *.twitch.tv *.twitter.com *.unikam.de *.usercentrics.eu *.userlike.com *.vimeo.com *.wahlplus.de *.walls.io *.webstream.eu *.xing-events.com *.youtube.com *.zynd.de api.flockler.app api.mapbox.com app.powerbi.com app.powr.io app.sli.do ausbildung.berlin auskunft.nvv.de baustellennavi.de benjamin-langen.github.io bookings.cloud.microsoft branchenpuls.odis-berlin.de bruecken.projekt.link bxb-festival.app callbert.ai cdn.audiorella.com cdn.doo.net/assets/js/viovendi-embed-static-1.js cdn.eye-able.com cdn.knightlab.com cdn.podigee.com cdn.podlove.org cdnjs.cloudflare.com chat.gr-apps.de client.inecos.de code.jquery.com/jquery-3.1.1.min.js code.jquery.com/jquery-3.4.1.min.js connect.facebook.net consentcdn.cookiebot.com cta.ihk.i40.de datawrapper.dwcdn.net detmold.ihk-beitragsrechner.de digitizer.app dihk.imageplant.de dms.licdn.com doo.net drift-ihk-demo.pages.dev e.video-cdn.net easy-feedback.com easy-feedback.de embed.podcasts.apple.com eoa2.bildung1.gfi.ihk.de events-to-impress.activehosted.com events.ihk-berlin.de expertenpool.automatisierungsregion.de fahrinfo.vbb.de fl-1.cdn.flockler.com fonts.gstatic.com forms.cloud.microsoft geometro-cockpit.com gwatch.events handelskammer-bremen.appointmind.net heimatshoppen.ihk-industrie-treffpunkt.de heyhugo.ai hk24.sharepoint.com iframe.gewerbe-miete.de iframe.mygma.prd.iib-it.de iframe.wvd-portfolio.de ihk-baustellen-portal.de:5555 ihk-berlin-meetings.webex.com ihk-darmstadt-portal.rexx-recruitment.com ihk-export-admin.simplyorg-seminare.de ihk-hl.gr-live.de ihk-ostwestfalen-portal.rexx-recruitment.com ihk-table-view.customer.apps.kalebru.com ihk-wahlcheck.qgmbh.de ihk.prototype.berlin ihk.selbstdenker.com ihk24.epccm19.com ihk24.omq.de ihk24.omq.io ihkakademie.de ihkchem.pi-asp.de ihknw.pi-asp.de imagemarker.com ims-files-cdn.net jobs.guidecom.de jobs.ihk-niederrhein.de jsfiddle.net kasskada.de konjunkturboard-bw.de link.webropolsurveys.com livestream.watch login.microsoftonline.com mailto: matomo.rexx-systems.commatomo.js maxcdn.bootstrapcdn.com media-api.flockler.com media.graphassets.com media.graphcms.com media.licdn.com mediathek.ihk-gfi.de metabase.datenwerk-sh.freeddns.org mukihk24.z6.web.core.windows.net my.immobilienfotograf-berlin.com my.tikee.io myihk.com myjobboard.de newkammer-freiburg.gfi.ihk.de news.ihk-sh.de online.fliphtml5.com organigramm.cloud-ihk-cottbus.de p668079.webspaceconfig.de plugins.flockler.com pruefungen-cottbus-ihk.de public.flourish.studio publish.flyeralarm.digital register.ihk-exportakademie.de resc.deskline.net rh1.chatmodul.de s2survey.net s3.fraunhofer.de service.tecintelli.de share.ihkzuschwerin.de share.synthesia.io signlanguage.alangu.de smart.ihk-berlin.de snap.licdn.com social-proxy.flocklr.com standortfinder.rlp.de start.video-stream-hosting.de static-exp1.licdn.com static.arttacsolutions.com static.dvinci-easy.com static.maptoolkit.net stats-api.flockler.app stats.g.doubleclick.net streaming.sendewerk.berlin tecintelli-static-ttl.obs.eu-de.otc.t-systems.com/ tel: userlike-cdn-operators.s3-eu-west-1.amazonaws.com userlike-cdn-umm.b-cdn.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-store-media-files.s3.amazonaws.com w.soundcloud.com webapi.deskline.net weltmetropole.app widget.taggbox.com widgets-v3.simplyorg.de widgets.lineupr-dev.com widgets.lineupr.com widgets.rlp-tourismus.de widgets.thh.tours wms02.exmap.de wss://chat.userlike.com/chat/ wss://umd.userlike.com/umd/ www.ahk.de www.ardmediathek.de www.aufstiegs-bafoeg.de www.bahn.de www.branchenpuls.berlin www.bso-hessen.de www.chatbase.co www.cybersicher-check.de www.econda-monitor.de www.etermin.net www.eventbrite.de www.finest-jobs.com www.forschungsfinder-hessen.de www.google.analytics.com www.googletagmanager.com www.handelskammer-bremen.de www.ihk-arbeitsgemeinschaft-rlp.de www.ihk-berlin.de www.ihk-bw.digital www.ihk-ecofinder.de www.ihk-gfi.de www.ihk-magdeburg.de www.ihk-ostbrandenburg.de www.ihk-rlp.de www.ihkac-anwendungen.de www.inno-vet.de www.instagram.com www.iwd.de www.leg-thueringen.de www.media42day.com www.menti.com www.metropolregionnuernberg.de www.mint-in-hessen.de www.praktikum.info www.rmv.de www.terminland.de www.total-lokal.de www.tvo.de www.vvs.de www.webstream.eu www.youtube-nocookie.com zukunftsdialog-fachkraefte.berlin zukunftsforum-wirksame-bildung.de zukunftsforum.app zvlms.fraunhofer.de zynd.de ; worker-src 'self' blob: ; report-uri /blueprint/servlet/csplogging/logViolation ; 6 frame-ancestors 'self' app.storyblok.com 6 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://gravatar.com https://www.gravatar.com; frame-src 'self' https://play.libsyn.com; base-uri 'none'; form-action 'self' https://duckduckgo.com; frame-ancestors 'none'; 6 frame-ancestors 'self' https://*.movavi.de https://*.movavi.com https://*.movavi.ru https://*.pdfchef.com https://*.screencapture.com https://*.movavivideosuite.com https://*.gecata.com https://*.movavi.id https://movavi.id https://*.videoconverter.com https://*.fastreel.com http://webvisor.com https://portal1.comm100.io https://screencapture.com https://*.picverse.com; report-uri https://o474997.ingest.sentry.io/api/5707147/security/?sentry_key=839cab03978446cdbf603f5f5022e843&sentry_environment=production; report-to csp-endpoint 6 frame-ancestors 'self' *.maxon.net 6 default-src https: data: 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.routledge.com mailto: https://privacy.informa.com/ https://transcend-cdn.com/ https://*.transcend.io/ https://app.gotowebinar.com/ https://*.cookielaw.org/ https://*.ads-twitter.com https://*.adsymptotic.com https://*.advancedcustomfields.com https://*.akamaihd.net https://*.altmetric.com https://*.baidu.com https://*.bootstrapcdn.com https://*.cloudflare.com https://*.cloudflareinsights.com https://*.cloudfront.net https://*.cnzz.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.fontawesome.com https://*.formstack.com https://*.github.io https://*.google-analytics.com https://*.google.be https://*.google.co.uk https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.googleoptimize.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.gravatar.com https://*.gravityforms.com https://*.gravityforms.local https://*.gstatic.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com/ https://*.jquery.com https://*.jsdelivr.net https://*.licdn.com https://*.linkedin.com https://*.oribi.io/ https://*.netdna-ssl.com https://*.newrelic.com https://*.googlesyndication.com/ https://*.pardot.com https://*.tandf.co.uk https://*.tandfonline.com https://*.taylorandfrancis.com https://*.thinglink.com https://*.twimg.com https://*.twitter.com https://*.typekit.net https://*.vimeo.com https://*.w.org https://*.wistia.com https://*.wp.com https://*.wpengine.co.uk https://*.wpengine.com https://*.wpengineapi.com https://*.wpmudev.org https://*.youtube.com https://abc123-wpengine.netdna-ssl.com https://bam.eu01.nr-data.net https://cnzz.mmstat.com https://i.ytimg.com https://placehold.it https://t.co https://tandfapi.co.uk https://web-player.art19.com https://wpengine.com https://wpmudev.com https://yoast.com; font-src https: 'self' data: ; img-src * 'self' data: blob: ; worker-src https: 'self' blob: ; 6 default-src 'self' data: blob: https://www.bplaced.net https://my.bplaced.net https://stream.bplaced.net https://wiki.bplaced.net 'unsafe-eval' 'unsafe-inline'; img-src 'self' data: content: https://www.bplaced.net https://my.bplaced.net https://stream.bplaced.net https://wiki.bplaced.net;style-src 'self' data: blob: https://www.bplaced.net https://my.bplaced.net https://stream.bplaced.net https://wiki.bplaced.net 'unsafe-inline'; media-src *; 6 frame-ancestors 'self' https://metrika.yandex.ru 6 frame-ancestors 'self' https://keepersecurity.com https://keepersecurity.eu https://keepersecurity.com.au https://keepersecurity.jp https://keepersecurity.ca; 6 ; frame-ancestors 'self' 6 frame-ancestors 'self' *.tournamentsoftware.com *.toernooi.nl 6 frame-ancestors *.npo.nl *.bijnpo.nl *.npotest.nl *.npoacc.nl 6 frame-ancestors https://app.storyblok.com; 6 frame-ancestors 'self' https://*.infomaker.io https://login.leaddesk.com https://login-qed.leaddesk.com https://login-qed-fi1.leaddesk.com https://login-qed-fi2.leaddesk.com 6 default-src 'self'; connect-src 'self' https://assets.gov.ie https://track.analytics.services.gov.ie https://*.services.gov.ie https://*.token.awswaf.com https://*.captcha.awswaf.com https://cdn.jsdelivr.net https://utility.arcgis.com https://ws.cso.ie https://siteintercept.qualtrics.com https://sr.qualtrics.com https://*.sr.qualtrics.com; font-src https://assets.gov.ie https://static.captcha.awswaf.com; frame-src https:; img-src 'self' data: https://assets.gov.ie https://cdn.jsdelivr.net https://server.arcgisonline.com https://utility.arcgis.com https://*.ytimg.com https://siteintercept.qualtrics.com; media-src https://assets.gov.ie; script-src 'unsafe-eval' 'unsafe-inline' https://assets.gov.ie; script-src-elem 'unsafe-inline' https://assets.gov.ie https://track.analytics.services.gov.ie https://*.token.awswaf.com https://*.captcha.awswaf.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com; style-src 'unsafe-inline' https://assets.gov.ie; style-src-elem 'unsafe-inline' https://assets.gov.ie https://static.captcha.awswaf.com https://cdn.jsdelivr.net 6 frame-ancestors 'self' https: 6 upgrade-insecure-requests;frame-ancestors 'self' https://www.medscape.com https://dusandbox.skipta.com https://doctorunite.com https://generationNP.com https://cardiologistconnect.com https://paunite.com https://cardiologistconnectsandbox.skipta.com https://next.brella.io/ https://www.staging.medscape.com/ https://www.skipta.com/ https://staging.medscape.com/ https://skipta.com/ https://medscape.com/ https://endocrinologistnation.com https://www.endocrinologistnation.com https://amgenicpsp.lightning.force.com/ https://nephrologistconnect.com https://rheumatologynation.com https://dermatologistnation.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://www.onetrust.com https://privacyportal.onetrust.com https://privacyportal-uat-cdn.onetrust.com https://uat.onetrust.com https://app.onetrust.com https://app.cookiepro.com 6 object-src 'none'; frame-ancestors 'self'; 6 default-src 'self' wss://socket.24live.co https: data: blob: 'unsafe-inline' 'unsafe-eval' 6 frame-ancestors 'self' *.bny.com; 6 default-src * 'unsafe-inline' 'unsafe-eval' data:; 6 default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://siteimproveanalytics.com/ https://img.en25.com/ *.s3.amazonaws.com *.optimizely.com *.doubleclick.net https://connect.facebook.net https://www.googleadservices.com/ https://sc-static.net https://browser-update.org https://cdn.cookielaw.org *.salesforceliveagent.com ttps://browser-update.org/ https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://geolocation.onetrust.com https://*.crazyegg.com https://www.google-analytics.com https://cdn.siteimprove.net https://unpkg.com https://*.siteimprove.com *.youtube.com https://*.userzoom.com https://cdn.jsdelivr.net/ https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.hypemarks.com https://gba4ya26.micpn.com/p/js/ https://tr.snapchat.com/config/ https://www.google.com/pagead/ https://bat.bing.com/ https://snap.licdn.com/ https://static.ads-twitter.com/ https://www.googleanalytics.com https://www.googleoptimize.com https://optimize.google.com https://analytics.tiktok.com https://m5srpdpi.micpn.com https://tags.crwdcntrl.net https://ynnpkxoz.micpn.com https://tag.demandbase.com https://mi.chamberlain.edu https://static.hotjar.com https://s.adroll.com https://script.hotjar.com https://d.adroll.com https://marvel-b2-cdn.bc0a.com https://geoip-js.com *.avaamo.com https://munchkin.marketo.net https://ict.infinity-tracking.net https://js.adsrvr.org https://s.yimg.com https://waldenuniversity.referralrock.com https://cdn.mouseflow.com https://tag.mtrcs.samba.tv https://pixel.mathtag.com https://bs.serving-sys.com https://secure-ds.serving-sys.com https://pixel.admedia.com *.googlesyndication.com *.storelocatorwidgets.com https://ajax.googleapis.com https://home-c20.incontact.com https://gateway.on24.com https://www.riddle.com/ *.b0e8.com https://embedr.flickr.com https://widgets.flickr.com *.infinity-tracking.com https://c.hrzn-nxt.com https://public.flourish.studio https://www.redditstatic.com t.contentsquare.net app.contentsquare.com https://www.esyoh.com *.my.salesforce.com *.my.site.com/ *.force.com/ https://cdn.pbbl.co https://img04.en25.com https://static.cloudflareinsights.com/ https://cdn.unibuddy.co *.mnixdata.com https://optimizely-hrd.appspot.com https://aa.trkn.us *.bttrack.com https://bttrack.com https://assets-pcor-dev.adtalem.com/ https://assets-pcor-qa.adtalem.com https://assets-pcor.adtalem.com https://maps.googleapis.com https://assets-atge-dev-outage.adtalem.com https://assets-atge-qa-outage.adtalem.com https://assets-atge-outage.adtalem.com https://api.wire.spbx.app *.contentsquare.net *.ofgreencolumn.com *.fouanalytics.com https://cdn.mobius.highereducation.com/mobius-latest.min.js https://cdn.us.heap-api.com https://heapanalytics.com https://cdn.eu.heap-api.com https://player.vimeo.com *.neuro-id.com *.neuroid.cloud https://consent.trustarc.com *.qualtrics.com *.gstatic.com *.amplitude.com *.gravatar.com *.stripe.com *.cloudfront.net *.xm-apps-static.com https://static.searchstax.com/studio-js/v3/js/studio-analytics.js; object-src 'none'; base-uri 'none'; form-action 'self' https://www.facebook.com https://tr.snapchat.com *.salesforceliveagent.com https://rossu.secure.force.com https://auc--fullsanbox.sandbox.my.salesforce.com https://test.salesforce.com https://login.salesforce.com https://rossu.my.salesforce.com/ *.my.salesforce.com *.my.site.com/ *.force.com/ *.qualtrics.com; style-src 'self' 'unsafe-inline' https://p.typekit.net/ https://cdn.jsdelivr.net/ https://hello.myfonts.net/ https://fast.fonts.net/ https://cdnjs.cloudflare.com/ https://optimize.google.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com *.mapbox.com https://cdn.storelocatorwidgets.com *.googletagmanager.com https://*.crazyegg.com *.my.salesforce.com *.my.site.com/ *.force.com/ https://unpkg.com https://use.typekit.net/ https://heapanalytics.com; img-src 'self' data: https://tr.snapchat.com/ *.salesforceliveagent.com https://www.facebook.com/ https://webtracking.aucmed.edu/ *.google.com *.google.com.br *.google.com.uk *.google.com.ca *.google.com.fr *.google-analytics.com *.ytimg.com *.siteimproveanalytics.io https://americanuniversityofcarribean.secure.force.com https://cdn.jsdelivr.net/ https://www.googletagmanager.com/ https://googleads.g.doubleclick.net/pagead/ https://bat.bing.com/ https://www.adtalem.com/ https://*.linkedin.com/ https://t.co/ https://analytics.twitter.com/ https://www.google-analytics.com https://optimize.google.com https://webtracking.medical.rossu.edu https://analytics.tiktok.com https://rossu.secure.force.com https://webtrackingvet.rossu.edu https://match.prod.bidr.io https://id.rlcdn.com https://segments.company-target.com https://ipv4.d.adroll.com https://pt.ispot.tv *.amazonaws.com https://sp.analytics.yahoo.com https://webtracking.chamberlain.edu https://pixel.mtrcs.samba.tv https://cu.secure.force.com https://bidagent.xad.com https://data.adxcel-ec2.com https://pixel.mathtag.com https://cdnjs.cloudflare.com https://img.storelocatorwidgets.com https://www.googleadservices.com https://arttrk.com ads-api.twitter.com analytics.twitter.com ads-twitter.com https://bam.nr-data.net *.cookielaw.org *.b0e8.com *.salesforce-sites.com https://trkn.us *.contentsquare.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://live.staticflickr.com https://d.adroll.com https://ad.doubleclick.net https://public.flourish.studio https://l.hrzn-nxt.com https://alb.reddit.com https://analytics.pangle-ads.com *.force.com/ https://px0.pbbl.co https://aa.agkn.com *.t.eloqua.com/ *.my.site.com/ *.adnxs.com/ *.tapad.com/ *.adsrvr.org/ *.bttrack.com/ https://storage.googleapis.com/ https://di.rlcdn.com/ https://assets-pcor-dev.adtalem.com https://assets-pcor-qa.adtalem.com https://assets-pcor.adtalem.com https://maps.gstatic.com https://maps.googleapis.com https://assets-atge-dev-outage.adtalem.com https://assets-atge-qa-outage.adtalem.com https://assets-atge-outage.adtalem.com https://api.wire.spbx.app *.ofgreencolumn.com https://ml314.com/ https://dpm.demdex.net/ https://heapanalytics.com https://a.basemaps.cartocdn.com https://b.basemaps.cartocdn.com https://c.basemaps.cartocdn.com https://consent.trustarc.com *.qualtrics.com; media-src 'self' *.avaamo.com; frame-src 'self' *.youtube.com https://www.facebook.com/ *.doubleclick.net https://tr.snapchat.com https://vr.showmecaribbean.com/ https://e.issuu.com/ https://optimize.google.com *.cdn.optimizely.com https://waldenuniversity.referralrock.com https://insight.adsrvr.org https://s.amazon-adsystem.com https://match.adsrvr.org https://pixel.mathtag.com https://cdn.hypemarks.com https://widget.spreaker.com https://app.calconic.com https://www.google.com *.avaamo.com https://home-c20.incontact.com https://www.riddle.com https://gateway.on24.com https://cdn.yoshki.com https://massinteract.com https://www.flickr.com https://*.siteimprove.com https://public.flourish.studio https://flo.uri.sh https://www.massinteract.com https://cdn.pbbl.co https://img04.en25.com https://static.cloudflareinsights.com/ https://cdn.unibuddy.co https://unibuddy.co https://events.waldenu.edu https://investors.adtalem.com https://aa.trkn.us *.bttrack.com https://bttrack.com https://www.googletagmanager.com https://app.tintup.com/ https://assets-pcor-qa.adtalem.com https://assets-pcor.adtalem.com https://view-awesome-table.com/ https://gtm.waldenu.edu/ https://www.tiktok.com https://fundraise.givesmart.com https://player.vimeo.com https://tdp.trustarc.com https://cdn2.yoshki.com *.qualtrics.com; frame-ancestors 'self'; child-src 'self' *.youtube.com blob:; font-src 'self' https://themes.googleusercontent.com https://use.typekit.net https://fonts.gstatic.com *.avaamo.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.storelocatorwidgets.com https://cdn.mouseflow.com *.contentsquare.net https://heapanalytics.com https://consent.trustarc.com; connect-src 'self' wss://wsp43.hotjar.com https://gtm.waldenu.edu https://cdn.cookielaw.org https://geolocation.onetrust.com https://cdn.cookielaw.org https://*.siteimprove.com/ https://*.crazyegg.com https://www.google-analytics.com https://stats.g.doubleclick.net https://tr.snapchat.com/ https://analytics.google.com https://bam.nr-data.net https://ipinfo.io https://www.facebook.com/tr/ https://analytics.tiktok.com https://cdn.linkedin.oribi.io *.optimizely.com https://api.company-target.com https://vc.hotjar.io https://wsp43.hotjar.com https://s.yimg.com *.mktoresp.com https://ict.infinity-tracking.net https://nas.lon.infinity-tracking.net https://pixel.mtrcs.samba.tv https://in.hotjar.com https://segments.company-target.com https://geoip-js.com *.mouseflow.com https://api.tintup.com *.amazonaws.com https://ad.doubleclick.net https://pixel.admedia.com *.mapbox.com *.storelocatorwidgets.com ads-api.twitter.com ads-twitter.com analytics.twitter.com https://917-jig-558.mktoutil.com *.infinity-tracking.com *.contentsquare.net *.googlesyndication.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://embedr.flickr.com https://bat.bing.com https://discover.waldenu.edu https://www.esyoh.com https://gtm.chamberlain.edu https://gtm.aucmed.edu https://gtm.veterinary.rossu.edu https://gtm.medical.rossu.edu https://analytics.pangle-ads.com *.my.salesforce.com *.my.site.com/ *.force.com/ https://px.ads.linkedin.com/ https://tr6.snapchat.com/ *.mnixdata.com https://integrations.optimizely-edge.com https://www.redditstatic.com https://conversions-config.reddit.com https://www.redditstatic.com *.reddit.com *.bttrack.com https://bttrack.com https://assets-pcor-dev.adtalem.com/ https://assets-pcor-qa.adtalem.com https://assets-pcor.adtalem.com https://maps.googleapis.com https://pcor-dev.adtalem.com https://pcor-qa.adtalem.com https://pcor.adtalem.com https://assets-atge-dev-outage.adtalem.com https://assets-atge-qa-outage.adtalem.com https://assets-atge-outage.adtalem.com https://dev-atge-outage.adtalem.com https://qa-atge-outage.adtalem.com https://atge-outage.adtalem.com https://mapsresources-pa.googleapis.com data: *.ofgreencolumn.com *.fouanalytics.com https://privacyportal.onetrust.com https://api.mobius.highereducation.com/ https://apix.b2c.com/ https://analytics-ipv6.tiktokw.us/ https://cdn.hypemarks.com/ https://www.facebook.com/privacy_sandbox/ https://cdnjs.cloudflare.com/ https://app.unpkg.com/tippy.js@6.3.7 https://unpkg.com/@popperjs/ https://c.us.heap-api.com https://heapanalytics.com https://c.eu.heap-api.com https://adtalem2019one.q4web.com https://investors.covista.com *.neuro-id.com *.neuroid.cloud https://consent.trustarc.com *.qualtrics.com *.gstatic.com *.amplitude.com *.gravatar.com *.stripe.com *.cloudfront.net *.xm-apps-static.com https://analytics2-us.searchstax.com/api/v2/track/ wss://*.fouanalytics.com 6 upgrade-insecure-requests; default-src 'none'; manifest-src 'self' https://*.apple.com; img-src 'self' https://*.apple.com https://*.mzstatic.com data:; font-src 'self' https://*.apple.com; style-src 'self' https://*.apple.com 'unsafe-inline'; script-src 'self' https://*.apple.com 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=' 'sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=' 'sha256-p7PoC97FO+Lu90RNjGWxhbm13yALSR4xzV8vaDhaQBo=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc='; connect-src 'self' https://*.apple.com https://*.mzstatic.com; media-src 'self' https://*.apple.com blob:; child-src 'self' https://*.apple.com; frame-src 'self' https://*.apple.com itms-appss: macappstore:; worker-src blob:; frame-ancestors 'none'; block-all-mixed-content; report-uri /api/csp-report 6 frame-ancestors 'self' *.scot.nhs.uk *.nhsgrampian.org *.nhslothian.scot *.nhsggc.scot hcaptcha.com *.hcaptcha.com; upgrade-insecure-requests; report-to csp-endpoint; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report 6 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: wss://* https://*; 6 default-src 'none'; media-src 'self' *.scene7.com *.stryker.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.scene7.com *.cookielaw.org *.cvent-assets.com *.cvent.com *.doubleclick.net *.facebook.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.hlx.page *.licdn.com *.marketo.com *.marketo.net *.mktoweb.com *.serving-sys.com *.smtrk.net *.stackadapt.com *.stryker.com *.tribalfusion.com *.zi-scripts.com *.zoominfo.com a.usbrowserspeed.com assets.adobedtm.com bh.contextweb.com magnetic.t.domdex.com maps.googleapis.com pixel.mathtag.com rules.quantcount.com s.ytimg.com secure.quantserve.com ssl.google-analytics.com stryker-h.assetsadobe.com tags.srv.stackadapt.com tracking.intentsify.io www.gstatic.com www.youtube.com blob:; connect-src 'self' https://*; img-src 'self' data: https://*; style-src 'self' 'unsafe-inline' *.cvent-assets.com *.mktoweb.com *.scene7.com *.stackadapt.com *.stryker.com fast.fonts.net fonts.googleapis.com www.gstatic.com; font-src 'self' https://*; manifest-src 'self'; frame-src 'self' https://*; frame-ancestors 'self' *.adobecqms.net; block-all-mixed-content; upgrade-insecure-requests; 6 default-src 'self' wss: https://*.everviz.com https://app.everviz.com https://*.highcharts.com *.xmcwtwco.com *.sitecorecloud.io *.willistowerswatson.com *.wtwco *.wtwco.com *.wtwco.cn https://*.brightcovecdn.com https://*.brightcove.com https://*.boltdns.net https://*.marketo.net https://*.facebook.com https://*.doubleclick.net https://*.infoblox.com https://*.cisco-secure.com https://*.mktoutil.com https://*.clarity.ms https://www.google.com https://www.google.co https://www.google.hn https://www.google.ps https://www.google.rs https://www.google.ad https://www.google.ca https://www.google.ch https://www.google.cl https://*.reddit.com https://*.outbrain.com https://*.twitter.com https://*.appier.net https://*.hubspot.com https://*.livechatinc.com https://*.branch.io https://*.privacymanager.io https://*.trendmicro.com https://*.bing.com https://*.cloudflare.com https://*.amazonaws.com https://*.brevo.com https://*.callrail.com https://*.cookie-script.com https://*.iubenda.com https://*.onetrust.com https://*.yahoo.com https://*.hotjar.io https://*.fullstory.com https://*.klaviyo.com https://*.googleapis.com https://*.gstatic.cn https://*.gstatic.com https://*.zscalertwo.net https://*.zscloud.net https://*.hs-scripts.com https://*.youtube.com https://*.mimecast.com https://*.google-analytics.com https://*.qualtrics.com https://siteimproveanalytics.com https://bat.bing.net https://cdn.cookielaw.org https://connect.facebook.net https://login.microsoftonline.com https://microsoftedge.microsoft.com https://players.brightcove.net https://edge.api.brightcove.com https://cdn.bc0a.com https://secure.brightcove.com https://snap.licdn.com https://static2.sharepointonline.com https://use.fontawesome.com https://use.typekit.net https://vjss.zencdn.net https://widgets.trustedshops.com https://www.googleadservices.com https://www.googletagmanager.com https://www.googletagservices.com https://www.recaptcha.net https://munchkin.marketo.net https://px.ads.linkedin.com https://*.coveo.com https://*.siteimproveanalytics.io https://*.mktoresp.com https://zuxydfcl.cdn.imgeng.in https://www.google.nl https://mediacdn.wtwco.com data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none'; 6 frame-ancestors www.kaufland.de www.kaufland-pp.de media.kaufland.de media.kaufland.com wissen-kaufland.kcenter.usu.com kaufland.staffbase.com leaflets.kaufland.com account-staging.kaufland.com account-qs.kaufland.com account.kaufland.com www.kaufland.cz www.kaufland-pp.cz www.kaufland.sk www.kaufland-pp.sk www.kaufland.pl www.kaufland-pp.pl www.kaufland.at www.kaufland-pp.at www.kaufland.fr www.kaufland-pp.fr 'self' 6 default-src 'self' * data: blob:;font-src 'self' * data:;script-src 'self' * 'unsafe-inline' 'unsafe-eval' blob:;style-src 'self' * 'unsafe-inline';media-src 'self' * blob:;frame-ancestors 'self' http://localhost:3000 https://the-gui.testing.nxt.zone https://the-gui.staging.nxt.zone/ https://the-gui.production.nxt.zone/ https://the-gui.cloud 6 img-src * data: 6 frame-ancestors 'self' *.vpro.nl:* *.human.nl *.vprobroadcast.com *.npodoc.nl *.2doc.nl *.vprogids.nl *.brainwash.nl *.vprohuman.nl *.npo.nl *.npo-data.nl *.prepr.io vpro.matomo.cloud omroephuman.matomo.cloud; 6 upgrade-insecure-requests; frame-ancestors 'self' https://*.hihaho.com 6 frame-ancestors 'self' https://*.paperflite.com 6 frame-ancestors 'self' https://*.varify.io https://varify.io https://*.survicate.com https://survicate.com 6 default-src ‘self’ ‘unsafe-inline’ ‘unsafe-eval’; img-src ‘self’ data:; font-src ‘self’ data:; connect-src ‘self’; 6 default-src http: 'unsafe-inline' 'unsafe-eval' 6 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: ; 6 frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.salesforce.com *.force.com *.site.com; 6 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob:; 6 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' https: 'unsafe-inline' blob:; style-src 'self' https: 'unsafe-inline'; style-src-elem 'self' https: 'unsafe-inline' data:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss: data: blob:; frame-src 'self' https: blob:; media-src 'self' data: https: blob:; worker-src 'self' blob:; child-src 'self' blob:; report-uri https://csp-violation-collector-all.meta-polyfill-rankia.workers.dev/ 6 default-src 'self'; connect-src https: wss:; font-src 'self' https://fonts.gstatic.com; frame-src https:; img-src https: data:; media-src https: blob:; worker-src blob:; object-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; form-action https:; report-uri https://csp-reports.globalweb.aws.assaabloy.com/reports; 6 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src blob:; object-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' https:; frame-src 'self' https:; font-src 'self' https:; connect-src 'self' https: wss:; frame-ancestors 'self' 6 default-src 'self' data: gap: ws: wss: blob: https://api-js.datadome.co https://*.google-analytics.com https://google.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.blackhawknetwork.com https://*.bhn.com https://*.bhn.cards https://*.gstatic.com https://*.adobedtm.com https://*.demdex.net https://edge.adobedc.net https://*.optimizely.com https://*.paypal.com https://*.cdn-apple.com https://*.zip.co https://*.typekit.net https://*.giftcards.com https://giftcards.com https://*.giftcards.ca https://giftcards.ca https://*.giftz.com.au https://giftz.com.au https://*.gpayments.com https://*.arcot.com https://*.fisglobal.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.entersekt.com https://*.netcetera.com https://*.commbank.com.au https://*.nab.com.au https://*.anz.com.au https://*.westpac.com.au https://*.bankwest.com.au https://*.stgeorge.com.au https://*.bankofmelbourne.com.au https://*.banksa.com.au https://*.ubank.com.au https://*.visa.com https://*.mastercard.com https://*.americanexpress.com https://*.bank.in https://*.giftcardstore.nl https://*.geschenkkartenwelt.de https://*.preprodhawkcommerce.com https://*.giftcardsstage.com https://*.quadpay.com https://*.shopperapproved.com https://*.signifyd.com https://*.riskified.com https://*.sardine.ai https://api.sandbox.sardine.ai https://*.nsureapi.com https://*.forter.com https://*.online-metrix.net https://*.trustarc.com https://consent-pref.trustarc.com https://*.cloudflare.com https://*.cloudfront.net https://*.adobeaemcloud.com https://*.smartystreets.com https://*.smarty.com https://*.microsoft.com https://*.wistia.com https://*.wistia.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.nr-data.net https://greensock.com https://egift.activationspot.com https://egiftpp.blackhawknetwork.com https://egift.certification.blackhawknetwork.com https://connect.facebook.net https://*.clarity.ms https://d-ipv6.mmapiws.com https://*.sharpen.cx https://*.sharpencx.com https://*.fortawesome.com https://*.newrelic.com https://*.googleusercontent.com https://*.bing.com https://*.mmapiws.com https://*.posthog.com https://m1.openfpcdn.io https://*.ssl.cf2.rackcdn.com https://js.captcha-display.com https://dd.prod.captcha-delivery.com https://*.captcha-delivery.com https://ucarecdn.com https://*.rokt.com https://*.salecycle.com https://cdn.pdst.fm https://tag.rmp.rakuten.com https://bat.bing.com https://*.adsrvr.org https://shop.pe https://shopper.shop.pe https://app.shop.pe https://addshoppers.s3.amazonaws.com https://facebook.com https://www.facebook.com https://pixels.spotify.com https://*.linksynergy.com https://resources.xg4ken.com https://*.criteo.com https://*.criteo.net https://manage.safeopt.com https://nytrng.com https://idsync.rlcdn.com https://d16fk4ms6rqz1v.cloudfront.net https://*.agkn.com https://*.tpmn.co.kr https://*.tremorhub.com https://*.mediavine.com https://*.liadm.com https://*.postrelease.com https://*.sharethrough.com https://*.mediawallahscript.com https://*.tapad.com https://*.revcontent.com https://*.tt.omtrdc.net https://*.omnitagjs.com https://*.adgrx.com https://*.googleadservices.com https://*.doubleclick.net https://assets.sc-trc.com https://*.listrakbi.com https://*.emjcd.com https://*.xg4ken.com https://*.stickyadstv.com https://*.ads.linkedin.com https://*.dlx.addthis.com https://*.tpmn.io https://*.emxdgt.com https://*.rezync.com https://*.rakuten.com https://omnicard.com https://www.omnicard.com https://*.rd.linksynergy.com https://www.google.co.in https://t.lt02.net https://cdn.listrakbi.com https://intljs.rmtag.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://www.redditstatic.com https://pixel-config.reddit.com https://alb.reddit.com https://*.kore.ai https://*.shareasale.com https://*.niceincontact.com https://cdn.jsdelivr.net https://*.adyen.com https://*.klarna.com https://*.klarnaevt.com https://*.klarnacdn.net https://*.sentry.io https://*.wisepops.com https://*.px-cloud.net https://*.px-cdn.net https://*.pxchk.net https://id5-sync.com https://lbs.eu-1-id5-sync.com https://*.wisepops.net https://wisepops.net https://*.ada.support https://testing.conversionteam.com https://api.adtraction.net https://cnv.adt623.net https://mgln.ai https://pagead2.googlesyndication.com https://lb.eu-1-id5-sync.com https://*.uploadcare.com https://*.ucarecd.net https://*.evervault.com https://*.perimeterx.net https://checkout.paze.com https://checkout.wallet.uat.earlywarning.io https://log.adtraction.fail;script-src 'self' 'unsafe-inline' 'unsafe-eval' nonce-l-NjL0Hm00yqhriGLLlf8w data: gap: ws: wss: blob: https://*.giftcards.com https://giftcards.com https://*.giftcards.ca https://giftcards.ca https://*.giftz.com.au https://giftz.com.au https://*.gpayments.com https://*.arcot.com https://*.fisglobal.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.entersekt.com https://*.netcetera.com https://*.commbank.com.au https://*.nab.com.au https://*.anz.com.au https://*.westpac.com.au https://*.bankwest.com.au https://*.stgeorge.com.au https://*.bankofmelbourne.com.au https://*.banksa.com.au https://*.ubank.com.au https://*.visa.com https://*.mastercard.com https://*.americanexpress.com https://*.bank.in https://*.giftcardstore.nl https://*.geschenkkartenwelt.de https://*.preprodhawkcommerce.com https://*.giftcardsstage.com https://*.blackhawknetwork.com https://*.bhn.com https://*.bhn.cards https://google.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://device.maxmind.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.microsoft.com https://*.adobeaemcloud.com https://*.adobedtm.com https://cdn.id5-sync.com https://*.demdex.net https://edge.adobedc.net https://unpkg.com https://cdn.jsdelivr.net https://cdn.rawgit.com https://gsap.com https://*.google-analytics.com https://*.trustarc.com https://consent-pref.trustarc.com https://*.cloudflare.com https://*.cloudfront.net https://*.signifyd.com https://*.riskified.com https://*.sardine.ai https://api.sandbox.sardine.ai https://*.nsureapi.com https://*.forter.com https://*.online-metrix.net https://*.paypal.com https://*.cdn-apple.com https://*.zip.co https://*.quadpay.com https://*.paypalobjects.com https://*.smartystreets.com https://*.smarty.com https://*.shopperapproved.com https://*.wistia.com https://*.wistia.net https://egift.activationspot.com https://egiftpp.blackhawknetwork.com https://egift.certification.blackhawknetwork.com https://fpnpmcdn.net https://greensock.com https://connect.facebook.net https://*.clarity.ms https://*.sharpen.cx https://use.fonticons.com https://*.newrelic.com https://*.posthog.com https://js.captcha-display.com https://js.datadome.co https://api-js.datadome.co https://dd.prod.captcha-delivery.com https://*.captcha-delivery.com https://ucarecdn.com https://*.uploadcare.com https://*.rokt.com https://cdn.pdst.fm https://tag.rmp.rakuten.com https://bat.bing.com https://*.adsrvr.org https://shop.pe https://shopper.shop.pe https://app.shop.pe https://addshoppers.s3.amazonaws.com https://facebook.com https://www.facebook.com https://pixels.spotify.com https://*.linksynergy.com https://resources.xg4ken.com https://*.criteo.com https://*.criteo.net https://manage.safeopt.com https://nytrng.com https://idsync.rlcdn.com https://d16fk4ms6rqz1v.cloudfront.net https://*.xg4ken.com https://*.listrakbi.co https://*.sentry-cdn.com https://*.rd.linksynergy.com https://*.googleadservices.com https://*.doubleclick.net https://*.listrakbi.com https://*.googlesyndication.com https://t.lt02.net https://intljs.rmtag.com https://analytics.tiktok.com https://www.redditstatic.com https://pixel-config.reddit.com https://alb.reddit.com https://js.sentry-cdn.com https://*.gstatic.com https://*.shareasale.com https://*.niceincontact.com https://*.wisepops.net https://*.wisepops.com https://wisepops.net https://*.ada.support https://*.kore.ai https://*.adyen.com https://*.klarna.com https://*.klarnacdn.net https://*.px-cloud.net https://*.evervault.com https://valuesportal.com https://cdn.adt348.net https://cdn.mgln.ai https://gtm.adt313.net https://checkout.paze.com https://checkout.wallet.uat.earlywarning.io https://cnv.adt623.net;img-src 'self' data: blob: https://google.com https://*.google.com https://*.google.co.uk https://*.googleapis.com https://*.googletagmanager.com https://*.blackhawknetwork.com https://*.bhn.com https://*.bhn.cards https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.adobeaemcloud.com https://*.adobedtm.com https://id5-sync.com https://p.veritone-ce.com https://ad.yieldlab.net https://*.demdex.net https://edge.adobedc.net https://*.trustarc.com https://consent-pref.trustarc.com https://*.wistia.com https://*.wistia.net https://*.cloudfront.net https://*.giftcards.com https://giftcards.com https://*.giftcards.ca https://giftcards.ca https://*.giftz.com.au https://giftz.com.au https://*.gpayments.com https://*.arcot.com https://*.fisglobal.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.entersekt.com https://*.netcetera.com https://*.commbank.com.au https://*.nab.com.au https://*.anz.com.au https://*.westpac.com.au https://*.bankwest.com.au https://*.stgeorge.com.au https://*.bankofmelbourne.com.au https://*.banksa.com.au https://*.ubank.com.au https://*.visa.com https://*.mastercard.com https://*.americanexpress.com https://*.bank.in https://*.giftcardstore.nl https://*.geschenkkartenwelt.de https://*.preprodhawkcommerce.com https://*.giftcardsstage.com https://*.paypal.com https://*.cdn-apple.com https://*.zip.co https://*.quadpay.com https://*.paypalobjects.com https://*.signifyd.com https://*.riskified.com https://*.sardine.ai https://api.sandbox.sardine.ai https://*.nsureapi.com https://*.forter.com https://*.online-metrix.net https://*.shopperapproved.com https://*.gstatic.com https://egift.activationspot.com https://egiftpp.blackhawknetwork.com https://egift.certification.blackhawknetwork.com https://fpnpmcdn.net https://*.day.com https://greensock.com https://*.clarity.ms https://*.googleusercontent.com https://*.bing.com https://*.cloudflare.com https://*.ssl.cf2.rackcdn.com https://*.google-analytics.com https://js.captcha-display.com https://js.datadome.co https://api-js.datadome.co https://dd.prod.captcha-delivery.com https://*.captcha-delivery.com https://ucarecdn.com https://*.uploadcare.com https://*.rokt.com https://cdn.pdst.fm https://tag.rmp.rakuten.com https://bat.bing.com https://*.adsrvr.org https://shop.pe https://shopper.shop.pe https://app.shop.pe https://addshoppers.s3.amazonaws.com https://facebook.com https://www.facebook.com https://connect.facebook.net https://pixels.spotify.com https://data.adxcel-ec2.com https://*.linksynergy.com https://resources.xg4ken.com https://*.criteo.com https://manage.safeopt.com https://nytrng.com https://idsync.rlcdn.com https://d16fk4ms6rqz1v.cloudfront.net https://*.listrakbi.com https://*.bidswitch.net https://*.smartadserver.com https://*.taboola.com https://*.socdm.com https://*.casalemedia.com https://*.dable.io https://*.adingo.jp https://*.360yield.com https://*.media.net https://*.outbrain.com https://*.pubmatic.com https://*.rubiconproject.com https://*.ad.smaato.net https://*.clmbtech.com https://*.3lift.com https://*.1rx.io https://*.adnxs.com https://*.teads.tv https://*.ads.yieldmo.com https://sync.aralego.com https://cdn.aralego.net https://sync.ad-stir.com https://ad.as.amanad.adtdp.com https://*.send.microad.jp https://*.bluekai.com https://creativecdn.com https://sync.targeting.unrulymedia.com https://public-prod-dspcookiematching.dmxleo.com https://*.agkn.com https://*.tpmn.co.kr https://*.tremorhub.com https://*.mediavine.com https://*.liadm.com https://*.postrelease.com https://*.sharethrough.com https://*.mediawallahscript.com https://*.tapad.com https://*.revcontent.com https://*.omnitagjs.com https://*.adgrx.com https://cm.g.doubleclick.net https://sync.srv.stackadapt.com https://sync-tm.everesttech.net https://*.adform.net https://*.simpli.fi https://*.ybp.yahoo.com https://*.turn.com https://*.analytics.yahoo.com https://*.dotomi.com https://*.googleadservices.com https://*.doubleclick.net https://assets.sc-trc.com https://*.xg4ken.com https://*.stickyadstv.com https://*.ads.linkedin.com https://*.dlx.addthis.com https://*.tpmn.io https://*.emxdgt.com https://*.rezync.com https://*.rd.linksynergy.com https://bh.contextweb.com https://sync.crwdcntrl.net https://*.v.fwmrm.net https://ws.rgtrk.eu https://www.google.co.in https://thrtle.com https://a.usbrowserspeed.com https://match.prod.bidr.io https://he.lijit.com https://email.traversedlp.com https://cdn.listrakbi.com https://pixel-config.reddit.com https://alb.reddit.com https://pm.w55c.net https://p.rfihub.com https://pippio.com https://sync.graph.bluecava.com https://*.thebrighttag.com https://mid.rkdms.com https://*.redinuid.imrworldwide.com https://*.disqus.com https://*.lijit.com https://*.springserve.com https://*.kore.ai https://*.shareasale.com https://*.nimbledeals.com https://*.adyen.com https://*.ada.support https://*.klarna.com https://cdn.valuesportal.com https://pagead2.googlesyndication.com https://mgln.ai https://eu.mgln.ai https://*.ucarecd.net https://checkout.paze.com https://checkout.wallet.uat.earlywarning.io https://log.adtraction.fail;frame-ancestors 'self' https://*.paypal.com https://*.giftcards.com https://giftcards.com https://*.giftcards.ca https://giftcards.ca https://*.giftz.com.au https://giftz.com.au https://*.gpayments.com https://*.arcot.com https://*.fisglobal.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.entersekt.com https://*.netcetera.com https://*.commbank.com.au https://*.nab.com.au https://*.anz.com.au https://*.westpac.com.au https://*.bankwest.com.au https://*.stgeorge.com.au https://*.bankofmelbourne.com.au https://*.banksa.com.au https://*.ubank.com.au https://*.visa.com https://*.mastercard.com https://*.americanexpress.com https://*.bank.in https://*.giftcardstore.nl https://*.geschenkkartenwelt.de https://*.preprodhawkcommerce.com https://*.adobedtm.com https://checkout.paze.com https://checkout.wallet.uat.earlywarning.io https://*.giftcardsstage.com;style-src 'self' data: blob: https://*.giftcards.com https://giftcards.com https://*.giftcards.ca https://giftcards.ca https://*.giftz.com.au https://giftz.com.au https://*.gpayments.com https://*.arcot.com https://*.fisglobal.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.entersekt.com https://*.netcetera.com https://*.commbank.com.au https://*.nab.com.au https://*.anz.com.au https://*.westpac.com.au https://*.bankwest.com.au https://*.stgeorge.com.au https://*.bankofmelbourne.com.au https://*.banksa.com.au https://*.ubank.com.au https://*.visa.com https://*.mastercard.com https://*.americanexpress.com https://*.bank.in https://*.giftcardstore.nl https://*.geschenkkartenwelt.de https://*.preprodhawkcommerce.com https://*.googleapis.com https://*.googletagmanager.com https://google.com https://*.google.com https://*.typekit.net https://*.gstatic.com https://*.adobeaemcloud.com https://*.adobedtm.com https://*.demdex.net https://edge.adobedc.net https://*.shopperapproved.com https://greensock.com https://egift.activationspot.com https://egiftpp.blackhawknetwork.com https://egift.certification.blackhawknetwork.com https://cdn.jsdelivr.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://connect.facebook.net https://*.sharpen.cx https://use.fonticons.com https://*.fortawesome.com https://js.captcha-display.com https://js.datadome.co https://api-js.datadome.co https://*.captcha-delivery.com https://ucarecdn.com https://*.uploadcare.com https://*.rokt.com https://cdn.pdst.fm https://tag.rmp.rakuten.com https://bat.bing.com https://*.adsrvr.org https://shop.pe https://shopper.shop.pe https://app.shop.pe https://addshoppers.s3.amazonaws.com https://facebook.com https://www.facebook.com https://pixels.spotify.com https://*.linksynergy.com https://resources.xg4ken.com https://*.criteo.com https://manage.safeopt.com https://nytrng.com https://idsync.rlcdn.com https://d16fk4ms6rqz1v.cloudfront.net https://*.googleadservices.com https://*.doubleclick.net https://cdn.listrakbi.com https://*.niceincontact.com https://*.ada.support https://*.adyen.com https://*.klarna.com https://checkout.paze.com https://checkout.wallet.uat.earlywarning.io https://*.klarnacdn.net 'unsafe-inline';frame-src 'self' https://*.paypal.com https://*.cdn-apple.com https://*.zip.co https://*.quadpay.com https://*.giftcards.com https://giftcards.com https://*.giftcards.ca https://giftcards.ca https://*.giftz.com.au https://giftz.com.au https://*.gpayments.com https://*.arcot.com https://*.fisglobal.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.entersekt.com https://*.netcetera.com https://*.commbank.com.au https://*.nab.com.au https://*.anz.com.au https://*.westpac.com.au https://*.bankwest.com.au https://*.stgeorge.com.au https://*.bankofmelbourne.com.au https://*.banksa.com.au https://*.ubank.com.au https://*.visa.com https://*.mastercard.com https://*.americanexpress.com https://*.bank.in https://*.giftcardstore.nl https://*.geschenkkartenwelt.de https://*.preprodhawkcommerce.com https://*.giftcardsstage.com https://egift.activationspot.com https://*.blackhawknetwork.com https://egiftpp.blackhawknetwork.com https://egift.certification.blackhawknetwork.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.nsureapi.com https://api.sardine.ai https://www.securesuite.co.uk https://www.rsa3dsauth.co.uk https://api.sandbox.sardine.ai https://pay.google.com https://collect.giftcards.com https://*.wistia.com https://*.wistia.net https://*.adobeaemcloud.com https://consent-pref.trustarc.com https://*.google.com https://google.com https://connect.facebook.net https://www.facebook.com https://*.sharpen.cx https://*.paypalobjects.com https://js.captcha-display.com https://js.datadome.co https://api-js.datadome.co https://*.captcha-delivery.com https://ucarecdn.com https://*.uploadcare.com https://*.salecycle.com https://*.adsrvr.org https://nytrng.com https://idsync.rlcdn.com https://d16fk4ms6rqz1v.cloudfront.net https://*.linksynergy.com https://*.criteo.com https://*.criteo.net https://*.rokt.com https://*.googleadservices.com https://*.doubleclick.net https://*.emjcd.com https://fpt.dfp.microsoft.com https://*.googletagmanager.com https://*.adyen.com https://*.klarna.com https://*.niceincontact.com https://*.klarnaservices.com https://*.arcot.com https://*.icicibank.com https://*.klarnacdn.net https://*.evervault.com https://checkout.paze.com https://checkout.wallet.uat.earlywarning.io https://*.ada.support data: blob:;worker-src 'self' https://*.adobeaemcloud.com https://*.adobedtm.com https://*.demdex.net https://edge.adobedc.net https://*.adyen.com https://checkout.paze.com https://checkout.wallet.uat.earlywarning.io https://*.klarna.com data: blob:;object-src 'none';base-uri 'self'; 6 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; 6 default-src 'self' *; script-src 'unsafe-inline' 'unsafe-eval' https: blob: 'self' *; style-src 'unsafe-inline' 'self' *; img-src 'self' data: *; connect-src *; frame-src 'self' *; font-src data: 'self' https://*.typekit.net https://fonts.gstatic.com https://c1.sfdcstatic.com https://app.mavenoid.com; media-src 'self' https://*.cloudfront.net https://*.azureedge.net; worker-src 'self' blob: *; form-action 'self' https://www.googleapis.com/oauth2/v2/userinfo https://accounts.google.com/o/oauth2/auth https://www.facebook.com/tr/ https://*.cdn-net.com https://www.pages01.net https://*.sandbox.my.salesforce.com https://*.sandbox.my.site.com https://acco1.my.salesforce.com https://acco1.my.site.com; frame-ancestors 'self'; 6 default-src https: wss: data: blob:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; worker-src blob:; report-uri /csp-report 6 script-src 'self' 'wasm-unsafe-eval';img-src 'self' data: https:;connect-src 'self' https://raw.githubusercontent.com https://ungh.cc;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 6 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; object-src 'none'; base-uri 'none'; 6 block-all-mixed-content; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; 6 frame-ancestors https://*.netinfo.bg/ 6 default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' 6 default-src 'self' https:; base-uri 'self'; block-all-mixed-content; font-src 'self' https: data:; form-action 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; script-src 'self' https: 'unsafe-eval' 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https: wss:; script-src-attr 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests 6 frame-ancestors 'self' *.gestionradioqc.com *.cogecolive.com;upgrade-insecure-requests 6 frame-ancestors 'self' https://www.anglaisfacile.com https://www.francaisfacile.com https://www.tolearnenglish.com https://www.tolearnfrench.com https://www.allemandfacile.com https://www.espagnolfacile.com https://www.nlfacile.com https://www.italien-facile.com https://www.mesoutils.com https://www.mesexercices.com https://www.mathematiquesfaciles.com https://www.touslescours.com https://www.tolearnfrench.com https://*.tolearnfree.com; report-uri https://tolearnfree.report-uri.io/r/default/csp/enforce; base-uri 'self'; 6 object-src 'self'; manifest-src 'self'; worker-src 'self' blob: https://customer-t79v13gisi5h8yrx.cloudflarestream.com; font-src 'self' https://static.ehorses.media data: https://fonts.gstatic.com; frame-ancestors 'self'; 6 default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; 6 none 6 object-src 'none'; upgrade-insecure-requests; block-all-mixed-content 6 upgrade-insecure-requests;script-src * 'unsafe-eval' 'unsafe-inline';script-src-attr 'unsafe-inline';style-src * 'unsafe-inline';img-src * data:;font-src *;connect-src * ;manifest-src data:;frame-ancestors 'self';form-action *;base-uri 'self';object-src 'none' 6 frame-ancestors 'self'; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 6 font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.fontawesome.com maxcdn.bootstrapcdn.com self *.cloudflare.com *.bootstrapcdn.com *.flixcar.com *.flixfacts.com https://ocular-prod.api.rocio.ai *.ocularsolution.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://analytics.tiktok.com *.firaonlive.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com/ http://fonts.cdnfonts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com credomatic.compassmerchantsolutions.com https://www.tiendamonge.com/nps-check-out-tlv-guatemala https://www.tiendamonge.com/nps-entrega-tienda-en-linea-cr https://www.tiendamonge.com/nps-entrega-tienda-en-linea-el-salvador https://www.tiendamonge.com/nps-entrega-tienda-en-linea-guatemala https://www.tiendamonge.com/nps-entrega-tienda-en-linea-honduras https://www.tiendamonge.com/nps-entrega-tienda-en-linea-ni https://www.tiendamonge.com/nps-gracias-por-completar-la-encuesta https://www.tiendamonge.com/nps-gracias-por-completar-la-encuesta-monge-pay https://www.tiendamonge.com/nps-monge-pay-desembolso-cash https://www.tiendamonge.com/nps-monge-pay-liveness https://www.tiendamonge.com/nps-monge-pay-pago-a-tarjeta-monge https://www.tiendamonge.com/nps-monge-pay-pago-operaciones https://www.tiendamonge.com/nps-monge-pay-registro https://www.tiendamonge.com/nps-service-desk-ti-costa-rica https://ocular-prod.api.rocio.ai *.ocularsolution.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://analytics.tiktok.com *.firaonlive.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com/ 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com/ https://adobedtm.com assets.adobedtm.com dpm.demdex.net *.googleapis.com *.googletagmanager.com *.facebook.com *.google-analytics.com *.googleadservices.com *.facebook.net grupomongegrupomongedev.112.2o7.net grupomonge.tt.omtrdc.net *.demdex.net *.doubleclick.net bam-cell.nr-data.net smetrics.tiendamonge.com smetrics.elgallomasgallo.com.gt smetrics.elgallomasgallo.com.hn smetrics.prado.com.sv smetrics.elgallomasgallo.com.ni *.weltpixel.com self https://www.facebook.com https://www.google.com *.flixcar.com *.flixfacts.com *.cnetcontent.com *.vimeo.com https://widgetapp.ocularsolution.com *.getblue.io *.flipsnack.com https://heyzine.com https://promogallonic.com https://front-notrack.indexado.production.pmbox.cloud https://fichashppervasive.blob.core.windows.net https://www.tiendamonge.com/nps-check-out-tlv-guatemala https://www.tiendamonge.com/nps-entrega-tienda-en-linea-cr https://www.tiendamonge.com/nps-entrega-tienda-en-linea-el-salvador https://www.tiendamonge.com/nps-entrega-tienda-en-linea-guatemala https://www.tiendamonge.com/nps-entrega-tienda-en-linea-honduras https://www.tiendamonge.com/nps-entrega-tienda-en-linea-ni https://www.tiendamonge.com/nps-gracias-por-completar-la-encuesta https://www.tiendamonge.com/nps-gracias-por-completar-la-encuesta-monge-pay https://www.tiendamonge.com/nps-monge-pay-desembolso-cash https://www.tiendamonge.com/nps-monge-pay-liveness https://www.tiendamonge.com/nps-monge-pay-pago-a-tarjeta-monge https://www.tiendamonge.com/nps-monge-pay-pago-operaciones https://www.tiendamonge.com/nps-monge-pay-registro https://www.tiendamonge.com/nps-prueba-test-costa-rica https://www.tiendamonge.com/nps-prueba-test-guatemala https://www.tiendamonge.com/nps-service-desk-ti-costa-rica https://notrack.indexado.pmbox.cloud https://emersya.com https://ocular-prod.api.rocio.ai *.ocularsolution.com *.mabeindex.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://sandbox.migopayments.com/ https://web.migopayments.com/ https://online.fliphtml5.com/ https://analytics.tiktok.com *.firaonlive.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com/ https://fledge.teads.tv 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ self *.cloudflare.com widget.ocularsolution.com *.newrelic.com https://bam.nr-data.net *.facebook.com *.connect.facebook.net *.google.com *.google-analytics.com *.googleadservices.com *.flixcar.com *.flixfacts.com *.flix360.com *.flix360.io *.syndigo.com *.syndigo.cloud https://www.google.com https://www.google.com.co https://www.tiendamonge.com https://www.elgallomasgallo.com.ni https://www.prado.com.sv https://www.tiendalacorpo.com https://catalogo.prado.com.sv https://www.elgallomasgallo.com.hn https://www.elgallomasgallo.com.gt https://www.verdugotienda.com *.teads.tv *.scene7.com https://fichashppervasive.blob.core.windows.net https://ocular-prod.api.rocio.ai *.ocularsolution.com *.mabeindex.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://gmgdocumentos.blob.core.windows.net/ https://gmgecommerceprd.blob.core.windows.net/ https://analytics.tiktok.com *.firaonlive.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com https://www.google.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://adobedtm.com fast.amc.demdex.net dpm.demdex.net *.googletagmanager.com *.facebook.com *.google-analytics.com *.googleadservices.com *.facebook.net grupomongegrupomongedev.112.2o7.net grupomonge.tt.omtrdc.net *.demdex.net *.doubleclick.net bam-cell.nr-data.net smetrics.tiendamonge.com smetrics.elgallomasgallo.com.gt smetrics.elgallomasgallo.com.hn smetrics.prado.com.sv smetrics.elgallomasgallo.com.ni maps.googleapis.com self unsafe-inline widget.ocularsolution.com cdn.cs.1worldsync.com https://ws.cs.1worldsync.com *.cloudflare.com https://bam.nr-data.net *.connect.facebook.net *.paypal.com *.bootstrapcdn.com *.flixcar.com *.flixfacts.com *.flix360.com *.flix360.io *.pingdom.net *.woorank.com *.cnetcontent.com *.vimeo.com *.syndigo.com *.syndigo.cloud https://event.getblue.io *.getblue.io https://p.teads.tv https://smetrics.verdugotienda.com https://rocio.ocularsolution.com https://ocular-prod.api.rocio.ai *.ocularsolution.com *.mabeindex.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://analytics.tiktok.com *.firaonlive.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com/ https://grupomongeecommerceprd.112.2o7.net http://fonts.cdnfonts.com smetrics.tiendalacorpo.com *.omnitok.com protect.checkpoint.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com self unsafe-inline *.cloudflare.com widget.ocularsolution.com *.facebook.com *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.flixcar.com *.flixfacts.com rocio.ocularsolution.com https://ocular-prod.api.rocio.ai *.ocularsolution.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://analytics.tiktok.com *.firaonlive.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com/ http://fonts.cdnfonts.com cdn.cs.1worldsync.com 'self' 'unsafe-inline'; object-src none 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ self *.flixcar.com widget.ocularsolution.com *.flixfacts.com *.flix360.com *.flix360.io *.syndigo.com *.syndigo.cloud https://emersya.com https://ocular-prod.api.rocio.ai *.ocularsolution.com *.mabeindex.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://gmgdocumentos.blob.core.windows.net/ https://gmgecommerceprd.blob.core.windows.net/ https://analytics.tiktok.com *.firaonlive.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://adobedtm.com assets.adobedtm.com *.adobe.com fast.amc.demdex.net *.googletagmanager.com *.facebook.com *.google-analytics.com *.googleadservices.com *.facebook.net grupomongegrupomongedev.112.2o7.net grupomonge.tt.omtrdc.net *.demdex.net *.doubleclick.net bam-cell.nr-data.net smetrics.tiendamonge.com smetrics.elgallomasgallo.com.gt smetrics.elgallomasgallo.com.hn smetrics.prado.com.sv smetrics.elgallomasgallo.com.ni self wss://tm.filter:1502/ api.ocularsolution.com xml.ssreviewsportal.com *.cloudflare.com https://bam.nr-data.net *.pingdom.net *.woorank.com *.cnetcontent.com *.youtube.com *.vimeo.com *.syndigo.com *.syndigo.cloud product-feature-service.production.alquimio.cloud api.repositorio.production.alquimio.cloud orchestrator.production.aks.alquimio.cloud *.teads.tv https://ocular-prod.api.rocio.ai *.ocularsolution.com *.flixcar.com https://accvent.com *.accvent.com https://forzaups.com *.forzaups.com https://firalivepro.blob.core.windows.net *.firalivepro.blob.core.windows.net https://fira-live-player-pro.azurewebsites.net/ https://fira-live-management-api-pro.azurewebsites.net https://www.lg.com/cac https://sandbox.migopayments.com/ https://web.migopayments.com/ https://analytics.tiktok.com *.firaonlive.com https://smetrics.verdugotienda.com *.assets.adobedtm.com *.grupomonge.tt.omtrdc.net *.smetrics.tiendamonge.com *.grupomonge.demdex.net *.s7d1.scene7.com/ grupomongeecommerceprd.112.2o7.net smetrics.tiendalacorpo.com *.google.com.co www.google.com.co oc-cache.production.alquimio.cloud *.omnitok.com rum.hlx.page 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 6 frame-ancestors https://faucetpay.io https://coinpayu.com https://cointiply.com https://faucetcrypto.com https://adbtc.top https://viefaucet.com https://firefaucet.win https://autofaucet.dutchycorp.space https://claimfreecoins.io; 6 'self' https://www.snooze.com.au https://www.barbequesgalore.com.au; 6 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' data: https: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' 6 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; style-src 'self' 'unsafe-inline' https:; media-src 'self' blob: https:; img-src 'self' data: blob: https:; font-src 'self' data: blob: https:; frame-src 'self' https:; form-action 'self'; object-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: iongroup.wpengine.com * www.googletagmanager.com maps.googleapis.com www.google.com ajax.googleapis.com en25.com d10lpsik1i8c69.cloudfront.net google-analytics.com analytics.google.com www.google-analytics.com iongroupdev.wpenginepowered.com data.iongroup.com cdn.by.wonderpush.com; 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: 6 frame-ancestors 'self' *.backushospital.org *.charlottehungerford.org *.ctorthoinstitute.org *.ctorthomidstate.org *.ctorthostvincents.org *.hartfordhealthcare.org *.hartfordhealthcare.org *.hartfordhealthcareathome.org *.hartfordhealthcaremedicalgroup.org *.hartfordhealthcarerehabnetwork.org *.hartfordhospital.org *.hartfordhospital.org *.hhcandme.com *.hhcbehavioralhealth.org *.hhcconnect.com *.hhcconnect.net *.hhcconnect.org *.hhchealth.com *.hhchealth.net *.hhchealth.org *.hhcseniorservices.org *.hhcsystem.org *.instituteofliving.org *.integratedcarepartners.org *.midstatemedical.org mychartplus.org *.mychartplus.org *.natchaug.org *.rushford.org *.stvincents.org *.thocc.org 6 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; img-src 'self' 'unsafe-inline' data: blob: https:; frame-src 'self' https:; 6 frame-ancestors 'self' *.interactivebrokers.com *.interactivebrokers.ca *.interactivebrokers.com.hk *.interactivebrokers.hk *.interactivebrokers.ch *.interactivebrokers.eu *.interactivebrokers.ie *.interactivebrokers.lu *.interactivebrokers.hu *.interactivebrokers.com.sg *.ibkr.com.sg *.interactivebrokers.ch *.interactivebrokers.co.uk *.interactivebrokers.com.au *.interactivebrokers.co.jp *.interactivebrokers.co.in *.ibkram.com IBKR.docebosaas.com *.interactiveadvisors.com *.ibkr.com *.ibkr.com.cn *.clientam.com *.youtube.com *.interactivebrokers.ie *.interactivebrokers.lu *.interactivebrokers.hu *.clientam.ch *.clientam.com.hk *.go-mpulse.net *.akstat.io impact.interactivebrokers.com *.ibkrcampus.com widgets.tipranks.com site.recognia.com *.portfolioanalyst.com portfolioanalyst.com www.portfolioanalyst.com www.interactivebrokers.com https://www.interactivebrokers.com/ *.lynxbroker.com site.recognia.com ibkr.paxosclients.com worldtrader.hsbc.ae *.xstaging.tv *.ibkrcampus.com ibkrcampus.com *.ibkrguides.com ibkrcampusstg.wpenginepowered.com *.traderstation-international.com *.greenwichcompliance.com; 6 frame-ancestors 'self'; report-uri csp-reports; report-to csp-endpoint; 6 default-src'self' 6 frame-ancestors 'self' *.azdev.direct *.adobe.com direct.lvh.me:8080 6 frame-ancestors 'self' https://*.sonepar.coremedia.cloud/ https://*.sciquest.com https://*.jaggaer.com https://*.danisco.com:57101 https://*.danisco.com:57201 https://*.danisco.com:57301 https://*.danisco.com:44300 http://*.danisco.com:8000 https://*.global.iff.com:8000 https://*.global.iff.com:44300 https://*.global.iff.com:57201 https://*.global.iff.com:57301 https://*.global.iff.com:57101 https://*.ariba.com:44300 https://*.ariba.com:8000 https://*.ariba.com https://*.sirti.net:8001 https://*.sirti.net http://*.sirti.net:8001 https://*.linde.grp:8001 https://*.linde.grp http://*.linde.grp:8001 https://*.linde.grp:44350 https://*.poppies.local:443 https://*.poppies.local https://*.hopperix.it https://*.iredom.local:443 https://*.iredom.local; 6 default-src 'self';frame-src fast.wistia.com fast.wistia.net 'self' *.gant.com *.gant.be *.commercecloud.salesforce.com http://localhost http://localhost:3000 *.wistia.com *.wistia.net self www.google.com www.gstatic.com runtime.commercecloud.com vto.artlabs.ai vto.fibbl.com blob: www.googletagmanager.com www.facebook.com gant.qualtrics.com *.qualtrics.com gtm.gant.it gtm.gant.de gtm.gant.at gtm.gant.ch gtm.gant.nl gtm.gant.com gtm.gant.co.uk gtm.gant.se gtm.gant.fi gtm.gant.dk gtm.gant.es gtm.gant.fr gtm.gant.pt gtm.gant.be returns.ingrid.com cdn-stage.ingrid.com cdn.ingrid.com cdn.acsbapp.com *.acsbapp.com https://acsbapp.com https://cdn.acsbapp.com https://*.acsbapp.com sc-static.net *.pinimg.com fls.doubleclick.net *.doubleclick.net *.pinterest.com *.snapchat.com *.paypal.com *.ingrid.com api.ingrid.com https://faro-collector-prod-eu-north-0.grafana.net;img-src *.gant.com *.gant.be *.commercecloud.salesforce.com *.demandware.net localhost:* self data: blob: images.pexels.com images.ctfassets.net i.cdn.fibblar.com i.cdn.fibbl.com m.cdn.fibblar.com m.cdn.fibbl.com cdn.fibbl.com assets.artlabs.ai vto-assets.artlabs.ai cdn.cookielaw.org embedwistia-a.akamaihd.net distillery.wistia.com *.wistia.com *.wistia.net www.google.com www.gstatic.com pagead2.googlesyndication.com www.facebook.com c.clarity.ms bat.bing.com googleads.g.doubleclick.net c.bing.com www.googletagmanager.com region1.analytics.google.com www.google.se stats.g.doubleclick.net ad.doubleclick.net www.ojrq.net fonts.gstatic.com siteintercept.qualtrics.com *.qualtrics.com gtm.gant.it gtm.gant.de gtm.gant.at gtm.gant.ch gtm.gant.nl gtm.gant.com gtm.gant.co.uk gtm.gant.se gtm.gant.fi gtm.gant.dk gtm.gant.es gtm.gant.fr gtm.gant.pt gtm.gant.be adservice.google.com analytics.tiktok.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat cdn.acsbapp.com *.acsbapp.com https://acsbapp.com https://cdn.acsbapp.com https://*.acsbapp.com sc-static.net *.pinimg.com https://analytics.google.com https://googleads.g.doubleclick.net *.doubleclick.net ssl.gstatic.com *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net www.googleadservices.com google.com ade.googlesyndication.com *.pinterest.com *.snapchat.com *.paypal.com https://gtm-monitoring-function-698792832686.europe-north1.run.app https://gtm-datalayer-monitoring-698792832686.europe-west1.run.app *.ingrid.com api.ingrid.com https://faro-collector-prod-eu-north-0.grafana.net 'self';script-src 'self' 'unsafe-inline' storage.googleapis.com cdn.fibbl.com api.fibbl.com unpkg.com vto-assets.artlabs.ai *.dynamicyield.com *.dynamicyield.eu cdn.cookielaw.org fast.wistia.com fast.wistia.net *.wistia.com *.wistia.net maps.googleapis.com www.google.com www.gstatic.com www.googletagmanager.com localhost:* browser.sentry-cdn.com www.clarity.ms analytics.tiktok.com bat.bing.com utt.impactcdn.com connect.facebook.net scripts.clarity.ms static.ada.support fast.ssqt.io cdn.sales.partner.stylight.net s.pinimg.com sc-static.net zn56ygzsvgqgjs9oi-gant.siteintercept.qualtrics.com cdn.acsbapp.com *.acsbapp.com https://acsbapp.com https://cdn.acsbapp.com https://*.acsbapp.com siteintercept.qualtrics.com *.qualtrics.com https://tagmanager.google.com *.googletagmanager.com www.googleadservices.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.pinterest.com *.snapchat.com *.paypal.com https://www.paypalobjects.com cdn.impactcommerce.io rum.impactcommerce.io cdn-stage.ingrid.com cdn.ingrid.com *.ingrid.com api.ingrid.com https://faro-collector-prod-eu-north-0.grafana.net https://cnstrc.com 'unsafe-eval' https://runtime.commercecloud.com;connect-src 'self' blob: localhost:* api.cquotient.com preview.contentful.com cdn.contentful.com api.fibbl.com cdn.fibbl.com m.cdn.fibblar.com m.cdn.fibbl.com api.artlabs.ai events.artlabs.ai unpkg.com vto-assets.artlabs.ai assets.artlabs.ai cdn.cookielaw.org www.google-analytics.com www.google.com www.gstatic.com www.googletagmanager.com *.wistia.com *.wistia.net *.onetrust.com runtime.commercecloud.com maps.googleapis.com browser.sentry-cdn.com *.dynamicyield.com *.dynamicyield.eu *.gant.be pagead2.googlesyndication.com d.impct.site www.facebook.com bat.bing.com *.bing.com bat.bing.net www.googleadservices.com analytics.tiktok.com www.google.se region1.google-analytics.com gant.pxf.io *.clarity.ms fg8vvsvnieiv3ej16jby.litix.io gtm.gant.it gtm.gant.de gtm.gant.at gtm.gant.ch gtm.gant.nl gtm.gant.com gtm.gant.co.uk gtm.gant.se gtm.gant.fi gtm.gant.dk gtm.gant.es gtm.gant.fr gtm.gant.pt gtm.gant.be siteintercept.qualtrics.com *.tiktok.com *.qualtrics.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat returns.ingrid.com *.ingrid.com cdn.acsbapp.com *.acsbapp.com https://acsbapp.com https://cdn.acsbapp.com https://*.acsbapp.com sc-static.net *.pinimg.com *.googletagmanager.com *.analytics.google.com *.google-analytics.com *.g.doubleclick.net googleads.g.doubleclick.net ad.doubleclick.net *.doubleclick.net *.pinterest.com *.snapchat.com *.paypal.com cdn.impactcommerce.io rum.impactcommerce.io api.ingrid.com https://faro-collector-prod-eu-north-0.grafana.net https://ac.cnstrc.com https://pcs.cnstrc.com https://runtime.commercecloud.com;worker-src 'self' blob:;frame-ancestors *.contentful.com runtime.commercecloud.com *.gant.de *.gant.at *.gant.ch *.gant.se *.gant.dk *.gant.fi *.gant.be *.gant.es *.gant.co.uk *.gant.fr *.gant.nl *.gant.com *.gant.it *.gant.pt https://runtime.commercecloud.com;media-src *.ctfassets.net embedwistia-a.akamaihd.net distillery.wistia.com *.wistia.com *.wistia.net blob: data:;base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 6 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: ws: wss: http: https:; 6 frame-ancestors 'self' https://www.ruralvia.com https://ruralviasimuladores.afi.es https://bancocooperativosimuladores.afi.es https://bancocooperativo-simuladores.afi.es https://ruralvia-simuladores.afi.es; 6 default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.nr-data.net https://*.intellimizeditor.com https://intellimizeditor.com https://cdn.intellimize.co https://ajax.googleapis.com https://ajax.cloudflare.com https://analytics.twitter.com https://api.intellimize.co https://app-abk.marketo.com https://audience.nrich.ai https://bat.bing.com https://boards.greenhouse.io https://cdn.ampproject.org https://cdn.cookielaw.org https://cdn.onesignal.com https://cdnjs.cloudflare.com https://connect.facebook.net https://googleads.g.doubleclick.net https://js-agent.newrelic.com https://js.chilipiper.com https://maps.googleapis.com https://munchkin.marketo.net https://onesignal.com https://player.vimeo.com https://s.yimg.com https://sc.lfeeder.com https://script.crazyegg.com https://script.hotjar.com https://secure.esignlive.com https://secure.onespan.com https://serve.nrich.ai https://ssl.google-analytics.com https://snap.licdn.com https://static.ads-twitter.com https://static.cloudflareinsights.com https://static.hotjar.com https://tag.demandbase.com https://tag.nrich.ai https://tpc.googlesyndication.com https://translate.google.com https://tribl.io https://www.clarity.ms https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://d41.co https://*.d41.co https://embed.ustudio.com https://asana-user-private-us-east-1.s3.us-east-1.amazonaws.com https://id.rlcdn.com https://scout-cdn.salesloft.com https://tracking.g2crowd.com https://j.6sc.co https://view.ceros.com https://app.leandata.com https://js.zi-scripts.com https://ws-assets.zoominfo.com https://optimize.google.com https://www.googleoptimize.com/ https://extend.vimeocdn.com https://code.highcharts.com https://cdn.bizible.com https://www.vimeo.com https://vimeo.com https://cdn.jsdelivr.net blob: https://www.g2.com https://challenges.cloudflare.com/ https://unpkg.com/ https://cdn.ckeditor.com/ https://js.qualified.com https://*.qualified.com https://code.jquery.com; style-src 'self' 'report-sample' 'unsafe-inline' https://app-abk.marketo.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://js.chilipiper.com/ https://onesignal.com https://secure.onespan.com https://tag.demandbase.com https://translate.googleapis.com https://tribl.io https://use.fontawesome.com https://cdn.jsdelivr.net https://optimize.google.com https://www.googletagmanager.com https://www.gstatic.com https://unpkg.com/ https://*.qualified.com; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; connect-src 'self' https://*.clarity.ms https://*.company-target.com https://*.nr-data.net https://308-zmt-742.mktoresp.com https://308-zmt-742.mktoutil.com https://adservice.google.com https://analytics.google.com https://api.chilipiper.com https://api.intellimize.co https://audience.nrich.ai https://bat.bing.com https://cdn.cookielaw.org https://in.hotjar.com https://log.intellimize.co https://maps.googleapis.com https://region1.google-analytics.com https://region1.analytics.google.com https://s.yimg.com https://secure.onespan.com https://serve.nrich.ai https://stats.g.doubleclick.net https://tag.nrich.ai https://tracking.chilipiper.com https://translate.googleapis.com https://vc.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://cdn.linkedin.oribi.io https://www.facebook.com https://www.google-analytics.com https://app.leandata.com https://js.zi-scripts.com https://ws.zoominfo.com https://www.google.com https://www.googletagmanager.com https://cs.lf-discover.com https://*.d41.co https://d41.co https://se-services.intellimize.co https://*.salesloft.com https://*.6sc.co https://secure.adnxs.com/ https://content.hotjar.io https://metrics.hotjar.io https://epsilon.6sense.com https://px.ads.linkedin.com https://*.6sense.com https://tracking.g2crowd.com https://tracking-api.production.g2.com https://tracking-api.g2.com/ https://cdnjs.cloudflare.com/ https://geolocation.onetrust.com https://app.qualified.com/ wss://ws8.qualified.com/ https://*.qualified.com wss://*.qualified.com https://cdn.jsdelivr.net https://privacyportal.onetrust.com/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com https://use.fontawesome.com https://js.qualified.com https://*.qualified.com; child-src https://*.qualified.com; frame-src https://*.esignlive.com/ https://*.onespan.com https://api.intellimize.co https://app.intellimize.co https://*.intellimizeio.com https://onespan.chilipiper.com https://apps.chilipiper.com https://app-abk.marketo.com https://bid.g.doubleclick.net https://boards.greenhouse.io https://player.vimeo.com https://sandbox.esignlive.com https://secure.onespan.com https://test.api.intellimize.co https://tpc.googlesyndication.com https://tribl.io https://vars.hotjar.com https://vimeo.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.youtube.com https://youtube.com https://*.prod.acquia-sites.com https://embed.ustudio.com/ https://view.ceros.com/ https://app.leandata.com https://optimize.google.com https://webikeo.fr/ https://td.doubleclick.net/ https://job-boards.greenhouse.io/ https://www.g2.com/ https://challenges.cloudflare.com/ https://app.qualified.com/ https://*.qualified.com; img-src 'self' data: blob: https://*.qualified.com *; manifest-src 'self'; media-src https://assets.qualified.com https://*.qualified.com mediastream: https://*.onespan.com; worker-src 'self' blob:; upgrade-insecure-requests; 6 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; 6 upgrade-insecure-requests; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: ajax.googleapis.com vjs.zencdn.net admin.brightcove.com sc-static.net bat.bing.com cdnjs.cloudflare.com tags.tiqcdn.com cdn.optimizely.com sadmin.brightcove.com www.youtube.com sadmin.brightcove.com www.google-analytics.com www.google.com cdnssl.clicktale.net snap.licdn.com connect.facebook.net www.googletagmanager.com script.crazyegg.com s.ytimg.com snap.licdn.com visitor-service-eu-west-1.tealiumiq.com s1583749854.t.eloqua.com app.gatedcontent.com img.en25.com s1.adis.ws cdn.pricespider.com locate.pricespider.com wtbevents.pricespider.com c.la1-c1-frf.salesforceliveagent.com players.brightcove.net logx.optimizely.com collect-eu-west-1.tealiumiq.com stats.g.doubleclick.net insights.gatedcontent.com ajax.googleapis.com www.buzzsprout.com www.gstatic.com apps.bazaarvoice.com canon-test-comments.disqus.com tablesorter.com display.ugc.bazaarvoice.com analytics-static.ugc.bazaarvoice.com api.bazaarvoice.com network-eu.bazaarvoice.com visitor-service.tealiumiq.com app.optimizely.com c.evidon.com ds-aksb-a.akamaihd.net check.pricespider.com cdncache-a.akamaihd.net cdn3.optimizely.com turbo.qualaroo.com cdn-assets-prod.s3.amazonaws.com cdn.appdynamics.com s.adroll.com static.ads-twitter.com serve.albacross.com nexus.ensighten.com s.pinimg.com www.googleadservices.com analytics.tiktok.com dynamic.criteo.com adform.net ensighten.com pinimg.com dwin1.com cl.qualaroo.com wirewax.s3.eu-west-1.amazonaws.com service.force.com comeandsee--devxq3.my.salesforce.com devxq3-canon-europe.cs169.force.com c.la2-c1cs-ia4.salesforceliveagent.com d.la2-c1cs-ia4.salesforceliveagent.com i1.adis.ws mpsnare.iesnare.com canoneu.saas.appdynamics.com cloud.typography.com network.bazaarvoice.com s3.amazonaws.com www.canon-europe.com www.facebook.com apps.nexus.bazaarvoice.com platform.twitter.com tiger-cdn.zoovu.com cdn.syndication.twimg.com js.adsrvr.org code.tidio.co widget-v4.tidiochat.com code.jquery.com comeandsee.my.salesforce.com d.la3-c1-fra.salesforceliveagent.com d.la1-c1-frf.salesforceliveagent.com api.tiles.mapbox.com static.lightning.force.com d.la3-c2-ph2.salesforceliveagent.com display-stg.ugc.bazaarvoice.com edge-player.wirewax.com edge-assets.wirewax.com edge-player5.wirewax.com teads.tv community.canon-europe.com cdn.hypemarks.com 3001.scriptcdn.net 7896543.s3.amazonaws.com googleads.g.doubleclick.net doubleclick.net googlesyndication.com my.tealiumiq.com pagead2.googlesyndication.com www.googleadservices.com t.clicktale.net app.contentsquare.com *.livechatinc.com analytics.twitter.com dqm.crownpeak.com assetscdn.stackla.com sys.datadrivenpromotion.com maps.googleapis.com d.adroll.com static.criteo.net assets.calendly.com edge-player5.wirewax.com ct.leady.com sslwidget.criteo.com www.clarity.ms www.tintup.com d.la3-c2-ia2.salesforceliveagent.com www.artfut.com my.tealiumiq.com t.contentsquare.net canon-europe.force.com orca-api.zoovu.com orca-runner-assets.zoovu.com orca-cdn.zoovu.com ajhgroup9516.file.core.windows.net d.la3-c1-cdg.salesforceliveagent.com sales-promotions.com sales-promotions.taxback.ess.ie *.pricespider.com *.mapbox.com unpkg.com img03.en25.com d.la3-c2-ia7.salesforceliveagent.com c.la3-c2-ia7.salesforceliveagent.com comeandsee.my.site.com www.mczbf.com d.la1-core1.sfdc-lywfpd.salesforceliveagent.com tags.srv.stackadapt.com members.cj.com s2.adform.net c.la13-core1.sfdc-lywfpd.salesforceliveagent.com d.la13-core1.sfdc-lywfpd.salesforceliveagent.com c.la11-core1.sfdc-yzvdd4.salesforceliveagent.com d.la11-core1.sfdc-yzvdd4.salesforceliveagent.com widgets.eu.ziftsolutions.com static.ziftsolutions.com dynamic.eu.ziftsolutions.com static.eu.ziftsolutions.com app.formulayt.com insights.formulayt.com canon.my.site.com embed.my-canvas.io files.my-canvas.io; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' blob: ajax.googleapis.com vjs.zencdn.net admin.brightcove.com sc-static.net bat.bing.com cdnjs.cloudflare.com tags.tiqcdn.com cdn.optimizely.com sadmin.brightcove.com www.youtube.com sadmin.brightcove.com www.google-analytics.com www.google.com cdnssl.clicktale.net snap.licdn.com connect.facebook.net www.googletagmanager.com script.crazyegg.com s.ytimg.com snap.licdn.com visitor-service-eu-west-1.tealiumiq.com s1583749854.t.eloqua.com app.gatedcontent.com img.en25.com s1.adis.ws cdn.pricespider.com locate.pricespider.com wtbevents.pricespider.com c.la1-c1-frf.salesforceliveagent.com players.brightcove.net logx.optimizely.com collect-eu-west-1.tealiumiq.com stats.g.doubleclick.net insights.gatedcontent.com ajax.googleapis.com www.buzzsprout.com www.gstatic.com apps.bazaarvoice.com canon-test-comments.disqus.com tablesorter.com display.ugc.bazaarvoice.com analytics-static.ugc.bazaarvoice.com api.bazaarvoice.com network-eu.bazaarvoice.com visitor-service.tealiumiq.com app.optimizely.com c.evidon.com ds-aksb-a.akamaihd.net check.pricespider.com cdncache-a.akamaihd.net cdn3.optimizely.com turbo.qualaroo.com cdn-assets-prod.s3.amazonaws.com cdn.appdynamics.com s.adroll.com static.ads-twitter.com serve.albacross.com nexus.ensighten.com s.pinimg.com www.googleadservices.com analytics.tiktok.com dynamic.criteo.com adform.net ensighten.com pinimg.com dwin1.com cl.qualaroo.com ref.ccb-dev.com wirewax.s3.eu-west-1.amazonaws.com service.force.com comeandsee--devxq3.my.salesforce.com devxq3-canon-europe.cs169.force.com c.la2-c1cs-ia4.salesforceliveagent.com d.la2-c1cs-ia4.salesforceliveagent.com i1.adis.ws mpsnare.iesnare.com canoneu.saas.appdynamics.com cloud.typography.com network.bazaarvoice.com s3.amazonaws.com www.canon-europe.com www.facebook.com apps.nexus.bazaarvoice.com platform.twitter.com tiger-cdn.zoovu.com cdn.syndication.twimg.com js.adsrvr.org code.tidio.co widget-v4.tidiochat.com code.jquery.com comeandsee.my.salesforce.com d.la3-c1-fra.salesforceliveagent.com d.la1-c1-frf.salesforceliveagent.com api.tiles.mapbox.com static.lightning.force.com d.la3-c2-ph2.salesforceliveagent.com display-stg.ugc.bazaarvoice.com edge-player.wirewax.com edge-assets.wirewax.com edge-player5.wirewax.com teads.tv community.canon-europe.com cdn.hypemarks.com 3001.scriptcdn.net 7896543.s3.amazonaws.com googleads.g.doubleclick.net doubleclick.net googlesyndication.com my.tealiumiq.com pagead2.googlesyndication.com www.googleadservices.com t.clicktale.net app.contentsquare.com *.livechatinc.com analytics.twitter.com dqm.crownpeak.com assetscdn.stackla.com sys.datadrivenpromotion.com maps.googleapis.com d.adroll.com static.criteo.net assets.calendly.com edge-player5.wirewax.com ct.leady.com sslwidget.criteo.com www.tintup.com d.la3-c2-ia2.salesforceliveagent.com c.la3-c2-ia7.salesforceliveagent.com comeandsee.my.site.com www.artfut.com my.tealiumiq.com t.contentsquare.net d.la3-c2-ia7.salesforceliveagent.com canon-europe.force.com tiger-cdn.zoovu.com orca-api.zoovu.com orca-runner-assets.zoovu.com orca-cdn.zoovu.com ajhgroup9516.file.core.windows.net d.la3-c1-cdg.salesforceliveagent.com sales-promotions.com sales-promotions.taxback.ess.ie *.pricespider.com *.mapbox.com unpkg.com img03.en25.com www.mczbf.com d.la1-core1.sfdc-lywfpd.salesforceliveagent.com d.la3-core1.sfdc-lywfpd.salesforceliveagent.com d.la1-core1.sfdc-yzvdd4.salesforceliveagent.com map.brightcove.com assets.map.brightcove.com tags.srv.stackadapt.com members.cj.com *.adform.net *.kmtx.io c.la13-core1.sfdc-lywfpd.salesforceliveagent.com d.la13-core1.sfdc-lywfpd.salesforceliveagent.com c.la11-core1.sfdc-yzvdd4.salesforceliveagent.com d.la11-core1.sfdc-yzvdd4.salesforceliveagent.com tag.demandbase.com c.amazon-adsystem.com ct.pinterest.com widgets.eu.ziftsolutions.com static.ziftsolutions.com dynamic.eu.ziftsolutions.com static.eu.ziftsolutions.com app.formulayt.com insights.formulayt.com canon.my.site.com embed.my-canvas.io files.my-canvas.io; 6 frame-ancestors 'self' https://app.contentful.com https://app.eu.contentful.com; 6 6 default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' 6 default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; child-src 'self' https:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https:; media-src 'self' https: data:; 6 base-uri self; frame-ancestors https://app.makeswift.com 6 img-src 'self' data: https:; 6 frame-ancestors 'self' *.originalyp.com *.dentalyp.com *.legalyp.com *.medicalyp.com *.originalyellow.com *.theonlineyp.com *.theoriginalyp.com *.emarketingtechnology.com 6 default-src 'self'; style-src 'self' 'unsafe-inline'; 6 upgrade-insecure-requests ; 6 manifest-src 'self' 6 default-src 'self' https://*.ipc-computer.de https://*.ipc-computer.eu https://*.ipc-computer.fr https://*.ipc-computer.es https://*.sparepartworld.com https://*.clarity.ms https://*.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ipc-computer.de https://widgets.trustedshops.com https://www.google.com https://www.gstatic.com https://*.mida.so https://www.googletagmanager.com https://www.google-analytics.com https://www.paypal.com https://www.paypalobjects.com https://checkout.dibspayment.eu https://unpkg.com https://*.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://*.contentsquare.net https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://checkout.dibspayment.eu https://*.mida.so https://*.googleapis.com https://www.googletagmanager.com https://*.ipc-computer.de https://*.amazonaws.com; img-src 'self' data: https://*.ipc-computer.de https://*.google-analytics.com https://www.googletagmanager.com https://*.gstatic.com https://userlike-cdn-operators.userlike.com https://*.ytimg.com https://img.youtube.com https://widgets.trustedshops.com https://www.paypalobjects.com https://*.paypal.com https://*.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://*.bpcontent.cloud https://*.contentsquare.net https://*.clarity.ms; media-src 'self' data:; font-src 'self' data: https://*.gstatic.com https://userlike-cdn-umm.b-cdn.net; connect-src 'self' https://*.ipc-computer.de https://*.mida.so https://*.google-analytics.com https://*.googleapis.com https://*.doubleclick.net https://*.etrusted.com https://api.userlike.com wss://umd.userlike.com https://*.trustedshops.com https://*.paypal.com https://checkout.dibspayment.eu https://vendorlist.consensu.org https://*.amazonaws.com https://userlike-cdn-umm.b-cdn.net wss://*.botpress.cloud https://*.bpcontent.cloud https://*.contentsquare.net https://*.clarity.ms; object-src 'none'; frame-src 'self' https://*.ipc-computer.de https://*.paypal.com https://checkout.dibspayment.eu https://www.google.com https://www.youtube-nocookie.com; worker-src 'self' blob:; report-uri https://www.ipc-computer.de/csp-violation-log.php; 6 script-src https: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'none'; form-action *;media-src *; default-src 'self' www.optimizecdn.com; img-src * data: blob:; font-src * data:; style-src * 'unsafe-inline'; frame-src *; connect-src *;frame-ancestors *; 6 reflected-xss block 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gist.github.com https://apis.google.com https://cdn.amplitude.com https://api.amplitude.com https://dev-embed.notion.co https://embed.notion.co https://static.zdassets.com https://api.smooch.io https://solve-widget.forethought.ai https://decagon.ai https://http-inputs-notion.splunkcloud.com https://*.sentry.io https://checkout.stripe.com https://js.stripe.com https://embed.typeform.com https://admin.typeform.com https://ucv.bynder.com https://js.sentry-cdn.com https://js.chilipiper.com https://platform.twitter.com https://cdn.syndication.twimg.com https://accounts.google.com https://vimeo.com https://player.vimeo.com https://youtube.com https://www.youtube.com https://app.cal.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.metadata.io https://platformapi.metadata.io https://api-gw.metadata.io https://cdn.cr-relay.com https://d2hrivdxn8ekm8.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net https://d34r8q7sht0t9k.cloudfront.net https://transcend-cdn.com https://wcs.naver.com https://wcs.naver.net https://ssl.pstatic.net https://cdn01.boxcdn.net https://api.tailorhq.ai https://app.tailorhq.ai https://cdn.tailorhq.ai https://cached-api.tailorhq.ai https://cdn.sprig.com https://assets.customer.io https://code.gist.build https://www.google.com https://www.gstatic.com https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://maps.googleapis.com https://unpkg.com/react@18.2.0/umd/react.development.js https://unpkg.com/react-dom@18.2.0/umd/react-dom.development.js https://unpkg.com/@babel/standalone@7.26.9/babel.min.js https://unpkg.com/dayjs-with-plugins@1.0.4/dist/dayjs-with-plugins.min.js https://unpkg.com/@tailwindcss/browser@4 https://unpkg.com/d3@7.9.0/dist/d3.min.js https://unpkg.com/three@0.150.0/build/three.min.js https://dev-custom-views-modules-usw2.s3.us-west-2.amazonaws.com/components.js https://*.jam.dev;connect-src 'self' data: blob: https://img.notionusercontent.com https://artifact.notionusercontent.com https://notion.so/eap https://cdn.amplitude.com https://api.amplitude.com https://www.notion.so https://app.notion.com notion://app.notion.com https://api.embed.ly https://dev-embed.notion.co https://embed.notion.co https://ekr.zdassets.com https://ekr.zendesk.com https://makenotion.zendesk.com https://api.smooch.io wss://api.smooch.io https://api.forethought.ai https://http-inputs-notion.splunkcloud.com https://*.sentry.io https://checkout.stripe.com https://js.stripe.com https://library.notion.com https://d8ejoa1fys2rk.cloudfront.net https://cdn.contentful.com https://preview.contentful.com https://images.ctfassets.net https://tracking.chilipiper.com https://api.chilipiper.com https://api.unsplash.com https://api.giphy.com/ https://giphy-analytics.giphy.com/ https://media0.giphy.com/ https://media1.giphy.com/ https://media2.giphy.com/ https://media3.giphy.com/ https://media4.giphy.com/ https://media5.giphy.com/ https://media6.giphy.com/ https://media7.giphy.com/ https://media8.giphy.com/ https://media9.giphy.com/ https://media10.giphy.com/ https://boards-api.greenhouse.io https://accounts.google.com https://oauth2.googleapis.com https://vimeo.com https://player.vimeo.com https://youtube.com https://www.youtube.com https://www.googletagmanager.com https://analytics.google.com https://ad.doubleclick.net/ccm/s/collect https://www.googleadservices.com https://googleads.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://www.google-analytics.com https://cdn.metadata.io https://platformapi.metadata.io https://api-gw.metadata.io https://api.cr-relay.com https://d2hrivdxn8ekm8.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net https://verifi.podscribe.com https://verifi.pdscrb.com https://pixel.tapad.com https://ipv4.podscribe.com https://ipv4.pdscrb.com https://transcend-cdn.com https://telemetry.transcend.io https://wcs.naver.com https://pgncd.notion.so https://api.statsig.com https://statsigapi.net https://exp.notion.so https://in.getmilana.ai https://api.box.com https://api.tailorhq.ai https://app.tailorhq.ai https://cdn.tailorhq.ai https://cached-api.tailorhq.ai https://*.mux.com https://api.sprig.com https://storage.googleapis.com https://cdn.sprig.com https://cdn.userleap.com https://track.customer.io https://*.api.gist.build https://*.cloud.gist.build https://hcaptcha.com https://*.hcaptcha.com https://tiles.versatiles.org https://maps.googleapis.com https://places.googleapis.com wss://msgstore.www.notion.so wss://msgstore-001.www.notion.so wss://msgstore-002.www.notion.so wss://msgstore.app.notion.com wss://msgstore-001.app.notion.com wss://msgstore-002.app.notion.com https://msgstore.www.notion.so https://msgstore-001.www.notion.so https://msgstore-002.www.notion.so https://msgstore.app.notion.com https://msgstore-001.app.notion.com https://msgstore-002.app.notion.com https://audioprocessor.www.notion.so wss://audioprocessor.www.notion.so https://audioprocessor.app.notion.com wss://audioprocessor.app.notion.com ws://localhost:* ws://127.0.0.1:* https://prod-files-secure.s3.us-west-2.amazonaws.com https://prod-files-secure-euc1.s3.eu-central-1.amazonaws.com https://prod-files-secure-apne1.s3.ap-northeast-1.amazonaws.com https://prod-files-secure-apne2.s3.ap-northeast-2.amazonaws.com https://s3-us-west-2.amazonaws.com/temporary.notion-static.com https://prod-notion-temporary-files-usw2.s3.us-west-2.amazonaws.com https://prod-notion-temporary-files-euc1.s3.eu-central-1.amazonaws.com https://prod-notion-temporary-files-apne1.s3.ap-northeast-1.amazonaws.com https://prod-notion-temporary-files-apne2.s3.ap-northeast-2.amazonaws.com https://notion-emojis.s3-us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://s3.us-west-2.amazonaws.com https://notion-production-snapshots-2.s3.us-west-2.amazonaws.com https://local-workers-code-bundles.s3.us-west-2.amazonaws.com https://dev-space-apne1-0001-workers-code-bundles.s3.ap-northeast-1.amazonaws.com https://dev-space-apne2-0001-workers-code-bundles.s3.ap-northeast-2.amazonaws.com https://dev-space-euc1-0001-workers-code-bundles.s3.eu-central-1.amazonaws.com https://dev-space-usw2-0001-workers-code-bundles.s3.us-west-2.amazonaws.com https://dev-space-usw2-0002-workers-code-bundles.s3.us-west-2.amazonaws.com https://stg-space-usw2-0001-workers-code-bundles.s3.us-west-2.amazonaws.com https://prod-space-apne1-0001-workers-code-bundles.s3.ap-northeast-1.amazonaws.com https://prod-space-apne2-0001-workers-code-bundles.s3.ap-northeast-2.amazonaws.com https://prod-space-euc1-0001-workers-code-bundles.s3.eu-central-1.amazonaws.com https://prod-space-usw2-0001-workers-code-bundles.s3.us-west-2.amazonaws.com https://prod-space-usw2-0002-workers-code-bundles.s3.us-west-2.amazonaws.com https://prod-space-usw2-0003-workers-code-bundles.s3.us-west-2.amazonaws.com https://prod-space-usw2-0004-workers-code-bundles.s3.us-west-2.amazonaws.com https://file.notion.so notion://file.notion.so https://file.notion.com notion://file.notion.com https://www.notion.com https://calendar.notion.so;font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://d8ejoa1fys2rk.cloudfront.net https://cdn01.boxcdn.net;img-src 'self' data: blob: https: https://img.notionusercontent.com https://mail-resource-proxy.mail.notion.so https://app.notion.com notion://app.notion.com https://images.ctfassets.net https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.mux.com https://track.customer.io https://file.notion.so notion://file.notion.so https://file.notion.com notion://file.notion.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://github.githubassets.com https://d8ejoa1fys2rk.cloudfront.net https://js.chilipiper.com https://platform.twitter.com https://ton.twimg.com https://accounts.google.com https://transcend-cdn.com https://cdn01.boxcdn.net https://code.gist.build https://hcaptcha.com https://*.hcaptcha.com;frame-src 'self' https: http: https://artifact.notionusercontent.com https://app.notion.com notion://app.notion.com https://accounts.google.com https://renderer.gist.build https://code.gist.build https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://identity.notion.so https://identity.notion.com https://*.jam.dev;frame-ancestors 'self' https://app.notion.com notion://app.notion.com https://mail.notion.so https://mail.notion.com;worker-src 'self' blob:;child-src 'self' blob:;media-src blob: https: http: https://*.mux.com https://file.notion.so notion://file.notion.so https://file.notion.com notion://file.notion.com 6 frame-ancestors 'self' https://training.lynxbroker.de 6 default-src * data: 'unsafe-inline' blob:; frame-ancestors 'self' https://goflo.nl https://onlinegallery.art https://accept.onlinegallery.art http://onlinegallery-art.rowhel.gooser.nl; img-src * data: blob: 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: javascript: https://api.onesignal.com/ https://d1sag09wwfbul8.cloudfront.net/ https://tracker.metricool.com/ https://cdn.onesignal.com/ https://gso.kommo.com/ https://widgets.sociablekit.com/ https://googleads.g.doubleclick.net/ https://www.instagram.com/ https://www.twitter.com/ https://x.com/ https://syndication.twitter.com/ https://coomeva.com.co/ https://cdn.userway.org/ https://alcaldiatulua.agenti.com.co/agenti_lite_alcaldiatulua/js/jquery-3.7.1.min.js https://alcaldiatulua.agenti.com.co/agenti_lite_alcaldiatulua/js/scripts.js alcaldiatulua.agenti.com.co https://cdn.siftscience.com alcaldiapereira.agenti.com.co https://checkout.wompi.co/widget.js wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app widget02.wolkvox.com d335luupugsy2.cloudfront.net wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app https://platform.bluemessaging.net app.sitp.gov.co *.firebaseio.com *.aldeamo.com *.bootstrapcdn.com *.cloudflare.com https://chat1-cls27.i6.inconcertcc.com https://webchat-cls27.i6.inconcertcc.com *.facebook.net *.fontawesome.com https://mas-spn.inconcertcc.com *.googleapis.com *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.hippochat.io *.hotjar.com *.jquery.com *.jsdelivr.net *.livechatinc.com *.snapengage.com *.twimg.com *.twitter.com *.uniquindio.edu.co unpkg.com *.ytimg.com *.youtube.com *.zendesk.com ; img-src 'self' blob: data: javascript: https://tracker.metricool.com/ https://images.sociablekit.com/ https://scontent-iad3-2.cdninstagram.com/ https://mioriente.com/ https://www.google.com.co/ https://www.googletagmanager.com/ https://googleads.g.doubleclick.net/ https://coomeva.com.co/ https://pruebas-coomeva.nexura.com/ https://cdn.userway.org/ https://placeholdit.imgix.net/* https://placeholdit.imgix.net/ static.placetopay.com/placetopay-logo.svg https://govco.sedeelectronica.com.co *.aldeamo.com *.amazonaws.com *.bluemessaging.net *.cool especiales.presidencia.gov.co *.facebook.com fuguchat.s3.ap-south-1.amazonaws.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.gstatic.com *.hippochat.io *.hotjar.com *.livechatinc.com sedeelectronica.com.co sellodeexcelencia.gov.co *.snapengage.com s-static.ak.facebook.com stats.g.doubleclick.net synersis.co:8442 smartlink.cool *.twimg.com *.twitter.com *.uniquindio.edu.co vozme.com *.youtube.com *.zendesk.com ; style-src 'self' 'unsafe-inline' https://gso.kommo.com/ https://widgets.sociablekit.com/ https://coomeva.com.co/ https://cdn.userway.org/ alcaldiatulua.agenti.com.co alcaldiapereira.agenti.com.co wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app widget02.wolkvox.com d335luupugsy2.cloudfront.net wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app https://platform.bluemessaging.net *.aldeamo.com *.bootstrapcdn.com govco.sedeelectronica.com.co ton.twimg.com *.cali.gov.co https://mas-spn.inconcertcc.com https://cdn.jsdelivr.net *.cloudflare.com *.fontawesome.com *.hippochat.io *.hotjar.com *.jquery.com *.nexura.com *.gstatic.com *.google.com *.googleapis.com sedeelectronica.com.co *.twitter.com *.uniquindio.edu.co *.zendesk.com ; font-src 'self' data: https://coomeva.com.co/ https://cdn.userway.org/ https://cdnjs.cloudflare.com alcaldiatulua.agenti.com.co alcaldiapereira.agenti.com.co *.cali.gov.co https://mas-spn.inconcertcc.com govco.sedeelectronica.com.co sedeelectronica.com.co *.fontawesome.com *.hotjar.com *.bootstrapcdn.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.nexura.com sedeelectronica.com.co *.uniquindio.edu.co ; object-src 'self' data: ; frame-ancestors 'self' *.nexura.com *.uniquindio.edu.co ; media-src 'self' blob: https://c11.radioboss.fm:18054/stream *.radioboss.fm:18054/stream *.uniquindio.edu.co vozme.com smartlink.cool *.smartlink.cool ; 6 default-src 'self' https://*.dcube.cloud/ ; script-src 'self' 'sha256-nWKjNpDy9BIIH8p69UATrM+dYfeHm3RCw7s03nOoDC0=' # Script for GTM tag 'sha256-jrgkEqFIwhymCeRxfh3RHm2ssvwC2lNerrrYfQZiAMA=' # Script for WizGov 'sha256-E6VSHz7prXjxYy3IswjAT2XLomQQ+UmhLBThJZm+dGs=' # Script for WizGov https://script-staging.wiz.gov.sg/customs-script.js https://script.wiz.gov.sg/customs-script.js blob: https://assets.dcube.cloud https://*.wogaa.sg https://assets.adobedtm.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://va.ecitizen.gov.sg https://*.cloudfront.net https://printjs-4de6.kxcdn.com https://unpkg.com https://unpkg.com/web-vitals https://wogadobeanalytics.sc.omtrdc.net https://connect.facebook.net https://graph.facebook.com https://facebook.com https://www.facebook.com https://*.googletagmanager.com https://*.licdn.com https://webchat.vica.gov.sg https://vica.gov.sg https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://api-chat-fe-flag.vica.gov.sg https://static.zdassets.com https://ekr.zdassets.com https://*.zendesk.com https://*.zopim.com https://www.instagram.com https://script.wiz.gov.sg/widget.js https://script-staging.wiz.gov.sg/widget.js https://*.ask.gov.sg wss://*.zendesk.com wss://*.zopim.com https://*.dcube.cloud/ https://console.apac.sabio.cloud/ https://console-flex-api.ap.sabio.cloud/ https://cdn.jsdelivr.net/npm/algoliasearch@4.20.0/dist/algoliasearch-lite.umd.js https://cdn.jsdelivr.net/npm/instantsearch.js@4.60.0/dist/instantsearch.production.min.js https://attachments.apac2.webexengage.com https://cdn-widget.apac2.webexengage.com https://rtm.sg.webexconnect.io https://widget.apac2.webexengage.com ; object-src 'self' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://*.cloudfront.net https://va.ecitizen.gov.sg https://*.wogaa.sg https://cdnjs.cloudflare.com https://datagovsg.github.io https://webchat.vica.gov.sg https://vica.gov.sg https://unpkg.com https://script.wiz.gov.sg/widget.css https://script-staging.wiz.gov.sg/widget.css https://assets.dcube.cloud/ https://console.apac.sabio.cloud/ https://console-flex-api.ap.sabio.cloud https://cdn.jsdelivr.net/npm/instantsearch.css@7/themes/satellite-min.css ; img-src * ; media-src * ; frame-src https://form.gov.sg/ https://wogaa.demdex.net/ https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://vimeo.com https://www.google.com https://checkfirst.gov.sg https://www.checkfirst.gov.sg https://docs.google.com https://nlb.ap.panopto.com https://www.google.com/recaptcha/ https://accounts.google.com https://www.gstatic.com/recaptcha/ https://data.gov.sg https://*.data.gov.sg https://calendar.google.com https://datastudio.google.com https://lookerstudio.google.com https://*.fls.doubleclick.net https://www.facebook.com https://m.facebook.com/ https://www.instagram.com https://api.id.gov.sg/ https://*.onemap.gov.sg/ https://maps.hack2025.gov.sg https://maps.gov.sg ; frame-ancestors 'none' ; font-src * data: ; connect-src 'self' https://dpm.demdex.net https://*.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://*.wogaa.sg https://va.ecitizen.gov.sg https://ifaqs.flexanswer.com https://*.cloudfront.net https://fonts.googleapis.com https://cdnjs.cloudflare.com https://wogadobeanalytics.sc.omtrdc.net https://data.gov.sg https://api-production.data.gov.sg https://api.isomer.gov.sg https://webchat.vica.gov.sg https://chat.vica.gov.sg https://vica.gov.sg https://s3-va-prd-vica.s3-ap-southeast-1.amazonaws.com wss://chat.vica.gov.sg https://api-vica-ana.vica.gov.sg/api/v1/response-ratings https://api-chat-fe-flag.vica.gov.sg https://static.zdassets.com https://ekr.zdassets.com https://*.zendesk.com https://*.zopim.com https://ask.gov.sg https://*.ask.gov.sg https://staging.ask.gov.sg wss://*.zendesk.com wss://*.zopim.com https://*.dcube.cloud/ https://console-flex-api.ap.sabio.cloud https://console.apac.sabio.cloud/ https://authmiddleware.ap.sabio.cloud https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://attachments.apac2.webexengage.com https://cdn-widget.apac2.webexengage.com https://rtm.sg.webexconnect.io https://widget.apac2.webexengage.com ; 6 default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; img-src https: data: ; worker-src blob: https: ; connect-src https: wss: 6 default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; object-src 'none'; upgrade-insecure-requests 6 default-src https:;script-src https: data: 'unsafe-inline' 'unsafe-eval';style-src https: 'unsafe-inline';img-src https: data: blob:;media-src https: data: blob:;font-src https: data:;connect-src https: wss:;worker-src 'self' blob:;upgrade-insecure-requests; 6 object-src 'self'; 6 frame-ancestors http://*.timeout.com https://*.timeout.com 'self' 6 object-src 'none'; form-action 'self'; frame-ancestors 'self' 6 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 6 “upgrade-insecure-requests†6 frame-ancestors 'self' http://localhost:* https://localhost:* *.saw.com 6 frame-ancestors 'self' https://*.uniform.app https://uniform.app; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https://uniform.app https://*.uniform.app https://*.wozzbot.com https://*.googletagmanager.com https://*.segment.com https://*.youtube.com https://*.jsdelivr.net https://*.hsforms.net https://*.osano.com https://*.cloudflareinsights.com https://*.bing.com https://*.licdn.com https://*.facebook.net https://*.doubleclick.net https://*.clarity.ms https://*.google.com https://*.gstatic.com; worker-src 'self' blob:; connect-src 'self' https://*.wozzbot.com https://*.hsforms.com https://*.bugsnag.com https://*.segment.com https://*.algolianet.com https://*.algolia.net https://*.algolia.io https://*.kontent.ai https://*.netlify.app https://*.opleidingsgroep.nl https://*.ncoi.nl https://*.osano.com https://*.bing.com https://*.bing.net https://*.clarity.ms https://*.doubleclick.net https://*.google.com https://*.google.nl https://*.google.pt https://*.google.de https://*.google.be https://*.googleadservices.com https://*.linkedin.com https://*.facebook.com https://*.nsvcs.net https://*.isbw.nl https://*.mvp.nl https://*.bestuursacademie.nl https://*.bvo.nl https://*.nibesvv.nl https://*.schoevers.nl https://*.proeducation.nl https://*.computrain.nl https://*.localhost; img-src 'self' https://*.wozzbot.com https://*.kc-usercontent.com https://*.opleidingsgroep.nl https://*.hsforms.net https://*.hsforms.com https://*.hubspotusercontent-eu1.net data: https://*.facebook.com https://*.licdn.com https://*.google.com https://*.google.nl https://*.google.pt https://*.google.de https://*.google.be https://*.googleadservices.com https://*.bing.com https://*.googletagmanager.com https://*.linkedin.com https://*.ytimg.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' https://*.netlify.com https://*.youtube.com https://*.youtube-nocookie.com https://*.hsforms.com https://*.googletagmanager.com https://*.ncoi.nl https://*.doubleclick.net https://*.google.com https://*.facebook.com https://*.isbw.nl https://*.mvp.nl https://*.bestuursacademie.nl https://*.bvo.nl https://*.nibesvv.nl https://*.schoevers.nl https://*.proeducation.nl https://*.computrain.nl https://*.localhost https://ncoi.slgnt.eu; base-uri 'self'; form-action 'self' https://*.hsforms.com https://*.facebook.com 6 frame-ancestors 'self' *.roomlynx.net 6 default-src https: data: blob: wss://*.hotjar.com wss://*.crazyegg.com *.crazyegg.com wss://*.zohopublic.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; media-src 'self' blob: data: https:; 6 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com *.googleapis.com https://app.eika.no/infrastruktur-styleguide-web/ https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://eika.piwik.pro/ppms.js https://svc.kundedialog.eika.no/t/w https://mktdplp102cdn.azureedge.net/public/latest/js/form-loader.js https://cdn.spinnaker-js.com/rc/ https://acdn.adnxs.com/dmp/up/pixie.js siteimproveanalytics.com https://www.googletagmanager.com https://in.taskanalytics.com https://connect.facebook.net https://googleads.g.doubleclick.net www.googleadservices.com https://secure.adnxs.com http://ib.adnxs.com https://*.mookie1.com *.google-analytics.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://app.eika.no/infrastruktur-styleguide-web/ https://tagmanager.google.com;img-src 'self' * data: region1.google-analytics.com region1.analytics.google.com;frame-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com *.morningstar.com *.morningstar.no https://id.eika.no https://www.googletagmanager.com https://eika-kundeutbytte.grensesnitt.cloud https://www.sign.nets.eu https://www.e-sign.nets.eu https://csfe.bankid.no https://pvu.nets.no https://ir.oms.no/component/companyDisclosuresArchive https://*.google.com https://*.google.no https://*.google.se *.doubleclick.net https://connect.facebook.net https://ext.mnm.as;font-src 'self' https://fonts.gstatic.com https://app.eika.no/infrastruktur-styleguide-web/;connect-src 'self' https://eika.piwik.pro http://apil1.spinnaker-js.com https://cdn.spinnaker-js.com/rc/ https://*.google-analytics.com/j/collect https://*.google-analytics.com/g/collect region1.google-analytics.com region1.analytics.google.com https://ssl.google-analytics.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://www.google.com/ccm/collect;report-uri /WebResource.axd?cspReport=true 6 default-src 'self'; script-src 'self' 'report-sample' 'unsafe-eval' https://static.cloudflareinsights.com https://*.cloudfront.net; style-src 'self' 'report-sample' https://fonts.googleapis.com https://*.cloudfront.net https://translate.googleapis.com https://translate.google.com https://www.gstatic.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self'; img-src 'self' data: https://*.cloudfront.net https://fonts.gstatic.com https://translate.google.com https://www.gstatic.com; connect-src 'self' https://cloudflareinsights.com https://*.cloudfront.net https://*.googlesyndication.com https://pagead2.googlesyndication.com https://sentry.io https://*.sentry.io https://*.googleapis.com https://translate.googleapis.com https://collect.optoutsystem.com https://api.optoutsystem.com; object-src 'none'; form-action 'self'; base-uri 'self' 6 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://cdn.livechatinc.com https://api.livechatinc.com https://*.cdn.mozilla.net https://*.conversionsapigateway.com https://*.a.run.app https://www.googletagmanager.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://s3-ap-southeast-1.amazonaws.com https://*.amazonaws.com https://*.s3-ap-southeast-1.amazonaws.com https://*.chaport.com https://*.doubleclick.net https://www.google.com https://s21-def.ap4r.com https://s21-def.ks-la.net https://*.tailwindcss.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cdn.mozilla.net https://s3-ap-southeast-1.amazonaws.com https://*.s3-ap-southeast-1.amazonaws.com https://*.9mbr.com https://*.chaport.com https://*.cloudflare.com https://*.tailwindcss.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://*.cloudflare.com https://*.cdn.mozilla.net; connect-src 'self' https://*.a.run.app https://*.conversionsapigateway.com wss://*.dewasyscrm.com https://notification889.com https://*.dewasyscrm.com https://*.9mbr.com https://*.chaport.com https://www.google-analytics.com https://www.google.com https://*.stape.id https://www.google.co.id https://*.adaether.com https://*.mythad.com https://*.kwai-pro.com wss://*.9mbr.com; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 6 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: filesystem: https://cdn.ampproject.org https://*.google-analytics.com https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' filesystem: https://fonts.googleapis.com; img-src 'self' https: data: blob: filesystem: secure.gravatar.com cdn.ampproject.org ampproject.net *.wordpress.org s.w.org *.githubusercontent.com; connect-src 'self' https: data: blob: filesystem: https://cdn.ampproject.org https://ampcid.google.com https://ampcid.google.com.mt https://ampcid.google.com.tr https://*.google-analytics.com https://*.hotjar.com https://*.facebook.com https://*.gstatic.com https://www.googletagmanager.com https://fonts.googleapis.com https://challenges.cloudflare.com; font-src 'self' https: data: blob: filesystem: https://fonts.googleapis.com; frame-ancestors 'self'; frame-src 'self' https: data: blob: filesystem: https://www.googletagmanager.com https://*.google.com https://vars.hotjar.com https://www.facebook.com https://challenges.cloudflare.com 6 default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' data: https:; img-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'self' https:; worker-src 'self' blob:; frame-ancestors 'self' 6 report-uri https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=oAwsdSRvQQk4fDXvkPF5PR&v=4&s=392&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttcdn-us.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com media.ticketmaster.eu play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com unpkg.com vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com; connect-src * 'unsafe-inline' blob: data:; frame-ancestors tea-va.bytedance.net www.tiktok.com; frame-src bytedance: *.kakao.com *.tiktok.com access.line.me accounts.google.com api.twitter.com appleid.apple.com assets.braintreegateway.com client-api.arkoselabs.com h.online-metrix.net lf16-web.tiktokcdn.com newassets.hcaptcha.com recaptcha.google.com tx41v.arkoselabs.com www.facebook.com www.google.com; script-src 'report-sample' 'unsafe-eval' 'inline-speculation-rules' 'wasm-unsafe-eval' *.tiktokcdn-us.com accounts.google.com apis.google.com billshark-cdn.s3.amazonaws.com c.paypal.com cdnjs.cloudflare.com client-api.arkoselabs.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net js-cdn.music.apple.com/musickit/v3/musickit.js js.braintreegateway.com js.hcaptcha.com js.hsforms.net recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/bric-captcha-ttweb/core-captcha/ static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.facebook.net www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com lf16-tiktok-web.tiktokcdn-us.com/obj/tiktok-web-tx/obj/waf-aiso/ appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/ 5 default-src 'self';script-src 'self' 'unsafe-inline' *.microsoft.com *.clarity.ms js.monitor.azure.com res.cdn.office.net;style-src 'self' 'unsafe-inline' *.microsoft.com;img-src 'self' data: blob: https:;font-src 'self' data: https:;connect-src 'self' https:;frame-src 'self' *.microsoft.com www.youtube.com www.youtube-nocookie.com;frame-ancestors 'none';base-uri 'self';form-action 'self' *.microsoft.com;object-src 'none';upgrade-insecure-requests 5 frame-ancestors 'self' https://*.opera.com https://*.operaneon.com https://*.browse.me; upgrade-insecure-requests; 5 frame-ancestors 'self' app.storyblok.com; 5 frame-ancestors 'self'; frame-src 'self' https://*.google.com https://*.googletagmanager.com https://www.sitecdn.com braintreegateway.com assets.braintreegateway.com googletagmanager.com https://client.dropcatch.com https://*.paypal.com https://*.paypalobjects.com https://ssl.kaptcha.com; script-src 'self' https://*.google.com https://*.doubleclick.net https://*.gstatic.com https://*.paypal.com https://*.googletagmanager.com https://secure.dropcatch.com https://*.google-analytics.com 'unsafe-inline'; connect-src 'self' https://*.google.com https://*.googleadservices.com https://*.paypal.com https://*.amazonaws.com https://*.braintreegateway.com https://*.braintree-api.com https://uilogging.tcdevops.com https://logging.dropcatch.com https://*.google-analytics.com https://translate.dropcatch.com https://client.dropcatch.com wss://rt.dropcatch.com https://*.launchdarkly.com https://o4510675591430144.ingest.us.sentry.io 5 frame-ancestors 'self' https://onlinexperiences.com https://next.brella.io https://pheedloop.com https://gather.town https://datadog.docebosaas.com/ 5 frame-ancestors 'self' *.wal.co *.walmart-customcards.com *.walmart.com:* *.walmart.net *.walmartimages.com; report-uri https://csp.walmart.com/c/r/gl 5 default-src 'self' *.amazonaws.com *.cloudfront.net; frame-ancestors 'self' *.intercom.com fin.ai *.fin.ai https://app.contentful.com https://*.sanity.studio https://www.sanity.io; child-src 'self' http://intercom.test *.intercom.io *.intercom.com *.intercomcdn.com *.intercom-reporting.com intercom-sheets.com *.intercom-sheets.com *.doubleclick.net *.fls.doubleclick.net *.marketo.com *.contentful.com *.google.com www.google.com *.googletagmanager.com *.facebook.com *.googlesyndication.com *.youtube.com www.youtube-nocookie.com *.wistia.com *.wistia.net *.hotjar.com *.hotjar.io *.quora.com *.adsrvr.org *.chilipiper.com *.getreprise.com *.stackadapt.com *.o11.tech *.luma.com luma.com *.amazonaws.com *.cloudfront.net connect.facebook.net js.stripe.com vercel.live; connect-src 'self' http://intercom.test *.intercom.io wss://*.intercom.io *.intercom.com *.intercomcdn.com *.intercomassets.com *.intercomusercontent.com *.intercom-messenger.com wss://*.intercom-messenger.com fin.ai *.fin.ai boards-api.greenhouse.io *.marketo.com *.marketo.net *.mktoutil.com *.mktoresp.com *.sentry.io *.facebook.com *.contentful.com cdn.sanity.io *.api.sanity.io *.datadoghq.com *.browser-intake-datadoghq.com browser-intake-datadoghq.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com www.google.com *.googleadservices.com *.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net *.googlesyndication.com *.linkedin.com *.ads.linkedin.com *.linkedin.oribi.io snap.licdn.com *.eppo.cloud *.onetrust.com *.bing.com *.bing.net *.reddit.com *.redditstatic.com *.adnxs.com *.hotjar.com:* *.hotjar.io:* wss://*.hotjar.com wss://*.hotjar.io *.akamaihd.net *.wistia.com *.wistia.net *.pingdom.net *.6sc.co *.6sense.com *.chilipiper.com *.getreprise.com *.jsdelivr.net *.litix.io *.stackadapt.com *.adsrvr.org *.influ2.com *.lu.ma *.claydar.com *.amazonaws.com *.cloudfront.net cdn.cookielaw.org connect.facebook.net *.gdn.smartling.com unpkg.com vercel.live vitals.vercel-insights.com *.edge.sdk.awswaf.com; font-src 'self' data: https: *.amazonaws.com *.cloudfront.net; img-src 'self' data: blob: https: *.facebook.com *.ads.linkedin.com *.adsrvr.org *.amazonaws.com *.cloudfront.net; media-src 'self' data: blob: https: *.amazonaws.com *.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' *.intercom.io *.intercom.com fin.ai *.fin.ai *.intercomcdn.com *.intercomassets.com *.googleapis.com *.marketo.com *.marketo.net *.sentry-cdn.com *.sentry.io *.facebook.com *.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net *.datadoghq.com *.google.com www.google.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.linkedin.com snap.licdn.com *.adsymptotic.com *.bizographics.com *.contentful.com *.onetrust.com *.bing.com *.twitter.com *.wistia.com *.wistia.net *.stripe.com *.hotjar.com *.hotjar.io *.adnxs.com *.chilipiper.com *.getreprise.com *.getsmartling.com *.litix.io *.influ2.com *.6sc.co *.adsrvr.org *.redditstatic.com *.stackadapt.com tags.srv.stackadapt.com *.claydar.com *.o11.tech *.dpmsrv.com *.lu.ma *.amazonaws.com *.cloudfront.net cdn.cookielaw.org connect.facebook.net *.gdn.smartling.com unpkg.com vercel.live www.datadoghq-browser-agent.com *.edge.sdk.awswaf.com; style-src 'self' 'unsafe-inline' *.intercom.com fin.ai *.fin.ai www.intercomstatus.com *.marketo.com *.intercomassets.com *.bootstrapcdn.com *.getsmartling.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.typekit.net *.chilipiper.com *.stackadapt.com tags.srv.stackadapt.com *.influ2.com *.lu.ma *.amazonaws.com *.cloudfront.net vercel.live; worker-src data: blob:; base-uri 'self'; report-uri https://o2129.ingest.us.sentry.io/api/4511115744247808/security/?sentry_key=451fb2554096d7242793a58e77ef50c2; upgrade-insecure-requests 5 default-src 'self' *.livejournal.com *.livejournal.net *.dsp-rambler.ru *.google.com google.com *.rambler-co.ru rambler-co.ru *.rambler.ru rambler.ru *.tiktok.com tiktok.com *.youtube.com youtube.com; script-src 'self' *.livejournal.com *.livejournal.net *.24smi.net *.adfox.ru *.adlooxtracking.com adlooxtracking.com *.adlooxtracking.ru adlooxtracking.ru ad.mail.ru api.giphy.com bs.serving-sys.ru cdn.ampproject.org cdn.jsdelivr.net cdnjs.smi2.ru *.cdn-vk.ru content.adriver.ru *.criteo.com *.criteo.net *.doubleclick.net *.dropbox.com dsp-rambler.ru *.dsp-rambler.ru embed.bsky.app *.exelator.com *.facebook.com *.facebook.net gist.github.com googleads.g.doubleclick.net *.google-analytics.com *.googleapis.com *.google.com google.com *.google.ru *.googlesyndication.com *.googletagmanager.com googletagmanager.com *.googletagservices.com *.gstatic.com id.sber.ru *.instagram.com js.mamydirect.com *.lj.ru mc.yandex.com mc.yandex.ru *.newrelic.com *.nr-data.net *.ok.ru openstat.net pingback.giphy.com *.pingdom.com *.pingdom.net *.pinterest.com *.plista.com privacy-cs.mail.ru *.rambler-co.ru rambler-co.ru *.rambler.ru rambler.ru rb.infox.sg rb.infox.ru r.mradx.net *.rnet.plus *.rubiconproject.com r.webturn.ru *.scorecardresearch.com sdk.canva.com *.services.livejournal.com smi2.ru ssl.p.jwpcdn.com static.smi2cdn.ru static.smi2.net static.xx.fbcdn.net stat.media telegram.org tiktokcdn-us.com *.tiktok.com tiktok.com tns-counter.ru *.top100.ru top-fwz1.mail.ru tpc.googlesyndication.com *.ttwstatic.com twemoji.maxcdn.com *.twimg.com *.twitter.com *.videos.livejournal.com vk.com *.vk.com vk.ru *.vk.ru *.weborama.fm weborama.fm *.weborama.fr weborama.fr *.weborama.ru weborama.ru *.weborama-tech.ru weborama-tech.ru *.webturn.ru *.webvisor.org *.yahooapis.com *.yandex.ru yandex.ru yastatic.net ymetrica.com *.youtube.com youtube.com z.moatads.com 'unsafe-inline' 'unsafe-eval'; style-src http: https: data: 'unsafe-inline'; img-src blob: http: https: data:; frame-src http: https:; font-src http: https: data:; connect-src 'self' *.livejournal.com *.livejournal.net ad.adriver.ru ad.mail.ru *.ad-tech.ru api.giphy.com bs.serving-sys.ru cdn.ampproject.org *.criteo.com csi.gstatic.com data00.adlooxtracking.com dsp-rambler.ru *.dsp-rambler.ru *.eaglecdn.com event.top100.su export-download.canva.com ext.clickstream.sberbank.ru sdk.canva.com *.g.doubleclick.net googleads.g.doubleclick.net *.google-analytics.com *.googleapis.com *.google.com google.com *.googletagmanager.com googletagmanager.com graph.facebook.com gstatic.com id.sber.ru *.lj.ru lj.stat.eagleplatform.com mc.yandex.by mc.yandex.com mc.yandex.md mc.yandex.ru pingback.giphy.com *.pingdom.net privacy-cs.mail.ru *.rambler-co.ru rambler-co.ru *.rambler.ru rambler.ru rb.infox.sg rb.infox.ru *.rnet.plus *.services.livejournal.com *.ssp.rambler.ru ssp.rambler.ru static-mon.yandex.net static.xx.fbcdn.net stat.media stats.g.doubleclick.net smi2.net smi2.ru sve.online.sberbank.ru *.tiktok.com tiktok.com top-fwz1.mail.ru *.twitter.com *.webturn.ru *.webvisor.org wss://mc.yandex.ru wss://www.livejournal.com yandexmetrica.com yandexmetrica.com:29010 yandexmetrica.com:30103 *.yandex.net *.yandex.ru yandex.ru yastatic.net ymetrica1.com ymetrica.com *.youtube.com youtube.com; report-uri https://www.livejournal.com/csp_reports; report-to livejournal; media-src http: https: blob: data: storage.mds.yandex.net; frame-ancestors 'self'; worker-src 'self' blob:; object-src 'self' blob: *.livejournal.net youtube.com *.youtube.com; child-src 'self' blob:; 5 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; connect-src https: wss:; font-src https: data:; media-src https: blob: data:; worker-src https: blob:; object-src 'none'; 5 connect-src sync.datamind.ru geocode-maps.yandex.ru/1.x/ suggest-maps.yandex.ru *.datamind.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org eye.targetads.io top-fwz1.mail.ru an.yandex.ru pixel.gooroo.works api-qa.diginetica.net/v1/ rap.skcrtxr.com *.a.mts.ru sm.rtb.mts.ru vk.com 'self' *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.cdn-tinkoff.ru *.t-static.ru wss://*.tinkoff.ru wss://*.tcsbank.ru wss://*.tbank.ru api-maps.yandex.ru enterprise.api-maps.yandex.ru https://*.api-maps.yandex.ru *.maps.yandex.net yandex.ru *.time-messenger.ru https://gateway.atomyze.ru https://gw.atomyze.ru *.tinsurance.ru id.tbank.ru www.tbank.ru api-statist.tinkoff.ru cdn.tbank.ru cfg.tinkoff.ru business.tbank.ru baf.tinkoff.ru confucius-public-configs.t-static.ru cobrowsing.tbank.ru fallback-cdn.tbank.ru mobile-appinapp-static-prod.cdn-tinkoff.ru imgproxy.cdn-tinkoff.ru ded-pwa-static-pages.t-static.ru mddc.tinkoff.ru www.cdn-tinkoff.ru geocode-maps.yandex.ru delivery.tinkoff.ru broker-api.tinkoffinsurance.ru api-osago.tbank.ru bms-logo-prod.t-static.ru collection-phoenix.t-tech.team tmsg.tbank.ru tmsg.phoenix-ca.ru api.rosbank.ru pulse-image-avatar.cdn-tinkoff.ru invest-brands.cdn-tinkoff.ru webevent.tbank.ru ris.tbank.ru sales-tech-publication.tbank.ru fallback.cdn-tinkoff.ru; script-src sync.datamind.ru connect.ok.ru vk.com *.datamind.ru *.tinkoff.ru *.tcsbank.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net 'self' 'unsafe-eval' 'unsafe-inline' *.tbank-online.com tbank.ru *.tbank.ru *.cdn-tinkoff.ru *.t-static.ru blob: https://tinkoff.ru https://www.tinkoff.ru https://www.youtube.com api-maps.yandex.ru https://*.api-maps.yandex.ru enterprise.api-maps.yandex.ru suggest-maps.yandex.ru *.maps.yandex.net yandex.ru https://widget.cloudpayments.ru *.tinsurance.ru; img-src *.datamind.ru vk.com login.vk.com ad.mail.ru *.yandex.ru *.yandex.net *.sravni.ru www.banki.ru *.pool.datamind.ru statad.ru *.tinkoff.ru *.mail.ru dp.tinkoffinsurance.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz yastatic.net eye.targetads.io top-fwz1.mail.ru 'self' data: *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru https://tinkoff.ru https://www.tinkoff.ru http://img.youtube.com *.maps.yandex.net api-maps.yandex.ru https://*.api-maps.yandex.ru enterprise.api-maps.yandex.ru yandex.ru https://yastatic.net http://static.tinkoffinsurance.ru https://i.ytimg.com *.rosbank.ru *.depository.ru rap.skcrtxr.com agents.tcsbank.ru *.tinsurance.ru; frame-src vk.com static.datamind.ru connect.ok.ru *.datamind.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr webvisor.com *.webvisor.com 'self' blob: data: *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru https://www.youtube.com https://newatom.spaaace.io https://order.atom.auto https://widget.cloudpayments.ru rutube.ru t-j.ru yandex.ru tmsg.phoenix-ca.ru www.cdn-tinkoff.ru https://flo.uri.sh/ *.tinsurance.ru; report-uri https://www.tbank.ru/api/front/pwaplatform/log/csp-error?appName=pwaplatform&sentryDsnKey=b7cae0fa7dd74b4489cd05596a20df38&sentryApiId=142; default-src 'self' *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinkoff.ru data: *.tinsurance.ru; font-src 'self' *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinkoff.ru data: *.tinsurance.ru; style-src 'unsafe-inline' 'self' *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinsurance.ru yastatic.net; frame-ancestors 'self' tbank.ru www.tbank.ru *.tbank.ru *.tcsbank.ru tinkoff.ru *.tinkoff.ru *.tbank-online.com https://auto.ru www.auto.ru *.auto.ru auto.ru https://t-insurance.avito.com mc.yandex.ru metrika.yandex.ru www.rosbank.ru www.depository.ru *.bankline.ru bankline.ru offer.gdemoideti.ru tmsg.phoenix-ca.ru www.cdn-tinkoff.ru www.bankiros.ru bankiros.ru t-j.ru www.t-j.ru www.banki.ru; worker-src 'self' blob: https://www.tbank.ru www.tbank.ru https://api-maps.yandex.ru https://*.api-maps.yandex.ru https://yastatic.net 5 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gist.github.com https://apis.google.com https://cdn.amplitude.com https://api.amplitude.com https://dev-embed.notion.co https://embed.notion.co https://static.zdassets.com https://api.smooch.io https://solve-widget.forethought.ai https://decagon.ai https://http-inputs-notion.splunkcloud.com https://*.sentry.io https://checkout.stripe.com https://js.stripe.com https://embed.typeform.com https://admin.typeform.com https://ucv.bynder.com https://js.sentry-cdn.com https://js.chilipiper.com https://platform.twitter.com https://cdn.syndication.twimg.com https://accounts.google.com https://vimeo.com https://player.vimeo.com https://youtube.com https://www.youtube.com https://app.cal.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.metadata.io https://platformapi.metadata.io https://api-gw.metadata.io https://cdn.cr-relay.com https://d2hrivdxn8ekm8.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net https://d34r8q7sht0t9k.cloudfront.net https://transcend-cdn.com https://wcs.naver.com https://wcs.naver.net https://ssl.pstatic.net https://cdn01.boxcdn.net https://api.tailorhq.ai https://app.tailorhq.ai https://cdn.tailorhq.ai https://cached-api.tailorhq.ai https://cdn.sprig.com https://assets.customer.io https://track.customer.io https://code.gist.build https://www.google.com https://www.gstatic.com https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://maps.googleapis.com https://unpkg.com/react@18.2.0/umd/react.development.js https://unpkg.com/react-dom@18.2.0/umd/react-dom.development.js https://unpkg.com/@babel/standalone@7.26.9/babel.min.js https://unpkg.com/dayjs-with-plugins@1.0.4/dist/dayjs-with-plugins.min.js https://unpkg.com/@tailwindcss/browser@4 https://unpkg.com/d3@7.9.0/dist/d3.min.js https://unpkg.com/three@0.150.0/build/three.min.js https://dev-custom-views-modules-usw2.s3.us-west-2.amazonaws.com/components.js https://pagead2.googlesyndication.com https://x.clearbitjs.com https://connect.facebook.net https://snap.licdn.com/ https://px.ads.linkedin.com/ https://munchkin.marketo.net https://info.notion.com https://bat.bing.com https://s.yimg.jp https://www.youtube-nocookie.com https://www.youtube.com/iframe_api https://js.partnerstack.com https://partnerlinks.io https://analytics.tiktok.com/ https://vitals.vercel-insights.com https://va.vercel-scripts.com https://vercel.live https://www.redditstatic.com https://static.ads-twitter.com https://insights.metadata.io https://bzrcdn.openai.com https://acdn.adnxs.com/dmp/up/pixie.js https://a.usbrowserspeed.com https://static.hotjar.com https://script.hotjar.com https://cloud.memsource.com https://editor.memsource.com https://*.vector.co https://d-code.liadm.com/ https://*.usbrowserspeed.com;connect-src 'self' data: blob: https://img.notionusercontent.com https://artifact.notionusercontent.com https://notion.so/eap https://cdn.amplitude.com https://api.amplitude.com https://app.notion.com notion://app.notion.com https://api.embed.ly https://dev-embed.notion.co https://embed.notion.co https://ekr.zdassets.com https://ekr.zendesk.com https://makenotion.zendesk.com https://api.smooch.io wss://api.smooch.io https://api.forethought.ai https://http-inputs-notion.splunkcloud.com https://*.sentry.io https://checkout.stripe.com https://js.stripe.com https://library.notion.com https://d8ejoa1fys2rk.cloudfront.net https://cdn.contentful.com https://preview.contentful.com https://images.ctfassets.net https://tracking.chilipiper.com https://api.chilipiper.com https://api.unsplash.com https://api.giphy.com/ https://giphy-analytics.giphy.com/ https://media0.giphy.com/ https://media1.giphy.com/ https://media2.giphy.com/ https://media3.giphy.com/ https://media4.giphy.com/ https://media5.giphy.com/ https://media6.giphy.com/ https://media7.giphy.com/ https://media8.giphy.com/ https://media9.giphy.com/ https://media10.giphy.com/ https://boards-api.greenhouse.io https://accounts.google.com https://oauth2.googleapis.com https://vimeo.com https://player.vimeo.com https://youtube.com https://www.youtube.com https://www.googletagmanager.com https://analytics.google.com https://ad.doubleclick.net/ccm/s/collect https://www.googleadservices.com https://googleads.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://www.google-analytics.com https://cdn.metadata.io https://platformapi.metadata.io https://api-gw.metadata.io https://api.cr-relay.com https://d2hrivdxn8ekm8.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net https://verifi.podscribe.com https://verifi.pdscrb.com https://pixel.tapad.com https://ipv4.podscribe.com https://ipv4.pdscrb.com https://transcend-cdn.com https://telemetry.transcend.io https://wcs.naver.com https://pgncd.notion.com https://api.statsig.com https://statsigapi.net https://exp.notion.com https://in.getmilana.ai https://api.box.com https://api.tailorhq.ai https://app.tailorhq.ai https://cdn.tailorhq.ai https://cached-api.tailorhq.ai https://*.mux.com https://api.sprig.com https://storage.googleapis.com https://cdn.sprig.com https://cdn.userleap.com https://assets.customer.io https://track.customer.io https://*.api.gist.build https://*.cloud.gist.build https://www.google.com https://hcaptcha.com https://*.hcaptcha.com https://tiles.versatiles.org https://maps.googleapis.com https://places.googleapis.com https://pagead2.googlesyndication.com https://google.com https://x.clearbitjs.com https://app.clearbitjs.com https://connect.facebook.net https://snap.licdn.com/ https://px.ads.linkedin.com/ https://munchkin.marketo.net https://*.mktoresp.com https://info.notion.com https://bat.bing.com https://s.yimg.jp https://www.youtube-nocookie.com https://www.youtube.com/iframe_api https://js.partnerstack.com https://grsm.io https://partnerlinks.io https://analytics.tiktok.com/ https://vitals.vercel-insights.com https://va.vercel-scripts.com https://vercel.live https://www.redditstatic.com https://static.ads-twitter.com https://insights.metadata.io https://bzr.openai.com https://acdn.adnxs.com/dmp/up/pixie.js https://a.usbrowserspeed.com https://api.mail.dev.notion.so/graphql https://api.mail.notion.so/graphql https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://cloud.memsource.com https://editor.memsource.com https://api.vector.co/;font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://d8ejoa1fys2rk.cloudfront.net https://cdn01.boxcdn.net https://fonts.gstatic.com;img-src 'self' data: blob: https: https://img.notionusercontent.com https://mail-resource-proxy.mail.notion.com https://app.notion.com notion://app.notion.com https://images.ctfassets.net https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.mux.com https://track.customer.io https://bzr.openai.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://github.githubassets.com https://d8ejoa1fys2rk.cloudfront.net https://js.chilipiper.com https://platform.twitter.com https://ton.twimg.com https://accounts.google.com https://transcend-cdn.com https://cdn01.boxcdn.net https://code.gist.build https://hcaptcha.com https://*.hcaptcha.com https://fonts.googleapis.com;frame-src 'self' https: http: https://artifact.notionusercontent.com https://app.notion.com notion://app.notion.com https://accounts.google.com https://renderer.gist.build https://code.gist.build https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://notion.notion.site https://notion-templates.notion.site;frame-ancestors 'self' https://app.notion.com notion://app.notion.com notion://www.notion.so https://app.contentful.com;worker-src 'self' blob:;child-src 'self' blob:;media-src blob: https: http: https://*.mux.com 5 default-src 'self' *.beeline.ru wss://*.beeline.ru; frame-src 'self' https:; media-src * blob: data:; img-src * blob: data:; font-src 'self' data: blob: *.beeline.ru assets.flocktory.com fonts.gstatic.com yastatic.net; script-src 'unsafe-inline' 'unsafe-eval' *.beeline.ru *.diginetica.net *.flocktory.com *.indoleads.com *.ruru.ru *.targetads.io *.weborama-tech.ru *.yandex.net *.yandex.ru *.yandexcloud.net code.bbj3nb.ru flocktory.com privacy-cs.mail.ru px.segmel.com top-fwz1.mail.ru vk.com yastatic.net www.artfut.com; style-src 'unsafe-inline' *.beeline.ru *.yandex.ru fonts.googleapis.com yastatic.net; frame-ancestors 'self' beelinetarif.ru beeline-promo.ru beeline0.ru justconnect.ru *.justconnect.ru beeline-ru.online *.beeline-ru.online 101internet.ru dom-beeline.online scriptmanager.vimpelcom.ru *.scriptmanager.vimpelcom.ru *.beeline.ru *.beelineru.ru *.yandex.ru beelineru.ru wss://*.beeline.ru webvisor.com beeline-internet.online online-beeline.ru *.sravni.ru *.avito.ru moscow-beeline.ru l-beeline.ru; connect-src *.beeline.ru wss://*.beeline.ru *.diginetica.net *.gptdaisy.com *.indoleads.com *.nspk.ru *.ruru.ru *.targetads.io *.yandex.net *.yandex.ru *.yandexcloud.net wss://*.yandex.ru beeline.api.flocktory.com hitcrypt.bbj3nb.ru privacy-cs.mail.ru px.segmel.com top-fwz1.mail.ru yandex.ru yastatic.net; worker-src 'self' blob: data: *.beeline.ru *.yandex.ru yastatic.net 5 frame-ancestors 'self' *.windy.com:* 5 frame-ancestors 'self' *.verizon.com *.verizonwireless.com *.vzwcorp.com; 5 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval' blob:; img-src * data:; 5 form-action https: 5 media-src https: blob:; connect-src 'self' https: blob: wss:; child-src https: blob:; default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:; font-src https: data:; img-src https: data: blob:; 5 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleoptimize.com https://*.cookielaw.org https://*.cloud.coveo.com https://*.googletagmanager.com https://*.fundraiseup.com https://*.google-analytics.com https://*.hotjar.com https://*.facebook.net https://*.quantserve.com https://*.adsrvr.org https://*.vimeocdn.com https://*.pixel.ad https://*.pardot.com https://*.optimizely.com https://*.doubleclick.net https://*.googleadservices.com https://*.sascdn.com https://*.id5-sync.com https://*.licdn.com https://*.ads-twitter.com https://*.googlesyndication.com *; style-src 'self' 'unsafe-inline' *; connect-src 'self' 'unsafe-inline' *; font-src 'self' data: *; img-src 'self' data: *; frame-src 'self' *; media-src 'self' blob: data: * 5 frame-ancestors 'self' *.freshworks.com *.freshdesk.com *.freshservice.com *.myfreshworks.com *.freshcaller.com *.freshteam.com *.freshchat.com *.freshping.io *.freshrelease.com *.freshstatus.io *.freshsuccess.com *.freshsuccess.io views.paperflite.com app.paperflite.com web.paperflite.com canvas.paperflite.com *.optimizely.com *.freshpo.com *.myfreshworks.dev *.freshscout.com freshworks.pathfactory.com *.freshrobust.com *.freshitops.com *.freshcmdb.com *.freshstatusok.com *.firehydrant.io 5 frame-ancestors 'self' *.cbssports.com *.sportsline.com popculture.com comicbook.com 247sports.com *.247sports.com *.maxpreps.com *.ampproject.org; default-src https: blob: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: blob: data:; media-src https: blob: data:; img-src https: blob: data: android-webview: android-webview-video-poster:; object-src 'none'; block-all-mixed-content; 5 default-src https: blob: * 'unsafe-inline' 'unsafe-eval'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; connect-src https: 'unsafe-inline'; img-src https: data: blob: 'unsafe-inline'; frame-src https:; style-src https: 'unsafe-inline'; font-src https: data: 'unsafe-inline'; 5 default-src 'self'; base-uri 'self'; child-src 'self'; connect-src 'self' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googlesyndication.com *.googleadservices.com *.wistia.com *.wistia.net www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net embedwistia-a.akamaihd.net *.litix.io www.facebook.com *.ubembed.com hubspot-forms-static-embed.s3.amazonaws.com *.hsforms.net *.hsforms.com *.marketo.com *.marketo.net *.mktoresp.com *.mktoutil.com *.emarsys.com *.onetrust.com *.cookielaw.org sentry.io *.sentry.io *.cdn.linkedin.oribi.io *.oribi.io app.clearbit.com *.visualwebsiteoptimizer.com *.ads.linkedin.com cdn.dreamdata.cloud tracking.g2crowd.com tracking-api.g2.com bat.bing.net *.clarity.ms www.redditstatic.com *.reddit.com *.pingdom.net x.clearbitjs.com browser.sentry-cdn.com *.navattic.com *.bugherd.com *.g2.com *.sap.com *.trustarc.com; font-src 'self' data: *.kinstacdn.com *.slidesharecdn.com *.wistia.com *.wistia.net *.trustarc.com; form-action 'self' www.facebook.com *.hsforms.net *.hsforms.com; frame-ancestors 'self' *.covideo.com; frame-src 'self' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googlesyndication.com *.googleadservices.com *.marketo.com *.marketo.net html5-player.libsyn.com bid.g.doubleclick.net www.facebook.com js.driftt.com *.ubembed.com *.googlesyndication.com *.hsforms.net *.hsforms.com *.slideshare.net *.wistia.com *.wistia.net *.on24.com *.emarsys.com *.vidmails.com *.covideo.com *.g2.com *.clearbitjs.com *.marketimpacttools.com *.doubleclick.net open.spotify.com *.adobe.com www.youtube.com view.ceros.com *.navattic.com *.bugherd.com *.sap.com *.trustarc.com; img-src 'self' data: *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googlesyndication.com *.googleadservices.com *.wistia.com *.wistia.net *.gravatar.com www.googletagmanager.com www.google-analytics.com analytics.twitter.com *.px.ads.linkedin.com googleads.g.doubleclick.net *.linkedin.com www.facebook.com connect.facebook.net t.co embedwistia-a.akamaihd.net *.hsforms.net *.hsforms.com *.adsymptotic.com *.glasgowlive.co.uk s.w.org *.cookielaw.org *.clearbitjs.com *.visualwebsiteoptimizer.com cdn.filestackcontent.com bat.bing.net *.bing.com *.clarity.ms *.medium.com *.reddit.com *.cloudfront.net *.trustarc.com; media-src 'self' blob: data: *.kinstacdn.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.driftqa.com *.driftt.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googlesyndication.com *.googleadservices.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com *.marketo.com *.marketo.net *.ubembed.com *.wistia.com *.wistia.net googleads.g.doubleclick.net www.googleadservices.com tracking.g2crowd.com snap.licdn.com connect.facebook.net static.ads-twitter.com analytics.twitter.com js.driftt.com *.hsforms.net *.hsforms.com *.googlesyndication.com *.onetrust.com *.cookielaw.org sentry.io *.sentry.io *.on24.com *.clearbitjs.com tag.clearbitscripts.com *.visualwebsiteoptimizer.com marketo.clearbit.com cdn.dreamdata.cloud reveal.clearbit.com *.adobe.com js.sentry-cdn.com browser.sentry-cdn.com bat.bing.com *.clarity.ms www.redditstatic.com *.reddit.com view.ceros.com *.pingdom.net *.navattic.com *.bugherd.com *.cloudfront.net *.sap.com *.trustarc.com; style-src 'self' 'unsafe-inline' *.kinstacdn.com *.marketo.com *.marketo.net *.adobe.com; worker-src 'self' blob:; 5 frame-ancestors 'self' *.adobe.com *.assets.adobedtm.com 5 frame-ancestors 'self' https://*.mailerlite.com; 5 upgrade-insecure-requests; frame-ancestors 'self' https://www.elespanol.com https://*.elespanol.com bc.marfeel.com *.google.es *.google.com *.cdn.ampproject.org https://static.videoo.tv https://flowcards.mrf.io 5 default-src 'self' *.alamy.com *.alamyimages.de *.alamyimages.it *.alamyimages.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://checkout.stripe.com *.alamy.com *.alamyimages.fr *.notifpush.com *.notifpush.com *.gjigle.com *.gddglis.com *.notifadz.com notifpush.com notifpush.com gjigle.com gddglis.com notifadz.com *.live.net *.link5view.com *.termly.io *.usersnap.com usersnap.com alamy.my.site.com *.apollo.io *.ads.google.com ads.google.com *.surveymonkey.com *.formisimo.com *.facebook.net *.impactradius-event.com *.cookieyes.com *.cdn-cookieyes.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.depositphotos.com *.amazonaws.com *.addthis.com *.jquery.com *.cardinalcommerce.com *.postcodeanywhere.co.uk *.salesforce.com *.commercetools.com *.cybersource.com *.salesforceliveagent.com *.googleapis.com *.newrelic.com *.trackedlink.net *.force.com *.licdn.com *.trackedweb.net *.stackadapt.com *.abtasty.com *.clarity.ms *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com https://*.paypal.com https://*.paypalobjects.com; style-src * 'unsafe-inline' data:; img-src * data:; font-src * data:; frame-ancestors 'self' *.alamy.com; frame-src 'self' https: http: ws: wss: data: mailto:; connect-src *; object-src 'none'; base-uri 'self'; manifest-src 'self' *.alamy.com; media-src 'self' *.alamy.com *.amazonaws.com *.depositphotos.com; worker-src 'self' *.alamyimages.fr notifpush.com gjigle.com gddglis.com notifadz.com *.notifpush.com *.gjigle.com *.gddglis.com *.notifadz.com; 5 default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com markdowneditor-public-e0gpfpcwcbbze3ag.b01.azurefd.net markdowneditor-PubDev-czdhe4dpdyaee6fj.b01.azurefd.net markdowneditor-external-Public-fmgmfefddycxdmfj.b01.azurefd.net MarkdownEditor-external-PubDev-dfgagughg7fub7h5.b01.azurefd.net h64.online-metrix.net *.clarity.ms;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net MarkdownEditor-external-PubDev-dfgagughg7fub7h5.b01.azurefd.net markdowneditor-PubDev-czdhe4dpdyaee6fj.b01.azurefd.net markdowneditor-public-e0gpfpcwcbbze3ag.b01.azurefd.net markdowneditor-external-Public-fmgmfefddycxdmfj.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn ai.azure.com *.ai.azure.com learn-video.azurefd.net docs.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000 local.learn.microsoft-int.com;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests 5 base-uri 'self'; style-src 'self' 'unsafe-inline' https://static.popmechanic.ru https://*.mindbox.ru https://events.nethouse.ru https://fonts.googleapis.com *.jivo.ru *.jivosite.com *.jivochat.com; img-src 'self' https://res.cloudinary.com https://vk.com https://*.vk.com https://*.mindbox.ru https://www.google-analytics.com https://top-fwz1.mail.ru https://*.googlesyndication.com https://tr.lfeeder.com https://www.google.ru https://*.adtrafficquality.google https://tr-rc.lfeeder.com https://mc.yandex.ru https://mc.yandex.com https://www.googletagmanager.com https://*.google.com https://fonts.googleapis.com https://*.mindbox.ru https://media2.giphy.com *.jivo.ru *.jivosite.com *.jivochat.com data: blob:; connect-src 'self' https://*.doubleclick.net https://res.cloudinary.com https://www.google-analytics.com https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://analytics.google.com https://*.analytics.google.com https://fundingchoicesmessages.google.com https://*.googlesyndication.com https://*.adtrafficquality.google https://mc.yandex.ru https://mc.yandex.com https://yandex.ru https://yandex.com https://uaas.yandex.ru https://*.mindbox.ru https://jivo-userdata.obs.ru-moscow-1.hc.sbercloud.ru https://*.ahrefs.com/ https://www.google.com https://www.gstatic.com https://recaptcha.google.com https://*.recaptcha.google.com https://iam.servicecdn.world wss://*.jivosite.com wss://*.jivo.ru wss://mc.yandex.ru/solid.ws *.jivo.ru *.jivosite.com *.jivochat.com; form-action 'self'; frame-ancestors 'self' *.jivo.ru *.jivosite.com *.jivochat.com https://*.mindbox.ru https://*.popmechanic.ru/ https://kinescope.io/ https://cdn-static.egoiapp2.com https://cloudinary.com https://*.cloudinary.com; child-src https://mc.yandex.ru https://mc.yandex.com; frame-src 'self' https: *.jivo.ru *.jivosite.com *.jivochat.com https://*.youtube.com https://rutube.ru/ https://vk.com https://vkvideo.ru/ https://*.vk.com https://mc.yandex.ru https://mc.yandex.com https://*.facebook.com https://top-fwz1.mail.ru https://*.adtrafficquality.google https://*.marquiz.ru https://*.mindbox.ru https://*.popmechanic.ru/ https://kinescope.io/ https://cdn-static.egoiapp2.com https://*.google.com https://*.doubleclick.net https://*.googlesyndication.com https://events.nethouse.ru https://cloudinary.com https://*.cloudinary.com https://go.vooozer.com https://www.google.com/recaptcha https://recaptcha.google.com/recaptcha; block-all-mixed-content; 5 frame-src 'self'; 5 frame-ancestors 'self' https://*.shaw.ca 5 default-src 'self' *.brightcove.com *.browser-intake-datadoghq.com *.coveo.com *.conversionsapigateway.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.eppo.cloud *.freecreditreport.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.teads.tv *.pinterest.com *.hotjar.com *.iesnare.com *.infogram.com *.liadm.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.reddit.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net *.yobi.ai adobetag.com analytics-ipv6.tiktokw.us api-js.mixpanel.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.measureone.com api.omniture.com app.optinmonster.com apps.rokt.com assets.adobedtm.com bat.bing.com businesscreditfacts.com bded8a3c6ae-1-1053047382554.us-central1.run.app cdn.appdynamics.com cdn.lr-ingest.com cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com cds.taboola.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com ik.imagekit.io img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com libraweb.tiktokw.us loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com mpc2-prod-21-is5qnl632q-uc.a.run.app optinmonster.com ov-1d104299d2a447049cdc73700c9309f7.ecs.us-west-2.on.aws pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv pips.taboola.com rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com https://sc-static.net *.snapchat.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com trc-events.taboola.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com https://cdn.allitrk.com https://apps.rokt-api.com https://www.redditstatic.com https://collector.allitrk.com ws://*.hotjar.com wss://*.hotjar.com *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com *.mczbf.com *.sjwoe.com analytics.tiktok.com cdn.pdst.fm *.trustpilot.com trkn.us us-central1-adaptive-growth.cloudfunctions.net sink.pdst.fm *.qualtrics.com analytics.google.com *.nextdoor.com *.google.com *.yoast.com yoast.com *.datadoghq-browser-agent.com *.datadoghq.com *.yieldmo.com pix.pub *.biocatch.com *.we-stats.com activitymap.adobe.com *.branch.io app.link *.app.link s.pinimg.com unpkg.com *.inmobicdn.net analytics-sm.com browser-intake-datadoghq.com google.com tags.srv.stackadapt.com nextinsure.com *.nextinsure.com *.save.auto *.supermoney.com *.ownup.com pixels.spotify.com js.adsrvr.org match.adsrvr.org sync.adsrvr.org insight.adsrvr.org pixel.adsrvr.org servedby.thedmp.com global.prod.uidapi.com prod.euid.eu *.money.com 'unsafe-inline' 'unsafe-eval' blob:; img-src * data:; font-src * data:; frame-ancestors 'self' 5 frame-ancestors 'self' https://easyweb.td.com https://banquenet.td.com 5 frame-ancestors 'self' tvn.pl *.tvn.pl tvn24.pl *.tvn24.pl tvn7.pl *.tvn7.pl tvnstyle.pl *.tvnstyle.pl tvnturbo.pl *.tvnturbo.pl ttv.pl *.ttv.pl discoverychannel.pl *.discoverychannel.pl travelchanneltv.pl *.travelchanneltv.pl tvnfabula.pl *.tvnfabula.pl tlcpolska.pl *.tlcpolska.pl metro.tv *.metro.tv foodnetwork.pl *.foodnetwork.pl wbdpoland.pl *.wbdpoland.pl hgtv.pl *.hgtv.pl itvn.pl *.itvn.pl itvnextra.pl *.itvnextra.pl tvnxrstudio.pl *.tvnxrstudio.pl tvnxrstudio.com *.tvnxrstudio.com player.pl wbd.com 5 base-uri 'none'; connect-src 'self' https:; default-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; frame-src vercel.live *.oncehub.com *.youtube.com *.twitter.com *.facebook.com *.google.com *.googletagmanager.com; img-src * data:; manifest-src 'self'; media-src 'self' *.prismic.io; object-src 'none'; script-src 'self' 'unsafe-inline' vercel.live *.google-analytics.com *.bing.com *.clarity.ms *.facebook.net *.googletagmanager.com *.helpscout.net www.google.com www.gstatic.com *.doubleclick.net *.g2crowd.com; style-src 'self' 'unsafe-inline'; worker-src 'self'; 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://apps.sitecore.net *; img-src 'self' data: *; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com *; upgrade-insecure-requests; block-all-mixed-content; 5 frame-ancestors 'self' https://www.northpass.com https://gainsight.pathfactory.com https://content.gainsight.com 5 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' data: blob: https:; worker-src 'self' blob:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'self' https:; form-action 'self' https: 5 frame-ancestors 'self' *.uhg.com *.optum.com *.uhc.com *.healthybenefitsplus.com *.adobeaemcloud.com *.pagescdn.com *.healthsafe-id.com uhgenterprise.qualtrics.com g360site.secure.force.com g360.my.salesforce-sites.com *.DoubleClick.net *.youtube.com player.simplecast.com *.trkn.us covid19.rallyhealth.com insight.adsrvr.org www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ www.recaptcha.net match.adsrvr.org; frame-src 'self' https://community.pregnancy.org https://optum.marketing.adobe.com *.uhg.com *.optum.com *.uhc.com *.healthybenefitsplus.com *.adobeaemcloud.com *.pagescdn.com *.healthsafe-id.com uhgenterprise.qualtrics.com g360site.secure.force.com g360.my.salesforce-sites.com *.DoubleClick.net *.youtube.com player.simplecast.com *.trkn.us covid19.rallyhealth.com insight.adsrvr.org www.recaptcha.net *.lpsnmedia.net *.liveperson.net https://va.idp.liveperson.net match.adsrvr.org unitedhealthcareserv.demdex.net; 5 frame-ancestors 'self' https://*.keenetic.com https://*.facebook.com https://*.google.com 5 default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src * blob: data: 'unsafe-inline' 'unsafe-eval'; connect-src * data: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; child-src * blob: data: ; style-src * 'unsafe-inline'; 5 frame-ancestors 'self' https://*.cornerstoneondemand.com https://csod-studio.vercel.app https://*.csod-preview.com https://*.sanity.io https://*.sanity.studio https://next-csod-git-may-launch-csod-marketing.vercel.app https://csod-studio-git-may-launch-csod-marketing.vercel.app;upgrade-insecure-requests;default-src 'self' https://*.cornerstoneondemand.com;connect-src *;font-src * data:;form-action *;frame-src *;img-src * data:;manifest-src * 'unsafe-inline';media-src *;object-src *;script-src * 'unsafe-eval' 'unsafe-inline' blob:;style-src * 'unsafe-inline';worker-src * blob: 5 frame-ancestors https://*.ptc.com https://livesocial.seismic.com https://*.qualified.com https://ptc.seismic.com https://liveshareeast3.seismic.com https://*.mouseflow.com https://resources.servicemax.com https://servicemax.pathfactory.com https://support.rockwellautomation.com 5 default-src 'self'; script-src 'self' webstats.surf.nl *.mailplus.nl platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com www.instagram.com www.google.com www.gstatic.com surfnl.containers.piwik.pro pretalx.surf.nl feedback.communicatie.surf.nl 'unsafe-inline' 'unsafe-eval' https://app.vwo.com https://d5phz18u4wuww.cloudfront.net/vis_opt.js https://dev.visualwebsiteoptimizer.com https://eu.frcapi.co; style-src 'self' 'unsafe-inline' static.mailplus.nl fonts.googleapis.com use.typekit.net p.typekit.net platform.twitter.com surfnl.containers.piwik.pro surfnl.piwik.pro https://app.vwo.com https://dev.visualwebsiteoptimizer.com https://eu.frcapi.com/; img-src http: https: surfnl.containers.piwik.pro surfnl.piwik.pro data:;; frame-src 'self' *.surf.nl openonderwijsapi.nl www.surfspace.nl surfspace.nl www.slideshare.net player.vimeo.com www.youtube.com www.youtube-nocookie.com surf.mediamission.nl platform.twitter.com syndication.twitter.com www.instagram.com www.facebook.com www.linkedin.com www.google.com https://surf.apnd.me/OWD23/program https://surf.apnd.me/ACUD23/program https://app.vwo.com *.edu.nl https://eu.frcapi.com/; child-src 'self' surf.mediamission.nl www.slideshare.net player.vimeo.com www.youtube.com www.youtube-nocookie.com surf.mediamission.nl platform.twitter.com syndication.twitter.com www.instagram.com www.facebook.com www.linkedin.com https://app.vwo.com; font-src 'self' fonts.gstatic.com surfnl.containers.piwik.pro surfnl.piwik.pro data:; connect-src 'self' surfnl.piwik.pro webstats.surf.nl surfnl.containers.piwik.pro surfnl.piwik.pro pretalx.surf.nl *.surf.nl https://app.vwo.com https://dev.visualwebsiteoptimizer.com https://eu.frcapi.com/; report-uri /report-csp-violation; upgrade-insecure-requests 5 default-src * blob: data: http: https: 'unsafe-inline' 'unsafe-eval'; report-uri https://reports.nameshield.net/ 5 base-uri 'none'; default-src 'self' data: https: wss: 'unsafe-inline'; style-src 'self' data: https: wss: 'unsafe-inline' https://cdn.thieme.de; font-src 'self' data: https://cdn.thieme.de; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://api.scrivito.com https://app.intercom.io https://assets.scrivito.com https://js.intercomcdn.com https://widget.intercom.io https://www.google-analytics.com https://cdn.cookielaw.org https://cdn.mouseflow.com https://www.googletagmanager.com https://widget.netigate.se https://widget-api.netigate.se https://widgetapi-stage.netigate.se https://netigate.se https://devwidgetstatic.z6.web.core.windows.net https://connect.facebook.net https://snap.licdn.com; frame-src 'self' https://cdn.cookielaw.org https://www.google-analytics.com https://www.youtube-nocookie.com/ https://www.youtube.com/ https://s20.video-stream-hosting.de https://start.video-stream-hosting.de https://*.frcapi.com https://eventsuite-068.dtmsdigi.com https://sst.thieme.com; object-src 'none'; block-all-mixed-content; frame-ancestors 'self' https://*.scrivito.com https://cdn.cookielaw.org 5 frame-ancestors 'self' https://bravenetmarketing.com https://manage.bravehost.com https://siteblocks.com; 5 frame-ancestors 'self' *.trendemon.com *.rithum.com 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; media-src 'self' 'unsafe-inline' *;img-src 'self' blob: data: *; style-src 'self' 'unsafe-inline' *; font-src 'self' *; frame-src 'self' *; connect-src 'self' *; object-src 'none' 5 default-src 'self' data: https://fonts.gstatic.com/ https://cdn.podigee.com/ https://*.podigee-cdn.net/ https://*.dhl.de/ https://*.dhl.com/ https://*.deutschepost.de/ https://dpm.demdex.net/ https://*.paypal.com/ https://*.cardinalcommerce.com/ https://dpcomepost.tt.omtrdc.net/ https://*.bing.com/ https://meinservice.my.salesforce.com/ https://meinservice.my.salesforce-sites.com/ https://service.force.com/ https://*.zscaler.net/ https://*.zscloud.net/ https://*.zscalertwo.net/; connect-src 'self' https://cdn.cookielaw.org/ https://*.onetrust.com/ https://quality.dpdhl.com/ https://t.leadlab.click/ https://insight.adsrvr.org/ https://assets.adobedtm.com/ https://deutschepostag1.d3.sc.omtrdc.net/ https://maps.googleapis.com/ https://www.googletagmanager.com/ https://meinservice-dhl-sites.secure.force.com/ https://meinservice--rqa.sandbox.my.salesforce.com/ https://meinservice--tl.sandbox.my.salesforce.com/ https://depst-salaut-prod1.pegacloud.net/ https://depst-mara-dt1-decisionhub.pegacloud.net/ https://depst-mara-stg1-decisionhub.pegacloud.net/ https://depst-mara-prod1-decisionhub.pegacloud.net/ https://t.ssl.ak.tiles.virtualearth.net/ https://*.dynamic.tiles.ditu.live.com/ https://*.braintreegateway.com/ https://*.braintree-api.com/ https://braintree-sample-merchant.herokuapp.com/ https://*.heidelpay.com/ https://autocomplete2.postdirekt.de/ https://*.dhl.de/ https://*.dhl.com/ https://*.deutschepost.de/ https://dpm.demdex.net/ https://*.paypal.com/ https://*.cardinalcommerce.com/ https://dpcomepost.tt.omtrdc.net/ https://*.bing.com/ https://meinservice.my.salesforce.com/ https://meinservice.my.salesforce-sites.com/ https://service.force.com/ https://*.zscaler.net/ https://*.zscloud.net/ https://*.zscalertwo.net/; img-src https: data: blob:; form-action 'self' https://*.dhl.de/ https://*.deutschepost.de/ https://www.sofort.com/ https://*.dhl.com/ https://meinservice.my.salesforce-sites.com/; frame-ancestors 'self' https://facebook.com/ https://*.dhl.de/ https://*.dhl.com/ https://*.deutschepost.de/ https://deutschepost.elaine-asp.de/ https://*.plentymarkets-cloud-de.com/ https://*.plentymarkets-cloud-ie.com/ https://dhl.vendidero.de/ https://dhl-paket.plentymarkets-cloud02.com/ https://*.billbee.io/ https://*.dreamrobot.de/ https://tl-meinservice-dhl.cs107.force.com/; frame-src 'self' https://www.simplydhl.com/ https://deutschepost.elaine-asp.de/ https://www.youtube.com/ https://www.google.com/ https://assets.adobedtm.com/ https://rdevpro-meinservice-dhl.cs160.force.com/ https://gateway.zscalerthree.net/ https://*.braintreegateway.com/ https://payment.heidelpay.com/ https://dhlglobalmail.secure.force.com/ https://*.dhl.de/ https://*.dhl.com/ https://*.deutschepost.de/ https://dpm.demdex.net/ https://*.paypal.com/ https://*.cardinalcommerce.com/ https://dpcomepost.tt.omtrdc.net/ https://*.bing.com/ https://meinservice.my.salesforce.com/ https://dhlglobalmail.my.salesforce.com/ https://meinservice.my.salesforce-sites.com/ https://dhlglobalmail.my.salesforce-sites.com/ https://service.force.com/ https://*.zscaler.net/ https://*.zscloud.net/ https://*.zscalertwo.net/ https://app.webinargeek.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.youtube.com/ https://connect.facebook.net/ https://cdn.cookielaw.org/ https://cookie-cdn.cookiepro.com/ https://geolocation.onetrust.com/ https://assets.adobedtm.com/ https://cdn.tt.omtrdc.net/ https://*.google.com/ https://maps.googleapis.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://*.virtualearth.net/ https://*.ditu.live.com/ https://*.salesforceliveagent.com/ https://static.lightning.force.com/ https://meinservice--rqa.sandbox.my.salesforce.com/ https://meinservice--tl.sandbox.my.salesforce.com/ https://meinservice-dhl-sites.secure.force.com/ https://assets.braintreegateway.com/ https://static.heidelpay.com/ https://cdn.jsdelivr.net/ https://*.dhl.de/ https://*.dhl.com/ https://*.deutschepost.de/ https://dpm.demdex.net/ https://*.paypal.com/ https://*.cardinalcommerce.com/ https://dpcomepost.tt.omtrdc.net/ https://*.bing.com/ https://meinservice.my.salesforce.com/ https://meinservice.my.salesforce-sites.com/ https://service.force.com/ https://*.zscaler.net/ https://*.zscloud.net/ https://*.zscalertwo.net/; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://assets.adobedtm.com/ https://cdn.cookielaw.org/ https://googletagmanager.com/ https://track.adform.net/ https://www.youtube.com/ https://connect.facebook.net/ https://*.virtualearth.net/ https://*.ditu.live.com/ https://*.salesforceliveagent.com/ https://static.lightning.force.com/ https://meinservice--rqa.sandbox.my.salesforce.com/ https://meinservice--tl.sandbox.my.salesforce.com/ https://assets.braintreegateway.com/ https://cdn.jsdelivr.net/ https://*.dhl.de/ https://*.dhl.com/ https://*.deutschepost.de/ https://dpm.demdex.net/ https://*.paypal.com/ https://*.cardinalcommerce.com/ https://dpcomepost.tt.omtrdc.net/ https://*.bing.com/ https://meinservice.my.salesforce.com/ https://meinservice.my.salesforce-sites.com/ https://service.force.com/ https://*.zscaler.net/ https://*.zscloud.net/ https://*.zscalertwo.net/; style-src 'self' 'unsafe-inline' https://meinservice-dhl-sites.secure.force.com/ https://cdn.tt.omtrdc.net/ https://*.dhl.de/ https://*.dhl.com/ https://*.deutschepost.de/ https://dpm.demdex.net/ https://*.paypal.com/ https://*.cardinalcommerce.com/ https://dpcomepost.tt.omtrdc.net/ https://*.bing.com/ https://meinservice.my.salesforce.com/ https://meinservice.my.salesforce-sites.com/ https://service.force.com/ https://*.zscaler.net/ https://*.zscloud.net/ https://*.zscalertwo.net/; 5 frame-ancestors https://*.bw-infra.de https://*.baden-wuerttemberg.de; 5 frame-ancestors 'self' *.interactivebrokers.com *.interactivebrokers.ca *.interactivebrokers.com.hk *.interactivebrokers.hk *.interactivebrokers.ch *.interactivebrokers.eu *.interactivebrokers.ie *.interactivebrokers.lu *.interactivebrokers.hu *.interactivebrokers.com.sg *.ibkr.com.sg *.interactivebrokers.ch *.interactivebrokers.co.uk *.interactivebrokers.com.au *.interactivebrokers.co.jp *.interactivebrokers.co.in *.ibkram.com IBKR.docebosaas.com *.interactiveadvisors.com *.ibkr.com *.ibkr.com.cn *.clientam.com *.youtube.com *.interactivebrokers.ie *.interactivebrokers.lu *.interactivebrokers.hu *.clientam.ch *.clientam.com.hk *.go-mpulse.net *.akstat.io impact.interactivebrokers.com *.ibkrcampus.com widgets.tipranks.com site.recognia.com *.portfolioanalyst.com portfolioanalyst.com www.portfolioanalyst.com www.interactivebrokers.com https://www.interactivebrokers.com/ *.doubleclick.net googleleads.g.doubleclick.net *.lynxbroker.com site.recognia.com ibkr.paxosclients.com worldtrader.hsbc.ae *.xstaging.tv *.ibkrcampus.com ibkrcampus.com *.ibkrguides.com ibkrcampusstg.wpenginepowered.com *.greenwichcompliance.com bsmart.quantex.com.ar www.ig.com; 5 default-src 'self'; style-src https://*.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval' https://ams.wpml.org; frame-ancestors 'self' https://partner.hornetsecurity.com; img-src 'self' data: https://track-eu1.hubspot.com https://track.hubspot.com https://www.googleadservices.com/ccm/conversion/971747734/ https://bat.bing.com https://bat.bing.net https://*.reddit.com https://*.g.doubleclick.net https://pixel.tapad.com/idsync/ex/ https://www.google.nl https://www.google.ca https://www.google.com https://logo.clearbit.com https://www.google.de https://www.googletagmanager.com https://*.linkedin.com https://www.facebook.com https://*.ytimg.com https://forms-eu1.hsforms.com; media-src 'self'; frame-src 'self' blob: https://consentcdn.cookiebot.com https://forms-eu1.hsforms.com https://*.doubleclick.net https://vade.storylane.io https://*.livechatinc.com https://*.typeform.com https://www.googletagmanager.com https://play.libsyn.com https://www.youtube-nocookie.com https://www.youtube.com https://*.hsforms.net https://youtube.de https://*.frcapi.com; connect-src 'self' https://consentcdn.cookiebot.com/ https://static.hsappstatic.net https://forms-eu1.hsforms.com https://api.typeform.com https://trk.hornetsecurity.com https://www.google.com/pagead/1p-conversion/971747734/ https://track.hubspot.com https://api.hsforms.com https://*.hscollectedforms.net https://*.hubapi.com https://bat.bing.net https://bat.bing.com https://www.redditstatic.com https://*.reddit.com https://analytics.google.com https://www.google.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://www.facebook.com https://*.linkedin.com https://*.google-analytics.com https://*.analytics.google.com https://yoast.com https://my.yoast.com https://*.friendlycaptcha.com https://*.friendlycaptcha.eu https://ams.wpml.org https://*.sendmarc.com; script-src-elem 'self' data: 'unsafe-inline' https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://static.hsappstatic.net https://*.fs1.hubspotusercontent-eu1.net https://embed.typeform.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hsforms.net https://*.hs-analytics.net https://*.hsforms.com https://trk.hornetsecurity.com https://bat.bing.com https://*.googlesyndication.com https://www.redditstatic.com https://www.googleadservices.com/pagead/conversion/971747734/ https://*.doubleclick.net https://*.livechatinc.com https://connect.facebook.net https://www.googletagmanager.com https://www.youtube.com https://ams.wpml.org https://yoast.com https://snap.licdn.com https://*.sendmarc.com https://cdnjs.cloudflare.com https://js.storylane.io https://cdn.jsdelivr.net; script-src 'self' data: 'unsafe-inline' 'unsafe-eval'; font-src https://*.gstatic.com https://cdnjs.cloudflare.com 'self' data:; worker-src 'self' blob: 5 default-src'self'; 5 frame-ancestors 'self' https://*.k12online.vn https://onlyoffice-docs.coquan.net edu-onlyoffice.coquan.vn 5 default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 5 upgrade-insecure-requests; frame-ancestors 'self' https://*.01net.com 5 child-src 'self' https://kerastase-quiz.vercel.app https://insight.adsrvr.org https://match.adsrvr.org https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://app-dev.pogodonate.com https://app.pogodonate.com https://apps.rokt.com https://sgtm.lookfantastic.com https://*.ringcentral.com https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://www.zenaps.com https://player.vimeo.com https://isitetv.com https://ln-rules.rewardstyle.com https://e.issuu.com https://*.recaptcha.net https://*.snapchat.com https://*.translate.naver.net https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://www.shoplooks.com https://s1.thcdn.com https://d2d7do8qaecbru.cloudfront.net https://tpc.googlesyndication.com https://api.bam-x.com https://www.awin1.com blob: https://gum.criteo.com https://www.pinterest.com https://www.pinterest.co.uk https://app.qubit.com https://dekopay.preprod.k8s.dekopay.org https://pay.deko.finance https://maybelline-uk.beauty-campaigns.com https://qlic.it https://*.abtasty.com https://ct.pinterest.com https://ams.creativecdn.com https://tr.snapchat.com https://smct.co https://*.smct.co https://smct.io https://*.smct.io https://www.provenance.org https://*.bazaarvoice.com https://www.youtube.com/ https://uk.cdn-net.com/ https://*.awin1.com https://*.zenaps.com https://lantern.roeye.com https://media.flixfacts.com https://media.flixcar.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com; connect-src 'self' https://*.reddit.com https://cdn.lottielab.com/l/CZJhVVt776Qsat.json https://cdn.lottielab.com/l/9PKdou46EzRyq6.json https://cdn.lottielab.com/l/EJTUZxHNsMaiRr.json https://zappa-p4m1259p0-static.s3.amazonaws.com https://insight.adsrvr.org https://t.lt02.net https://*.dynamicyield.eu https://api.stripe.com https://api-dev.pogodonate.com https://api.pogodonate.com https://app-dev.pogodonate.com https://app.pogodonate.com https://*.listrakbi.com https://*.listrak.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://obseu.seroundprince.com wss://*.ringcentral.com https://*.dynamicyield.com/ https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://privacyportal-eu.onetrust.com https://geolocation.onetrust.com https://cdn.cookielaw.org wss://*.liveperson.net https://*.liveperson.net https://*.lpsnmedia.net https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.baidu.com https://*.sciencebehindecommerce.com https://*.googleapis.com https://translate.yandex.net https://mc.yandex.ru https://*.hotjar.com wss://*.hotjar.com https://*.trustpilot.com https://ct.pinterest.com https://*.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.parcellab.com https://www.google.co.uk https://analytics.tiktok.com https://smct.co https://*.smct.co https://api.bam-x.com https://*.contentsquare.net https://tr.snapchat.com https://ampcid.google.com.tw https://ampcid.google.com.hk https://ampcid.google.cn https://*.qubit.com https://*.qubitproducts.com https://horizon-api.www.lookfantastic.com https://d3g5d7323c2i6m.cloudfront.net https://d29qb9vav0xwuc.cloudfront.net https://d7c4jjeuqag9w.cloudfront.net https://*.criteo.com https://*.pndsn.com https://23q3fg4xjd.execute-api.eu-west-1.amazonaws.com https://*.criteo.net https://*.obsess-vr.com https://di.rlcdn.com https://api.rlcdn.com https://t.rlcdn.com https://*.prod.mplat-ppcprotect.com https://*.lunio.ai data: https://*.abtasty.com https://*.modiface.com https://us-east4-modiface-production.cloudfunctions.net https://sgtm.lookfantastic.com https://ml-services-grpc-gateway-4mhosmzo.nw.gateway.dev https://ams.creativecdn.com https://tr6.snapchat.com https://smct.io https://*.smct.io https://cognito-identity.eu-west-1.amazonaws.com https://firehose.eu-west-1.amazonaws.com https://www.googletagmanager.com https://unpkg.com/@provenance/ https://api.provenance.org https://www.provenance.org https://api.segment.io https://appsignal-endpoint.net https://*.ringcentral.com https://*.bazaarvoice.com https://mpsnare.iesnare.com https://*.renude.co https://the.sciencebehindecommerce.com https://*.wepowerconnections.com https://media.flixfacts.com https://media.flixcar.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com; default-src 'self' https://*.lpsnmedia.net https://*.bazaarvoice.com; font-src 'self' https://app-dev.pogodonate.com https://app.pogodonate.com data: https://cdn.listrakbi.com https://*.dynamicyield.com/ https://*.thcdn.com https://fonts.gstatic.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://static.thgcdn.cn data: https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://d7c4jjeuqag9w.cloudfront.net https://cdn.obsess-vr.com https://*.bazaarvoice.com blob: data: https://*.abtasty.com https://*.gstatic.com https://*.googleapis.com https://shadematching.modiface.com https://fonts.smct.co https://fonts.smct.io https://*.ringcentral.com https://*.renude.co https://media.flixfacts.com https://media.flixcar.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com; form-action 'self' https://www.facebook.com https://*.lookfantastic.com https://www.glossybox.co.uk https://www.glossybox.se https://www.glossybox.com https://connect.facebook.net https://*.snapchat.com https://www.lookfantastic.com.sg https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.dk https://www.lookfantastic.cn https://tr.snapchat.com; frame-ancestors 'self'; img-src 'self' data: https://cdn.lottielab.com/l/CZJhVVt776Qsat.json https://cdn.lottielab.com/l/9PKdou46EzRyq6.json https://cdn.lottielab.com/l/EJTUZxHNsMaiRr.json https://zappa-p4m1259p0-static.s3.amazonaws.com https://*.dynamicyield.eu https://pogodonate.s3.eu-west-2.amazonaws.com https://app-dev.pogodonate.com https://app.pogodonate.com https://*.dynamicyield.com/ https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https://www.googletagmanager.com https://unpkg.com/@provenance/ https://res.cloudinary.com https://www.provenance.org https://*.ringcentral.com https://*.bazaarvoice.com https://*.renude.co https: blob: https://*.awin1.com https://*.zenaps.com https://media.flixfacts.com https://media.flixcar.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net blob: https://static.thgcdn.cn https://player.vimeo.com https://vod-progressive.akamaized.net https://download-media.akamaized.net https://download-video.akamaized.net https://cdn.obsess-vr.com https://d7c4jjeuqag9w.cloudfront.net https://media.storystream.ai https://*.lookfantastic.com https://*.bazaarvoice.com https://mpsnare.iesnare.com https://media.flixfacts.com https://media.flixcar.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com; object-src 'self' https://*.thcdn.com https://www.youtube.com https://*.bazaarvoice.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.reddit.com https://www.redditstatic.com https://js.adsrvr.org https://*.dynamicyield.eu https://*.js.stripe.com https://js.stripe.com data: https://*.listrakbi.com https://*.listrak.com https://apps.rokt.com https://euob.seroundprince.com https://obseu.seroundprince.com https://*.dynamicyield.com/ https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://*.lpsnmedia.net https://*.doubleclick.net https://static.cdn-apple.com https://*.liveperson.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://cdn.parcellab.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://*.google-analytics.com https://*.google.com https://google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://seal.digicert.com https://static.criteo.net https://*.criteo.com https://remote.captcha.com https://*.akamaihd.net https://ln-rules.rewardstyle.com https://*.baidu.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://sc-static.net https://*.shoplooks.com https://slooks.top https://slooks.me https://*.translate.naver.net https://*.microsofttranslator.com https://*.hotjar.com https://*.attn.tv https://*.trustpilot.com https://*.bing.com https://*.doubleclick.net https://s.pinimg.com https://static.ads-twitter.com https://*.google.co.uk https://google.co.uk https://lantern.roeyecdn.com https://lantern.roeye.com https://analytics.tiktok.com https://*.ibytedtos.com https://static.thgcdn.cn https://*.liveperson.com https://tpc.googlesyndication.com https://static.narrativ.com https://*.obsess-vr.com https://static.goqubit.com https://*.qubit.com https://*.contentsquare.net https://apps.storystream.ai https://platform.twitter.com https://connect.facebook.net https://app.contentsquare.com https://cdn.pubnub.com https://assets.dekopay.com https://*.modiface.com blob: https://app-dev.pogodonate.com https://app.pogodonate.com https://*.abtasty.com https://tr.snapchat.com https://sgtm.lookfantastic.com https://tags.creativecdn.com https://smct.co https://*.smct.co https://smct.io https://*.smct.io https://unpkg.com/@provenance/ https://consent.cookiebot.com https://www.provenance.org https://*.ringcentral.com https://*.bazaarvoice.com https://*.renude.co https://*.awin1.com https://*.zenaps.com https://the.sciencebehindecommerce.com https://media.flixfacts.com https://media.flixcar.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com; style-src 'self' 'unsafe-inline' https://*.dynamicyield.eu https://*.js.stripe.com https://app-dev.pogodonate.com https://app.pogodonate.com https://cdn.listrakbi.com https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://*.lpsnmedia.net https://*.liveperson.net https://*.shoplooks.com https://*.translate.naver.net https://*.googleapis.com https://*.microsofttranslator.com https://cdn.parcellab.com https://static.thgcdn.cn https://fonts.smct.co https://maxcdn.bootstrapcdn.com https://d7c4jjeuqag9w.cloudfront.net https://cdn.obsess-vr.com https://modules.obsess-vr.com https://*.abtasty.com https://*.gstatic.com https://cms-cdn.modiface.com https://fonts.googleapis.com https://fonts.smct.io https://*.ringcentral.com https://*.bazaarvoice.com https://*.renude.co https://media.flixfacts.com https://media.flixcar.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com; upgrade-insecure-requests ; report-to csp-endpoint 5 default-src 'none'; script-src 'self' 'sha256-WN0hqek1jEauhlhWVVXeQPa5BD3f0rsMdmwSZtw1Cys=' 'sha256-VmEf2BGdqVUwcvyhTyarJo/bY7DNqS2+T2sz4IO/kbw=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-Jz4XDAN4f076pEj8cOt8mEdISulquB3CBdxFvEpSSyc=' 'sha256-gPxRf/xXylU+m1MS3X2eO2FaXfC4fdHx0TdnWrwGoOI='; child-src 'self'; frame-src https://*.youtube.com https://*.vimeo.com; font-src 'self'; img-src http: data: *; media-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'none'; connect-src 'self' https://tuta.com https://tuta.com data: * wss://app.tuta.com https://app.tuta.com https://api.github.com https://www.reddit.com https://mail.tutanota.com wss://mail.tutanota.com; 5 default-src https: data: wss: blob: 'unsafe-eval' 'unsafe-inline' 5 object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bam.nr-data.net https://cdn.syndication.twimg.com https://cdn.tradelab.fr https://connect.facebook.net https://d2hya7iqhf5w3h.cloudfront.net https://dfc.inovestor.com https://fonts.bunny.net https://js-agent.newrelic.com https://platform.twitter.com https://script.crazyegg.com https://snap.licdn.com https://tm.vendemore.com https://www.google-analytics.com https://www.googletagmanager.com https://s.go-mpulse.net https://its.tradelab.fr https://js.hsadspixel.net/fb.js https://a.optnmstr.com https://www.youtube.com https://s.ytimg.com https://www.google.com https://www.gstatic.com https://app.interactiveads.ai https://maps.googleapis.com https://cdn.rawgit.com http://cdn.siteimprove.net https://tagmanager.google.com https://c.go-mpulse.net https://173c5b0c.akstat.io https://bam-cell.nr-data.net https://bot.leadoo.com https://www.buzzsprout.com https://www.facebook.com https://platform.marksmen.nl *.mouseflow.com https://js-eu1.hs-scripts.com https://js-eu1.hsforms.net https://js-eu1.hs-banner.com https://js-eu1.hsleadflows.net https://js.hsforms.net https://forms.hsforms.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tag.simpli.fi https://bat.bing.com https://www.bing.com https://i.simpli.fi https://consent.trustarc.com https://ad.doubleclick.net https://js.adsrvr.org js.zi-scripts.com ws.zoominfo.com tags.clickagy.com https://data.cgi.com https://mycgi.cgi.com cdn.jsdelivr.net dfc.inovestor.com https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com https://polyfill.io https://unpkg.com; style-src * 'unsafe-inline' 'unsafe-eval' 5 object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 5 frame-ancestors 'self' *.facebook.com 5 default-src 'self'; report-to csp-reporting; report-uri https://o4510862955249664.ingest.us.sentry.io/api/4510862990573568/security/?sentry_key=2a3abfd64ca54230e36736276f5f8262&sentry_environment=production; base-uri 'self'; form-action 'self' https://app-sj13.marketo.com https://*.mktoresp.com; object-src 'none'; frame-ancestors 'self' https://thetitanawards.com https://alignedup.com https://*.alignedup.com https://*.teamaligned.com; media-src 'self' https://app.qualified.com https://assets.qualified.com; connect-src 'self' https://www.google.ae https://www.google.at https://www.google.be https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.ke https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.vi https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.ec https://www.google.com.eg https://www.google.com.et https://www.google.com.gh https://www.google.com.gt https://www.google.com.hk https://www.google.com.jm https://www.google.com.kh https://www.google.com.kw https://www.google.com.lb https://www.google.com.ly https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.ni https://www.google.com.np https://www.google.com.om https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tr https://www.google.com.ua https://www.google.com.vn https://www.google.de https://www.google.es https://www.google.fr https://www.google.ge https://www.google.gy https://www.google.hn https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.iq https://www.google.jo https://www.google.kz https://www.google.lk https://www.google.mu https://www.google.mw https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.se https://www.google.si https://www.google.sk https://www.google.so https://www.google.tn https://www.google.tt https://www.qualified.com https://*.qualified.com wss://*.qualified.com https://*.google-analytics.com https://analytics.google.com https://www.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://px4.ads.linkedin.com https://bat.bing.com https://bat.bing.net https://insight.adsrvr.org https://js.adsrvr.org https://epsilon.6sense.com https://*.6sc.co https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://app-sj13.marketo.com https://munchkin.marketo.net https://*.mktoresp.com https://243-vzs-608.mktoresp.com https://243-vzs-608.mktoutil.com https://cdn.bizible.com https://cdn.bizibly.com https://tags.srv.stackadapt.com https://app.omniconvert.com https://tracking-api.g2.com https://play.vidyard.com https://www.facebook.com https://scout.salesloft.com https://go.watermarkinsights.com https://clientstream.launchdarkly.com https://ws.zoominfo.com https://yoast.com https://uncn.jp https://bs.nakanohito.jp https://translate.googleapis.com https://translate-pa.googleapis.com https://click.prod.mplat-ppcprotect.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.cookielaw.org https://www.qualified.com https://*.qualified.com https://app-sj13.marketo.com https://munchkin.marketo.net https://cdn.bizible.com https://cdn.bizibly.com https://play.vidyard.com https://scout-cdn.salesloft.com https://cdn.omniconvert.com https://bat.bing.com https://snap.licdn.com https://js.adsrvr.org https://tags.srv.stackadapt.com https://tracking.g2crowd.com https://*.6sc.co https://googleads.g.doubleclick.net https://www.google-analytics.com https://connect.facebook.net https://static.ads-twitter.com https://www.vimeo.com https://vimeo.com https://ws.zoominfo.com https://cdn.jsdelivr.net https://cdn.smartnews-ads.com https://client.prod.mplat-ppcprotect.com https://watermark.marketlinc.com https://assets.ubembed.com https://aba84566d4ed4a218bf5cd895f1f1725.js.ubembed.com https://cs.nakanohito.jp https://as.uncn.jp https://b92.yahoo.co.jp https://s.yimg.jp; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.cookielaw.org https://www.qualified.com https://*.qualified.com https://app-sj13.marketo.com https://munchkin.marketo.net https://cdn.bizible.com https://cdn.bizibly.com https://play.vidyard.com https://scout-cdn.salesloft.com https://cdn.omniconvert.com https://bat.bing.com https://snap.licdn.com https://js.adsrvr.org https://tags.srv.stackadapt.com https://tracking.g2crowd.com https://*.6sc.co https://googleads.g.doubleclick.net https://www.google-analytics.com https://connect.facebook.net https://static.ads-twitter.com https://www.vimeo.com https://vimeo.com https://ws.zoominfo.com https://cdn.jsdelivr.net https://cdn.smartnews-ads.com https://client.prod.mplat-ppcprotect.com https://watermark.marketlinc.com https://assets.ubembed.com https://aba84566d4ed4a218bf5cd895f1f1725.js.ubembed.com https://cs.nakanohito.jp https://as.uncn.jp https://b92.yahoo.co.jp https://s.yimg.jp; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://tags.srv.stackadapt.com https://www.googletagmanager.com https://app-sj13.marketo.com https://www.gstatic.com https://cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://tags.srv.stackadapt.com https://www.googletagmanager.com https://app-sj13.marketo.com https://www.gstatic.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com https://cdn.cookielaw.org https://cdn.jsdelivr.net https://aceify.ai https://cdn.scite.ai; img-src 'self' data: blob: *.adsrvr.org adsrvr.org https://www.google.ae https://www.google.at https://www.google.be https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.ke https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.vi https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.ec https://www.google.com.eg https://www.google.com.et https://www.google.com.gh https://www.google.com.gt https://www.google.com.hk https://www.google.com.jm https://www.google.com.kh https://www.google.com.kw https://www.google.com.lb https://www.google.com.ly https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.ni https://www.google.com.np https://www.google.com.om https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tr https://www.google.com.ua https://www.google.com.vn https://www.google.de https://www.google.es https://www.google.fr https://www.google.ge https://www.google.gy https://www.google.hn https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.iq https://www.google.jo https://www.google.kz https://www.google.lk https://www.google.mu https://www.google.mw https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.se https://www.google.si https://www.google.sk https://www.google.so https://www.google.tn https://www.google.tt https://www.googletagmanager.com/a https://www.googletagmanager.com/td https://secure.gravatar.com https://cdn.cookielaw.org https://px.ads.linkedin.com https://px4.ads.linkedin.com https://bat.bing.com https://bat.bing.net https://tags.srv.stackadapt.com https://tracking.g2crowd.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://stats.g.doubleclick.net https://cdn.bizible.com https://cdn.bizibly.com https://*.6sc.co https://www.googleadservices.com https://www.gstatic.com https://fonts.gstatic.com https://www.bing.com https://www.facebook.com https://www.linkedin.com https://analytics.twitter.com https://t.co https://scout.us4.salesloft.com https://us02st1.zoom.us https://i.vimeocdn.com https://translate.google.com https://watermarkinsights.webpagefxstage.com https://content.cdntwrk.com https://i.smartnews-ads.com https://i6.smartnews-ads.com https://uncn.jp https://api.phia.com https://*.qualified.com; frame-src 'self' https://www.googletagmanager.com https://play.vidyard.com https://www.youtube-nocookie.com https://www.youtube.com https://*.qualified.com https://insight.adsrvr.org https://match.adsrvr.org https://app-sj13.marketo.com https://www.g2.com https://player.vimeo.com; worker-src 'self' blob:; upgrade-insecure-requests; 5 default-src 'self' *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; media-src blob: 'self' *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.qualtrics.com d.adroll.com s.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.geccontact-d2ekdcgjfggkcjb4.eastus-01.azurewebsites.net *.geccontact.azurewebsites.net *.azurewebsites.net *.apps.akerolabs.com *.akerolabs.com *.akro.io *.bugsnag.com cdn.akro.io service.force.com *.salesforceliveagent.com *.salesforce.com d.la1-c1-lo3.salesforceliveagent.com *.force.com *.my.site.com doublethedonation.com *.journalofaccountancy.com *.thetaxadviser.com *.fm-magazine.com *.qgdigitalpublishing.com *.mydigitalpublication.com *.digitaledition.com *.mouseflow.com cdn.mouseflow.com o2.mouseflow.com snap.licdn.com cdn.linkedin.oribi.io dc.ads.linkedin.com gw.linkedin.oribi.io px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com sjs.bizographics.com *.quora.com *.tiktok.com bat.bing.com/bat.js *.bing.com *.bat.bing.com bat.bing.net *.onetrust.com cdn-ukwest.onetrust.com cdn.cookielaw.org wss://*.vergic.com *.vergic.com wss://*.puzzel.com *.puzzel.com app.ravecapture.com picturemosaics.com *.picturemosaics.com *.zoominfo.com *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.zuora.com tags.tiqcdn.com *.brightcove.net *.brightcove.com blob: vjs.zencdn.net d2qrdklrsxowl2.cloudfront.net www.googletagmanager.com googletagmanager.com ssl.google-analytics.com www.google-analytics.com connect.facebook.net static.ads-twitter.com *.twitter.com a.quora.com analytics.tiktok.com www.googleadservices.com www.google.com googleads.g.doubleclick.net *.gstatic.com *.ceros.com *.turtl.co trustspot.io cdn.jsdelivr.net cdn.cookielaw.org my.tealiumiq.com *.my.tealiumiq.com securepubads.g.doubleclick.net *.googlesyndication.com adservice.google.com www.googletagservices.com *.qualtrics.com *.service.force.com c.paypal.com *.doublethedonation.com doublethedonation.com *.adtrafficquality.google *.ep2.adtrafficquality.google js.zi-scripts.com js.zi-scripts.com/zi-tag.js cdn-ukwest.onetrust.com www.clarity.ms app-cdn.puzzel.com *.collect.igodigital.com *.siteintercept.qualtrics.com c.clarity.ms tagassistant.google.com tagmanager.google.com c.amazon-adsystem.com *.clarity.ms *.insent.ai d.adroll.com s.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.geccontact-d2ekdcgjfggkcjb4.eastus-01.azurewebsites.net *.geccontact.azurewebsites.net *.azurewebsites.net *.apps.akerolabs.com *.akerolabs.com *.akro.io *.bugsnag.com cdn.akro.io service.force.com *.salesforceliveagent.com *.salesforce.com d.la1-c1-lo3.salesforceliveagent.com *.force.com *.my.site.com doublethedonation.com *.journalofaccountancy.com *.thetaxadviser.com *.fm-magazine.com *.qgdigitalpublishing.com *.mydigitalpublication.com *.digitaledition.com *.mouseflow.com cdn.mouseflow.com o2.mouseflow.com snap.licdn.com cdn.linkedin.oribi.io dc.ads.linkedin.com gw.linkedin.oribi.io px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com sjs.bizographics.com *.quora.com *.tiktok.com bat.bing.com/bat.js *.bing.com *.bat.bing.com bat.bing.net *.onetrust.com cdn-ukwest.onetrust.com cdn.cookielaw.org wss://*.vergic.com *.vergic.com wss://*.puzzel.com *.puzzel.com app.ravecapture.com picturemosaics.com *.picturemosaics.com *.zoominfo.com *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.brightcove.net d2qrdklrsxowl2.cloudfront.net *.s3.amazonaws.com *.turtl.co trustspot.io s3.amazonaws.com my.tealiumiq.com *.my.tealiumiq.com d.adroll.com s.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.geccontact-d2ekdcgjfggkcjb4.eastus-01.azurewebsites.net *.geccontact.azurewebsites.net *.azurewebsites.net *.apps.akerolabs.com *.akerolabs.com *.akro.io *.bugsnag.com cdn.akro.io service.force.com *.salesforceliveagent.com *.salesforce.com d.la1-c1-lo3.salesforceliveagent.com *.force.com *.my.site.com doublethedonation.com *.journalofaccountancy.com *.thetaxadviser.com *.fm-magazine.com *.qgdigitalpublishing.com *.mydigitalpublication.com *.digitaledition.com *.mouseflow.com cdn.mouseflow.com o2.mouseflow.com snap.licdn.com cdn.linkedin.oribi.io dc.ads.linkedin.com gw.linkedin.oribi.io px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com sjs.bizographics.com *.quora.com *.tiktok.com bat.bing.com/bat.js *.bing.com *.bat.bing.com bat.bing.net *.onetrust.com cdn-ukwest.onetrust.com cdn.cookielaw.org wss://*.vergic.com *.vergic.com wss://*.puzzel.com *.puzzel.com app.ravecapture.com picturemosaics.com *.picturemosaics.com *.zoominfo.com *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; img-src 'self' data: images.ctfassets.net aicpa.sc.omtrdc.net media.aicpa.org *.rackcdn.com cm.everesttech.net dpm.demdex.net content.psplugin.com *.brightcove.com *.boltdns.net players.brightcove.net static.ads-twitter.com t.co www.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net www.google.com *.google.co.uk *.facebook.com trustspot.io * c.paypal.com b.stats.paypal.com trk.osdrtb.net/u d.adroll.com s.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.geccontact-d2ekdcgjfggkcjb4.eastus-01.azurewebsites.net *.geccontact.azurewebsites.net *.azurewebsites.net *.apps.akerolabs.com *.akerolabs.com *.akro.io *.bugsnag.com cdn.akro.io service.force.com *.salesforceliveagent.com *.salesforce.com d.la1-c1-lo3.salesforceliveagent.com *.force.com *.my.site.com doublethedonation.com *.journalofaccountancy.com *.thetaxadviser.com *.fm-magazine.com *.qgdigitalpublishing.com *.mydigitalpublication.com *.digitaledition.com *.mouseflow.com cdn.mouseflow.com o2.mouseflow.com snap.licdn.com cdn.linkedin.oribi.io dc.ads.linkedin.com gw.linkedin.oribi.io px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com sjs.bizographics.com *.quora.com *.tiktok.com bat.bing.com/bat.js *.bing.com *.bat.bing.com bat.bing.net *.onetrust.com cdn-ukwest.onetrust.com cdn.cookielaw.org wss://*.vergic.com *.vergic.com wss://*.puzzel.com *.puzzel.com app.ravecapture.com picturemosaics.com *.picturemosaics.com *.zoominfo.com *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; font-src 'self' data: fonts.gstatic.com d2qrdklrsxowl2.cloudfront.net *.s3.amazonaws.com content.psplugin.com s3.amazonaws.com trustspot.io d.adroll.com s.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.geccontact-d2ekdcgjfggkcjb4.eastus-01.azurewebsites.net *.geccontact.azurewebsites.net *.azurewebsites.net *.apps.akerolabs.com *.akerolabs.com *.akro.io *.bugsnag.com cdn.akro.io service.force.com *.salesforceliveagent.com *.salesforce.com d.la1-c1-lo3.salesforceliveagent.com *.force.com *.my.site.com doublethedonation.com *.journalofaccountancy.com *.thetaxadviser.com *.fm-magazine.com *.qgdigitalpublishing.com *.mydigitalpublication.com *.digitaledition.com *.mouseflow.com cdn.mouseflow.com o2.mouseflow.com snap.licdn.com cdn.linkedin.oribi.io dc.ads.linkedin.com gw.linkedin.oribi.io px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com sjs.bizographics.com *.quora.com *.tiktok.com bat.bing.com/bat.js *.bing.com *.bat.bing.com bat.bing.net *.onetrust.com cdn-ukwest.onetrust.com cdn.cookielaw.org wss://*.vergic.com *.vergic.com wss://*.puzzel.com *.puzzel.com app.ravecapture.com picturemosaics.com *.picturemosaics.com *.zoominfo.com *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; connect-src 'self' id.aicpa.org secureaicpa.okta.com aicpa.okta.com devaicpa.oktapreview.com id.test-aicpa.org login.aicpa-cima.com dev.login.aicpa-cima.com uat.login.aicpa-cima.com aicpa-staff.oktapreview.com stagingaicpa.okta.com stagingaicpa-staff.okta.com temp2secureaicpa.okta.com https://us.aicpa.org/bin/aicpaorg/uca assets.ctfassets.net downloads.ctfassets.net images.ctfassets.net sentry.io app.getsentry.org app.getsentry.com dpm.demdex.net aicpa.demdex.net collect.tealiumiq.com aicpa.sc.omtrdc.net players.brightcove.net *.brightcove.com *.hapyak.com *.boltdns.net *.brightcovecdn.com *.akamaihd.net *.akafms.net *.vergic.com wss://*.vergic.com *.facebook.com *.google.com www.googletagmanager.com googletagmanager.com www.google-analytics.com analytics.google.com region1.analytics.google.com stats.g.doubleclick.net trustspot.io my.tealiumiq.com *.my.tealiumiq.com js.zi-scripts.com wss://ws.zoominfo.com securepubads.g.doubleclick.net *.googlesyndication.com *.qualtrics.com sit.test-aicpa.org *.adtrafficquality.google analytics-ipv6.tiktokw.us https://google.com wss://tagassistant.google.com https://c.clarity.ms *.collect.igodigital.com https://connect.facebook.net https://www.googleadservices.com https://static.ads-twitter.com https://t.co https://googleads.g.doubleclick.net https://tags.tiqcdn.com *.clarity.ms *.insent.ai d.adroll.com s.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.geccontact-d2ekdcgjfggkcjb4.eastus-01.azurewebsites.net *.geccontact.azurewebsites.net *.azurewebsites.net *.apps.akerolabs.com *.akerolabs.com *.akro.io *.bugsnag.com cdn.akro.io service.force.com *.salesforceliveagent.com *.salesforce.com d.la1-c1-lo3.salesforceliveagent.com *.force.com *.my.site.com doublethedonation.com *.journalofaccountancy.com *.thetaxadviser.com *.fm-magazine.com *.qgdigitalpublishing.com *.mydigitalpublication.com *.digitaledition.com *.mouseflow.com cdn.mouseflow.com o2.mouseflow.com snap.licdn.com cdn.linkedin.oribi.io dc.ads.linkedin.com gw.linkedin.oribi.io px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com sjs.bizographics.com *.quora.com *.tiktok.com bat.bing.com/bat.js *.bing.com *.bat.bing.com bat.bing.net *.onetrust.com cdn-ukwest.onetrust.com cdn.cookielaw.org wss://*.vergic.com *.vergic.com wss://*.puzzel.com *.puzzel.com app.ravecapture.com picturemosaics.com *.picturemosaics.com *.zoominfo.com *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; frame-src 'self' id.aicpa.org secureaicpa.okta.com aicpa.okta.com apisandbox.zuora-cima.dev.securedataplatform.co.uk apisandbox.zuora-cima.uat.securedataplatform.co.uk apisandbox.zuora-cima.uat.securedataplatform.com api.zuora-cima.securedataplatform.com api.zuora-cima.securedataplatform.co.uk zuora-cima.securedataplatform.com sandbox.na.zuora-cima.uat.securedataplatform.co.uk sandbox.na.zuora-cima.uat.securedataplatform.com na.zuora-cima.securedataplatform.co.uk na.zuora-cima.securedataplatform.com sandbox.na.zuora.com *.aicpa-cima.com devaicpa.oktapreview.com id.test-aicpa.org login.aicpa-cima.com dev.login.aicpa-cima.com uat.login.aicpa-cima.com aicpa-staff.oktapreview.com stagingaicpa.okta.com stagingaicpa-staff.okta.com temp2secureaicpa.okta.com www.facebook.com m.facebook.com html5-player.libsyn.com *.brightcove.net d2qrdklrsxowl2.cloudfront.net vjs.zencdn.net *.podomatic.com podomatic.com *.youtube.com apisandbox.zuora.com aicpa.demdex.net www.zuora.com *.doubleclick.net bid.g.doubleclick.net td.doubleclick.net *.ceros.com *.google.com my.tealiumiq.com *.my.tealiumiq.com *.safeframe.googlesyndication.com tpc.googlesyndication.com *.qualtrics.com *.zuora.com c.paypal.com www.googletagmanager.com tagassistant.google.com tagmanager.google.com ep2.adtrafficquality.google d.adroll.com s.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.geccontact-d2ekdcgjfggkcjb4.eastus-01.azurewebsites.net *.geccontact.azurewebsites.net *.azurewebsites.net *.apps.akerolabs.com *.akerolabs.com *.akro.io *.bugsnag.com cdn.akro.io service.force.com *.salesforceliveagent.com *.salesforce.com d.la1-c1-lo3.salesforceliveagent.com *.force.com *.my.site.com doublethedonation.com *.journalofaccountancy.com *.thetaxadviser.com *.fm-magazine.com *.qgdigitalpublishing.com *.mydigitalpublication.com *.digitaledition.com *.mouseflow.com cdn.mouseflow.com o2.mouseflow.com snap.licdn.com cdn.linkedin.oribi.io dc.ads.linkedin.com gw.linkedin.oribi.io px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com sjs.bizographics.com *.quora.com *.tiktok.com bat.bing.com/bat.js *.bing.com *.bat.bing.com bat.bing.net *.onetrust.com cdn-ukwest.onetrust.com cdn.cookielaw.org wss://*.vergic.com *.vergic.com wss://*.puzzel.com *.puzzel.com app.ravecapture.com picturemosaics.com *.picturemosaics.com *.zoominfo.com *.vergic.com www.facebook.com wss://*.vergic.com https://*.vergic.com www.zuora-cima.securedataplatform.com; frame-ancestors 'self' *.aicpa.org *.cgma.org; manifest-src 'self' devaicpa.oktapreview.com aicpa.okta.com login.aicpa-cima.com stagingaicpa.okta.com; block-all-mixed-content; upgrade-insecure-requests; report-uri https://sentry.io/api/3382497/security/?sentry_key=9aee855e0ce84a1db4b69530c6b45163@sentry.io/3382497 5 frame-ancestors 'none'; report-uri https://prod-bk-csp-service.rbictg.com/csp; report-to csp-endpoint 5 frame-ancestors 'self' https://*.chaosgroup.com https://*.chaos.com https://secure.avangate.com https://secure.2checkout.com https://elmtec.fr https://elmtec.odoo.com 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.htmlpub.com https://static.cloudflareinsights.com https://cdn.goentri.com https://cdn.useparagon.com https://www.googletagmanager.com https://*.googletagmanager.com https://cdn.mxpnl.com https://*.paddle.com https://*.profitwell.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://js.sentry-cdn.com https://browser.sentry-cdn.com https://try.leadpages.com https://*.leadpages.com https://script.getreditus.com https://*.getreditus.com https://partnerlinks.io https://*.partnerlinks.io https://grsm.io https://*.grsm.io https://challenges.cloudflare.com https://cs.iubenda.com https://cdn.iubenda.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://snap.licdn.com https://bat.bing.com https://js.hs-scripts.com https://js.hsforms.net https://js.usemessages.com https://js.hubspotfeedback.com https://js.hsadspixel.net https://js.hubspot.com https://js.hs-analytics.net https://js.hs-banner.com https://cdn.funnelytics.io https://*.customers.ai https://mm-uxrv.com https://cdn.paved.com https://pvdpix.com https://*.awin1.com https://www.dwin1.com https://www.redditstatic.com https://alb.reddit.com https://scripts.attributionapp.com https://lantern.roeyecdn.com https://v2.zopim.com https://*.zopim.com https://*.zdassets.com https://*.zendesk.com; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src * data: blob:; media-src 'self' blob:; frame-src * blob:; connect-src 'self' https://api.stripe.com https://*.useparagon.com https://pages.lpcontent.net https://browser.sentry-cdn.com https://*.sentry.io https://static.htmlpub.com https://api.goentri.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://analytics.google.com https://api-js.mixpanel.com https://cdn.mxpnl.com https://*.paddle.com https://*.profitwell.com https://vimeo.com https://try.leadpages.com https://*.leadpages.com https://script.getreditus.com https://*.getreditus.com https://partnerlinks.io https://*.partnerlinks.io https://grsm.io https://*.grsm.io https://cs.iubenda.com https://cdn.iubenda.com https://idb.iubenda.com https://cpl.iubenda.com https://www.google.com https://www.googleadservices.com https://*.doubleclick.net https://region1.analytics.google.com https://graph.facebook.com https://www.facebook.com https://capig.stape.ma https://px.ads.linkedin.com https://bat.bing.com https://api.hubapi.com https://api.hubspot.com https://track.hubspot.com https://forms.hubspot.com https://*.hsappstatic.net https://*.funnelytics.io https://*.funnelytics.workers.dev https://*.customers.ai https://*.paved.com https://*.awin1.com https://alb.reddit.com https://*.aisiteanalytics.com https://pvdpix.com https://track.attributionapp.com https://js.hs-banner.com https://cta-service-cms2.hubspot.com https://v2.zopim.com https://*.zopim.com https://*.zdassets.com https://*.zendesk.com wss://*.zopim.com wss://*.zendesk.com 5 default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data:; object-src 'none'; frame-ancestors 'self'; connect-src 'self' * https://*.productfruits.com wss://*.productfruits.com https://productfruits.help/ https://bzr.openai.com; font-src 'self' 'unsafe-inline' data: https://k.clarity.ms https://www.google.ca https://www.google.com.pe www.gstatic.com fonts.gstatic.com optimize.google.com https://t.co https://analytics.twitter.com https://fonts.googleapis.com https://www.googletagmanager.com https://static.ads-twitter.com https://px.ads.linkedin.com https://www.googleoptimize.com https://*.cdntwrk.com https://*.genetec.com https://static.cloudflareinsights.com https://cdn.livechatinc.com https://oc-cdn-public.azureedge.net https://*.wrike.com https://*.navattic.com https://storage.googleapis.com; frame-src 'self' blob: https://k.clarity.ms https://www.google.ca https://www.google.com.pe https://bid.g.doubleclick.net www.gstatic.com fonts.gstatic.com optimize.google.com https://t.co https://analytics.twitter.com https://fonts.googleapis.com https://www.googletagmanager.com https://static.ads-twitter.com https://px.ads.linkedin.com https://www.googleoptimize.com https://*.addthis.com https://*.bloomreach.cloud https://*.doubleclick.nethttps://*.facebook.com https://*.genetec.com https://*.geneteccloud.com https://*.google.com https://*.livechatinc.com https://*.marketo.com https://*.podbean.com https://*.powerappsportals.com https://*.youtube.com https://static.addtoany.com https://oc-cdn-public.azureedge.net genetec.involve.me https://*.wrike.com https://*.navattic.com https://storage.googleapis.com https://*.productfruits.com https://*.vidyard.com; img-src 'self' 'unsafe-inline' data: * https://*.productfruits.com https://bzr.openai.com; media-src 'self' https://k.clarity.ms https://www.google.ca https://www.google.com.pe www.gstatic.com fonts.gstatic.com optimize.google.com https://t.co https://analytics.twitter.com https://fonts.googleapis.com https://www.googletagmanager.com https://static.ads-twitter.com https://px.ads.linkedin.com https://www.googleoptimize.com https://*.bloomreach.cloud https://*.genetec.com https://*.widencdn.net https://*.youtube.com https://genetec.widen.net https://youtu.be https://static.cloudflareinsights.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' blob: https://k.clarity.ms https://www.google.ca https://www.google.com.pe www.gstatic.com fonts.gstatic.com optimize.google.com https://t.co https://analytics.twitter.com https://fonts.googleapis.comhttps://www.googletagmanager.com https://static.ads-twitter.com https://px.ads.linkedin.com https://www.googleoptimize.com https://*.addthis.com https://*.bing.com https://*.bloomreach.cloud https://*.cdntwrk.com https://*.clarity.ms https://*.cookielaw.org https://*.crazyegg.com https://*.doubleclick.net https://*.facebook.net https://*.genetec.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googleoptimize.com https://*.googletagmanager.com https://*.gstatic.com https://*.inspectlet.com https://*.licdn.com https://*.livechatinc.com https://*.marketo.com https://*.marketo.net https://*.onetrust.com https://*.site24x7rum.com https://*.widencdn.net https://*.youtube.com https://genetec.widen.net https://ionfiles.scribblecdn.net https://v1.addthisedge.com https://youtu.be https://z.moatads.com https://static.cloudflareinsights.com https://static.addtoany.com https://dev.visualwebsiteoptimizer.com https://app.vwo.com https://oc-cdn-public.azureedge.net https://www.redditstatic.com genetec.involve.me ajax.googleapis.com https://maps.googleapis.com https://js.navattic.com https://*.productfruits.com https://*.zoominfo.com https://js.zi-scripts.com https://*.vidyard.com https://bzrcdn.openai.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://k.clarity.ms https://www.google.ca https://www.google.com.pe https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google-analytics.comhttps://ssl.google-analytics.com www.gstatic.com fonts.gstatic.com optimize.google.com https://t.co https://analytics.twitter.com https://fonts.googleapis.com https://www.googletagmanager.com https://static.ads-twitter.com https://px.ads.linkedin.com https://www.googleoptimize.com https://*.addthis.com https://*.bing.com https://*.bloomreach.cloud https://*.cdntwrk.com https://*.clarity.ms https://*.cookielaw.org https://*.crazyegg.com https://*.doubleclick.net https://*.facebook.net https://*.genetec.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googleoptimize.com https://*.googletagmanager.com https://*.gstatic.com https://*.inspectlet.com https://*.licdn.com https://*.livechatinc.com https://*.marketo.com https://*.marketo.net https://*.onetrust.com https://*.site24x7rum.com https://*.widencdn.net https://*.youtube.com https://genetec.widen.net https://ionfiles.scribblecdn.net https://v1.addthisedge.com https://youtu.be https://z.moatads.com https://static.cloudflareinsights.com https://oc-cdn-public.azureedge.net https://*.wrike.com https://*.navattic.com https://storage.googleapis.com https://*.productfruits.com https://*.zoominfo.com https://js.zi-scripts.com https://*.vidyard.com https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https://k.clarity.ms https://www.google.ca https://www.google.com.pe https://tagmanager.google.com www.gstatic.com fonts.gstatic.com optimize.google.com https://t.co https://analytics.twitter.com https://fonts.googleapis.com https://www.googletagmanager.com https://static.ads-twitter.com https://px.ads.linkedin.com https://www.googleoptimize.com https://*.bloomreach.cloud https://*.cdntwrk.com https://*.genetec.com https://*.marketo.com https://static.cloudflareinsights.com https://oc-cdn-public.azureedge.net https://*.wrike.com https://*.navattic.com https://storage.googleapis.com https://*.productfruits.com https://*.vidyard.com; style-src-elem 'self' 'unsafe-inline' https://k.clarity.ms https://www.google.ca https://www.google.com.pe https://tagmanager.google.com www.gstatic.com fonts.gstatic.com optimize.google.com https://t.co https://analytics.twitter.com https://fonts.googleapis.com https://www.googletagmanager.com https://static.ads-twitter.com https://px.ads.linkedin.com https://www.googleoptimize.com https://*.bloomreach.cloud https://*.cdntwrk.com https://*.genetec.com https://*.marketo.com https://static.cloudflareinsights.com https://oc-cdn-public.azureedge.net https://*.wrike.com https://*.navattic.com https://storage.googleapis.com https://*.productfruits.com https://*.vidyard.com 5 frame-ancestors 'self' https://lojaonline.nos.pt 5 report-uri https://cdn1.hellohumankindness.org/svc/csp-report/?t=2c30318d157a3a246eb902f5cc3f638e159275e2888eeebc99fda5cb84ccd3fe34c17a5ed5f7227abde3b9ee2c6daecb750995423a8ca3ab; style-src 'self' 'unsafe-inline' *.cognitoforms.com *.crazyegg.com *.dignityhealth.org *.foresee.com *.hellohumankindness.org *.marketo.com care.commonspirit.org cdn.commonspirit.org cdn.cookielaw.org cookie-cdn.cookiepro.com fonts.googleapis.com geolocation.onetrust.com privacyportal.onetrust.com providers.commonspirit.org publish-p121003-e1198293.adobeaemcloud.com ucm-us.verint-cdn.com/files/sites/commonspirit/ use.typekit.net; base-uri 'self' providers.commonspirit.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.crazyegg.com *.dignityhealth.org *.evaliahealth.com *.everestjs.net *.everesttech.net *.google.com/pagead/ *.google.com/recaptcha/ *.googleadservices.com *.gstatic.com/recaptcha/ *.hellohumankindness.org *.invoca.net *.jotform.io *.marketo.com *.marketo.net *.recaptcha.net/recaptcha/ *.youtube-nocookie.com *.youtube.com adobedc.demdex.net ajax.googleapis.com ajax.microsoft.com assets.adobedtm.com assets.adobedtm.com bam.nr-data.net care.commonspirit.org cdn.commonspirit.org cdn.cookielaw.org cdn1.commonspirit.org cdnjs.cloudflare.com commonspirit.experiencecloud.adobe.com cookie-cdn.cookiepro.com experience.adobe.com geolocation.onetrust.com js-agent.newrelic.com login.commonspirit.org maps.googleapis.com privacyportal.onetrust.com providers.commonspirit.org resources.unlockhealthnow.com/embed-script/ survey.vovici.com ucm-us.verint-cdn.com/files/modules/ ucm-us.verint-cdn.com/files/sites/commonspirit/ use.typekit.net; frame-src 'self' *.crazyegg.com *.jotform.io *.marketo.com *.vimeo.com *.youtube-nocookie.com *.youtube.com care.commonspirit.org commonspirit.demdex.net docasap.com www.cognitoforms.com www.google.com www.recaptcha.net; img-src 'self' *.blob.core.windows.net *.dignityhealth.org *.everesttech.net *.foresee.com *.google.com/pagead/ *.googleadservices.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.hellohumankindness.org *.marketo.com *.twimg.com *.youtube.com api.clearsensecloud.com apps.vmfh.org bam.nr-data.net care.commonspirit.org cdn.cookielaw.org cdn.healthwise.net cdn.jotfor.ms d20bb9v528piij.cloudfront.net data: dpm.demdex.net i.ytimg.com login.commonspirit.org publish-p121003-e1198293.adobeaemcloud.com s3.amazonaws.com s7d1.scene7.com s7d2.scene7.com trinityhealth.com/wp-content/uploads/ ucm-us.verint-cdn.com use.typekit.net www.google.com; connect-src 'self' *.ase-usw1-shared-prd.p.azurewebsites.net *.crazyegg.com *.dignityhealth.org *.everesttech.net *.foresee.com *.google.com/pagead/ *.google.com/recaptcha/ *.googleadservices.com *.googleapis.com *.hellohumankindness.org *.mktoresp.com *.mktoutil.com *.omtrdc.net *.recaptcha.net adobedc.demdex.net ajax.microsoft.com analytics.google.com api.cshcontent.org/svc/ api.ipify.org apiprod.commonspirit.org assets.adobedtm.com bam.nr-data.net cdn.commonspirit.org cdn.cookielaw.org cdn.cookielaw.org dcs.adobedc.net dpm.demdex.net fid.agkn.com fonts.googleapis.com geolocation.onetrust.com identity-api.commonspirit.org identity-func.commonspirit.org login.commonspirit.org maps.googleapis.com privacyportal-na01.onetrust.com providers.commonspirit.org publish-p121003-e1198293.adobeaemcloud.com readaloud.googleapis.com s7d1.scene7.com survey.vovici.com telemetry.commonspirit.org translate.googleapis.com ucm-us.verint-cdn.com/files/sites/commonspirit/; media-src 'self' d20bb9v528piij.cloudfront.net s7d1.scene7.com; default-src 'self' *.dignityhealth.org account.commonspirit.org cdn1.commonspirit.org commonspirit.demdex.net identity-func.commonspirit.org login.commonspirit.org; font-src 'self' *.dignityhealth.org *.gstatic.com cdn.jorfor.ms cdn1.commonspirit.org data: use.typekit.net www.commonspirit.org; 5 frame-ancestors 'self' https://*.procaresoftware.com; 5 default-src 'self' 'unsafe-inline' tally.so *.tally.so mixvoip.com *.mixvoip.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' tally.so *.tally.so mixvoip.com *.mixvoip.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com; style-src 'self' 'unsafe-inline' tally.so *.tally.so mixvoip.com *.mixvoip.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com; img-src 'self' data: tally.so *.tally.so mixvoip.com *.mixvoip.com scribehow.com *.scribehow.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com https://i.ytimg.com https://img.youtube.com; font-src 'self' tally.so *.tally.so mixvoip.com *.mixvoip.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com; connect-src 'self' tally.so *.tally.so mixvoip.com *.mixvoip.com wss://support.mixvoip.com scribehow.com *.scribehow.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com; frame-src 'self' tally.so *.tally.so mixvoip.com *.mixvoip.com scribehow.com *.scribehow.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com www.loom.com https://www.youtube-nocookie.com https://www.youtube.com; media-src 'self' tally.so *.tally.so mixvoip.com *.mixvoip.com weglot.com *.weglot.com cdn-api-weglot.com *.cdn-api-weglot.com 5 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; font-src * 'self' data: https:; style-src * 'self' 'unsafe-inline' data: https: 5 upgrade-insecure-requests; media-src https: data: blob:; img-src https: data: blob:; object-src https:; worker-src blob:; default-src https: blob: 'unsafe-inline' 'unsafe-eval' 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.crazyegg.com https://*.everbridge.com https://*.everbridge.net https://*.site.com https://*.salesforce-sites.com https://*.force.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.marketo.com https://*.marketo.net https://*.mktoresp.com https://*.mktoutil.com https://*.ziftsolutions.com https://*.ziftmarcom.com https://*.ziftone.com https://*.goconsensus.com https://*.metadata.io https://*.folloze.com https://cdn.jsdelivr.net https://unpkg.com https://*.driftt.com https://*.6sense.com https://*.6sc.co https://*.google.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.g2.com https://*.g2crowd.com https://*.linkedin.com https://snap.licdn.com https://analytics.twitter.com https://static.ads-twitter.com https://connect.facebook.net https://www.facebook.com https://*.facebook.com https://*.doubleclick.net https://*.clarity.ms https://*.adsrvr.org https://script.googleusercontent.com https://bat.bing.com https://c.bing.com https://cdn.linkedin.oribi.io https://api.ipify.org https://*.qualified.com https://www.google-analytics.com https://cdn.cookielaw.org; script-src-elem 'self' 'unsafe-inline' blob: https://*.crazyegg.com https://*.everbridge.com https://*.everbridge.net https://*.site.com https://*.salesforce-sites.com https://*.force.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.marketo.com https://*.marketo.net https://*.mktoresp.com https://*.mktoutil.com https://*.ziftsolutions.com https://*.ziftmarcom.com https://*.ziftone.com https://*.goconsensus.com https://*.metadata.io https://*.folloze.com https://cdn.jsdelivr.net https://unpkg.com https://*.driftt.com https://*.6sense.com https://*.6sc.co https://*.google.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.g2.com https://*.g2crowd.com https://*.linkedin.com https://snap.licdn.com https://analytics.twitter.com https://static.ads-twitter.com https://connect.facebook.net https://www.facebook.com https://*.facebook.com https://*.doubleclick.net https://*.clarity.ms https://*.adsrvr.org https://script.googleusercontent.com https://bat.bing.com https://c.bing.com https://cdn.linkedin.oribi.io https://api.ipify.org https://*.onetrust.com https://cdn.cookielaw.org https://*.qualified.com https://www.google-analytics.com https://cdn.amcharts.com https://widgets.itcentralstation.com https://cdn.segment.com https://*.scoreapp.com https://bzrcdn.openai.com/; style-src 'self' 'unsafe-inline' https://*.crazyegg.com https://*.everbridge.com https://*.site.com https://*.force.com https://*.salesforce-sites.com https://translate.googleapis.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://static.addtoany.com https://*.marketo.com https://*.ziftsolutions.com https://*.folloze.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https://*.crazyegg.com https://user-images.crazyeggcdn.com https://*.everbridge.com https://*.everbridge.net https://*.g2crowd.com https://*.site.com https://*.salesforce-sites.com https://*.force.com https://*.salesforce.com https://*.adsymptotic.com https://bestinenterpriseresilience.com https://*.bestinenterpriseresilience.com https://secure.adnxs.com https://*.cookiebot.com https://*.addtoany.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.hotjar.com https://*.hotjar.io https://*.g2.com https://*.linkedin.com https://snap.licdn.com https://*.marketo.net https://*.marketwire.com https://*.marketo.com https://*.mktoresp.com https://*.mktoutil.com https://analytics.twitter.com https://static.ads-twitter.com https://*.driftt.com https://*.6sense.com https://*.6sc.co https://connect.facebook.net https://www.facebook.com https://*.facebook.com https://*.doubleclick.net https://*.clarity.ms https://www.comparably.com https://*.itcentralstation.com https://www.peerspot.com https://cdn.amcharts.com https://*.gravatar.com https://*.cdninstagram.com https://*.instagram.com https://player.simplecast.com https://*.vimeo.com https://*.youtube.com https://*.ytimg.com https://*.zoominfo.com https://t.co https://folloze-optimized.s3.amazonaws.com https://bat.bing.com https://c.bing.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.qualified.com https://*.folloze.com https://cdnassets.pagely.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://s.w.org https://i.vimeocdn.com https://cts.businesswire.com https://bat.bing.net https://www.google.ca https://www.google.co.uk https://www.google.de https://www.google.fr; connect-src 'self' https://*.crazyegg.com https://*.everbridge.com https://*.everbridge.net https://*.site.com https://*.salesforce-sites.com https://*.force.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.marketo.com https://*.marketo.net https://*.mktoresp.com https://*.mktoutil.com https://*.ziftsolutions.com https://*.ziftmarcom.com https://*.ziftone.com https://*.goconsensus.com https://*.metadata.io https://*.folloze.com https://*.driftt.com https://*.6sense.com https://*.6sc.co https://*.google.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.g2.com https://*.g2crowd.com https://*.linkedin.com https://snap.licdn.com https://analytics.twitter.com https://static.ads-twitter.com https://connect.facebook.net https://www.facebook.com https://*.facebook.com https://*.doubleclick.net https://*.clarity.ms https://*.adsrvr.org https://script.googleusercontent.com https://bat.bing.com https://c.bing.com https://cdn.linkedin.oribi.io https://api.ipify.org https://*.onetrust.com https://cdn.cookielaw.org wss://*.qualified.com https://*.qualified.com https://www.google-analytics.com https://www.googleadservices.com https://cdn.jsdelivr.net https://pagead2.googlesyndication.com https://region1.google-analytics.com https://bat.bing.net https://www.google.ca https://www.google.co.uk https://www.google.de https://www.google.fr https://t.co https://*.scoreapp.com https://*.openai.com/; font-src 'self' data: https://cdnjs.cloudflare.com https://www.everbridge.com https://use.typekit.net https://*.qualified.com; media-src 'self' https://js.driftt.com https://*.vimeo.com https://*.youtube.com https://*.ytimg.com https://player.simplecast.com https://app.qualified.com https://www.everbridge.com https://assets.qualified.com https://*.qualified.com; frame-src 'self' blob: https://*.crazyegg.com https://*.everbridge.com https://*.everbridge.net https://*.site.com https://*.salesforce-sites.com https://*.force.com https://*.salesforce.com https://*.youtube.com https://*.vimeo.com https://*.marketo.com https://app.qualified.com https://www.google.com https://www.facebook.com https://www.googletagmanager.com https://*.scoreapp.com https://*.g2.com; worker-src 'self' blob:; child-src 'self' blob:; 5 base-uri 'self'; default-src 'self' data: blob: https://*.sitecore.com https://*.sitecore.net https://*.googleapis.com https://*.gstatic.com https://*.6sc.co https://*.6sense.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.sitecore.com http://localhost http://*.6sc.co https://*.googlesyndication.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.recaptcha.net https://*.gstatic.cn https://*.gstatic.com https://*.linkedin.com https://*.licdn.com https://*.pardot.com https://*.qualified.com https://*.salesloft.com https://d35vb5cccm4xzp.cloudfront.net https://*.bing-int.com https://cdn.dreamdata.cloud https://cdn.drda.io https://*.g.doubleclick.net https://*.clarity.ms https://*.bing.com https://*.osano.com https://*.g2.com https://*.g2crowd.com https://*.ahrefs.com https://*.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://*.sitecore.com https://*.qualified.com https://fonts.gstatic.com https://fonts.googleapis.com https://*.clarity.ms https://*.bing.com https://*.osano.com; style-src-attr 'self' 'unsafe-inline' https://*.sitecore.com; font-src 'self' https://*.sitecore.com https://fonts.gstatic.com https://*.qualified.com; img-src 'self' * https://*.qualified.com; media-src 'self' mediastream: https://*.qualified.com https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud data:; frame-src 'self' https://*.sitecore.com https://*.sitecorecontenthub.cloud https://*.qualified.com https://app.qualified.com https://*.google.com https://td.doubleclick.net https://*.googletagmanager.com https://capture.navattic.com https://sitecore.navattic.com/ https://s.pointerpro.com/ https://*.sequel.io https://*.osano.com; frame-ancestors 'self' https://*.sitecorecloud.io https://*.sitecore.com https://*.qualified.com https://*.qualified-preview.com https://forresterstage.mainstayadvisor.com https://*.forrester.com; child-src 'self' https://*.qualified.com; connect-src 'self' wss://*.qualified.com https://*.qualified.com https://*.sitecore.com https://*.sitecorecloud.io https://*.6sc.co https://*.6sense.com https://*.adnxs.com https://cdn.dreamdata.cloud https://*.google.com https://google.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://api.ipify.org https://px.ads.linkedin.com https://*.bing.com https://*.clarity.ms https://*.bing.net https://*.salesloft.com https://*.sitecorecontenthub.cloud https://*.osano.com https://*.g2.com https://*.g2crowd.com https://*.ahrefs.com https://cloudflareinsights.com; object-src 'none'; worker-src 'self' blob: https://*.osano.com 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://internetcomputer.matomo.cloud; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://*.internetcomputer.org https://*.basemaps.cartocdn.com https://*.githubusercontent.com https://*.ctfassets.net; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.internetcomputer.org https://ic0.app https://internetcomputer.matomo.cloud https://*.githubusercontent.com; frame-src 'self'; object-src 'none'; media-src 'self'; child-src 'self'; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; manifest-src 'self'; worker-src 'self'; 5 child-src 'self' https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://app-dev.pogodonate.com https://app.pogodonate.com https://apps.rokt.com https://sgtm.dermstore.com https://us.creativecdn.com https://dermstore.attn.tv https://creatives.attn.tv https://*.ringcentral.com https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://*.akamaihd.net https://*.translate.naver.net https://www.recaptcha.net https://www.google.com https://tpc.googlesyndication.com https://www.zenaps.com https://tr.snapchat.com https://tr6.snapchat.com https://www.youtube.com https://api.bam-x.com https://*.attn.tv https://ln-rules.rewardstyle.com https://cdn.pbbl.co https://www.pinterest.com https://app.qubit.com blob: https://*.awin1.com https://*.zenaps.com https://gum.criteo.com https://*.abtasty.com https://events.release.narrativ.com https://*.powerreviews.com https://ct.pinterest.com https://fledge.eu.criteo.com https://static.criteo.net https://ams.creativecdn.com https://www.provenance.org https://*.bazaarvoice.com https://www.youtube.com/ https://uk.cdn-net.com/ https://lantern.roeye.com; connect-src 'self' https://cdn.lottielab.com/l/CZJhVVt776Qsat.json https://cdn.lottielab.com/l/9PKdou46EzRyq6.json https://cdn.lottielab.com/l/EJTUZxHNsMaiRr.json https://zappa-p4m1259p0-static.s3.amazonaws.com https://api.stripe.com https://api-dev.pogodonate.com https://api.pogodonate.com https://app-dev.pogodonate.com https://app.pogodonate.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://obseu.seroundprince.com https://us.creativecdn.com https://dermstore.attn.tv https://ilarh.dermstore.com https://events.attentivemobile.com wss://*.ringcentral.com https://*.dynamicyield.com/ https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://privacyportal-eu.onetrust.com https://geolocation.onetrust.com https://cdn.cookielaw.org wss://*.liveperson.net https://*.liveperson.net https://*.lpsnmedia.net https://the.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com https://ct.pinterest.com https://api.bam-x.com https://www.emjcd.com https://www.mczbf.com https://www.sjwoe.com https://*.attn.tv https://events.attentivemobile.com https://events.release.narrativ.com https://tr.snapchat.com https://*.qubit.com https://*.qubitproducts.com https://horizon-api.www.dermstore.com https://*.contentsquare.net https://*.criteo.com https://analytics.tiktok.com https://cdn.cookielaw.org https://*.prod.mplat-ppcprotect.com https://*.lunio.ai https://*.abtasty.com data: https://storyboard.storystream.ai https://content.storystream.ai https://*.powerreviews.com https://sgtm.dermstore.com https://w0a7cq3k2e.execute-api.us-west-1.amazonaws.com https://vhw8mjja9e.execute-api.us-west-1.amazonaws.com https://sd7sf8u3fj.execute-api.us-west-1.amazonaws.com https://*.gethumankind.com https://cognito-identity.us-west-1.amazonaws.com https://*.criteo.net https://*.ringcentral.com https://ams.creativecdn.com https://www.googletagmanager.com https://unpkg.com/@provenance/ https://api.provenance.org https://www.provenance.org https://api.segment.io https://appsignal-endpoint.net https://*.bazaarvoice.com https://mpsnare.iesnare.com https://*.listrakbi.com https://*.listrak.com https://*.renude.co https://*.wepowerconnections.com; default-src 'self' https://*.lpsnmedia.net https://*.bazaarvoice.com; font-src 'self' https://app-dev.pogodonate.com https://app.pogodonate.com data: https://*.dynamicyield.com/ https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com blob: data: https://*.abtasty.com https://*.gstatic.com https://*.googleapis.com https://*.ringcentral.com https://*.bazaarvoice.com https://cdn.listrakbi.com https://*.renude.co; form-action 'self' https://www.facebook.com https://checkout.dermstore.com https://connect.facebook.net https://tr.snapchat.com; frame-ancestors 'self'; img-src 'self' https://cdn.lottielab.com/l/CZJhVVt776Qsat.json https://cdn.lottielab.com/l/9PKdou46EzRyq6.json https://cdn.lottielab.com/l/EJTUZxHNsMaiRr.json https://zappa-p4m1259p0-static.s3.amazonaws.com https://pogodonate.s3.eu-west-2.amazonaws.com https://app-dev.pogodonate.com https://app.pogodonate.com data: https://*.dynamicyield.com/ https://events.attentivemobile.com https://dermstore-us.attn.tv https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https://www.googletagmanager.com https://unpkg.com/@provenance/ https://res.cloudinary.com https://www.provenance.org https://*.bazaarvoice.com https://*.renude.co https: blob: https://*.awin1.com https://*.zenaps.com; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://*.bazaarvoice.com https://mpsnare.iesnare.com blob: https://media.gethumankind.com; object-src 'self' https://*.thcdn.com https://www.youtube.com https://*.bazaarvoice.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' https://*.js.stripe.com https://js.stripe.com 'unsafe-eval' 'unsafe-inline' data: https://cdn.attn.tv https://ilarh.dermstore.com https://apps.rokt.com https://euob.seroundprince.com https://obseu.seroundprince.com https://*.dynamicyield.com/ https://us.creativecdn.com https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://*.lpsnmedia.net https://*.doubleclick.net https://static.cdn-apple.com https://*.liveperson.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://cdn.parcellab.com https://the.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.googleapis.com https://www.recaptcha.net https://connect.facebook.net https://*.trustpilot.com https://www.googleadservices.com https://*.translate.naver.net https://*.doubleclick.net https://*.google.com https://*.google-analytics.com https://fp.zenaps.com https://www.gstatic.com https://bat.bing.com https://www.googletagmanager.com https://www.youtube.com https://s.ytimg.com https://www.dwin1.com https://sc-static.net https://s.pinimg.com https://static.narrativ.com https://cdn.attn.tv https://ln-rules.rewardstyle.com https://collector-8550.tvsquared.com https://static.goqubit.com https://*.qubit.com https://*.contentsquare.net https://app.contentsquare.com https://www.dwin1.com https://*.awin1.com https://*.zenaps.com https://the.sciencebehindecommerce.com https://static.criteo.net https://*.criteo.com https://analytics.tiktok.com https://*.ibytedtos.com https://cdn.cookielaw.org blob: https://*.abtasty.com https://app-dev.pogodonate.com https://app.pogodonate.com https://tr.snapchat.com https://*.powerreviews.com https://mpsnare.iesnare.com https://sgtm.dermstore.com https://*.gethumankind.com https://prod-ui-entry-widget-sta-createproduientrywidgetb-mi53q2gqfpif.s3.us-west-1.amazonaws.com https://prod-ui-customer-survey-createproduicustomersurv-1nj0gmnhljhot.s3.us-west-1.amazonaws.com https://*.ringcentral.com https://tags.creativecdn.com https://www.googletagmanager.com https://unpkg.com/@provenance/ https://consent.cookiebot.com https://www.provenance.org https://*.bazaarvoice.com https://*.listrakbi.com https://*.listrak.com https://*.renude.co https://lantern.roeyecdn.com; style-src 'self' https://*.js.stripe.com https://app-dev.pogodonate.com https://app.pogodonate.com 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://*.lpsnmedia.net https://*.liveperson.net https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com https://*.abtasty.com https://*.gstatic.com https://*.powerreviews.com https://assets.gethumankind.com https://prod-ui-entry-widget-sta-createproduientrywidgetb-mi53q2gqfpif.s3.us-west-1.amazonaws.com https://prod-ui-customer-survey-createproduicustomersurv-1nj0gmnhljhot.s3.us-west-1.amazonaws.com https://*.ringcentral.com https://*.bazaarvoice.com https://cdn.listrakbi.com https://*.renude.co; upgrade-insecure-requests ; report-to csp-endpoint 5 frame-ancestors 'self' https://betterhearing.lightning.force.com https://betterhearing--staging.sandbox.lightning.force.com; 5 frame-ancestors 'self' *.youtube.com *.vimeo.com; 5 default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: https: blob: filesystem: file:; frame-ancestors 'self' 5 frame-ancestors https://sc10cm https://imh-cm.dev.local https://rg-sitecore-website-qa-330340-single.azurewebsites.net https://web-ih-sc-tst-cd-wus2.azurewebsites.net https://web-ih-sc-prd-cm-wus2.azurewebsites.net https://intermountain.dev.local https://intermountainhealth.formstack.com 5 connect-src 'self' ws: *.cookiebot.com *.iomart.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googleanalytics.com stats.g.doubleclick.net content.hotjar.io *.bing.com bat.bing.net munchkin.marketo.net *.vimeo.com *.vimeocdn.com *.marker.io *.umbraco.com *.google.com snap.licdn.com px.ads.linkedin.com 106-jev-611.mktoresp.com s3.eu-west-1.amazonaws.com/marker.sessions.prod/ *.hotjar.com https://fast.wistia.com https://*.wistia.com https://*.wistia.net *.wistia.net; default-src 'self' *.google-analytics.com *.googletagmanager.com; font-src 'self' *.cookiebot.com *.iomart.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googleanalytics.com *.bing.com munchkin.marketo.net *.vimeo.com *.vimeocdn.com *.marker.io *.umbraco.com *.google.com snap.licdn.com px.ads.linkedin.com *.wistia.net; form-action 'self' *.cookiebot.com *.google.com; frame-ancestors 'self'; frame-src 'self' *.cookiebot.com *.iomart.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googleanalytics.com *.bing.com munchkin.marketo.net *.vimeo.com *.vimeocdn.com *.marker.io *.umbraco.com *.google.com snap.licdn.com px.ads.linkedin.com *.youtube.com https://*.wistia.com *.wistia.net; img-src 'self' data: *.cookiebot.com *.iomart.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googleanalytics.com static.hotjar.com px4.ads.linkedin.com bat.bing.net *.bing.com munchkin.marketo.net *.vimeo.com *.vimeocdn.com *.marker.io *.umbraco.com *.google.com snap.licdn.com px.ads.linkedin.com https://fast.wistia.com https://*.wistia.com https://*.wistia.net data: *.wistia.net; media-src 'self' *.cookiebot.com *.iomart.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googleanalytics.com *.bing.com munchkin.marketo.net *.vimeo.com *.vimeocdn.com *.marker.io *.umbraco.com *.google.com snap.licdn.com px.ads.linkedin.com *.wistia.com https://*.wistia.com https://*.wistia.net blob: *.wistia.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.iomart.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googleanalytics.com static.hotjar.com script.hotjar.com *.bing.com munchkin.marketo.net *.vimeo.com *.vimeocdn.com *.marker.io *.umbraco.com unpkg.com *.google.com snap.licdn.com *.pardot.com https://fast.wistia.com *.sentry-cdn.com *.wistia.net; style-src 'self' 'unsafe-inline' *.cookiebot.com *.iomart.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googleanalytics.com *.bing.com munchkin.marketo.net *.vimeo.com *.marker.io *.umbraco.com unpkg.com *.google.com snap.licdn.com px.ads.linkedin.com; worker-src 'self' *.cookiebot.com *.google.com; 5 default-src * data: blob: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; 5 default-src https: data: wss: 'unsafe-inline' 'unsafe-eval' 5 object-src 'none'; form-action 'self'; frame-ancestors 'none' 5 img-src 'self' data: blob: pancake.vn pancake.biz pages.fm pancake.id pancake.in pancake.ph fbcdn.net fbsbx.com facebook.com cdninstagram.com zadn.vn zdn.vn shopee.vn shopee.sg shopee.co.id shopee.co.th shopee.tw shopee.ph shopeemobile.com unpkg.com line-scdn.net openstreetmap.org shptlocal.shpt.com.vn his.benhvienthammyjtangel.com hisjt.shpt.com.vn ibyteimg.com google.com googleapis.com chat-im.tokopedia.com lalamove.com tiktokcdn.com *.pancake.vn *.pancake.biz *.pages.fm *.pancake.id *.pancake.in *.pancake.ph *.fbcdn.net *.fbsbx.com *.facebook.com *.cdninstagram.com *.zadn.vn *.zdn.vn *.shopee.vn *.shopee.sg *.shopee.co.id *.shopee.co.th *.shopee.tw *.shopee.ph *.shopeemobile.com *.unpkg.com *.line-scdn.net *.openstreetmap.org *.shptlocal.shpt.com.vn *.his.benhvienthammyjtangel.com *.hisjt.shpt.com.vn *.ibyteimg.com *.google.com *.googleapis.com *.chat-im.tokopedia.com *.lalamove.com *.tiktokcdn.com; frame-ancestors pancake.vn pancake.biz pages.fm pancake.id pancake.in pancake.ph *.pancake.vn *.pancake.biz *.pages.fm *.pancake.id *.pancake.in *.pancake.ph; 5 default-src 'self'; img-src 'self' https://ak-d.tripcdn.com/images/05E1412000cmevvp5D2FE.png; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://use.fontawesome.com; require-trusted-types-for 'script'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com; font-src https://fonts.gstatic.com https://use.fontawesome.com; frame-ancestors 'none'; 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; 5 default-src 'self' https://*.magenta.at; upgrade-insecure-requests; report-to csp-endpoint; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.magenta.at https://*.t-mobile.at https://*.magentabusiness.at https://*.s-budget-mobile.at https://*.esp.ownsolutions.net https://magenta-at.cleverq.de https://*.youtube.com https://*.youtube-nocookie.com https://eu-dg.knowmax.ai https://*.google.com https://*.google.de https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.tiktok.com https://*.licdn.com https://*.sc-static.net https://*.clarity.ms https://*.crwdcntrl.net https://*.cookielaw.org https://*.cookiebot.com https://*.googleadservices.com https://*.doubleclick.net https://*.medallia.eu https://*.krxd.net https://*.snapchat.com https://*.usercentrics.eu https://*.facebook.com https://*.facebook.net https://*.readpeak.com https://*.evergage.com https://*.bing.com https://*.teads.tv https://*.adnxs.com https://*.fusedeck.net https://*.pinimg.com https://*.sprinklr.com https://*.hotjar.com https://*.googlesyndication.com https://*.evgnet.com https://siteimproveanalytics.com https://sc-static.net https://form.virtualq.tech https://magenta.jobbase.io https://cdn.jsdelivr.net https://magenta.onlyfy.jobs https://*.ablyft.com; img-src 'self' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://*.magentabusiness.at blob: data: https://*.google-analytics.com https://*.tiktok.com https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://www.google.de https://*.google.de https://www.google.com https://*.google.at https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.doubleclick.net https://*.licdn.com https://*.clarity.ms https://*.siteimproveanalytics.io https://*.snapchat.com https://*.facebook.com https://*.facebook.net https://*.readpeak.com https://*.senderinfo.de https://*.teads.tv https://*.adnxs.com https://*.fusedeck.net https://*.youtube.com https://*.youtube-nocookie.com https://*.medallia.eu https://*.linkedin.com https://*.usercentrics.eu https://*.bing.com https://*.s3.eu-central-1.amazonaws.com https://magenta.jobbase.io https://magenta.onlyfy.jobs https://*.ablyft.com; connect-src 'self' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://*.magentabusiness.at blob: https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://*.tiktokw.us https://google.com https://*.googletagmanager.com https://*.google.com https://*.googleapis.com https://*.doubleclick.net https://*.tiktok.com https://*.bing.com https://*.licdn.com https://*.clarity.ms https://*.crwdcntrl.net https://*.cookielaw.org https://*.cookiebot.com https://*.snapchat.com https://*.usercentrics.eu https://*.facebook.com https://*.facebook.net https://*.readpeak.com https://*.teads.tv https://*.hotjar.io wss://*.hotjar.com https://*.hotjar.com https://*.adnxs.com wss://*.fusedeck.net https://*.fusedeck.net https://*.pinterest.com wss://*.sprinklr.com https://*.sprinklr.com https://*.linkedin.com https://*.medallia.eu https://tmobileaustria.germany-2.evergage.com https://*.senderinfo.de https://*.usercentrics.eu https://*.bing.com https://form.virtualq.tech https://magenta.jobbase.io https://magenta.onlyfy.jobs wss://form.virtualq.tech https://*.ablyft.com; form-action 'self' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://*.magentabusiness.at https://*.facebook.com https://*.facebook.net https://form.virtualq.tech; media-src 'self' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://*.magentabusiness.at blob: data: https://*.sprinklr.com https://*.senderinfo.de; frame-src 'self' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://*.magentabusiness.at https://*.googletagmanager.com https://*.google.com https://google.com https://*.googleapis.com https://*.doubleclick.net https://*.clarity.ms https://*.usercentrics.eu https://eu-dg.knowmax.ai https://*.licdn.com https://*.sprinklr.com https://*.bing.com https://*.readpeak.com https://*.medallia.eu https://*.snapchat.com https://*.usercentrics.eu https://*.youtube.com https://*.youtube-nocookie.com https://magenta-shopfinder.pgsdemo.com https://*.adnxs.com https://magenta-at.cleverq.de https://app.wigeogis.com https://form.virtualq.tech https://magenta.onlyfy.jobs https://iot-map-interactive.typix.de https://iot-map2-interactive.typix.de https://*.ablyft.com; worker-src 'self' blob: https://*.magenta.at; frame-ancestors 'self' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://*.magentabusiness.at; object-src 'none'; style-src 'self' 'unsafe-inline' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://fonts.googleapis.com https://form.virtualq.tech; font-src 'self' https://*.magenta.at https://*.t-mobile.at https://*.s-budget-mobile.at https://fonts.googleapis.com https://fonts.gstatic.com data: 5 base-uri 'self'; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.magnolia-platform.com dashboard.trustprofile.com *.unzer.com *.mouseflow.com *.inpost.pl *.unzer.com *.etrusted.com *.campaign.playable.com *.games.playable.com; form-action *.salesforce.com; frame-ancestors 'self' *.magnolia-platform.com *.kik.de *.kik.at *.kik.pl *.kik.nl *.kik.cz *.kik.it *.kik.es *.kik-textilien.sk *.kik.hu *.kik.sl *.kik.hr *.kik.ro *.kik-shop.bg *.kik.pt view.publitas.com scripts.publitas.com *.etracker.com *.etracker.de *.campaign.playable.com *.games.playable.com; img-src 'self' data: *.usercentrics.eu *.luigisbox.tech *.luigisbox.com *.kik.de *.kik.at *.kik.pl *.kik.nl *.kik.cz *.kik.it *.kik.es *.kik-textilien.sk *.kik.hu *.kik.sl *.kik.hr *.kik.ro *.kik-shop.bg *.kik.pt *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.magnolia-platform.com *.wt-eu02.net bat.bing.com *.google.com *.google.de *.google.at *.google.pl google.com google.de google.at google.pl static.phrase.com *.trustedshops.com *.gstatic.com *.myracloud.com dashboard.trustprofile.com commission.europa.eu tile.openstreetmap.org *.tile.openstreetmap.org unpkg.com *.facebook.net *.facebook.com *.heidelpay.com *.unzer.com *.visualwebsiteoptimizer.com chart.googleapis.com app.vwo.com *.online-metrix.net *.cdn-apple.com *.mouseflow.com *.inpost.pl *.etrusted.com *.etracker.com *.etracker.de *.campaign.playable.com *.games.playable.com *.app.playable.com *.tiktok.com; object-src 'self' blob:; style-src 'self' *.luigisbox.tech *.luigisbox.com 'unsafe-inline' *.magnolia-platform.com d2bgdldl6xit7z.cloudfront.net *.googletagmanager.com tagmanager.google.com fonts.googleapis.com trck.linkster.co unpkg.com *.visualwebsiteoptimizer.com app.vwo.com *.unzer.com sandbox-easy-geowidget-sdk.easypack24.net *.inpost.pl *.etrusted.com view.publitas.com scripts.publitas.com *.campaign.playable.com *.games.playable.com *.app.playable.com; script-src 'unsafe-inline' 'unsafe-eval' *.usercentrics.eu *.luigisbox.tech *.luigisbox.com *.google-analytics.com *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com paypalobjects.com *.trustedshops.com blob: *.googleadservices.com googleads.g.doubleclick.net google.com google.de google.at google.pl *.google.com *.google.de *.google.at *.google.pl 'self' *.visualwebsiteoptimizer.com app.vwo.com app.varify.io editor.varify.io view.publitas.com scripts.publitas.com *.unzer.com *.mouseflow.com *.inpost.pl *.etrusted.com *.etracker.com *.etracker.de *.cdn-apple.com *.campaign.playable.com *.games.playable.com *.app.playable.com *.leadfamly.com unpkg.com; upgrade-insecure-requests; default-src 'self' blob:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.usercentrics.eu *.luigisbox.tech *.luigisbox.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com paypalobjects.com *.magnolia-platform.com bat.bing.com googleads.g.doubleclick.net *.trustedshops.com blob: d2bgdldl6xit7z.cloudfront.net *.smarketer.de trck.linkster.co google.com google.de google.at google.pl *.google.com *.google.de *.google.at *.google.pl dashboard.trustprofile.com *.kik.de *.kik.at *.kik.pl *.kik.nl *.kik.cz *.kik.it *.kik.es *.kik-textilien.sk *.kik.hu *.kik.sl *.kik.hr *.kik.ro *.kik-shop.bg *.kik.pt *.visualwebsiteoptimizer.com app.vwo.com app.varify.io editor.varify.io view.publitas.com scripts.publitas.com *.unzer.com *.online-metrix.net *.cdn-apple.com *.mouseflow.com sandbox-easy-geowidget-sdk.easypack24.net *.inpost.pl *.etrusted.com *.etracker.com *.etracker.de *.campaign.playable.com *.games.playable.com *.app.playable.com *.leadfamly.com *.facebook.net *.tiktok.com; connect-src 'self' *.luigisbox.tech *.luigisbox.com *.usercentrics.eu *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net api.phrase.com d2bgdldl6xit7z.cloudfront.net blob: *.magnolia-platform.com *.kik.de *.kik.at *.kik.pl *.kik.nl *.kik.cz *.kik.it *.kik.es *.kik-textilien.sk *.kik.hu *.kik.sl *.kik.hr *.kik.ro *.kik-shop.bg *.kik.pt *.trustedshops.com *.trustbadge.com *.analytics.google.com bat.bing.com trck.linkster.co *.smarketer.de google.com google.de google.at google.pl *.google.com *.google.de *.google.at *.google.pl *.visualwebsiteoptimizer.com app.vwo.com app.varify.io editor.varify.io view.publitas.com scripts.publitas.com *.heidelpay.com *.unzer.com *.online-metrix.net *.mouseflow.com *.inpost.pl *.etrusted.com *.etracker.com *.etracker.de *.campaign.playable.com *.games.playable.com *.app.playable.com *.tiktok.com; child-src *.trustedshops.com *.mouseflow.com *.campaign.playable.com *.games.playable.com; frame-src 'self' *.usercentrics.eu dashboard.trustprofile.com *.doubleclick.net parcelshop.dhl.pl *.googletagmanager.com *.kik.de *.kik.at *.kik.pl *.kik.nl *.kik.cz *.kik.it *.kik.es *.kik-textilien.sk *.kik.hu *.kik.sl *.kik.hr *.kik.ro *.kik-shop.bg *.kik.pt *.visualwebsiteoptimizer.com app.vwo.com view.publitas.com scripts.publitas.com *.heidelpay.com *.unzer.com *.online-metrix.net *.cdn-apple.com *.mouseflow.com sandbox-easy-geowidget.easypack24.net *.inpost.pl *.campaign.playable.com *.games.playable.com *.app.playable.com google.com google.de google.at google.pl *.google.com *.google.de *.google.at *.google.pl; manifest-src 'self'; media-src 'self' *.magnolia-platform.com; worker-src 'self' blob: *.online-metrix.net; 5 upgrade-insecure-requests; script-src * 'unsafe-inline' 'unsafe-eval' blob:; object-src *; frame-ancestors 'self' www.vliz.be vliz.be form.vliz.be www.omes-monitoring.be omes-monitoring.be; 5 frame-ancestors *.df-automotive.de *.felgenshop.de 5 frame-ancestors 'self' https://*.osp.tech 5 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline' 'unsafe-eval' 5 upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; 5 default-src *; style-src 'self' 'unsafe-inline' 'unsafe-eval' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-src 'self' *; object-src 'self' ; img-src 'self' data: https:; font-src 'self' data: * https://fonts.gstatic.com; connect-src 'self' *; media-src * data: https:; base-uri 'self'; 5 default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'; 5 script-src * 'unsafe-inline' 'unsafe-eval'; 5 default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 5 frame-ancestors 'self' https://insights.hotjar.com https://*.hotjar.com; 5 base-uri 'self'; default-src https://www.dnshome.de; font-src 'self' data: https:; form-action 'self'; frame-ancestors 'none'; frame-src 'self'; img-src 'self' data: https://www.paypalobjects.com; script-src 'self' 'unsafe-inline'; style-src 'self'; 5 script-src 'self' 'unsafe-inline' 'unsafe-eval' * https://checkout.stripe.com https://*.js.stripe.com https://js.stripe.com https://maps.googleapis.com; frame-src 'self' * https://apple.com https://pay.google.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com; worker-src 'self' *; connect-src 'self' * https://checkout.stripe.com https://api.stripe.com https://maps.googleapis.com; img-src 'self' data: * 5 connect-src 'self' wss://*.finance.yahoo.com/ https://*.cdn.yimg.com https://*.oath.com https://*.yahoo.com https://*.yahoo.net https://api.alyavista.com https://api.privacy-center.org https://bam.nr-data.net/ https://dpm.demdex.net/ https://guce.yahoofinance.com https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://s.yimg.com https://sdk.privacy-center.org/f5623e34-377a-419c-8bb7-3928cebffbc9/ https://smetrics.att.com/ https://files.quartr.com/streams/ https://b.trueanthem.com/ https://*.emb-api.com/ https://*.googlesyndication.com https://*.adtrafficquality.google https://*.3lift.com https://*.adsrvr.org https://*.casalemedia.com https://*.clean.gg https://*.criteo.com https://*.indexww.com/ https://*.kueezrtb.com https://*.liadm.com https://*.lijit.com/ https://*.media.net https://*.openx.net https://*.pubmatic.com https://*.rubiconproject.com https://*.seedtag.com https://*.sharethrough.com https://*.sonobi.com https://*.taboola.com https://*.yieldmo.com https://csi.gstatic.com https://pbs-yahoo-apac.ay.delivery https://pbs-yahoo-eu.ay.delivery https://pbs-yahoo-us.ay.delivery https://static.criteo.net https://*.dns-finder.com https://api.rlcdn.com https://*.adnxs.com https://api.assertcom.de https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.google.com https://*.google.de https://*.google.com.au https://*.google.ca https://*.google.co.uk https://*.google.co.nz https://*.google.com.sg https://*.google.es https://*.google.fr https://*.google.it https://*.google.com.br https://*.google.com.hk https://*.google.co.in https://k.p-n.io/allow https://k.p-n.io/event-stream; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://s.yimg.com https://cdn.taboola.com; frame-ancestors 'self' https://www.aol.com https://www.aol.co.uk https://www.aol.de https://www.aol.ca https://*.ouryahoo.com https://www.yahoo.com https://news.yahoo.com https://cm-ui.staging.yahoo.com https://cm-ui.yahoo.com; frame-src 'self' https://*.abcnews.go.com https://*.advertising.com https://*.bbc.co.uk https://*.chartbeat.com https://*.clicktivatedvideoplayer.com https://*.deezer.com https://*.delivery.vidible.tv https://*.dailymotion.com/ https://*.etonline.com https://*.facebook.com https://*.google.com https://*.hulu.com https://*.instagram.com https://*.jac.yahoosandbox.com https://*.livestream.com https://*.mtvnservices.com https://*.myfinance.com https://*.nbc.com https://*.nytimes.com https://*.oath.com https://*.reuters.com https://*.scribd.com https://*.smartasset.com https://*.soundcloud.com https://*.spotify.com https://*.ted.com https://*.theguardian.com https://*.tumblr.com https://*.turner.com https://*.usatoday.com https://*.vimeo.com https://*.washingtonpost.com https://*.wsj.com https://*.yahoo.com https://*.yahoo.net https://abcnews.go.com https://att.demdex.net/ https://bbc.co.uk https://cdn.yahoofinance.com/ https://chartbeat.com https://compass.pressekompass.net https://datawrapper.dwcdn.net https://delivery.vidible.tv https://embed.acast.com https://embed.music.apple.com https://embed.podcasts.apple.com https://embedder.wirewax.com https://flo.uri.sh/ https://flourish.studio https://guce.yahoofinance.com https://interactives.ap.org https://livestream.com https://platform.twitter.com https://s.yimg.com https://service.force.com/ https://smartasset.com https://tsdtocl.com/ https://view.ceros.com https://vimeo.com https://widget-yahoo.ofx.com https://www.bankrate.com https://www.credible.com https://www.surveymonkey.com https://www.youtube.com https://yahoo.real-estate.hk https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagservices.com https://*.adtrafficquality.google https://www.googletagmanager.com https://*.1rx.io https://*.3lift.com https://*.a-mo.net https://*.adnxs.com https://*.adsrvr.org https://*.amazon-adsystem.com https://*.casalemedia.com https://*.cootlogix.com https://*.creativecdn.com https://*.criteo.com https://*.doubleclick.net https://*.emxdgt.com https://*.everesttech.net https://*.gumgum.com https://*.indexww.com https://*.kargo.com https://*.kueezrtb.com https://*.lijit.com https://*.media.net https://*.mediago.io https://*.openx.net https://*.pubmatic.com https://*.rfihub.com https://*.rubiconproject.com https://*.seedtag.com https://*.sharethrough.com https://*.sonobi.com https://*.taboola.com https://*.trustedstack.com https://*.yellowblue.io https://*.yieldmo.com https://jadserve.postrelease.com/ https://yahoo-match.dotomi.com https://ad-delivery.net https://*.dns-finder.com; img-src 'self' data: blob: about: https://*.amazon-adsystem.com https://*.chartbeat.com https://*.chartbeat.net https://*.cloudfront.net/pixel.gif https://*.dotomi.com https://*.wc.yahoodns.net https://*.yahoo.com https://*.yahoo.net https://*.yimg.com https://media.zenfs.com https://o.aolcdn.com/images/dims https://pbs.twimg.com https://pbs-yahoo-us.ay.delivery https://pbs-yahoo-eu.ay.delivery https://pbs-yahoo-apac.ay.delivery https://platform.twitter.com https://public.flourish.studio/resources/ https://res.cloudinary.com/yfc-nonprod/ https://res.cloudinary.com/yfc-production/ https://s2.coinmarketcap.com/static/img/coins/ https://*.cryptoslam.io https://sb.scorecardresearch.com https://smetrics.att.com/b/ss/attnetprod/ https://syndication.twitter.com https://vop-yahoo.akamaized.net/pixel.gif https://www.facebook.com https://cdn.yodlee.com https://news-assets.stockstory.org https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagservices.com https://*.1rx.io https://*.3lift.com https://*.adnxs.com https://*.adsafeprotected.com/ https://*.adsrvr.org https://*.adtrafficquality.google https://*.brimg.net https://*.casalemedia.com https://*.cootlogix.com https://*.creativecdn.com https://*.criteo.com https://*.disqus.com https://*.emxdgt.com https://*.everesttech.net https://*.gumgum.com https://*.indexww.com/ https://*.kargo.com https://*.kueezrtb.com https://*.liadm.com https://*.lijit.com https://*.lijit.com/ https://*.media.net https://*.mediago.io https://*.openx.net https://*.pubmatic.com https://*.rfihub.com https://*.rubiconproject.com https://*.sharethrough.com https://*.sonobi.com https://*.taboola.com https://*.yellowblue.io https://*.yieldmo.com https://*.bidswitch.net https://api-taboola.com https://creativecdn.com https://prebid.a-mo.net https://ad-delivery.net https://*.dns-finder.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.google.com https://*.google.de https://*.google.com.au https://*.google.ca https://*.google.co.uk https://*.google.co.nz https://*.google.com.sg https://*.google.es https://*.google.fr https://*.google.it https://*.google.com.br https://*.google.com.hk https://*.google.co.in; manifest-src 'self' https://s.yimg.com; media-src 'self' blob: https://s.yimg.com https://res.cloudinary.com/yfc-nonprod/ https://res.cloudinary.com/yfc-production/ https://files.quartr.com/streams/ https://vidstat.taboola.com; object-src 'none'; report-to csp-endpoint; report-uri https://csp.yahoo.com/beacon/csp?src=yahoofinance; sandbox allow-downloads allow-forms allow-modals allow-popups-to-escape-sandbox allow-popups allow-presentation allow-same-origin allow-scripts allow-top-navigation-by-user-activation; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://launcher.spot.im https://*.oath.com https://*.salesforceliveagent.com/ https://*.yahoo.com https://*.yahoo.net https://cdn.jsdelivr.net/npm/ https://ec.yimg.com/didomi/ https://jac.yahoosandbox.com/2.0.0/jac.js https://oathmembershipsupport.my.salesforce-sites.com/ https://oathmembershipsupport.my.salesforce.com/ https://openweb.jac.yahoosandbox.com/1.5.0/jac.js https://platform.twitter.com https://s.aolcdn.com/membership/omp-static/omp-widgets/ https://s.yimg.com https://service.force.com/embeddedservice/5.0/ https://static.lightning.force.com/ https://static2.chartbeat.com https://*.adtrafficquality.google https://*.googlesyndication.com https://console.googletagservices.com/pubconsole/loader.js https://adservice.google.com/adsid/integrator.js https://cdn.ampproject.org/rtv/ https://www.googletagservices.com/activeview/js https://*.doubleclick.net https://*.taboola.com https://ads.pubmatic.com https://gum.criteo.com https://static.criteo.net https://wnsrvbjmeprtfrnfx.ay.delivery https://*.googletagmanager.com https://cdn.p-n.io/pushly-sdk.min.js; style-src 'self' 'unsafe-inline' https://*.yahoo.com https://cdn.taboola.com https://oathmembershipsupport.my.salesforce-sites.com/ https://platform.twitter.com https://s.yimg.com https://service.force.com/; worker-src 'self' blob: https://cdn.p-n.io/sdk/web/ 5 connect-src 'self' https://*.acsbapp.com/ https://*.clarity.ms https://*.clarity.ms/ https://*.equalweb.com https://*.equalweb.com/ https://*.optimizely.com https://*.realtime.webflow.com https://*.snapchat.com/p https://*.website-files.com https://adservice.google.com https://analytics.google.com https://analytics.liftoff.io/pixel/ https://api.griffin-ww-prd.lightricks.com https://api.typeform.com/ https://api.typeform.com/single-embed/01HVKF45154PQMHD8GZ9PZA2ZW https://api.typeform.com/single-embed/01HVKFC1SWRFSXDZE422TF61ZC https://api.typeform.com/single-embed/01HYZ4MM14CHAC8B4S0925JJZE https://aplo-evnt.com/api/v1/intent_pixel/ https://*.company-target.com https://*.demandbase.com https://assets-global.website-files.com https://bat.bing.com https://bg-removal.api.photoleapapp.com/api/v1/generate https://c.bing.com https://capi.facetuneapp.com https://capi.ltx.studio https://capi.ltx.video https://capi.photoleapapp.com https://capi.videoleapapp.com https://cdn-assets-prod.s3.amazonaws.com/js/preview2/25431500446.js/ https://cdn.acsbapp.com/cache/app/en.build.json https://cdn.acsbapp.com/cache/app/website-staging.videoleapapp.com/config.json https://cdn.cookielaw.org https://cdn.equalweb.com/assets/ https://cdn.equalweb.com/style/ https://cdn.jsdelivr.net/npm/@finsweet/attributes-selectcustom@1/selectcustom.js/ https://cdn.jsdelivr.net/npm/@mediapipe/tasks-vision@latest/wasm/vision_wasm_internal.wasm https://cdn.plyr.io/3.7.8/plyr.js https://cdn.plyr.io/3.7.8/plyr.svg https://cdn.prod.website-files.com https://cdn.segment.com https://cloudflareinsights.com https://editor-api.webflow.com https://errors.client.optimizely.com/log https://face-shape.facetuneapp.com https://geolocation.onetrust.com https://googleads.g.doubleclick.net/pagead/ https://gtm.facetuneapp.com https://gtm.ltx.studio https://gtm.ltx.video https://gtm.ltx.io https://gtm.photoleapapp.com https://gtm.videoleapapp.com https://gtm.popularpays.com https://lead-config.ltx.io https://lead-config.ltx.studio https://lightricks.pxf.io https://lightricks.zendesk.com/embeddable/ https://logx.optimizely.com https://ltx.studio/cdn-cgi/ https://ltx.video/cdn-cgi/ https://modest.lightricks.com/apps/ https://pagead2.googlesyndication.com/pagead/ https://privacyportal-de.onetrust.com/request/v1/consentreceipts https://realtime.webflow.com https://rest.iad-05.braze.com/api/ https://sessions.bugsnag.com https://staging.facetuneapp.com/cdn-cgi/challenge-platform/h/b/cv/result/ https://stats.g.doubleclick.net https://storage.googleapis.com https://test-drive-20-1053047382554.us-central1.run.app/events/10b1623b4e72ebe68eb7ef4666d043962b02f8d89cec7b22053de538ceace3cc https://test.res.lightricks.com/ https://tr.snapchat.com/config/com/ https://tracking-api.g2.com/attribution_tracking/conversions/assign https://tracking-api.production.g2.com/ https://tti.photoleapapp.com/api/v1/generate https://tti.stg.photoleapapp.com/api/v1/generate https://uagw.lightricks.com https://uagw.stg.lightricks.com https://web-payment-gtm.wl.r.appspot.com https://web.facebook.com https://webflow-user-file-uploads-tmp-production.s3.amazonaws.com/ https://webflow.com/api/v1/form/ https://www.clarity.ms https://www.facebook.com https://www.facetuneapp.com/api/color-analysis-test/ https://www.facetuneapp.com/api/color-analysis/ https://www.facetuneapp.com/api/face-shape/ https://www.facetuneapp.com/cdn-cgi/ https://www.facetuneapp.com/pv https://www.google-analytics.com https://www.google.co.il/ https://www.google.com/ https://www.googletagmanager.com https://www.photoleapapp.com/cdn-cgi/ https://www.videoleapapp.com/cdn-cgi/ wss://capi.facetuneapp.com wss://capi.ltx.studio wss://capi.ltx.video wss://capi.ltx.io wss://capi.photoleapapp.com wss://capi.videoleapapp.com wss://realtime.webflow.com https://px.ads.linkedin.com https://conversionsapigateway.com https://www.googleadservices.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com/ https://cdn.jsdelivr.net/npm/@splidejs/splide@4.1.4/dist/js/splide.min.js.map https://unpkg.com/lenis@1.1.20/dist/lenis.min.js.map https://demo-1.conversionsapigateway.com/ https://mpc-prod-14-s6uit34pua-ue.a.run.app/ https://lightricks.chilipiper.com/ https://*.sentry.io/ https://mpc-prod-17-s6uit34pua-wl.a.run.app/ https://accounts.google.com/gsi/ https://api.fortress-ww-prd.lightricks.com https://mpc-prod-23-s6uit34pua-ue.a.run.app/events https://marketing-contests-stg.dp.lightricks.com/ https://marketing-contests.dp.lightricks.com/ https://marketing-contests-lora-stg.dp.lightricks.com/ https://marketing-contests-lora.dp.lightricks.com/ https://pagead2.googlesyndication.com https://www.tiktok.com https://social-media-users-data-api-production.lightricks.org https://ad.doubleclick.net https://mpc-prod-24-s6uit34pua-uw.a.run.app/events https://*.ecs.us-east-1.on.aws/events https://cdn.jsdelivr.net/sm/ https://bzr.openai.com; default-src 'self'; font-src 'self' data: https://*.website-files.com https://acsbapp.com/apps/app/dist/fonts/ https://assets.website-files.com/ https://cdn.prod.website-files.com https://d3e54v103j8qbb.cloudfront.net https://fonts.gstatic.com https://uploads-ssl.webflow.com https://use.fontawesome.com/releases/ https://use.typekit.net; form-action 'self' https://lightricks.pxf.io https://www.facebook.com/tr/; frame-ancestors https://console.ltx.video/ https://local.ltx.video/ https://console-dev.ltx.video/ https://app.ltx.studio/ https://local.ltx.studio/ https://app-dev.ltx.studio/; frame-src 'self' https://*.equalweb.com/ https://a24945110014.cdn-pci.optimizely.com https://a24945110014.cdn.optimizely.com https://accounts.google.com/ https://bid.g.doubleclick.net/ https://c.amazon-adsystem.com/aat/amzn.js https://cdn.embedly.com https://embedsocial.com https://form.typeform.com/ https://giphy.com https://google.com/ https://gtm.facetuneapp.com https://gtm.ltx.studio https://gtm.ltx.video https://gtm.ltx.io https://gtm.photoleapapp.com https://gtm.videoleapapp.com https://gtm.popularpays.com https://optimize.google.com https://platform.twitter.com/ https://player.vimeo.com https://s.amazon-adsystem.com/ https://td.doubleclick.net/ https://tpc.googlesyndication.com https://tr.snapchat.com/ https://twitter.com https://webflow.com/ https://www.facebook.com https://www.google.com/ https://www.instagram.com https://www.tiktok.com/ https://www.youtube.com https://lightricks.chilipiper.com/ https://cdn.prod.website-files.com/ https://accounts.google.com/gsi/ https://*.company-target.com; img-src 'self' * blob: data: https://cdn.optimizely.com https://lightricks.pxf.io https://logs-01.loggly.com https://optimize.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.ojrq.net; media-src 'self' https://*.website-files.com https://assets-global.website-files.com https://assets.website-files.com https://cdn.prod.website-files.com https://s3.amazonaws.com/webflow-prod-assets/ https://storage.googleapis.com https://uploads-ssl.webflow.com https://videos.facetuneapp.com https://videos.ltx.studio/ https://videos.ltx.video https://videos.ltx.io; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.clarity.ms https://*.equalweb.com/ https://*.optimizely.com https://*.website-files.com https://access.equalweb.com/ https://account.lightricks.com/wp-sdk/ https://acsbapp.com/apps/app/dist/js/app.js https://app-assets.website-files.com/js/jquery-3.5.1.min.dc5e7f18c8.js https://assets-global.website-files.com/ https://assets.apollo.io/micro/website-tracker/ https://assets.website-files.com https://bat.bing.com https://c.amazon-adsystem.com/aat/amzn.js https://c.bing.com https://cdn-assets-prod.s3.amazonaws.com https://cdn-public.liftoffintl.io https://cdn.cookielaw.org https://cdn.embedly.com https://cdn.equalweb.com/core/ https://cdn.finsweet.com/files/cmslibrary-v1.8.js https://cdn.jsdelivr.net/gh/studio-freight/lenis@1.0.23/bundled/lenis.min.js https://cdn.jsdelivr.net/npm/@finsweet/attributes@2/attributes.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-animation@1/animation.esm.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-autovideo@1/autovideo.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmscore@1/cmscore.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmsfilter@1/cmsfilter.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmsload@1/cmsload.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmsnest@1/cmsnest.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-richtext@1/richtext.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-selectcustom@1/selectcustom.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-toc@1/toc.js https://cdn.jsdelivr.net/npm/@mediapipe/tasks-vision@latest/wasm/vision_wasm_internal.js https://cdn.jsdelivr.net/npm/@splidejs/ https://cdn.jsdelivr.net/npm/gsap@3.12.5/dist/Flip.min.js https://cdn.jsdelivr.net/npm/gsap@3.12.7/dist/gsap.min.js https://cdn.jsdelivr.net/npm/gsap@3.12.7/dist/ScrollTrigger.min.js https://cdn.jsdelivr.net/npm/js-cookie@2/ https://cdn.jsdelivr.net/npm/uuid@latest/ https://cdn.jsdelivr.net/npm/three@0.184.0/build/three.module.min.js https://cdn.jsdelivr.net/npm/three@0.184.0/build/three.core.min.js https://cdn.jsdelivr.net/npm/vanilla-lazyload@16.1.0/ https://cdn.optimizely.com/js/ https://cdn.plyr.io/3.7.8/plyr.js https://cdn.prod.website-files.com https://cdn.prod.website-files.com/65bb6b901cb133d784d16166/js/webflow.1d27bb018.js https://cdn.prod.website-files.com/65bb6b901cb133d784d16166/js/webflow.7ee8f7d6c.js https://color-analysis.facetuneapp.com https://connect.facebook.net/ https://d3e54v103j8qbb.cloudfront.net/ https://embed.typeform.com/ https://embedsocial.com https://f4tjpw.csb.app/flip.js https://face-shape.facetuneapp.com https://fonts.googleapis.com https://google.com/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://gtm.facetuneapp.com https://gtm.ltx.studio https://gtm.ltx.video https://gtm.ltx.io https://gtm.photoleapapp.com https://gtm.videoleapapp.com https://gtm.popularpays.com https://js.appboycdn.com/web-sdk/ https://lib.facetuneapp.com https://ltx.studio https://lib.ltx.studio https://ltx.video https://lib.ltx.video https://ltx.io https://lib.ltx.io https://lib.photoleapapp.com https://lib.videoleapapp.com https://lib.popularpays.com https://local.lib.facetuneapp.com https://local.lib.ltx.studio https://local.lib.ltx.video https://local.lib.ltx.io https://local.lib.photoleapapp.com https://local.lib.videoleapapp.com https://lightricks.us4.list-manage.com/subscribe/post-json https://modest.facetuneapp.com/ https://onelinksmartscript.appsflyer.com https://optimize.google.com https://optimize.google.com/optimize/inject/inject.js https://optimizely.s3.amazonaws.com https://platform.twitter.com https://platform.twitter.com/js/tweet.5b94507822be1b77b58bef86fc7cd9f7.js https://platform.twitter.com/widgets.js https://player.vimeo.com https://sc-static.net/scevent.min.js https://sf16-website- https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/falcon/embed/embed_lib_v1.0.12.js https://static.ads-twitter.com/uwt.js https://static.cloudflareinsights.com https://static.zdassets.com/ https://*.demandbase.com https://tagmanager.google.com https://tr.snapchat.com/config/com/ https://tracking.g2crowd.com/attribution_tracking/conversions/ https://unpkg.com/split-type https://use.typekit.net https://utt.impactcdn.com https://web-payment-gtm.wl.r.appspot.com https://webflow-local-dev.ltx.studio https://webflow-local-dev.ltx.video https://webflow-local-dev.ltx.io https://wp-sdk.facetuneapp.com https://wp-sdk.ltx.studio https://wp-sdk.ltx.video https://wp-sdk.ltx.io https://wp-sdk.photoleapapp.com https://wp-sdk.videoleapapp.com https://www.clarity.ms https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googleanalytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.gstatic.com https://www.instagram.com https://www.tiktok.com/embed.js login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/falcon/embed/embed_v1.0.12.js https://ajax.googleapis.com https://snap.licdn.com https://www.redditstatic.com https://cdn.jsdelivr.net/npm/@splidejs/splide@4.1.4/dist/js/splide.min.js.map https://cdnjs.cloudflare.com/ajax/libs/gsap/3.10.4/gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.10.4/ScrollTrigger.min.js https://cdn.equalweb.com/core/5.2.0/accessibility.js https://cdn.jsdelivr.net/npm/@finsweet/attributes@2/attributes.js https://unpkg.com/lenis@1.1.20/dist/lenis.min.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-scrolldisable@1/scrolldisable.js https://cdn.jsdelivr.net/npm/@finsweet/attributes@2/dist https://haircut.facetuneapp.com https://lightricks.chilipiper.com/ https://cdn.jsdelivr.net/gh/videsigns/webflow-tools@latest/multi-step.js https://cdn.jsdelivr.net/gh/videsigns/webflow-tools@latest/countrycode.js https://cdn.jsdelivr.net/npm/tom-select@2.2.2/dist/js/tom-select.complete.min.js https://tools.refokus.com/cms-tabs/bundle.v1.0.0.js https://tools.refokus.com/cms-filter/bundle.v1.5.0.js https://tools.refokus.com/slider-generator/bundle.v1.0.0.js https://tools.refokus.com/rich-text-enhancer/bundle.v1.0.0.js https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js https://cdn.jsdelivr.net/npm/jquery-ui-slider@1.12.1/jquery-ui.min.js https://accounts.google.com/gsi/client https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmsslider@1/cmsslider.js https://cdn.jsdelivr.net/npm/lazy-load-video@latest/dist/custom-video.js https://cdn.jsdelivr.net/npm/lazy-load-video@1.0.0/dist/custom-video.js https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js https://cdn.jsdelivr.net/gh/dilshadkhaliq/cms-predictive-search@main/search.min.js https://cdn.jsdelivr.net/gh/dilshadkhaliq/cms-predictive-search@890861a22cc7f3a0187f623d6b2a141bfa86ea16/search.min.js https://w5xw6y.csb.app/creators-video.js https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js https://code.jquery.com/jquery-3.6.0.min.js https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.js https://cdnjs.cloudflare.com/ajax/libs/parsley.js/2.9.2/parsley.min.js https://ipinfo.io https://cdn.taboola.com/libtrc/ https://bzrcdn.openai.com https://unpkg.com/smooothy@0.0.35/dist/smooothy.min.js; style-src 'self' 'unsafe-inline' https://*.equalweb.com/ https://*.twimg.com https://*.website-files.com https://assets-global.website-files.com https://assets.website-files.com https://cdn.jsdelivr.net/ https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/ https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.min.css https://cdn.prod.website-files.com https://cdn.prod.website-files.com/65bb6b901cb133d784d16166/css/ltx- https://cdn.prod.website-files.com/65bb6b901cb133d784d16166/css/ltx-studio.webflow.baa5d1ac0.min.css https://d3e54v103j8qbb.cloudfront.net/fonts/inter/ https://embed.typeform.com/ https://embedsocial.com https://fonts.googleapis.com https://optimize.google.com https://platform.twitter.com https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/falcon/embed/embed_lib_v1.0.12.css https://use.fontawesome.com/ ow.baa5d1ac0.min.css studio.webflow.e5748a061.min.css https://www.googletagmanager.com https://unpkg.com/lenis@1.1.20/dist/lenis.css https://lib.facetuneapp.com https://lib.ltx.studio https://lib.ltx.video https://lib.ltx.io https://lib.photoleapapp.com https://lib.videoleapapp.com https://lib.popularpays.com https://accounts.google.com/gsi/style; upgrade-insecure-requests; worker-src https://cdn.jsdelivr.net; 5 frame-ancestors 'self' https://edit.skanska.com; 5 script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 5 frame-ancestors 'self' *.uhg.com *.optum.com *.uhc.com *.healthybenefitsplus.com *.adobeaemcloud.com *.pagescdn.com *.healthsafe-id.com uhgenterprise.qualtrics.com g360site.secure.force.com g360.my.salesforce-sites.com *.DoubleClick.net *.youtube.com player.simplecast.com *.trkn.us covid19.rallyhealth.com insight.adsrvr.org www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ www.recaptcha.net match.adsrvr.org https://unitedhealthcareserv.demdex.net; frame-src 'self' https://community.pregnancy.org https://optum.marketing.adobe.com *.uhg.com *.optum.com *.uhc.com *.healthybenefitsplus.com *.adobeaemcloud.com *.pagescdn.com *.healthsafe-id.com uhgenterprise.qualtrics.com g360site.secure.force.com g360.my.salesforce-sites.com *.DoubleClick.net *.youtube.com player.simplecast.com *.trkn.us covid19.rallyhealth.com insight.adsrvr.org www.recaptcha.net *.lpsnmedia.net *.liveperson.net https://va.idp.liveperson.net match.adsrvr.org https://unitedhealthcareserv.demdex.net; 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com *.gstatic.com *.hotjar.com *.doubleclick.net *.arabbank.com *.google.com *.facebook.net *.facebook.com *.googleapis.com www.arabbank.ae arabbank.ae arabbank.com.lb www.arabbank.com.lb arabbank.dz www.arabbank.dz www.arabbank.bh arabbank.bh www.arabbank.com arabbank.com arabbank.com.eg www.arabbank.com.eg www.arabbank.jo arabbank.com.jo arabbank.jo www.arabbank.com.jo www.arabbank.com.lb arabbank.com.lb arabbank.ma arabbank.ma www.arabbank.ps arabbank.ps www.arabbank.com.qa arabbank.com.qa *.google-analytics.com google-analytics.com www.googletagmanager.com www.youtube.com www.linkedin.com linkedin.com instagram.com twitter.com *.typeform.com geo-tracker.ads.memob.com 10.1.30.170 *.readspeaker.com data:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.doubleclick.net *.google.com 10.1.228.170 10.1.228.172 www.youtube-nocookie.com youtube-nocookie.com www.youtube.com platform.twitter.com *.arabbank.com embed.typeform.com bid.g.doubleclick.net geo-tracker.ads.memob.com *.readspeaker.com 10.1.30.170 10.1.30.170:15871 tools.eurolandir.com tools.euroland.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.readspeaker.com *.doubleclick.net *.google.com *.gstatic.com *.facebook.net *.facebook.com *.twitter.com *.googletagmanager.com *.google-analytics.com google-analytics.com *.googleadservices.com ajax.googleapis.com *.arabbank.com embed.typeform.com geo-tracker.ads.memob.com 10.1.30.170 *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat analytics.tiktok.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' wss://anaarabi.arabbank.com *.hotjar.com *.doubleclick.net *.google.com *.readspeaker.com www.google-analytics.com google-analytics.com *.googleapis.com *.gstatic.com *.arabbank.com embed.typeform.com geo-tracker.ads.memob.com www.arabbank.ae arabbank.ae arabbank.com.lb www.arabbank.com.lb arabbank.dz www.arabbank.dz www.arabbank.bh arabbank.bh www.arabbank.com arabbank.com arabbank.com.eg www.arabbank.com.eg www.arabbank.jo arabbank.com.jo arabbank.jo www.arabbank.com.jo www.arabbank.com.lb arabbank.com.lb arabbank.ma arabbank.ma www.arabbank.ps arabbank.ps www.arabbank.com.qa arabbank.com.qa; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.doubleclick.net *.facebook.net *.facebook.com *.googletagmanager.com www.google.jo *.googleapis.com *.google-analytics.com google-analytics.com syndication.twitter.com *.gstatic.com *.abwebadmin.com *.arabbank.com geo-tracker.ads.memob.com embed.typeform.com www.arabbank.ae arabbank.ae arabbank.com.lb www.arabbank.com.lb arabbank.dz www.arabbank.dz www.arabbank.bh arabbank.bh www.arabbank.com arabbank.com arabbank.com.eg www.arabbank.com.eg www.arabbank.jo arabbank.com.jo arabbank.jo www.arabbank.com.jo www.arabbank.com.lb arabbank.com.lb arabbank.ma arabbank.ma www.arabbank.ps arabbank.ps www.arabbank.com.qa arabbank.com.qa *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat data: blob: ; media-src 'self' blob:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.googleadservices.com *.doubleclick.net *.google.com *.googleapis.com *.readspeaker.com *.facebook.com *.facebook.net script.crazyegg.com 10.1.228.170 10.1.228.172 *.google-analytics.com *.gstatic.com *.googletagmanager.com *.arabbank.com *.typeform.com geo-tracker.ads.memob.com 10.1.30.170 10.1.30.170:15871 5 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob:; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: 'unsafe-inline' 5 frame-ancestors 'self' https://event.on24.com/ https://insightsoftware.highspot.com/ 5 img-src https: blob: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.fcl.cloud https://*.flightcentre.com https://*.flightcentre.com.au https://*.flightcentre.co.nz https://*.flightcentre.co.za https://*.flightcentre.ca https://*.flightcentre.co.uk https://www.googletagmanager.com https://*.google-analytics.com https://www.youtube.com https://*.fullstory.com https://vxml4.plavxml.com https://*.nr-data.net https://*.usabilla.com http://*.usabilla.com https://*.newrelic.com https://d6tizftlrpuof.cloudfront.net https://cdnjs.cloudflare.com https://cdn.optimizely.com https://*.outbrain.com https://analytics.tiktok.com https://bat.bing.com https://cdn.abrankings.com https://connect.facebook.net https://edge.fullstory.com https://loader.wisepops.com https://wisepops.net https://s.pinimg.com https://snap.licdn.com https://googleads.g.doubleclick.net https://accounts.google.com https://*.pinterest.com https://*.evergage.com https://js.adsrvr.org https://static.criteo.net https://flightcentre-webchat.gotbot.co.za https://7226714.collect.igodigital.com https://cdn.pdst.fm https://*.hotjar.com https://tr.snapchat.com https://*.feefo.com https://koi-3qn5erhpry.marketingautomation.services https://cdn.jsdelivr.net https://*.stackla.com https://cdn.cookielaw.org https://sc-static.net https://developer.livehelpnow.net https://cdn.evgnet.com https://maps.googleapis.com https://sdk.joinsherpa.io https://cdn.wisepops.com https://*.quantserve.com https://*.livechatinc.com https://flightcentre.r-cubed.co.uk https://rules.quantcount.com https://*.criteo.com https://code.jquery.com https://*.creativecdn.com https://*.rokt.com https://*.mypurecloud.com.au https://s.yimg.com https://sp.analytics.yahoo.com *.feroot.com https://*.taboola.com https://*.redditstatic.com https://*.reddit.com https://utt.impactcdn.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://register.feefo.com https://cdn.cookielaw.org https://d6tizftlrpuof.cloudfront.net; connect-src https://*.fcl.cloud wss://*.fcl.cloud https://*.flightcentre.com https://*.flightcentre.com.au https://*.flightcentre.co.nz https://*.flightcentre.co.za https://*.flightcentre.ca https://*.flightcentre.co.uk https://*.fclmedia.com https://fcl-sydney-geo-7.ent.ap-southeast-2.aws.found.io https://flowise-dev.dse.fctg.global https://*.launchdarkly.com https://*.optimizely.com *.nr-data.net https://*.fullstory.com https://*.google-analytics.com https://*.google.com https://*.google.com.au https://*.google.ca https://*.google.co.nz https://*.google.co.za https://*.google.co.uk https://*.evergage.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://analytics.pangle-ads.com https://*.pinterest.com https://*.linkedin.com https://*.outbrain.com https://*.g.doubleclick.net https://wisepops.net https://*.wisepops.com https://*.feefo.com https://cdn.cookielaw.org https://developer.livehelpnow.net https://*.snapchat.com https://www.facebook.com https://bat.bing.com https://bat.bing.net https://*.onetrust.com https://flightcentre.r-cubed.co.uk https://adservice.google.com https://www.google.com https://analytics.google.com https://www.googleadservices.com https://*.browser-intake-datadoghq.com https://*.criteo.com https://*.usabilla.com https://*.creativecdn.com https://*.mypurecloud.com.au wss://*.mypurecloud.com.au https://*.salesforce.com https://d1nojfewl3tku3.cloudfront.net/assets https://maps.googleapis.com https://s.yimg.com *.feroot.com https://insight.adsrvr.org https://*.taboola.com https://*.reddit.com https://*.pinimg.com https://*.impact.com; default-src https: blob: 'unsafe-inline' 'unsafe-eval' wss://*.flightcentre.com.au:*; font-src https: blob: data:; frame-ancestors 'self'; report-uri /api/csp_report 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' https:; connect-src 'self' https: wss:; frame-src https:; object-src 'none'; frame-ancestors 'self'; form-action 'self' 5 frame-ancestors 'self' https://www.ringier-advertising.ch https://blumen.palantirfoundry.de https://*.ringpublishing.com 5 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; object-src 'none'; 5 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self'; upgrade-insecure-requests; 5 frame-ancestors 'self' *.mapfre.com *.mapfre.es *.mapfre.com.do *.mapfre.com.br *.mapfre.com.mx *.mapfre.com.co *.mapfre.com.sv *.mapfre.com.gt *.mapfre.com.ec *.mapfre.com.hn *.mapfre.com.ni *.mapfre.com.py *.mapfre.com.oe *.mapfre.com.uy *.mapfre.com.ar *.mapfre.com.cl *.mapfre.com.pa *.mapfreinsurance.com *.mapfre.com.tr *.mapfre.cr; 5 default-src 'self'; img-src 'self' data: blob: 'unsafe-inline'; object-src 'none'; script-src products-matomo.jar.media 'self' 'unsafe-inline' blob:; connect-src 'self' *.jar.media *.invokable.gmbh; style-src 'self' 'unsafe-inline'; frame-src 'self'; frame-ancestors 'self'; 5 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; connect-src 'self' https: wss:; frame-src 'self' https: 5 frame-ancestors 'self' https://portal.mapp.com; 5 object-src 'self'; block-all-mixed-content; upgrade-insecure-requests; 5 default-src 'self';connect-src 'self' https://cloudflareinsights.com https://static.cloudflareinsights.com https://js.monitor.azure.com https://dc.services.visualstudio.com https://snap.licdn.com https://px.ads.linkedin.com https://www.facebook.com https://www.google.com https://www.google.co.uk https://pagead2.googlesyndication.com https://logx.optimizely.com https://l.evidon.com https://collection.decibelinsight.net wss://collection.decibelinsight.net https://insight.adsrvr.org https://bat.bing.com https://bf05538fcg.bf.dynatrace.com https://sgtm.axa.co.uk https://api.feefo.com https://googleads.g.doubleclick.net https://v4in1-si.click4assistance.co.uk wss://v4in1-si.click4assistance.co.uk https://widget.trustpilot.com https://www.google-analytics.com https://ad.doubleclick.net https://adservice.google.com https://www.gstatic.com https://optoutapi.evidon.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://c.evidon.com https://snap.licdn.com https://cdn.decibelinsight.net https://connect.facebook.net https://cdn.optimizely.com https://dl.episerver.net https://js.adsrvr.org https://bat.bing.com https://js-cdn.dynatrace.com https://js.monitor.azure.com https://widget.trustpilot.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://sgtm.axa.co.uk https://unpkg.com/web-vitals@5.0.1/dist/web-vitals.iife.js https://www.youtube.com https://s.ytimg.com https://www.dwin1.com https://lantern.roeyecdn.com https://v4in1-si.click4assistance.co.uk https://www.google.com https://www.gstatic.com https://www.google.co.uk;script-src-elem 'self' 'unsafe-inline' https://c.evidon.com https://snap.licdn.com https://cdn.decibelinsight.net https://connect.facebook.net https://cdn.optimizely.com https://dl.episerver.net https://js.adsrvr.org https://bat.bing.com https://js-cdn.dynatrace.com https://js.monitor.azure.com https://widget.trustpilot.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://sgtm.axa.co.uk https://unpkg.com/web-vitals@5.0.1/dist/web-vitals.iife.js https://www.youtube.com https://s.ytimg.com https://www.dwin1.com https://lantern.roeyecdn.com https://v4in1-si.click4assistance.co.uk https://www.google.com https://www.gstatic.com https://www.google.co.uk;style-src 'self' 'unsafe-inline';font-src 'self' data: https://www.axa.co.uk https://cloud.mail.axa.co.uk;img-src 'self' data: https:;frame-src https://www.youtube.com https://www.youtube-nocookie.com https://cloud.mail.axa.co.uk https://sgtm.axa.co.uk https://insight.adsrvr.org https://match.adsrvr.org https://a247752487.cdn-pci.optimizely.com https://v4in1-si.click4assistance.co.uk https://widget.trustpilot.com https://www.google.com https://recaptcha.google.com https://www.gstatic.com;media-src 'self' https://www.youtube.com https://www.youtube-nocookie.com;worker-src 'self' blob:;manifest-src 'self';base-uri 'self';form-action 'self' https://customer.axa.co.uk;frame-ancestors 'none'; 5 default-src 'self'; script-src 'self' 'unsafe-inline' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://cdn.jsdelivr.net https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com https://connect.facebook.net https://pc.snafuufos.com https://pagead2.googlesyndication.com https://www.googletagservices.com https://adservice.google.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; media-src 'self' blob: https:; worker-src 'self' blob:; frame-src 'self' https://js.stripe.com https://www.youtube.com https://mc.yandex.ru https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://challenges.cloudflare.com https://td.doubleclick.net; frame-ancestors 'none'; 5 https://miclarocorp.z01.azurefd.net https://fonts.googleapis.com 5 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss:; frame-ancestors 'self'; form-action 'self' https://sis.redsys.es; base-uri 'self'; upgrade-insecure-requests 5 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data: 5 font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://*.gopersonal.ai data: fonts.googleapis.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.survicate.com/ *.accessibly.app/ *.oct8ne.com/ *.hotjar.com/ *.modo.com.ar/ *.readysize.ai/ https://*.grupo-alas.com.ar/ https://grupo-alas.com.ar/ *.jsdelivr.net/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://*.gopersonal.ai cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://accounts.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://*.gopersonal.ai cm.everesttech.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com fonts.googleapis.com *.mookie1.com/ *.adnxs.com/ *.google.com/ *.bing.com/ *.doubleclick.net/ *.google.com.ar/ *.carocuore.com.ar/ https://mcprod.carocuore.com/ *.groovinads.com/ *.accessibly.app/ *.qrserver.com/ *.oct8ne.com/ *.e-planning.net/ *.facebook.net/ https://www.em.rapsodia.com/ https://www.em.babycottons.com/ *.carocuore.com/ *.clarity.ms/ *.herolens.com/ *.rapsodia.com.ar/ *.rapsodia.cl/ *.rapsodia.com.co/ *.carocuore.com.uy/ *.babycottons.com.ar/ *.babycottons.com/ *.babycottons.com.pe/ *.rapsodia.com.uy/ *.babycottons.mx/ *.modo.com.ar/ *.cloudfront.net/ *.readysize.ai/ *.icommkt.online https://*.grupo-alas.com.ar/ https://grupo-alas.com.ar/ *.equalweb.com/ data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://*.gopersonal.ai https://*.gstatic.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.google.com https://maps.googleapis.com *.hotjar.com/ *.adnxs.com/ *.tiktok.com/ *.getblue.io/ *.inspectlet.com/ *.bing.com/ *.clarity.ms/ *.naiz.fit/ *.survicate.com/ *.crazyegg.com/ *.embluemail.com/ *.icommarketing.com/ *.accessibly.app/ *.pinimg.com/ *.pinterest.com/ *.cloudfront.net/ *.oct8ne.com/ *.modo.com.ar/ *.readysize.ai/ *.fitprenda.com/ https://rapsodia.my.site.com/ https://scripts.icommkt.online/ *.icommkt.online https://*.grupo-alas.com.ar/ https://grupo-alas.com.ar/ https://rum.hlx.page/ *.equalweb.com/ *.wcx.cloud/ *.wcentrix.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://*.gopersonal.ai cdn.dnky.co assets.braintreegateway.com https://accounts.google.com *.googletagmanager.com *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com *.survicate.com/ https://rapsodia.my.salesforce-scrt.com/ https://rapsodia.my.site.com/ *.icommkt.online https://*.grupo-alas.com.ar/ https://grupo-alas.com.ar/ *.equalweb.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://mcprod.carocuore.com/ *.icommkt.online https://*.grupo-alas.com.ar/ https://grupo-alas.com.ar/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com https://*.gopersonal.ai https://*.goshops.ai https://*.googleapis.com https://*.gstatic.com maps.googleapis.com api.comapi.com bam.nr-data.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://accounts.google.com *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.tiktok.com/ *.clarity.ms/ *.naiz.fit/ *.run.app/ *.bing.com/ *.doubleclick.net *.accessiblyapp.com/ *.pinterest.com/ https://track-icommkt.com/ https://notifications-icommkt.com/ *.accessibly.app *.inspectlet.com/ *.oct8ne.com/ wss://ws.hotjar.com/ *.hotjar.io/ https://server-side-tagging-f3nc3owz5a-uc.a.run.app/ *.facebook.com/ *.playdigital.com.ar/ *.amplitude.com/ *.modo.com.ar/ *.readysize.ai/ https://rapsodia.my.salesforce-scrt.com/ *.icommkt.online/ https://*.grupo-alas.com.ar/ https://grupo-alas.com.ar/ *.equalweb.com/ *.google.com.ar/ *.afterpay.com/ *.jsdelivr.net/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5 font-src fonts.gstatic.com use.typekit.net https://*.gopersonal.ai *.bootstrapcdn.com data: *.fontawesome.com *.gstatic.com 'self' data: *.moosend.com script.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://*.gopersonal.ai *.izipay.pe www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.dnky.co amc.demdex.net www.google.com youtube.com *.vnforapps.com h.online-metrix.net *.loginextsolutions.com widget.botlers.io somosngr.com.pe td.doubleclick.net PJCLAIM http://r1.dotdigital-pages.com http https email.papajohns.com.pe r1.ddlnk.net/signup.ashx cdn-images-pj-admin-prod.s3.amazonaws.com *.getblue.io *.widget.scoopsxi.com delivery.yango.com https://delivery.yango.com/ *.webvisor.com metrika.yandex.ru 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://*.gopersonal.ai *.designer-images.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.gstatic.com maps.googleapis.com accounts.google.com 'self' data: cdn.cookielaw.org google.com c.clarity.ms www.google.com.ar c.bing.com *.t.co *.twitter.com *.google.com.pe fonts.gstatic.com https://ad.soicos.com/ *.afilio.com.br *.getblue.io https://www.popeyes.com.pe/ https://www.papajohns.com.pe/ https://www.bembos.com.pe/ https://www.donbelisario.com.pe/ https://www.chinawok.com.pe/ https://bat.bing.com https://c.bing.com crests.football https://crests.football-data.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://*.gopersonal.ai https://*.gstatic.com *.izipay.pe *.stat-track.com polyfill.io *.moosend.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com player.vimeo.com https://www.google.com *.gstatic.com https://maps.googleapis.com cdn.cookielaw.org cdn.onesignal.com *.hotjar.com widget.botlers.io onesignal.com *.vnforapps.com h.online-metrix.net *.cdn.stat-track.com https://www.clarity.ms/ *.tiktok.com *.ads-twitter.com http://r1.dotdigital-pages.com http://email.papajohns.com.pe email.papajohns.com.pe *.web.app *.afilio.com.br *.getblue.io https://static.targethaus.net/analytics.js https://237.logstracker.com/237.js https://js.admediasales.com/ https://stalkoda.com/code/ https://bing.com https://bat.bing.com/bat.js https://bat.bing.com/p/action/343214966.js *.widget.scoopsxi.com/api/widget/ shop-cart.app https://static-cdn.trackier.com https://loopwidget.com https://analytics-event.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.gopersonal.ai *.moosend.com *.bootstrapcdn.com cdn.dnky.co *.fontawesome.com *.googletagmanager.com *.cookielaw.org *.googleapis.com *.gstatic.com widget.botlers.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io https://*.gopersonal.ai https://*.goshops.ai https://*.googleapis.com https://*.gstatic.com *.izipay.pe *.stat-track.com *.m-pages.com *.m-operations.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com api.comapi.com bam.nr-data.net *.cookielaw.org *.google-analytics.com *.moosend.com region1.analytics.google.com *.hotjar.io oldenterprise.botlers.io vc.hotjar.io *.hotjar.com wss://*.hotjar.com *.doubleclick.net *.clarity.ms cors-anywhere.herokuapp.com www.google.com.ar geolocation.onetrust.com privacyportal.onetrust.com *.tiktok.com www.google.com https://lib-us-1.brilliantcollector.com *.customerscoops.app/ https://loopwidget.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5 frame-ancestors 'self' *.myworkdayjobs.com *.hbm.com; upgrade-insecure-requests; script-src google.com recaptcha.net hm.baidu.com hbkworld.com *.hbkworld.com *.livechatinc.com *.youtube.com js-agent.newrelic.com *.adobedtm.com assets.adobedtm.com *.azure.com *.azureedge.net *.googleapis.com *.googletagmanager.com *.google.com *.google-analytics.com *.crazyegg.com *.licdn.com static.cloudflareinsights.com *.cookieinformation.com *.ipify.org *.zoominfo.com *.matomo.cloud *.piwik.pro *.wistia.com *.rlcdn.com *.doubleclick.net *.adsymptotic.com *.facebook.net *.hs-scripts.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hsleadflows.net js.hubspot.com *.sentry-cdn.com *.doubleclick.net *.google.com *.linkedin.com *.cloudfront.net *.clickagy.com dqm.crownpeak.com *.myworkdayjobs.com *.force.com *.gstatic.com *.clarity.ms *.cloudflare.com *.a1.typesense.net js.zi-scripts.com *.js.zi-scripts.com *.zi-scripts.com *.bing.com dpm.demdex.net *.hubspot.com *.fs1.hubspotusercontent-na1.net static.hsappstatic.net *.hsforms.net *.hsforms.com *.hubspot.com www.google.com www.gstatic.com *.stripe.com js.adsrvr.org *.adsrvr.org d-code.liadm.com s.ksrndkehqnwntyxlhgto.com unpkg.com *.unpkg.com 'unsafe-inline' 'unsafe-eval' blob:; 5 default-src * 'self' data: blob:; script-src * 'self' 'unsafe-inline' 'unsafe-eval'; style-src * 'self' 'unsafe-inline'; img-src * data: blob: 'self'; connect-src *; frame-src *; 5 script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com *.tawk.to *.jsdelivr.net *.tidio.co *.facebook.net *.facebook.com static.cloudflareinsights.com www.gstatic.com d7a3e8b1c4f9g2h5i6j7k8l9m0n1o2p3q4r5s6.speed-cdn.com 8bow6kipj8zg81psmtksyesya8.speed-cdn.com nyq4leycky5n94hcmplt3mpfla.speed-cdn.com;script-src-attr 'unsafe-inline';img-src 'self' data: i.imgur.com www.google-analytics.com tawk.link *.tawk.to *.tawk.link *.amazonaws.com *.jsdelivr.net *.databrain.com *.ibb.co.com *.facebook.com www.googletagmanager.com d7a3e8b1c4f9g2h5i6j7k8l9m0n1o2p3q4r5s6.speed-cdn.com 8bow6kipj8zg81psmtksyesya8.speed-cdn.com nyq4leycky5n94hcmplt3mpfla.speed-cdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.tawk.to *.jsdelivr.net d7a3e8b1c4f9g2h5i6j7k8l9m0n1o2p3q4r5s6.speed-cdn.com 8bow6kipj8zg81psmtksyesya8.speed-cdn.com nyq4leycky5n94hcmplt3mpfla.speed-cdn.com;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.tawk.to *.jsdelivr.net *.googletagmanager.com d7a3e8b1c4f9g2h5i6j7k8l9m0n1o2p3q4r5s6.speed-cdn.com 8bow6kipj8zg81psmtksyesya8.speed-cdn.com nyq4leycky5n94hcmplt3mpfla.speed-cdn.com;form-action 'self' *.facebook.com;frame-src static.goolec.com www.youtube.com youtube.com *.facebook.com *.prophyderling.com;connect-src 'self' tickers.playtech.com www.google-analytics.com *.googleapis.com *.tawk.to wss://*.tawk.to tracker.databrain.com *.facebook.com d7a3e8b1c4f9g2h5i6j7k8l9m0n1o2p3q4r5s6.speed-cdn.com 8bow6kipj8zg81psmtksyesya8.speed-cdn.com nyq4leycky5n94hcmplt3mpfla.speed-cdn.com;media-src d7a3e8b1c4f9g2h5i6j7k8l9m0n1o2p3q4r5s6.speed-cdn.com 8bow6kipj8zg81psmtksyesya8.speed-cdn.com nyq4leycky5n94hcmplt3mpfla.speed-cdn.com;upgrade-insecure-requests;default-src 'self';base-uri 'self';frame-ancestors 'self';object-src 'none' 5 default-src 'self'; img-src 'self' https://syndication.twitter.com https://secure.gravatar.com https://cdn.cookielaw.org https://www.google-analytics.com https://www.googletagmanager.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://forms.hsforms.com data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://js-eu1.hsforms.net https://*.hsforms.net https://*.hubspot.com https://www.omnicomgroup.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https://www.omnicomgroup.com https://platform.twitter.com https://www.google-analytics.com https://static.addtoany.com https://code.jquery.com https://cdn.cookielaw.org https://www.googletagmanager.com https://omnicom-privacy-cdn.my.onetrust.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://unpkg.com; connect-src 'self' https://*.hsforms.net https://*.hubspot.com https://*.hubspotforms.com https://forms.hsforms.com https://forms-eu1.hsforms.com https://investor.omnicomgroup.com https://omnicom.q4web.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://www.google-analytics.com https://omnicom-privacy-cdn.my.onetrust.com https://omnicom-privacy.my.onetrust.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://omnicom-privacy-cdn.my.onetrust.com https://fonts.googleapis.com; frame-src 'self' https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://static.addtoany.com https://platform.twitter.com https://syndication.twitter.com https://player.vimeo.com youtube.com www.youtube.com blob:; font-src 'self' https://fonts.gstatic.com https://omnicom-privacy-cdn.my.onetrust.com data:; worker-src 'self' https://www.omnicomgroup.com blob:; 5 upgrade-insecure-requests; object-src 'none'; base-uri 'self'; 5 frame-ancestors 'self'; report-uri /log-report-uri/enforce 5 default-src * https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev; style-src 'self' 'unsafe-inline' https: https://static.kameleoon.com https://static.products.kameleoon.com https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://electra.kameleoon.com https://aibuilder.kameleoon.com https://static.experimentation.dev; img-src 'self' data: https: https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://storage.kameleoon.eu https://storage.kameleoon.io https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://static.kameleoon.com https://images.products.kameleoon.com https://static.experimentation.dev 5 frame-ancestors 'self' https://*.superoffice.com https://royalqueenseedssp.inone.useinsider.com 5 upgrade-insecure-requests; base-uri 'none'; default-src 'self' https://*.crazyegg.com; connect-src 'self' https: ws: https://*.crazyegg.com; img-src 'self' https: data: blob: https://*.sovos.com https://cdn.bfldr.com https://*.crazyegg.com; media-src 'self' data: blob: https://*.sovos.com; object-src 'self' https://*.sovos.com https://cdn.bfldr.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src 'self' https://*.sovos.com https://*.youtube.com https://*.marketo.com https://fast.wistia.com https://fast.wistia.net https://js.driftt.com https://www.google.com https://www.googletagmanager.com https://documentcloud.adobe.com https://*.flowpaper.com https://e.infogram.com https://td.doubleclick.net https://recruit.hirebridge.com https://maps.google.com https://app.getreprise.com https://cdn.bfldr.com https://*.crazyegg.com; frame-ancestors 'self' https://*.sovos.com; 5 default-src blob: https: wss: data: 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src https: data:; worker-src blob: data:; 5 frame-ancestors 'self'; base-uri 'self'; 5 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.clarity.ms *.site.com *.salesforce-scrt.com *.sopro.io *.apollo.io *.weareplanet.com https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google-analytics.com https://players.brightcove.net/ https://www.recaptcha.net https://www.gstatic.com https://js-agent.newrelic.com https://pi.pardot.com https://www.youtube.com https://in2.taskanalytics.com https://bam.nr-data.net https://snap.licdn.com https://googleads.g.doubleclick.net https://info.weareplanet.com https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com https://tag.demandbase.com https://j.6sc.co https://tracking.g2crowd.com https://connect.facebook.net https://tpc.googlesyndication.com https://cdn.weglot.com/weglot.min.js https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com maps.googleapis.com; frame-ancestors 'self'; report-uri https://www.weareplanet.com/report-uri/enforce 5 frame-ancestors 'self' *.contentstack.com 5 frame-ancestors 'self' teams.microsoft.com; script-src 'self' cdn.rudderlabs.com 5 frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.com https://metrica.yandex.ru https://metrica.yandex.com https://webvisor.com https://*.webvisor.com 5 frame-ancestors 'self' https://*.ariba.com https://*.sciquest.com https://*.bacardi.com https://*.ipaper.com https://*.kontent.ai 5 frame-ancestors 'self' https://*.superoffice.com https://zamnesiasp.inone.useinsider.com; 5 default-src 'self' data: *.dv.socure.io *.adobedc.net google.com *.googletagmanager.com *.trustarc.com *.mpsnare.iesnare.com https://mpsnare.iesnare.com https://*.extole.io https://*.xtlo.net; object-src 'self' *.googletagmanager.com *.trustarc.com; child-src 'self' ujet.co google.com *.adobedc.net *.ujet.co *.truste.com *.trustarc.com *.googletagmanager.com blob:; script-src 'self' https://secure.walmartmoneycard.com 'unsafe-inline' 'unsafe-eval' google.com https://first.iovation.com/* https://www.clarity.ms/* https://*.gdctrking.com https://*.clarity.ms/* https://*.clarity.ms *.clarity.ms *.licdn.com *.adobedc.net *.dv.socure.io *.truste.com *.consent.trustarc.com *.googletagmanager.com *.trustarc.com *.adnxs.com *.tags.srv.stackadapt.com *.srv.stackadapt.com *.east.srv.stackadapt.com *.uw.srv.stackadapt.com *.eu.srv.stackadapt.com *.qvdt3feo.com *.stackadapt.com *.tags.srv.stackadapt.com *.redditstatic.com *.forter.com tags.stackadapt.com https://mpsnare.iesnare.com https://share.walmartmoneycard.com *.go2bank.com *.go2financial.com *.go2bankonline.com *.fuelcdn.com *.exacttarget.com *.adobe.com *.mpsnare.iesnare.com *.tvsquared.com ujet.co *.ujet.co google-analytics.com *.google-analytics.com trk.clinch.co *.trk.clinch.co cdn.clinch.co *.clinch.co kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.salesforceliveagent.com *.hypemarks.com websdk.appsflyer.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net https://*.extole.io https://*.xtlo.net https://*.decibelinsight.net https://*.decibel.com blob: https://api.cloudsponge.com analytics.tiktok.com https://cdnjs.cloudflare.com https://acdn.adnxs.com/dmp/up/pixie.js https://ib.adnxs.com/pixie; connect-src 'self' https://secure.walmartmoneycard.com *.linkedin.com google.com https://*.gdctrking.com https://pie-secure-gdrewardsdev.nextestate.com/ https://qa-secure-gdrewardsdev.nextestate.com *.adobedc.net *.googletagmanager.com *.dv.socure.io *.trustarc.com *.truste.com *.adnxs.com *.tags.srv.stackadapt.com *.srv.stackadapt.com *.east.srv.stackadapt.com *.uw.srv.stackadapt.com *.eu.srv.stackadapt.com *.qvdt3feo.com *.go2bank.com *.google-analytics.com *.walmartmoneycard.com/events *.appsflyer.com *.go2bank.com *.go2bankonline.com *.go2financial.com wss://mpsnare.iesnare.com/star *.appsflyer.com go2bank.sjv.io kampyle.com *.mpsnare.iesnare.com *.kampyle.com mobileapi.locatorsearch.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com vimeo.com *.vimeo.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com s.ytimg.com connect.facebook.net storify.com *.fyre.co *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net https://*.cloudsponge.com https://*.decibelinsight.net https://*.decibel.com wss://*.decibelinsight.net https://*.extole.io https://*.xtlo.net analytics.tiktok.com https://maps.googleapis.com https://analytics.pangle-ads.com https://pagead2.googlesyndication.com kvicxs.walmartmoneycard.com https://www.clarity.ms/* https://*.clarity.ms/* https://*.clarity.ms *.clarity.ms; img-src 'self' data: https://secure.walmartmoneycard.com google.com https://arttrk.com https://trkn.us https://rdcdn.com https://*.gdctrking.com *.linkedin.com p.alocdn.com *.dv.socure.io *.adobedc.net aa.trkn.us i.ytimg.com *.googletagmanager.com *.trustarc.com *.truste.com *.adnxs.com *.tags.srv.stackadapt.com *.srv.stackadapt.com *.east.srv.stackadapt.com *.uw.srv.stackadapt.com *.eu.srv.stackadapt.com *.qvdt3feo.com *.reddit.com *.rdcdn.com *.mdhv.io *.go2bank.com *.go2bankonline.com *.go2financial.com *.ojrq.net *.tvsquared.com google-analytics.com *.google-analytics.com i.vimeocdn.com www.google.co.in *.google.co.in kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.force.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com cdn.livefyre.com bootstrap.livefyre.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net https://www.clarity.ms/* https://*.clarity.ms/* https://*.clarity.ms *.clarity.ms data: blob: https://*.extole.io https://*.xtlo.net https://www.clarity.ms/* https://*.clarity.ms/* https://*.clarity.ms *.clarity.ms data: https://api.cloudsponge.com https://*.walmartmoneycard.com analytics.tiktok.com ; style-src 'self' 'unsafe-inline' *.adobedc.net *.dv.socure.io google.com *.googletagmanager.com *.trustarc.com *.truste.com *.adnxs.com *.tags.srv.stackadapt.com *.srv.stackadapt.com *.east.srv.stackadapt.com *.uw.srv.stackadapt.com *.eu.srv.stackadapt.com *.qvdt3feo.com *.exacttarget.com kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.go2bankonline.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.go2financial.com *.adobecqms.net *.googleadservices.com cdn.livefyre.com maxcdn.bootstrapcdn.com *.bootstrapcdn.com use.typekit.net *.typekit.net https://*.extole.io https://*.xtlo.net https://fonts.googleapis.com https://api.cloudsponge.com; font-src 'self' data: *.dv.socure.io *.adobedc.net kampyle.com google.com *.googletagmanager.com *.trustarc.com *.truste.com *.adnxs.com *.tags.srv.stackadapt.com *.srv.stackadapt.com *.east.srv.stackadapt.com *.uw.srv.stackadapt.com *.eu.srv.stackadapt.com *.qvdt3feo.com *.appsflyer.com *.kampyle.com use.typekit.net *.use.typekit.net *.googleapis.com *.gstatic.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.go2financial.com *.adobecqms.net *.livefyre.com https://*.extole.io https://*.xtlo.net https://fonts.gstatic.com https://api.cloudsponge.com; frame-src 'self' *.pardot.com *.dv.socure.io *.adobedc.net google.com *.googletagmanager.com *.trustarc.com *.truste.com *.adnxs.com *.tags.srv.stackadapt.com *.srv.stackadapt.com *.east.srv.stackadapt.com *.uw.srv.stackadapt.com *.eu.srv.stackadapt.com *.qvdt3feo.com *.go2bank.com ujet.co *.ujet.co kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.facebook.com facebook.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.hypemarks.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.go2financial.com *.adobecqms.net www.youtube.com player.vimeo.com *.demdex.net trk.clinch.co *.trk.clinch.co cdn.clinch.co *.clinch.co cdn-gdc.com *.cdn-gdc.com bytedance: sslocal:; frame-ancestors 'self' *.dv.socure.io google.com *.adobedc.net https://*.greendot.com https://*.go2bank.com https://*.go2financial.com https://*.walmartmoneycard.com https://*.chirpwhitelabel.com;; 5 frame-ancestors https:; 5 frame-ancestors 'self' https://app.contentful.com https://eu1.anypoint.mulesoft.com 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; frame-ancestors 'self'; 5 frame-ancestors 'none'; object-src 'none' 5 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 5 frame-ancestors 'self' https://web.telegram.org https://webk.telegram.org https://webz.telegram.org https://*.telegram.org 5 img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.boschaftermarket.com *.dxtservice.com *.bosch.com *.googleapis.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.facebook.net *.doubleclick.net *.bosch.tech *.mobility-media.cloud *.newrelic.com *.siteintercept.qualtrics.com siteintercept.qualtrics.com *.nr-data.net *.youtube.com *.translate.google.com *.startengo.dev *.startengo.fr mapb.boschaftermarket.com mapb.boschaftermarket.fr; object-src 5 script-src https: 'unsafe-inline' 'unsafe-eval' 5 base-uri 'none'; font-src 'self' https: data:; frame-ancestors 'self'; object-src 'none'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests; 5 frame-ancestors https://b2b.vitra.com.tr https://b2b.vitraglobal.com https://api.cy19wjta-eczacibas1-p2-public.model-t.cc.commerce.ondemand.com 5 script-src * 'self' 'unsafe-inline' 'unsafe-eval' 5 frame-ancestors 'self' https://*.godo.co.kr https://*.nhn-commerce.com https://*.shopby.co.kr https://*.godomall.com; upgrade-insecure-requests; 5 frame-ancestors 'self' *.authorize.net; 5 default-src http: data: 'unsafe-inline' 'unsafe-eval' 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src * data:; 5 https: 5 frame-ancestors 'self' laendlejob.at *.laendlejob.at app.pia4you.com 5 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' 5 default-src https: data: wss: blob: 'unsafe-eval' 'unsafe-inline'; 5 default-src 'self'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.jsdelivr.net/npm/ blob:; style-src 'self' 'unsafe-inline' https:; img-src https: data: blob: 'self'; media-src https: 'self'; object-src 'self'; font-src *.gstatic.com *.googleapis.com data: 'self' https:; frame-ancestors https://*.hubspot.com https://info.atlascopco.us https://info.atlascopcoupdates.com http://*.scene7.com https://atlascopco-preview.adobecqms.net 'self'; frame-src https:; connect-src https: ws: wss: https://app.wotnot.io 'self' wss://ws.hotjar.com; worker-src blob:; child-src blob: 5 default-src 'self' *.aemcs.digital4danone.com/ *.aptaclub.de/ *.aptaclub.ch/ *.aptaclub.at/ *.activia.de/ *.danone-dany.de/ *.fruchtzwerge.at/ *.milupa.de/ *.milupa.at/ *.nutricia.de/ *.provamel.de/ *.badoit.ch/ *.volvic.de/ *.volvic.ch/ *.yopro.de/ *.typeform.com/ *.salesforce-scrt.com/ *.adsrvr.org/ *.danonino.ch/ *.actimel.de/ *.actimel.at/ *.actimel.ch/ *.actimel.fr/ *.adobeaemcloud.com/ *.youtube.com/ https://app.chargebee.com/ www.youtube.com *.google-analytics.com/ *.analytics.google.com/ *.googlesyndication.com/ *.adnxs.com/ *.doubleclick.net/ *.google.ie/ *.google.co.in/ *.google.com.ph/ *.google.com/ *.gstatic.com/ *.googleapis.com/ *.googletagmanager.com/ https://bittesehr.net/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.aptaclub.de/ *.bittesehr.net/ *.trustedshops.com/ *.danone-activia.ch/ *.fruchtzwerge.de/ *.outbrain.com/ *.focusgames.com/ *.trustcommander.net/ *.hotelagentur-dettling.de/ *.vivenio.de/ http://hotelagentur-dettling.de/ *.my.site.com/ *.comdirect.de/ *.force.com/ *.salesforce-sites.com/ https://vimeo.com/ *.blueconic.net/ *.amazon-adsystem.com/ *.commander1.com/ *.tagcommander.com/ *.google.de/ *.zoikal.co.uk/ https://zoikal.co.uk/ *.userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/ *.start.video-stream-hosting.de/ *.nutriciaflocare.com/ https://start.video-stream-hosting.de/ *.b-cdn.net/ *.amazonaws.com/ *.userlike.com/ *.criteo.net/ *.criteo.com/ *.google.es/ *.bing.com/ *.krxd.net/ *.emxdgt.com/ *.postrelease.com/ *.id5-sync.com/ *.yahoo.net/ https://www.jedeflaschegewinnt.de/; style-src 'self' https://www.googleadservices.com/ https://smartmedia.digital4danone.com/ https://danone.github.io/aem.edp-dach-fruchtzwerge/ *.activia.de/ *.milupa.de/ *.milupa.at/ *.provamel.de/ *.salesforce-scrt.com/ *.danonino.ch/ *.badoit.ch/ *.nutricia.de/ *.adsrvr.org/ *.actimel.de/ *.actimel.at/ *.actimel.ch/ *.actimel.fr/ *.aptaclub.ch/ *.aptaclub.de/ *.aptaclub.de/ *.volvic.ch/ *.volvic.de/ *.yopro.de/ *.typeform.com/ *.my.salesforce-sites.com *.tiktok.com *.typekit.net/ *.scene7.com/ *.adobeaemcloud.com/ https://cdn.jsdelivr.net/ *.force.com/ *.salesforce.com/ *.youtube.com youtube.com https://app.chargebee.com/ *.squarelovin.com/ https://squarelovin.com/ *.adyen.com/ *.chargebee.com/ *.danone-dany.de/ *.static.criteo.net/ *.criteo.com/ *.mopinion.com/ *.live2support.com/ *.lpsnmedia.net/ *.bootstrapcdn.com/ *.tagcommander.com/ *.aemcs.digital4danone.com/ https://www.google.nl/ https://dpm.demdex.net/ *.channelsight.com/ *.focusgames.co.uk/ https://assets.adobedtm.com/ *.zencdn.net/ *.sharethis.com/ *.pinimg.com/ *.google.com/ *.google-analytics.com/ *.analytics.google.com/ *.danone-activia.ch/ *.googlesyndication.com/ *.adnxs.com/ *.doubleclick.net/ *.google.ie/ *.google.co.in/ *.google.com.ph/ *.gstatic.com/ *.googleapis.com/ *.googletagmanager.com/ https://bittesehr.net/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.bittesehr.net/ *.trustedshops.com/ *.fruchtzwerge.at/ *.fruchtzwerge.de/ *.outbrain.com/ *.focusgames.com/ *.my.site.com/ *.hotelagentur-dettling.de/ *.vivenio.de/ http://hotelagentur-dettling.de/ *.comdirect.de/ https://vimeo.com/ *.salesforce-sites.com/ *.trustcommander.net/ *.amazon-adsystem.com/ *.commander1.com/ *.google.de/ *.zoikal.co.uk/ https://zoikal.co.uk/ *.userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/ *.start.video-stream-hosting.de/ https://start.video-stream-hosting.de/ *.nutriciaflocare.com/ *.b-cdn.net/ *.amazonaws.com/ *.userlike.com/ *.criteo.net/ *.google.es/ *.bing.com/ *.krxd.net/ *.emxdgt.com/ *.postrelease.com/ *.id5-sync.com/ *.yahoo.net/ https://www.jedeflaschegewinnt.de/ 'unsafe-inline'; script-src 'self' https://www.googleadservices.com/ https://www.youtube-nocookie.com/ *.typeform.com/ https://js.adsrvr.org/ https://www.redditstatic.com/ https://c.amazon-adsystem.com/aat/ *.actimel.de/ *.actimel.at/ *.actimel.ch/ *.actimel.fr/ *.badoit.ch/ *.danonino.ch/ *.salesforce-scrt.com/ *.nutricia.de/ *.milupa.at/ *.activia.de/ *.yopro.de/ sgtm.volvic.de/ sgtm.volvic.ch/ sgtm.provamel.de/ sgtm.danone-dany.de/ https://danone.github.io/aem.edp-dach-fruchtzwerge/ https://js-agent.newrelic.com/ *.my.salesforce-sites.com *.licdn.com *.usercentrics.eu *.tiktok.com *.monitor.azure.com/ https://s7g10.scene7.com/ *.teads.tv/ *.danone-activia.ch/ *.youtube.com/ *.channelsight.com/ *.typekit.net/ https://sgtm.fruchtzwerge.de/ https://sgtm.aptaclub.de/ *.scene7.com/ *.adobeaemcloud.com/ https://cdn.jsdelivr.net/ *.salesforceliveagent.com/ *.force.com/ *.salesforce.com/ *.squarelovin.com/ https://squarelovin.com/ https://app.chargebee.com/ *.paypal.com/ *.nxtck.com/ *.googlesyndication.com/ *.adyen.com/ *.chargebee.com/ https://static.criteo.net/js/ld/ld.js *.criteo.com/ *.ytimg.com/ https://live2support.com/ *.aemcs.digital4danone.com/ *.mopinion.com/ *.googletagmanager.com/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ https://s.pinimg.com/ *.tagcommander.com/ *.twitter.com/ *.pinterest.com/ *.instagram.com/ https://services.postcodeanywhere.co.uk/ *.commandersact.com/ *.facebook.net/ *.google.ie/ *.lpsnmedia.net/ *.pinimg.com/ *.danone-dtc.net/ *.hotjar.com/ *.focusgames.co.uk/ *.outbrain.com/ *.google.com.ph/ *.google.co.in/ *.googleadservices.com/ *.google-analytics.com/ *.sharethis.com *.addthis.com/ *.live2support.com/ *.doubleclick.net/ *.googleapis.com/ *.google.com/ *.theadex.com *.commander1.com/ *.liveperson.net/ *.gstatic.com/ *.aptaclub.de/ *.milupa.de/ https://sgtm.nutricia.de/ *.digital4danone.com/ *.aptaclub.at/ *.milupa.at/ *.aptaclub.ch/ *.milupa.ch/ *.aptaclub.com.vn/ *.addthisedge.com/ *.ads-twitter.com/ *.adnxs.com/ *.adventori.com/ https://adventori.com/ https://dsp.adfarm1.adition.com/ *.widgets.trustedshops.com/ www.youtube.com https://youtube.com/ *.analytics.google.com/ *.comdirect.de/ https://bittesehr.net/ *.bittesehr.net/ *.treasuredata.com/ *.gigya.com/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.trustedshops.com/ *.fruchtzwerge.at/ *.fruchtzwerge.de/ *.focusgames.com/ *.my.site.com/ *.trustcommander.net/ *.blueconic.net/ *.hotelagentur-dettling.de/ *.vivenio.de/ http://hotelagentur-dettling.de/ https://vimeo.com/ *.salesforce-sites.com/ *.linkedin.oribi.io/ *.google.de/ *.zoikal.co.uk/ https://zoikal.co.uk/ *.userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/ *.start.video-stream-hosting.de/ *.nutriciaflocare.com/ https://start.video-stream-hosting.de/ *.amazonaws.com/ *.b-cdn.net/ *.userlike.com/ *.criteo.net/ *.google.es/ *.bing.com/ *.krxd.net/ *.emxdgt.com/ *.postrelease.com/ *.id5-sync.com/ *.yahoo.net/ https://www.jedeflaschegewinnt.de/ 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https://www.googleadservices.com/ *.typeform.com/ *.channelsight.com/ *.reddit.com/ *.redditstatic.com/ *.alb.reddit.com/ *.activia.de/ sgtm.provamel.de/ https://sync.targeting.unrulymedia.com/ *.actimel.de/ *.actimel.at/ *.actimel.ch/ *.badoit.ch/ *.actimel.fr/ *.salesforce-scrt.com/ *.adsrvr.org/ *.danone-activia.ch/ *.yopro.de/ https://sgtm.volvic.de/ https://sgtm.volvic.ch/ https://sgtm.danone-dany.de/ https://sync.1rx.io/ https://danone.github.io/aem.edp-dach-fruchtzwerge/ *.sync.1rx.io/ *.usercentrics.eu https://www.aptaclub.de/ *.aptaclub.de/ https://www.aptaclub.at/ *.aptaclub.at/ https://www.aptaclub.ch/ *.aptaclub.ch/ https://www.nutricia.de/ *.nutricia.de/ https://www.danonino.ch/ *.danonino.ch/ https://www.fruchtzwerge.at/ *.fruchtzwerge.at/ https://www.fruchtzwerge.de/ *.fruchtzwerge.de/ https://www.milupa.at/ *.milupa.at/ https://www.milupa.de/ *.milupa.de/ https://s7g10.scene7.com/ *.scene7.com/ *.adobeaemcloud.com/ https://cdn.jsdelivr.net/ data: *.force.com/ *.salesforce.com/ *.visualforce.com/ *.nutricia.de/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.google-analytics.com/ https://app.chargebee.com/ *.analytics.google.com/ *.squarelovin.com/ https://squarelovin.com/ *.googlesyndication.com/ *.assetsadobe.com/ *.adyen.com/ *.ytimg.com/ *.live2support.com/ https://ca-live.adyen.com/ https://www.google.de/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ https://services.postcodeanywhere.co.uk/ http://danonegroup-stage.neolane.net/ https://ca-live.adyen.com/ *.cx.atdmt.com/ *.danone-dtc.net/ https://ct.pinterest.com/ *.outbrain.com/ *.danone.com/ *.atdmt.com/ *.pinterest.com/ *.commander1.com/ *.tagcommander.com/ *.lpsnmedia.net/ *.adnxs.com/ *.adition.com/ *.focusgames.co.uk/ *.doubleclick.net/ *.google.ie/ *.google.co.in/ *.theadex.com/ *.sharethis.com/ *.gstatic.com/ *.googleapis.com/ *.w3.org/ *.mookie1.com/ *.pinimg.com/ *.facebook.com/ *.googletagmanager.com/ *.linkedin.com/ https://t.co/ *.adsrvr.org/ *.crm4d.com/ *.adotmob.com/ *.goldenbees.fr *.taboola.com/ *.mediavine.com/ *.ivitrack.com/ *.tremorhub.com/ *.spx.smartclip.com/ *.liadm.com/ *.smaato.net/ *.ads.yieldmo.com/ *.bing.com/ *.advertising.com/ *.criteo.com/ *.3lift.com/ *.smartadserver.com/ *.360yield.com/ *.pubmatic.com/ *.casalemedia.com/ *.yahoo.com/ *.teads.tv/ *.adform.net/ *.adscale.de/ *.media.net/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.yieldlab.net/ *.bidswitch.net/ *.sharethrough.com/ *.twiago.com/ *.stickyadstv.com/ *.omnitagjs.com/ *.ad.smaato.net/ *.rubiconproject.com/ *.google.com.ph/ *.my.site.com/ https://bittesehr.net/ *.bittesehr.net/ *.trustedshops.com/ *.fruchtzwerge.de/ *.focusgames.com/ *.trustcommander.net/ *.comdirect.de/ *.hotelagentur-dettling.de/ *.vivenio.de/ http://hotelagentur-dettling.de/ https://vimeo.com/ *.blueconic.net/ *.salesforce-sites.com/ https://sgtm.nutricia.de/ *.google.com/ *.amazon-adsystem.com/ *.google.fr/ *.id5-sync.com/ *.trustedshop.com/ *.google.de/ *.zoikal.co.uk/ https://zoikal.co.uk/ *.userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/ *.start.video-stream-hosting.de/ *.nutriciaflocare.com/ https://start.video-stream-hosting.de/ *.amazonaws.com/ *.b-cdn.net/ *.userlike.com/ *.google.es/ *.krxd.net/ *.emxdgt.com/ *.postrelease.com/ id5-sync.com/ https://www.jedeflaschegewinnt.de/ 'unsafe-inline'; frame-src 'self' https://www.googleadservices.com/ https://www.youtube-nocookie.com/ *.aptaclub.de/ *.activia.de/ *.channelsight.com/ *.danone-activia.ch/ *.danonino.ch/ *.aptaclub.de/ *.aptaclub.at/ *.aptaclub.ch/ *.provamel.de/ *.danone-dany.de/ *.typeform.com/ https://danone-events.eu.typeform.com/ https://business.safety.google/ *.actimel.de/ *.milupa.de/ *.milupa.at/ *.actimel.at/ *.actimel.ch/ *.actimel.fr/ *.badoit.ch/ *.volvic.ch/ *.nutricia.de/ *.volvic.de/ *.salesforce-scrt.com/ *.adsrvr.org/ *.office.com/ https://danone.github.io/aem.edp-dach-fruchtzwerge/ *.my.salesforce-sites.com *.akamaized.net *.teads.tv/ *.nutricia.de *.scene7.com/ *.adobeaemcloud.com/ https://cdn.jsdelivr.net/ *.yopro.de/ *.force.com/ *.salesforce.com/ *.paypal.com *.adyen.com/ https://app.chargebee.com/ *.squarelovin.com/ https://squarelovin.com/ *.googlesyndication.com/ *.chargebee.com/ *.static.criteo.net/ *.criteo.com/ *.tohklom.com/ *.tagcommander.com/ https://aax-eu.amazon-adsystem.com/ *.amazon-adsystem.com/ *.liveperson.net/ *.vimeo.com/ *.aemcs.digital4danone.com/ *.live2support.com/ *.google.com/ *.lpsnmedia.net/ *.hotjar.com/ *.commander1.com/ *.proprofs.com/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ *.facebook.com/ *.doubleclick.net/ *.theadex.com/ *.sharethis.com/ *.addthis.com *.youtube.com *.adsrvr.org/ *.spotify.com/ *.cloudfront.net/ *.instagram.com/ *.soundcloud.com/ *.twitter.com/ *.pinterest.com/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.flockler.com/ *.google-analytics.com/ *.analytics.google.com/ *.adnxs.com/ *.google.ie/ *.google.co.in/ *.google.com.ph/ *.gstatic.com/ *.googleapis.com/ *.googletagmanager.com/ *.trustcommander.net/ *.blueconic.net/ *.my.site.com/ https://bittesehr.net/ *.bittesehr.net/ *.trustedshops.com/ *.treasuredata.com/ *.gigya.com/ *.fruchtzwerge.at/ *.fruchtzwerge.de/ *.outbrain.com/ *.focusgames.com/ *.focusgames.co.uk/ *.hotelagentur-dettling.de/ *.vivenio.de/ http://hotelagentur-dettling.de/ *.comdirect.de/ https://vimeo.com/ *.salesforce-sites.com/ *.google.de/ *.zoikal.co.uk/ https://zoikal.co.uk/ *.userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/ *.start.video-stream-hosting.de/ *.nutriciaflocare.com/ https://start.video-stream-hosting.de/ *.amazonaws.com/ *.b-cdn.net/ *.userlike.com/ *.criteo.net/ *.google.es/ *.bing.com/ *.krxd.net/ *.emxdgt.com/ *.postrelease.com/ *.id5-sync.com/ *.yahoo.net/ https://www.jedeflaschegewinnt.de/; connect-src 'self' https://www.googleadservices.com/ *.typeform.com/ *.channelsight.com/ *.reddit.com/ *.redditstatic.com/ *.alb.reddit.com/ *.activia.de/ *.milupa.at/ *.yopro.de/ https://sgtm.volvic.de/ *.adsrvr.org/ *.actimel.de/ *.actimel.at/ *.actimel.ch/ *.actimel.fr/ *.nutricia.de/ *.salesforce-scrt.com/ *.danone-activia.ch/ *.algolianet.com/ *.algolia.net/ *.algolia.io/ https://api.trustbadge.etrusted.com/accounts/ https://trustbadge.api.etrusted.com/ https://sgtm.provamel.de/ https://ara.paa-reporting-advertising.amazon/ https://sgtm.volvic.ch/ https://sgtm.danone-dany.de/ https://id5-sync.com/ *.tiktok.com/ *.linkedin.com/ *.azure.com/ https://danone.github.io/aem.edp-dach-fruchtzwerge/ *.s3.eu-west-1.amazonaws.com/ https://bam.eu01.nr-data.net/ *.badoit.ch/ *.my.salesforce-sites.com *.usercentrics.eu *.teads.tv/ https://s7g10.scene7.com/ https://dc.services.visualstudio.com/ https://sgtm.fruchtzwerge.de/ https://sgtm.aptaclub.de/ *.scene7.com/ *.adobeaemcloud.com/ https://cdn.jsdelivr.net/ *.force.com/ *.salesforce.com/ *.google-analytics.com/ https://app.chargebee.com/ *.analytics.google.com/ *.squarelovin.com/ https://squarelovin.com/ *.paypal.com *.sentry.io/ *.googlesyndication.com/ *.adyen.com/ *.live2support.com/ https://sentry.labdigital.nl *.addthis.com/ *.mopinion.com/ https://www.google.nl/ *.aemcs.digital4danone.com/ https://dpm.demdex.net/ https://assets.adobedtm.com/ *.danone-dtc.net/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.ct.pinterest.com/ *.privacy.trustcommander.net/ https://services.postcodeanywhere.co.uk/ *.commercetools.com/ *.facebook.com/ *.omtrdc.net/ *.hotjar.com/ *.pinterest.com/ *.trustcommander.net/ *.sharethis.com/ *.doubleclick.net/ *.blueconic.net/ *.aptaclub.at/ https://bittesehr.net/ *.bittesehr.net/ *.treasuredata.com/ *.gigya.com/ *.trustedshops.com/ *.fruchtzwerge.de/ *.outbrain.com/ *.focusgames.com/ *.focusgames.co.uk/ *.milupa.de/ *.milupa.at/ *.fruchtzwerge.at/ *.danonino.ch/ *.aptaclub.ch/ *.my.site.com/ *.comdirect.de/ *.hotelagentur-dettling.de/ *.vivenio.de/ http://hotelagentur-dettling.de/ https://vimeo.com/ *.linkedin.oribi.io/ *.salesforce-sites.com/ *.amazon-adsystem.com/ https://sgtm.nutricia.de/ *.digital4danone.com/ *.googlesyndication.com/ *.adnxs.com/ *.google.ie/ *.google.co.in/ *.google.com.ph/ *.google.com/ *.gstatic.com/ *.googleapis.com/ *.googletagmanager.com/ *.commander1.com/ *.tagcommander.com/ *.google.de/ *.zoikal.co.uk/ https://zoikal.co.uk/ *.userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/ *.start.video-stream-hosting.de/ *.nutriciaflocare.com/ https://start.video-stream-hosting.de/ *.amazonaws.com/ *.b-cdn.net/ *.userlike.com/ *.criteo.net/ *.criteo.com/ *.google.es/ *.bing.com/ *.krxd.net/ *.emxdgt.com/ *.postrelease.com/ *.id5-sync.com/ *.yahoo.net/ https://www.jedeflaschegewinnt.de/; font-src 'self' https://www.googleadservices.com/ https://danone.github.io/aem.edp-dach-fruchtzwerge/ *.channelsight.com/ *.adsrvr.org/ *.actimel.de/ *.actimel.at/ *.actimel.ch/ *.actimel.fr/ *.danonino.ch/ *.badoit.ch/ *.salesforce-scrt.com/ *.activia.de/ *.danone-dany.de/ *.danone-activia.ch/ *.volvic.ch/ *.volvic.de/ *.aptaclub.ch/ *.aptaclub.at/ *.aptaclub.de/ *.danone-dtc.net *.typekit.net/ *.nutricia.de/ *.scene7.com/ *.adobeaemcloud.com/ https://cdn.jsdelivr.net/ data: *.salesforce.com/ *.yopro.de/ *.adyen.com/ *.squarelovin.com/ https://app.chargebee.com/ *.googlesyndication.com/ *.provamel.de/ *.gstatic.mopinion.com/ https://gstatic.mopinion.com/ *.gstatic.com/ *.live2support.com/ *.danone-dtc.net/ https://vjs.zencdn.net/ *.aemcs.digital4danone.com/ https://squarelovin.com/ *.comdirect.de/ https://bittesehr.net/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.bittesehr.net/ *.trustedshops.com/ *.fruchtzwerge.at/ *.fruchtzwerge.de/ *.outbrain.com/ *.focusgames.com/ *.focusgames.co.uk/ *.my.site.com/ *.milupa.de/ *.milupa.at/ *.trustcommander.net/ *.blueconic.net/ *.hotelagentur-dettling.de/ *.vivenio.de/ http://hotelagentur-dettling.de/ https://vimeo.com/ https://app.chargebee.com/ *.force.com/ *.salesforce-sites.com/ *.amazon-adsystem.com/ *.google-analytics.com/ *.analytics.google.com/ *.adnxs.com/ *.doubleclick.net/ *.google.ie/ *.google.co.in/ *.google.com.ph/ *.google.com/ *.googleapis.com/ *.googletagmanager.com/ *.commander1.com/ *.tagcommander.com/ *.google.de/ *.zoikal.co.uk/ https://zoikal.co.uk/ *.userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/ *.start.video-stream-hosting.de/ *.nutriciaflocare.com/ https://start.video-stream-hosting.de/ *.amazonaws.com/ *.b-cdn.net/ *.userlike.com/ *.criteo.net/ *.criteo.com/ *.google.es/ *.bing.com/ *.krxd.net/ *.emxdgt.com/ *.postrelease.com/ *.id5-sync.com/ *.yahoo.net/ https://www.jedeflaschegewinnt.de/; media-src 'self' *.lpsnmedia.net/ *.channelsight.com/ *.nutricia.de/ *.danone-activia.ch/*.danone-dany.de/ *.fruchtzwerge.at/ *.fruchtzwerge.de/ *.milupa.de/ *.milupa.at/ *.provamel.de/ *.volvic.ch/ *.badoit.ch/ *.danonino.ch/ *.volvic.de/ *.yopro.de/ *.activia.de/ *.actimel.de/ *.actimel.at/ *.actimel.ch/ *.actimel.fr/ *.aptaclub.ch/*.aptaclub.at/ *.aptaclub.de/ *.adsrvr.org/ *.salesforce-scrt.com/ https://danone--uat.sandbox.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.squarelovin.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/; 5 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://one-time-offer.com https://cashbackprog.completesavings.co.uk;upgrade-insecure-requests; 5 frame-ancestors 'self' https://drivmp--fullcopy.lightning.force.com https://drivmp--fullcopy.my.salesforce.com https://drivmp--fullcopy--c.visualforce.com https://drivmp.lightning.force.com https://drivmp.my.salesforce.com https://drivmp--c.visualforce.com https://drivmp--fullcopy.sandbox.lightning.force.com https://drivmp--fullcopy.sandbox.my.salesforce.com https://drivmp--fullcopy--c.sandbox.visualforce.com https://drivmp--fullcopy--c.sandbox.vf.force.com https://drivmp--c.vf.force.com https://author-driv-stage.adobecqms.net https://author-driv-prod.adobecqms.net https://author-federalmogul-qa65.adobecqms.net https://qa.drivheavydutyparts.com https://staging.drivheavydutyparts.com https://drivheavydutyparts.com/ 5 default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https:; media-src 'self' data: blob:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; 5 frame-ancestors 'self'; img-src *.google-analytics.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.frontify.com *.cloudinary.com https://cdn.insight.sitefinity.com https://dec.azureedge.net 'self' data:; default-src *.doubleclick.net 'self'; script-src https://*.googletagmanager.com 'self' *.google-analytics.com https://dec.azureedge.net/ munchkin.marketo.net unpkg.com/@frontify/ *.cloudinary.com 'unsafe-inline' https://static.cloudflareinsights.com https://mpsnare.iesnare.com *.iesnare.com ci-first.iovation.com https://cdn.insight.sitefinity.com https://dec.azureedge.net https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api; style-src https://fonts.google.com 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net 'unsafe-inline'; connect-src https://*.googletagmanager.com 'self' *.mktoresp.com *.google-analytics.com *.frontify.com *.cloudinary.com https://analytics.google.com https://static.cloudflareinsights.com https://mpsnare.iesnare.com *.iesnare.com wss://mpsnare.iesnare.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src *.frontify.com *.cloudinary.com wss://mpsnare.iesnare.com mpsnare.iesnare.com 'self'; child-src 'self' *.frontify.com cloudinary.com *.cloudinary.com 5 default-src * blob:; img-src * data: blob:; connect-src * wss: blob: resource:; frame-src *;script-src * 'unsafe-eval' 'unsafe-inline' blob:; style-src * 'unsafe-inline'; font-src * data:; 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.google.co.in *.herokuapp.com *.ravepay.co ajax.cloudflare.com chimeratool.com *.chimeratool.com *.elfsight.com data.chimeratool.com *.flutterwave.com *.stripe.com *.atfawry.com *.google.com *.payerone.com *.facebook.net wss://*.citruspay.com:* wss://*.google.co:* *.citruspay.com wss://*.fawrystaging.com wss://*.atfawry.com wss://*.fawry.com wss://*.youtube.com:* *.youtube.com wss://*.tawk.to:* *.tawk.to *.facebook.com *.fawrystaging.com *.mastercard.com.au *.fawry.com atfawry.fawrystaging.com *.facebook.net *.mastercard.com *.razorpay.com *.google-analytics.com *.securecode.com *.google.com *.dhru.com *.paypal.com *.paypalobjects.com *.googletagmanager.com t.me *.t.me wa.me *.wa.me ; img-src * data:; font-src * data: 5 default-src 'self' *.visualwebsiteoptimizer.com app.vwo.com www.youtube.com www.youtube-nocookie.com *.gstatic.com *.google.com *.doubleclick.net *.google-analytics.com; script-src 'self' app.tolkie.nl cdn.tolkie.nl 'unsafe-inline' 'unsafe-eval' blob: static.hsappstatic.net feedback-eu1.hubapi.com feedback.hubapi.com *.hubspotfeedback.com *.hs-scripts.com uwzorgonline.nl *.hubspot.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hsadspixel.net *.hs-analytics.net js.hscta.net js-eu1.hscta.net static.hsappstatic.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.usemessages.com *.hs-banner.com *.doubleclick.net *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com app.vwo.com *.googleoptimize.com *.googletagmanager.com *.zoho.eu *.maillist-manage.eu maillist-manage.eu cdn.pushcrew.com; style-src * 'unsafe-inline' app.tolkie.nl cdn.tolkie.nl uwzorgonline.nl *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com cdn2.hubspot.net *.googletagmanager.com fonts.googleapis.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net; frame-src app.tolkie.nl cdn.tolkie.nl app-eu1.hubspot.com *.hsforms.net *.hsforms.com *.hs-banner.com *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com *.hubspot.net play.hubspotvideo.com play-eu1.hubspotvideo.com youtube.com www.youtube.com *.google.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com app.vwo.com; connect-src 'self' api.tolkie.nl https://app.tolkie.nl https://cdn.tolkie.nl *.hubapi.com *.hscollectedforms.net *.hsforms.com js.hscta.net js-eu1.hscta.net *.hubspot.com *.doubleclick.net *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com app.vwo.com region1.google-analytics.com *.google.com; img-src 'self' app.tolkie.nl cdn.tolkie.nl uwzorgonline.nl *.hsforms.net *.hsforms.com js.hscta.net js-eu1.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.googletagmanager.com app.vwo.com useruploads.vwo.io cdn.pushcrew.com api.media.atlassian.com uwzorgonline.atlassian.net data: *.uwzorgonline.nl uwzorgonline.nl *.gravatar.com *.google-analytics.com; font-src 'self' data: app.tolkie.nl cdn.tolkie.nl *.gstatic.com fonts.googleapis.com; object-src 'none'; frame-ancestors 'self' *.visualwebsiteoptimizer.com app.vwo.com; child-src *.hsforms.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com app.vwo.com; worker-src 'self' blob: 5 style-src * blob: 'unsafe-inline'; img-src * blob: data: 'unsafe-inline'; font-src * blob: data: 'unsafe-inline'; media-src * blob: data: 'unsafe-inline'; connect-src * ws: wss:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; 5 default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; base-uri 'self'; 5 frame-ancestors 'self' http://webvisor.com https://webvisor.com https://metrika.yandex.ru http://metrika.yandex.ru 5 default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; 5 frame-ancestors 'self' https://*.sitecorecloud.io; 5 object-src 'self' https://www.youtube-nocookie.com/ https://www.youtube.com/ 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.fenster.com *.fensterversand.com *.fensterversand.at *.fensterversand.ch *.fenetre24.com *.fenetre24.be *.finestre.com *.ventanas.es *.windows24.com *.haustueren.de *.neuffer.de *.neuffer-payment.com *.k8s.nng-stage.de *.nng-prod.de *.amazonaws.com *.cloudfront.net *.cloudflare.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleapis.com *.googlecode.com *.googletagmanager.com *.gstatic.com *.adtrafficquality.google syndicatedsearch.goog *.google-analytics.com *.googlecommerce.com *.googleadservices.com *.googleusercontent.com *.doubleclick.net *.usd.de *.ogone.com *.sofort.com *.billpay.de *.paypal.de *.paypal.com *.paypalobjects.com *.pay1.de *.klarnacdn.net *.klarna.com *.klarnaevt.com *.klarnaservices.com *.attributy.com *.spoteffects.net unpkg.com *.matomo.cloud *.etrusted.com *.trustedshops.com *.trustpilot.com *.bootstrapcdn.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.jquery.com *.typeform.com *.facebook.net *.facebook.com s7.addthis.com thdoan.github.io *.geschuetzteinkaufen.commerzbank.de *.hotjar.com:* wss://*.hotjar.com *.hotjarconsent.com *.hotjar.io *.mouseflow.com *.bing.com *.bing.net *.mozilla.org *.jsdelivr.net *.trackjs.com *.consensu.org *.consentmanager.net *.taboola.com cdn.datatables.net *.criteo.com *.criteo.net *.twiago.com *.bidswitch.net *.adnxs.com *.media.net *.rubiconproject.com *.smartadserver.com *.teads.tv *.3lift.com *.yahoo.com *.yahoo.net *.adform.net *.omnitagjs.com *.casalemedia.com id5-sync.com *.360yield.com *.ivitrack.com *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.sharethrough.com *.tremorhub.com *.yieldlab.net *.yieldmo.com *.demdex.net *.krxd.net *.emxdgt.com *.solutenetwork.com *.ubembed.com *.1rx.io *.adsensecustomsearchads.com *.openai.com *.dwin1.com *.awin1.com *.roeyecdn.com *.roeye.com *.sciencebehindecommerce.com *.wepowerconnections.com *.kameleoon.com *.kameleoon.io *.experimentation.dev *.kameleoon.eu *.kameleoon.net *.zendesk.com wss://*.zendesk.com *.sentry.io *.smooch.io wss://*.smooch.io *.twilio.com wss://*.twilio.com *.zdassets.com *.zdusercontent.com; 5 frame-ancestors 'self' https://www.google.com 5 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob:; font-src * data: blob:; connect-src *; frame-src *; media-src *; object-src *; base-uri *; form-action *; frame-ancestors *; 5 child-src 'self' www.googletagmanager.com https:; connect-src 'self' *.hsforms.com www.googletagmanager.com *.ctfassets.net vimeo.com https: consentcdn.cookiebot.com consent.cookiebot.com; default-src 'self' https:; font-src data: 'self' https: *.vimeocdn.com; frame-src 'self' www.googletagmanager.com https: consentcdn.cookiebot.com consent.cookiebot.com; img-src data: 'self' https: *.ctfassets.net *.vimeocdn.com *.akamaized.net; media-src data: 'self' https: *.ctfassets.net *.vimeocdn.com *.akamaized.net; object-src 'none'; script-src data: 'unsafe-inline' 'wasm-unsafe-eval' 'self' https: www.googletagmanager.com *.hsforms.net vimeo.com *.vimeocdn.com player.vimeo.com consentcdn.cookiebot.com consent.cookiebot.com; style-src data: 'unsafe-inline' 'self' https: *.vimeocdn.com; worker-src 'none'; form-action 'self' *.hsforms.com https:; frame-ancestors 'self' app.contentful.com https:; upgrade-insecure-requests 5 report-to default 5 default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https://*.cloudflareinsights.com; object-src 'none'; base-uri 'self'; form-action 'self' 5 frame-src 'self' 5 worker-src blob:; 5 frame-ancestors 'self' https://admin.hifiklubben.dk https://businesscentral.dynamics.com https://lshardware.audionord.dk https://bctest.audionord.dk https://bc.audionord.dk 5 default-src https: ws: wss: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 5 default-src * 'unsafe-eval' 'unsafe-inline' data: mediastream: blob: filesystem: mailto:; 5 default-src 'self' data: https://dkcompany.altapaysecure.com https://*.mobilepay.dk https://*.vipps.no https://*.paypal.com https://*.idealapi.nl https://*.ideal.nl https://dkcompany.imgix.net https://dkcompany-test.imgix.net https://dkcompany-ctf.imgix.net https://*.dkcompanyshop.com https://*.productmarketingcloud.com https://vitals.vercel-insights.com https://www.googletagmanager.com https://*.google-analytics.com https://fonts.googleapis.com https://plausible.io https://*.googlesyndication.com https://*.azure.com https://*.services.visualstudio.com https://*.ctfassets.net https://*.facebook.net https://*.cookieinformation.com https://*.voyado.com https://*.vercel-scripts.com https://hook.eu1.make.com https://dk-company.webshipper.io https://*.clarity.ms https://js.klarna.com https://eu.klarnaevt.com https://*.klarnaservices.com https://*.sleeknote.com https://*.relewise.com https://*.eyefitu.com https://*.bing.com https://*.facebook.com https://*.facebook.net https://*.youtube.com https://*.vimeo.com https://*.pinimg.com https://*.tiktok.com https://*.pinterest.com https://*.google.com https://*.google.dk https://*.doubleclick.net https://*.getflowbox.com https://cdn.flbx.io https://*.dialogintelligens.dk https://*.soakedinluxury.com https://*.parttwo.com https://*.woodwood.com https://*.ivyoak.com https://*.matinique.com https://*.inwear.com https://*.sainttropez.com https://*.dkcompany.com https://*.casual-friday.eu https://*.atelierreve.biz https://*.sorbetshop.com https://*.designersmarket.net https://*.blendcompany.com https://*.solid-official.com https://*.balloriginal.com https://*.pulzjeans.com https://*.byoung.com https://*.fransa.com https://*.ichi.biz https://*.karenbysimonsen.com https://*.kaffe-clothing.com https://*.culture-fashion.com https://*.cream-clothing.com https://*.gestuz.com https://*.myessentialwardrobe.com https://*.bonaparteshop.com https://*.companys.com https://*.byoung.no https://*.dkcompanyshop.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://*.klarnacdn.net; style-src 'self' https://dkcompany.altapaysecure.com https://fonts.googleapis.com https://*.klarnacdn.net 'unsafe-inline'; manifest-src 'self'; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'self' https://app.contentful.com; upgrade-insecure-requests; 5 default-src 'self'; script-src 'self'; 5 default-src 'self'; script-src 'self' 'sha256-x02jWIRuH8DM4N4XT/IlTB74yIzLXxLbQpqiIGQl09Y=' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://vimeo.com; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; 5 frame-ancestors 'self' *.appcard.com 5 default-src * blob: data: 'unsafe-eval' 'unsafe-inline' 5 default-src 'self' https: data: wss:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;style-src 'self' 'unsafe-inline' https:; 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss: ws:; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:; frame-ancestors 'self' https:; object-src 'none'; media-src 'self' https:; manifest-src 'self'; worker-src 'self'; child-src 'self' https:; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests; block-all-mixed-content; 5 frame-ancestors 'self' https://*.traumgutscheine.com 5 default-src 'self'; img-src * data: 'unsafe-inline' blob:; style-src * 'unsafe-inline' blob:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; form-action *; media-src *.readspeaker.com *.streamlock.net *.archieven.nl storage.googleapis.com scribit-pro-hosting.storage.googleapis.com scribit-pro.storage.googleapis.com app.talkjs.com *.bbvms.com *.cloudfront.net data: 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; 5 frame-ancestors 'self' https://*.datocms.com https://cms.egsoftware.com 5 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://deviceid.notolytix.com https://*.userguiding.com https://connect.facebook.net https://snap.licdn.com https://*.hotjar.com https://apis.google.com https://omg.toptex.fr https://www.googletagmanager.com https://sdk.privacy-center.org https://www.google.com https://ajax.cloudflare.com/ https://www.gstatic.com https://ipinfo.io https://cdn.jsdelivr.net https://*.lyra.com https://static.cloudflareinsights.com https://tag.toptex.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdn.toptex.com https://fonts.googleapis.com https://api.lyra.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://googleads.g.doubleclick.net https://px4.ads.linkedin.com https://*.privacy-center.org https://*.lyra.com https://www.googletagmanager.com https://www.facebook.com https://px.ads.linkedin.com https://www.google.com https://cdn.toptex.com https://tag.toptex.com https://region1.analytics.google.com https://www.google.fr https://stats.g.doubleclick.net https://www.toptex.fr https://*.toptex.com https://pagead2.googlesyndication.com https://files.europeancatalog.fr https://files.toptex.fr https://blog.toptex.com https://catalog.europeancatalog.fr; connect-src 'self' https://www.google.fr https://*.privacy-center.org https://*.toptex.com wss://ws.hotjar.com https://*.hotjar.io https://www.facebook.com https://*.userguiding.com https://px.ads.linkedin.com https://www.google.com https://insights.algolia.io https://ipinfo.io https://api.privacy-center.org https://pagead2.googlesyndication.com https://*.algolia.net; frame-src 'self' https://public.traceforgood.com https://vimeo.com https://www.youtube.com https://tag.toptex.com https://www.googletagmanager.com https://www.google.com https://api.lyra.com https://player.vimeo.com https://ns.europeancatalog.com https://www.europeancatalog.com https://challenges.cloudflare.com https://catalog.europeancatalog.fr; object-src 'self' www.toptex.com; base-uri 'self' https://cdn.toptex.com; form-action 'self' https://secure.lyra.com; upgrade-insecure-requests; worker-src 'self' blob:; 5 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: *.videoly.co *.youtube-nocookie.com *.youtube.com *.ytimg.com *.wistia.com *.wistia.net *.videoly.net *.twistoo.co; connect-src 'self' *.googletagmanager.com *.igodigital.com *.maxcdn.com *.polyfill.io *.facebook.net *.facebook.com *.searchnode.io *.omnisrc.com *.bitrec.io *.google.com *.google.ee *.google.fi *.google.lv *.google.lt *.google-analytics.com *.doubleclick.net *.soundestlink.com *.nr-data.net *.esto.ee *.hotjar.io *.cookieinformation.com *.searchnode.net *.bing.com *.googleapis.com *.googleadservices.com *.issuu.com *.cookiebot.com stape.io capig.stape.host analytics.tiktok.com *.twistoo.co t.cometlytrack.com google.com *.nosto.com respondent.survicate.com survey.survicate.com survey-prd.survicate-cdn.com *.cookieyes.com cdn-cookieyes.com *.cloudfront.net static.cloudflareinsights.com; font-src 'self' *.gstatic.com data: *.123formbuilder.com *.issuu.com *.bootstrapcdn.com *.twistoo.co surveys-static.survicate.com surveys-static-prd.survicate-cdn.com cdn.jsdelivr.net; frame-src 'self' *.123formbuilder.com *.facebook.com *.cookieinformation.com *.youtube.com *.youtube-nocookie.com *.issuu.com *.videoly.net *.cookiebot.com *.doubleclick.net *.flippingbook.com publuu.com googletagmanager.com *.google.com; img-src 'self' data: kotrynagroup.lt *.kotrynagroup.lt *.babycity.lt *.babycity.lv *.babycity.ee *.kidzone.lt *.kidzone.lv *.kidzone.ee *.kidzone.fi *.toycity.lt *.toycity.lv *.zaisluplaneta.lt *.jukukeskus.ee *.toysplanet.lv *.igodigital.com *.bing.com *.facebook.com *.google-analytics.com *.google.com *.google.lt *.google.lv *.google.ee *.google.fi *.ytimg.com *.videoly.co *.adnxs.com *.reddit.com *.googleapis.com *.gstatic.com *.youtube.com *.ckeditor.com *.doubleclick.net *.kotrynagroup.com *.googleadservices.com *.googletagmanager.com *.issuu.com *.wistia.com *.wistia.net *.cookiebot.com analytics.tiktok.com *.twistoo.co surveys-static.survicate.com surveys-static-prd.survicate-cdn.com assets.survicate.com img.survicate.com images.unsplash.com cdn-cookieyes.com; media-src *.twistoo.co data:; script-src 'self' 'unsafe-hashes' 'unsafe-eval' 'unsafe-inline' *.nr-data.net *.google.com *.google.lt *.google.lv *.google.fi *.google.ee *.igodigital.com polyfill.io *.bitrec.com *.googletagmanager.com *.facebook.net *.searchnode.io *.google-analytics.com *.doubleclick.net *.hotjar.com *.bing.com *.youtube.com omnisrc.com *.sentry-cdn.com *.soundestlink.com omnisnippet1.com *.doubleclick.net *.newrelic.com *.videoly.co *.123formbuilder.com *.esto.ee *.redditstatic.com *.cookieinformation.com *.adnxs.com *.googleapis.com *.ckeditor.com *.jsdelivr.net *.googleadservices.com *.issuu.com *.youtube-nocookie.com *.ytimg.com *.videoly.net *.cookiebot.com stape.io capig.stape.host analytics.tiktok.com *.publuu.com cdnjs.cloudflare.com *.twistoo.co t.cometlytrack.com static.cloudflareinsights.com *.nosto.com nosto.stackla.com *.cloudfront.net survey.survicate.com surveys-static.survicate.com surveys-static-prd.survicate-cdn.com survey-prd.survicate-cdn.com cdn-cookieyes.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.123formbuilder.com *.ckeditor.com *.jsdelivr.net *.issuu.com *.bootstrapcdn.com cdnjs.cloudflare.com *.twistoo.co *.cloudfront.net surveys-static.survicate.com surveys-static-prd.survicate-cdn.com 5 default-src https: data:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; 5 default-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https:;connect-src 'self' https:;img-src 'self' data: https:;style-src 'self' 'unsafe-inline' https:;font-src 'self' data: https:;worker-src 'self' blob: data:;media-src 'self' https:;frame-src 'self' https: 5 default-src 'self'; img-src 'self' https://dovendi.b-cdn.net data:; font-src 'self' https://fonts.gstatic.com; script-src 'self' https://dovendi.b-cdn.net https://www.feedbackcompany.com https://analytics.dovendi.com 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' https://dovendi.b-cdn.net https://www.feedbackcompany.com https://analytics.dovendi.com 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://dovendi.b-cdn.net https://fonts.googleapis.com; frame-src 'self' https://www.feedbackcompany.com; connect-src 'self' https://www.feedbackcompany.com https://analytics.dovendi.com; 5 frame-ancestors 'self' *.netcinesy.lat netcinesy.lat 5 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.agricharts.com *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net code.jquery.com cdn.datatables.net *.googletagmanager.com twitter.com *.twitter.com *.windy.com *.financialcontent.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.websol.barchart.com media.agricharts.com *.barchart.com; object-src 'self' s3.amazonaws.com media.agricharts.com; frame-src 'self' *.youtube.com *.facebook.com www.google.com twitter.com *.twitter.com *.windy.com www.screencast.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.websol.barchart.com; worker-src 'self' s3.amazonaws.com media.agricharts.com blob:; frame-ancestors 'self'; 5 frame-ancestors *; report-uri /log/csp-violation 5 form-action 'self' https://bib.eway2pay.com https://ipg.monri.com https://ipgtest.monri.com https://virtualpostest.sia.eu https://virtualpos.sia.eu https://rs.raiffeisenbank.rs https://rol.raiffeisenbank.rs https://ecommerce.raiffeisenbank.rs https://formtest.wspay.biz https://form.wspay.biz; report-uri /csp-report; 5 frame-ancestors 'self' *.intuit.com 4 frame-ancestors 'self' https://axon-cms.sanity.studio http://localhost:3000 https://*.sanity.studio https://*.sanity.io 4 frame-ancestors 'self' https://www.onetrust.com https://connect.onetrust.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.6sc.co *.adobe.com *.adobe.io *.adobeaemcloud.com *.adobedtm.com *.akamaihd.net *.amazonaws.com *.bing.com *.bizographics.com *.chargebee.com *.chargebeestatic.com *.cloudflare.com *.cloudflareinsights.com *.cookiebanners.com *.cookielaw.org *.crazyegg.com *.demdex.net *.driftt.com *.eloqua.com *.en25.com *.everestjs.net *.everesttech.net *.force.com *.g2.com *.goconsensus.com *.google-analytics.com *.google.com *.google.co.in *.googleadservices.com *.googleapis.com *.googleleadservices.com *.googletagmanager.com *.greenhouse.io *.gstatic.com *.hsforms.com *.hsforms.net *.jquery.com *.licdn.com *.linkedin.com *.marketo.net *.mktorest.com *.omtrdc.net *.onetrust.com *.onetrust.ninja *.otprivacy.com *.platform.twitter.com *.salesforce.com *.salesforceliveagent.com *.twimg.com *.twitter.com unpkg.com *.wistia.com *.wistia.net *.youtube-nocookie.com *.youtube.com fonts.google.com *.mktoweb.com *.day.com www.day.com *.mktoresp.com cdn.linkedin.oribi.io cm.everesttech.net *.adobeaemcloud.net *.litix.io *.tugboatlogic.com *.bizible.com *.bizibly.com *.scene7.com *.cvent.com *.cvent.cloud *.turtl.co *.mktoutil.com pactsafe.io *.pactsafe.io *.cloudfront.net *.adnxs.com *.qualified.com wss://*.qualified.com wss://ws7.qualified.com *.daily.co wss://*.daily.co *.doubleclick.net *.redditstatic.com *.reddit.com *.googlesyndication.com *.clarity.ms; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.6sc.co *.adobe.com *.adobe.io *.adobeaemcloud.com *.adobedtm.com *.akamaihd.net *.amazonaws.com *.bing.com *.bizographics.com *.chargebee.com *.chargebeestatic.com *.cloudflare.com *.cloudflareinsights.com *.cookiebanners.com *.cookielaw.org *.crazyegg.com *.demdex.net *.driftt.com *.eloqua.com *.en25.com *.everestjs.net *.everesttech.net *.force.com *.g2.com *.goconsensus.com *.google-analytics.com *.google.com *.google.co.in *.googleadservices.com *.googleapis.com *.googleleadservices.com *.googletagmanager.com *.greenhouse.io *.gstatic.com *.hsforms.com *.hsforms.net *.jquery.com *.licdn.com *.linkedin.com *.marketo.net *.mktorest.com *.omtrdc.net *.onetrust.com *.aem.onetrust.com *.onetrust.ninja *.otprivacy.com *.platform.twitter.com *.salesforce.com *.salesforceliveagent.com *.twimg.com *.twitter.com unpkg.com *.wistia.com *.wistia.net *.youtube-nocookie.com *.youtube.com fonts.google.com *.mktoweb.com *.day.com www.day.com *.mktoresp.com cdn.linkedin.oribi.io cm.everesttech.net *.adobeaemcloud.net *.litix.io *.tugboatlogic.com *.bizible.com *.bizibly.com *.scene7.com *.cvent.com *.cvent.cloud *.turtl.co *.mktoutil.com pactsafe.io *.pactsafe.io *.cloudfront.net *.adnxs.com *.qualified.com wss://*.qualified.com wss://ws7.qualified.com *.daily.co wss://*.daily.co *.doubleclick.net *.redditstatic.com *.reddit.com *.googlesyndication.com *.clarity.ms; connect-src 'self' blob: *.6sc.co *.adobe.com *.adobe.io *.adobeaemcloud.com *.adobedtm.com *.akamaihd.net *.amazonaws.com *.bing.com *.bizographics.com *.chargebee.com *.chargebeestatic.com *.cloudflare.com *.cloudflareinsights.com *.cookiebanners.com *.cookielaw.org *.crazyegg.com *.demdex.net *.driftt.com *.eloqua.com *.en25.com *.everestjs.net *.everesttech.net *.force.com *.g2.com *.goconsensus.com *.google-analytics.com *.google.com *.google.co.in *.googleadservices.com *.googleapis.com *.googleleadservices.com *.googletagmanager.com *.greenhouse.io *.gstatic.com *.hsforms.com *.hsforms.net *.jquery.com *.licdn.com *.linkedin.com *.marketo.net *.mktorest.com *.omtrdc.net *.onetrust.com *.aem.onetrust.com *.onetrust.ninja *.otprivacy.com *.platform.twitter.com *.salesforce.com *.salesforceliveagent.com *.twimg.com *.twitter.com unpkg.com *.wistia.com *.wistia.net *.youtube-nocookie.com *.youtube.com fonts.google.com *.mktoweb.com *.day.com www.day.com *.mktoresp.com cdn.linkedin.oribi.io cm.everesttech.net *.adobeaemcloud.net *.litix.io *.tugboatlogic.com *.bizible.com *.bizibly.com *.scene7.com *.cvent.com *.cvent.cloud *.turtl.co *.mktoutil.com pactsafe.io *.pactsafe.io *.cloudfront.net *.adnxs.com *.qualified.com wss://*.qualified.com wss://ws7.qualified.com *.daily.co wss://*.daily.co *.doubleclick.net *.redditstatic.com *.reddit.com *.googlesyndication.com *.clarity.ms; img-src 'self' data: https://www.googleadservices.com https://www.google.com https://www.google.co.kr https://www.google.co.in *.6sc.co *.adobe.com *.adobe.io *.adobeaemcloud.com *.adobedtm.com *.akamaihd.net *.amazonaws.com *.bing.com *.bizographics.com *.chargebee.com *.chargebeestatic.com *.cloudflare.com *.cloudflareinsights.com *.cookiebanners.com *.cookielaw.org *.crazyegg.com *.demdex.net *.driftt.com *.eloqua.com *.en25.com *.everestjs.net *.everesttech.net *.force.com *.g2.com *.goconsensus.com *.google-analytics.com *.google.com *.google.co.in *.googleadservices.com *.googleapis.com *.googleleadservices.com *.googletagmanager.com *.greenhouse.io *.gstatic.com *.hsforms.com *.hsforms.net *.jquery.com *.licdn.com *.linkedin.com *.marketo.net *.mktorest.com *.omtrdc.net *.onetrust.com *.aem.onetrust.com *.onetrust.ninja *.otprivacy.com *.platform.twitter.com *.salesforce.com *.salesforceliveagent.com *.twimg.com *.twitter.com unpkg.com *.wistia.com *.wistia.net *.youtube-nocookie.com *.youtube.com fonts.google.com *.mktoweb.com *.day.com www.day.com *.mktoresp.com cdn.linkedin.oribi.io cm.everesttech.net *.adobeaemcloud.net *.litix.io *.tugboatlogic.com *.bizible.com *.bizibly.com *.scene7.com *.cvent.com *.cvent.cloud *.turtl.co *.mktoutil.com pactsafe.io *.pactsafe.io *.cloudfront.net *.adnxs.com *.qualified.com wss://*.qualified.com wss://ws7.qualified.com *.daily.co wss://*.daily.co *.doubleclick.net *.redditstatic.com *.reddit.com *.googlesyndication.com *.clarity.ms; style-src 'self' 'unsafe-inline' *.googleapis.com *.turtl.co *.onetrust.com *.aem.onetrust.com; media-src * blob:; worker-src * blob:; base-uri 'self'; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: wss: mediastream: android-webview-video-poster: ms-appx-web: gsa: endlesspic: ms-browser-extension chrome-extension asset * ; frame-ancestors 'self' https://*.trendmicro.com https://resources.trendmicro.com 4 default-src 'self' *.techcrunch.com; frame-ancestors 'self'; frame-src 'self' https: data:; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:; connect-src 'self' https: data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' * blob:; worker-src 'self' blob:; media-src 'self' * data: blob:; font-src 'self' * data:; upgrade-insecure-requests; block-all-mixed-content; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox; 4 frame-ancestors 'self' *.doubleverify.com 4 default-src * 'self' blob: data: 'unsafe-inline'; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com 4 frame-ancestors 'self' https://*.otto.de https://*.ottogroup.com https://og2gether.sharepoint.com https://otto.mpp360.cloud https://internal.otto.market; 4 default-src 'self' https://accounts.google.com/gsi/ ; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://platform.twitter.com/js/ https://platform.twitter.com/widgets.js https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://accounts.google.com/gsi/client https://adora-cdn.com/adora-start.js ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://accounts.google.com/gsi/style ; object-src 'none' ; base-uri 'self' ; font-src 'self' https://fonts.gstatic.com ; connect-src 'self' https://static.figma.com https://forms.figma.com https://boards-api.greenhouse.io/v1/boards/figma/jobs https://vimeo.com https://accounts.google.com/gsi/ https://figma.com/api/figment-proxy/monitor https://staging.figma.com/api/figment-proxy/monitor https://figma.com/api/figment-proxy/identify https://staging.figma.com/api/figment-proxy/identify https://figma.com/api/figment-proxy/page https://staging.figma.com/api/figment-proxy/page https://cdn.sanity.io https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://prodregistryv2.org/v1/rgstr https://featuregates.org/v1/initialize https://featureassets.org/v1/initialize https://o22594.ingest.sentry.io *.adora-cdn.com https://figma-marketing-tools.vercel.app/api/white-background ; frame-src 'self' *.figma.site https://www.figma.com https://marketing.figma.com https://marketing.staging.figma.com https://platform.twitter.com https://player.vimeo.com https://www.youtube.com https://accounts.google.com/gsi/ https://figma.com/api/figment-proxy/monitor https://staging.figma.com/api/figment-proxy/monitor https://figma.com/api/figment-proxy/identify https://staging.figma.com/api/figment-proxy/identify https://figma.com/api/figment-proxy/page https://staging.figma.com/api/figment-proxy/page ; img-src 'self' data: blob: https://cdn.sanity.io https://i.vimeocdn.com https://*.figma.com https://i.ytimg.com https://www.gravatar.com https://i0.wp.com/s3-alpha.figma.com/ https://i1.wp.com/s3-alpha.figma.com/ https://i2.wp.com/s3-alpha.figma.com/ https://i3.wp.com/s3-alpha.figma.com/ ; media-src 'self' https://cdn.sanity.io https://static.figma.com ; worker-src 'self' ; upgrade-insecure-requests 4 default-src 'self' blob: 'unsafe-inline' 'unsafe-eval' d18kwxxua7ik1y.cloudfront.net d22r54gnmuhwmk.cloudfront.net *.change.org change-production.s3.amazonaws.com change-public-stuff.s3.amazonaws.com *.google.ca *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.doubleclick.net *.google.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.recaptcha.net *.ytimg.com *.facebook.com *.facebook.net *.fbcdn.net fbrpc://* fb-messenger://* ajax.cdnjs.com cdnjs.cloudflare.com service.force.com *.salesforceliveagent.com *.braintreegateway.com *.paypalobjects.com *.paypal.com *.braintree-api.com *.stripe.com *.dlocal.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com px-cdn.net *.px-cdn.net *.px-client.net *.px-cloud.net pxchk.net *.pxchk.net surveys-web.delighted.com p2a.co js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net *.messagebird.com secure.everyaction.com d3rse9xjbp8270.cloudfront.net *.ngpvan.com js2.verygoodvault.com sr-client-cfg.amplitude.com api-sr.amplitude.com api2.amplitude.com https://*.amplitude.com *.mux.com *.litix.io bat.bing.com bat.bing.net code.jquery.com player.vimeo.com soundcloud.com *.soundcloud.com www.instagram.com www.flickr.com *.staticflickr.com *.voteamerica.com *.jotform.com actionnetwork.org *.airbrake.io *.sentry.io browser-update.org *.tiktok.com *.bannerbear.com ads.nextdoor.com flask.nextdoor.com *.maze.co us-central1-niftic-agency.cloudfunctions.net/change-starter-image us-central1-niftic-agency.cloudfunctions.net/openai/generate-draft us-central1-niftic-agency.cloudfunctions.net/openai/generate-image iframely.net cdn.iframe.ly tiles.openfreemap.org a.tile.openstreetmap.org change.my.salesforce.com help.change.org; font-src 'self' data: *.change.org d18kwxxua7ik1y.cloudfront.net d22r54gnmuhwmk.cloudfront.net fonts.gstatic.com d3rse9xjbp8270.cloudfront.net; img-src * blob: data:; form-action 'self' https://www.paypal.com; frame-ancestors 'self' 4 default-src 'self' https://*.queue-it.net/ https://*.costco.ca/ https://*.costco.com/ https://*.costcobusinessdelivery.com/ https://*.costcobusinesscentre.ca/ https://*.costcobusinesscenter.ca/ https://*.costco-static.com/ https://display.ugc.bazaarvoice.com/ https://api.bazaarvoice.com/; script-src 'self' https://h.costco.com/ https://h.online-metrix.net/ https://*.cybersource.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.cdn-path.com/ https://h.costco.com/ https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://*.queue-it.net/ https://*.costcobusinessdelivery.com https://*.costcobusinesscenter.ca/ https://cdn.intake-lr.com/ https://cdn.cookielaw.org/ https://*.criteo.com/ http://*.criteo.com/ https://assets.adobedtm.com/ https://s.go-mpulse.net/ https://transcend-cdn.com/ https://apps.bazaarvoice.com/ https://display.ugc.bazaarvoice.com/ https://mobilecontent.costco.com/ https://mobilecontent-qa.costco.com/ https://*.pxlecdn.com https://*.pixlee.com https://*.pixlee.co 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://cdn.fonts.net/ 'unsafe-inline' https://transcend-cdn.com/ https://consent.costco.com/ https://consent.costco.ca/ https://consent.costco.com https://display.ugc.bazaarvoice.com/; img-src 'self' https://*.costcobusinessdelivery.com https://*.tiles.virtualearth.net/ https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://*.costco.ca/ https://*.costco.com/ https://*.costcotravel.com/ https://*.costcotravel.ca/ https://cdn.bfldr.com/ https://*.contentstack.com/ https://*.costco-static.com/ https://cdn.cookielaw.org/ https://cm.everesttech.net/ https://dpm.demdex.net/ https://display.ugc.bazaarvoice.com https://retailmedia-static.azureedge.net https://retailmedia-static.azureedge.net/ https://network-a.bazaarvoice.com https://network-stg-a.bazaarvoice.com https://retailmedia-static.criteo.com/ blob: data:; media-src 'self' https://*.costcobusinessdelivery.com https://*.costco.ca/ https://*.costco.com/ https://cdn.bfldr.com/ https://*.contentstack.com/ https://*.costco-static.com/ https://*.criteo.net/ https://retailmedia-static.criteo.com/ https://*.criteo.net; font-src 'self' https://cdn.bfldr.com/ https://*.costco-static.com/ https://fonts.gstatic.com data:; object-src 'none'; base-uri 'self' about:; form-action 'self' https://*.cardinalcommerce.com https://www.cdn-path.com/ https://*.costcobusinessdelivery.com https://*.costco.ca/ https://*.costco.com/ https://r.intake-lr.com/ https://*.akstat.io https://*.opinionlab.com; frame-src https://*.cardinalcommerce.com https://www.cdn-path.com/ https://h.costco.com/ https://h.online-metrix.net/ https://*.cybersource.com/ https://*.costcobusinessdelivery.com https://*.costcobusinesscentre.ca/ https://*.ct-costco.com https://costco.demdex.net/ https://costco.centah.com/ https://consent-sync.costco.com/ https://consent-sync.costco.ca/ https://*.criteo.com/ http://*.criteo.com https://*.pixlee.com https://*.pixlee.co https://*.costco.com/ https://*.costco.ca/ https://*.dynatrace.com https://login.centah.com/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://cmppapi.cervey.com/; connect-src 'self' https://h.costco.com/ https://cdn.bfldr.com/ https://*.dynatrace.com https://www.google.com/recaptcha/ https://gdx-api.costco.com https://gdx-npd.np.api.cc-costco.com https://api-tst.np.gdx.cc-costco.com https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://spatial.virtualearth.net/ https://*.queue-it.net/ https://*.costcobusinessdelivery.com/ https://*.costcobusinesscenter.ca/ https://*.costcobusinesscentre.ca/ https://*.costco.ca/ https://*.costco.com/ https://*.costco-static.com/ https://*.ct-costco.com https://cdn.cookielaw.org/ https://geolocation.onetrust.com/ https://costco.demdex.net/ https://dpm.demdex.net/ https://costco.tt.omtrdc.net/ https://*.criteo.com/ http://*.criteo.com/ https://*.criteo.net/ https://cm.everesttech.net/ https://r.intake-lr.com/ https://*.contentstack.com/ https://assets.adobedtm.com/ https://dcs.adobedc.net/ https://*.akstat.io https://*.go-mpulse.net/ https://*.akamaihd.net https://adobedc.demdex.net/ https://sync-transcend-cdn.com https://transcend-cdn.com/ https://telemetry.transcend.io/ https://telemetry.us.transcend.io/ https://privacyportal.onetrust.com/ https://consent.us.transcend.io/ https://api.bazaarvoice.com/ https://stg.api.bazaarvoice.com/; child-src 'self' blob: data:; upgrade-insecure-requests; 4 frame-ancestors 'self' https://support.ancestry.com 4 frame-ancestors nypost.com decider.com pagesix.com *.nypost.com *.decider.com *.pagesix.com *.thesun.co.uk *.the-sun.com *.thescottishsun.co.uk *.thesun.ie *.staging-thesun.co.uk *.staging-the-sun.com *.staging-thescottishsun.co.uk *.staging-thesun.ie au-script.dotmetrics.net; form-action 'self' *.nypdev.com nypost.com decider.com pagesix.com *.nypost.com *.decider.com *.pagesix.com *.thesun.co.uk *.the-sun.com *.thescottishsun.co.uk *.thesun.ie *.staging-thesun.co.uk *.staging-the-sun.com *.staging-thescottishsun.co.uk *.staging-thesun.ie au-script.dotmetrics.net 4 frame-ancestors 'self' *.trust-provider.com secure.sectigo.com *.sectigo.net app.zoominfo.com 4 frame-ancestors 'self' https://builder.io https://*.builder.io 4 default-src 'self' https://www.rapid7.com https://old.rapid7.com https://rapid7-website-development.contentstackapps.com https://rapid7-website-staging.contentstackapps.com https://rapid7-website.contentstackapps.com https://newdev.rapid7.com https://staging.rapid7.com https://assets.contentstack.io https://*.qualified.com https://*.vwo.com; script-src 'self' blob: https://www.rapid7.com https://old.rapid7.com https://www.googletagmanager.com http://997-fka-652.mktoweb.com https://997-fka-652.mktoweb.com http://411-nak-970.mktoweb.com https://411-nak-970.mktoweb.com http://information.rapid7.com http://munchkin.marketo.net https://cdn.cookielaw.org https://play.vidyard.com https://packages.prmcdn.io https://connect.facebook.net https://*.6sc.co https://cdn.bizible.com https://*.g2crowd.com https://snap.licdn.com https://px.ads.linkedin.com https://munchkin.marketo.net https://*.clarity.ms https://ws.zoominfo.com https://bat.bing.com https://googleads.g.doubleclick.net https://*.google.com https://www.gstatic.com https://*.impartner.live https://*.qualified.com https://*.googleadservices.com https://*.zi-scripts.com https://*.vwo.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://cdn.pushcrew.com 'unsafe-inline'; style-src 'self' https://www.rapid7.com https://old.rapid7.com https://use.typekit.net https://p.typekit.net https://packages.prmcdn.io https://997-fka-652.mktoweb.com http://997-fka-652.mktoweb.com https://411-nak-970.mktoweb.com http://411-nak-970.mktoweb.com https://information.rapid7.com https://*.vwo.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://cdn.pushcrew.com 'unsafe-inline'; font-src 'self' data: https://www.rapid7.com https://old.rapid7.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://*.vwo.com; img-src 'self' data: blob: https: https://www.rapid7.com https://old.rapid7.com http://play.vidyard.com http://*.6sc.co https://*.6sc.co https://px.ads.linkedin.com https://bat.bing.com https://googleads.g.doubleclick.net https://*.vwo.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://useruploads.vwo.io https://cdn.pushcrew.com; connect-src 'self' https://www.rapid7.com https://old.rapid7.com https://*.googletagmanager.com https://*.adnxs.com https://*.6sense.com https://rapid7-website-development.contentstackapps.com https://rapid7-website-staging.contentstackapps.com https://rapid7-website.contentstackapps.com https://graphql.contentstack.com https://*.insight.rapid7.com https://newdev.rapid7.com https://staging.rapid7.com https://cdn.cookielaw.org https://*.google-analytics.com https://partners.rapid7.com https://*.algolia.net https://*.algolianet.com https://*.googlesyndication.com http://997-fka-652.mktoresp.com http://411-nak-970.mktoresp.com http://*.6sc.co https://*.6sc.co https://munchkin.marketo.net https://997-fka-652.mktoresp.com https://411-nak-970.mktoresp.com https://411-nak-970.mktoutil.com https://ws.zoominfo.com https://*.bing.com https://*.doubleclick.net https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://*.gstatic.com https://*.clarity.ms https://*.6sc.co https://*.onetrust.com https://*.my.onetrust.com https://*.google-analytics.com https://sessions.bugsnag.com https://*.pusher.com https://*.brighttalk.com https://*.g2.com https://*.qualified.com https://*.ads.linkedin.com https://*.zi-scripts.com https://*.bing.net https://*.analytics.google.com https://*.doubleclick.net wss://*.qualified.com wss://ws-mt1.pusher.com https://*.facebook.net https://*.facebook.com https://*.googleadservices.com https://*.vwo.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://play.vidyard.com https://*.grafana.net; frame-src https://product-tour.rapid7.com https://www.rapid7.com https://old.rapid7.com https://rapid7-website-development.contentstackapps.com https://rapid7-website-staging.contentstackapps.com https://rapid7-website.contentstackapps.com https://newdev.rapid7.com https://staging.rapid7.com https://play.vidyard.com https://*.googletagmanager.com https://997-fka-652.mktoweb.com http://997-fka-652.mktoweb.com https://www.brighttalk.com https://411-nak-970.mktoweb.com http://411-nak-970.mktoweb.com https://google.com https://www.rapid7.com/impartner.html https://rapid7-website.contentstackapps.com/impartner.html https://*.doubleclick.net https://*.qualified.com https://*.facebook.com https://information.rapid7.com https://www.google.com https://*.vwo.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://www.youtube.com; worker-src 'self' blob:; frame-ancestors 'self' https://www.rapid7.com https://old.rapid7.com https://newdev.rapid7.com https://staging.rapid7.com https://rapid7-website.contentstackapps.com https://rapid7-website-staging.contentstackapps.com https://rapid7-website-development.contentstackapps.com https://app.contentstack.com https://tools.marketing.rapid7.com https://dev.tools.marketing.rapid7.com https://stage.tools.marketing.rapid7.com 4 default-src https: 'unsafe-inline' 'unsafe-eval'; script-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: 'unsafe-inline'; img-src https: data: blob: 'unsafe-inline'; frame-src https:; style-src https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; 4 upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 4 frame-ancestors 'self' https://console.dnspod.cn 4 default-src 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: about: miroapp: wss: ws: *; frame-src 'unsafe-inline' 'unsafe-eval' data: blob: miroapp: *; base-uri 'unsafe-inline' about: data: *; form-action 'unsafe-inline' data: post-it-alpha: post-it: com.mmm.postit.miro: *; worker-src 'unsafe-inline' data: blob: miroapp: *; report-uri https://s.realtimeboard.com/api/25/security/?sentry_key=fb5e3001534f453e85d1771b1088b293&sentry_environment=production; 4 frame-ancestors https://www.airship.com/ https://app.mutinyhq.com/; upgrade-insecure-requests; 4 object-src 'none'; frame-ancestors 'self' https://vwo.com https://wingify.com https://*.wingify.com https://*.vwo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://vwo.com https://*.vwo.com https://*.abtasty.com https://*.wingify.com https://*.wingify.net https://*.clearbitscripts.com https://*.clearbit.com https://*.clearbitjs.com https://*.openai.com https://www.instagram.com/embed.js https://googletagmanager.com https://pulse.vwo.io https://pxl.sprouts.ai https://player.vimeo.com https://fast.wistia.net https://fast.wistia.com https://api.cr-relay.com https://cdn.cr-relay.com https://cdn.vector.co https://static.licdn.com https://www.googletagmanager.com https://research.landingpageanalyzer.io https://www.google.com https://cdnjs.cloudflare.com https://alfred-chat.paramize.com https://cse.google.com https://static.getclicky.com https://stats.g.doubleclick.net https://code.jquery.com https://cdn.cookielaw.org https://platform.twitter.com https://js.sentry-cdn.com https://cdn.jsdelivr.net https://browser.sentry-cdn.com https://www.google-analytics.com https://munchkin.marketo.net https://platform.linkedin.com https://widget.intercom.io https://js.intercomcdn.com https://snap.licdn.com https://pagead2.googlesyndication.com https://*.visualwebsiteoptimizer.com https://www.linkedin.com https://unpkg.com https://connect.facebook.net https://www.redditstatic.com https://bat.bing.com https://bat.bing-int.com https://s.adroll.com https://js.partnerstack.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://d.adroll.com https://cdn.pushcrew.com https://cdn.segment.com https://www.gstatic.com https://vwo-stats-blog.disqus.com https://c.disquscdn.com https://apis.google.com https://glitter.services.disqus.com https://referrer.disqus.com; style-src 'self' 'unsafe-inline' https://*.vwo.com https://*.wingify.com https://player.vwo.me https://static.licdn.com https://s3.amazonaws.com https://*.visualwebsiteoptimizer.com https://cdn.pushcrew.com https://cdn.cookielaw.org https://www.googletagmanager.com https://research.landingpageanalyzer.io https://app.vwo.com https://fast.wistia.com https://www.gstatic.com https://alfred-chat.paramize.com https://c.disquscdn.com https://fonts.googleapis.com https://cdn.jsdelivr.net; frame-src 'self' blob: mailto: https://api.vector.co https://fast.wistia.net https://fast.wistia.com https://embed.wistia.com https://*.wistia.com https://www.instagram.com https://www.googletagmanager.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.wingify.com https://player.vwo.me https://research.landingpageanalyzer.io https://spreadsheets.google.com https://www.linkedin.com https://platform.twitter.com https://www.slideshare.net https://es.slideshare.net https://player.vimeo.com https://docs.google.com https://demo.arcade.software https://open.spotify.com https://pca.st https://www.youtube-nocookie.com https://www.youtube.com https://td.doubleclick.net https://x.adroll.com https://app.vwo.com https://disqus.com https://pippio.com https://live.rezync.com https://accounts.google.com https://www.facebook.com https://www.google.com; worker-src 'self' blob:; report-uri https://o10907.ingest.us.sentry.io/api/4508420150788096/security/?sentry_key=8554c521f7daece1fb5ae0ba9ce98b2b; 4 default-src 'none'; form-action 'self' https://login.microsoftonline.com https://madmimi.com https://cdn.jsdelivr.net https://www.facebook.com; frame-ancestors 'self' https://*.matomo.cloud https://*.innocraft.cloud http://localhost; base-uri 'self' https://demo-web.matomo.org https://web.innocraft.cloud; connect-src 'self' https://matomo.org https://web.innocraft.cloud https://www.userlike.com https://cdn.plyr.io https://demo-web.matomo.org https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com wss://chat.userlike.com wss://umd.userlike.com https://api.userlike.com https://video.matomo.org https://api.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://v1.api.service.cmp.usercentrics.eu https://privacy-proxy.usercentrics.eu https://graphql.usercentrics.eu; script-src 'self' https://cdn-4.convertexperiments.com https://snap.licdn.com https://userlike-cdn-umm.b-cdn.net https://web.innocraft.cloud https://cdn.matomo.cloud https://embed.clickmeeting.com https://madmimi.com https://cdn.shortpixel.ai https://cdnjs.cloudflare.com https://www.youtube.com api.userlike.com https://d3dc1lgancj6l0.cloudfront.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://demo-web.matomo.org https://m-img.org 'unsafe-eval' 'unsafe-inline' https://app.usercentrics.eu https://api.usercentrics.eu https://web.cmp.usercentrics.eu https://privacy-proxy.usercentrics.eu; style-src 'self' 'unsafe-inline' https://demo-web.matomo.org https://web.innocraft.cloud https://app.usercentrics.eu; img-src 'self' https://*.matomo.org https://demo-web.matomo.org https://web.innocraft.cloud https://plugins.matomo.org https://qrcode.kaywa.com https://raw.githubusercontent.com https://user-images.githubusercontent.com https://m-img.org https://piwik.org https://matomo.org https://video.matomo.org https://app.usercentrics.eu https://uct.service.usercentrics.eu api.userlike.com https://userlike-cdn-operators.userlike.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com data:; media-src 'self' https://video.matomo.org https://www.matomo.org https://matomo.org blob:; font-src 'self' https://matomo.org https://*.matomo.org https://userlike-cdn-umm.b-cdn.net https://demo-web.matomo.org https://web.innocraft.cloud data: https://github.com https://d3dc1lgancj6l0.cloudfront.net; frame-src 'self' https://www.facebook.com https://play.quickchannel.com https://matomo.clickmeeting.com https://embed.clickmeeting.com https://www.youtube-nocookie.com https://demo.matomo.cloud https://demo-web.matomo.org https://demo2.piwik.org https://demo2.matomo.org https://app.usercentrics.eu https://web.cmp.usercentrics.eu; 4 frame-ancestors 'self' https://portal.watchguard.com https://portal.staging.watchguard.com https://portal.test.watchguard.com https://portal.devci.watchguard.com; report-uri /report-csp-violation 4 default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com marketing-forms-api.github.com experience.ninetailed.co ingest.insights.ninetailed.co edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com s88570519.t.eloqua.com/e/f2; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com octocaptcha.com play.vidyard.com preview.widgets.ninetailed.io; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com images.ctfassets.net/8aevphvgewt8/ images.ctfassets.net/wfutmusr1t3h/ images.ctfassets.net/aukesvz1i7g8/; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com videos.ctfassets.net/8aevphvgewt8/ videos.ctfassets.net/wfutmusr1t3h/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ 4 frame-ancestors 'self' https://*.hootsuite.com https://*.talkwalker.com https://hootsuite.com https://talkwalker.com https://app.contentful.com https://*.optimizely.com; report-uri https://o3805.ingest.sentry.io/api/6608832/security/?sentry_key=f44c14ec894c4667b3fd34b84042794d 4 child-src 'unsafe-inline' 'self' *.directnic.net *.livechatinc.com *.livechat.s3.amazonaws.com *.livechat-files.com *.paypal.com *.trustpilot.com *.google.com *.youtube.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.g.doubleclick.net *.braintree.com *.hcaptcha.com; frame-ancestors 'self' directnic.net; 4 frame-ancestors 'self' https://cart.penguinrandomhouse.com/ https://sites.dev.penguinrandomhouse.com/ https://sites.tst.penguinrandomhouse.com/ https://sites.prh.com/ https://iteratehq.com/ https://c.lytics.io/ *.penguinrandomhouse.com *.dev.penguinrandomhouse.com *.tst.penguinrandomhouse.com 4 frame-ancestors 'self' https://mobile.southwest.com https://mobile-offline.southwest.com https://www.southwest.com https://www.swabiz.com; 4 frame-ancestors 'self' https://*.adobe.com; 4 default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' http://img.youtube.com 4 default-src 'self' *.vidyard.com *.onetrust.com *.zi-scripts.com *.salesloft.com; frame-ancestors 'self'; form-action *; object-src 'none'; base-uri 'none'; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' blob:; img-src * 'unsafe-inline' 'unsafe-eval' data: blob:; connect-src *; worker-src * blob:; frame-src * blob:; font-src * data:; media-src * blob:; 4 default-src 'unsafe-inline' 'unsafe-eval' 'self' *.cloudflare.com www.yola.com unpkg.com *.yolacdn.net cdn.ravenjs.com *.googleapis.com *.sharethis.com www.googleoptimize.com www.googletagmanager.com *.googleusercontent.com *.gstatic.com secure.gravatar.com www.facebook.com www.google-analytics.com *.google.com *.yola.net *.yola.com *.yolaqa.com *.storylane.io *.vimeo.com *.player.vimeo.com *.vimeocdn.com *.f.vimeocdn.com *.i.vimeocdn.com jitter.video stats.g.doubleclick.net *.fullstory.com s.w.org *.sitewit.com *.wikimedia.org www.youtube.com wp-themes.com *.sitebuilderhostqa.net *.contentsquare.net *.plerdy.com data: blob:;frame-ancestors 'self'; form-action 'self'; 4 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-video-poster:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'self' http://*.theweathernetwork.com https://*.theweathernetwork.com http://*.meteomedia.com https://*.meteomedia.com https://sdk.privacy-center.org https://api.privacy-center.org; 4 default-src 'none'; connect-src 'self' https://piwik.documentfoundation.org; font-src 'self'; form-action 'self' https://www.paypal.com; frame-src https://www.youtube-nocookie.com https://js.stripe.com/; frame-ancestors 'none'; img-src 'self' data: https://*.documentfoundation.org https://*.tile.openstreetmap.org; script-src 'self' https://*.documentfoundation.org https://js.stripe.com/v3/; style-src 'self' 4 default-src 'self' blob:; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' blob: data: analytics.o11.tech *.amplitude.com app-ab56.marketo.com *.optimonk.com cdn.jsdelivr.net d2c7xlmseob604.cloudfront.net *.impartner.live *.intentsify.io js.hs-scripts.com munchkin.marketo.net translate.google.com/translate_a/element.js web.bentley.com *.ads.linkedin.com *.ads-twitter.com *.amazonaws.com *.bentley.com *.bing.com *.brightcove.net *.byspotify.com cdn.optimizely.com *.optimizely.com www.clarity.ms *.cloudflare.com *.cloudfront.net *.company-target.com *.demandbase.com *.drift.com *.driftt.com *.doubleclick.net *.excentos.com *.facebook.net *.feedbackify.com *.flockler.com *.getsmartling.com *.github.io *.google-analytics.com *.google.com googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.googletagmanager.com www.google-analytics.com www.google.com *.gstatic.cn *.gstatic.com *.hsforms.net *.intentsify.io *.jotform.com *.marketo.com *.marketo.net *.mouseflow.com *.onetrust.com *.optimonk.com packages.prmcdn.io *.pagespeed-mod.com *.pingdom.net pixel.byspotify.com pvdpix.com qvdt3feo.com *.recaptcha.net *.redditstatic.com static.hsappstatic.net/MeetingsEmbed/ex/MeetingsEmbedCode.js *.salesloft.com *.siteintercept.qualtrics.com *.surveysparrow.com tags.srv.stackadapt.com *.tailwindcss.com *.tourial.com *.twitter.com *.usbrowserspeed.com *.userway.org *.zencdn.net 1.safecdn01.com accessibilityserver.org api.hubspot.com bat.bing.com/bat.js beacon-v2.helpscout.net/ bentleypocstg.wpengine.com blibok.com c.itaozi.cn cdn.cookielaw.org cdn.mathjax.org cdn.mouseflow.com click.easypower.com client.prod.mplat-ppcprotect.com connect.facebook.net conoret.com cookie-cdn.cookiepro.com d2c7xlmseob604.cloudfront.net fast.wistia.com form.jotform.com/static/feedback.js forms.hubspot.com gateway.on24.com images.uc.cn js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hscollectforms.net js.hsforms.net js.hsleadflows.net js.hubspot.com js.usemessages.com mstat.acestream.net munchkin.marketo.net ob.segreencolumn.com pixel.byspotify.com players.brightcove.net relatedgamesnet-a.akamaihd.net scout-cdn.salesloft.com search.imtt.qq.com service.excentos.com snap.licdn.com snap.licdn.com/li.lms-analytics/insight.min.js static.ads-twitter.com tag.demandbase.com tags.srv.stackadapt.com ucads-cdn.ucweb.com unpkg.com unpkg.zhimg.com vjs.zencdn.net w8o39.m70vee7.com *.youtube.com *.visualwebsiteoptimizer.com app.vwo.com *.optimonk.com *.onsite.optimonk.com cdn-asset.optimonk.com https://bentleysystems.my.site.com; style-src 'self' 'report-sample' 'unsafe-inline' data: app-ab56.marketo.com *.bentley.com *.googleapis.com *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com *.easypower.com packages.prmcdn.io *.excentos.com *.optimonk.com https://bentleysystems.my.site.com/ESWLiveChatprod1757717595345/assets/styles/bootstrap.min.css s3.amazonaws.com tags.srv.stackadapt.com *.visualwebsiteoptimizer.com app.vwo.com *.userway.org web.bentley.com; object-src 'self' *.brightcove.net; connect-src 'self' blob: data: localhost: ad.doubleclick.net gjtrack.ucweb.com https: *.doubleclick.net *.facebook.com *.facebook.net *.hubspot.com adservice.google.com bcbolt446c5271-a.akamaihd.net bcsecure01-a.akamaihd.net forms.hubspot.com manifest.prod.boltdns.net stats.g.doubleclick.net wss://www.bentley.com *.visualwebsiteoptimizer.com app.vwo.com; font-src 'self' data: themes.googleusercontent.com https:; frame-ancestors 'self' *.bentley.com *.docebosaas.com/ bentleysystems.gcs-web.com/ bentleysystems-preview.gcs-web.com/; frame-src blob: 7668309.hs-sites.com/ app-ab56.marketo.com www.facebook.com *.bentley.com *.brightcove.net *.core.windows.net *.doubleclick.net *.facebook.com *.flickr.com *.getsmartling.com *.google.com *.googletagmanager.com *.hs-scripts.com *.hsforms.com *.hsforms.net *.hubspot.com *.jotform.com *.driftt.com *.menlosecurity.com *.on24.com *.onetrust.com outlook.office.com outlook.office365.com *.podbean.com *.recaptcha.net https://pricing-calculator.sensemetrics.com:3000 *.sensemetrics.com *.surveysparrow.com *.tourial.com *.twitter.com *.userway.org *.wpengine.com *.youtube.com *.zscalerthree.net 7rx80283.ibosscloud.com block.opendns.com blocked.freedom.to bpb.opendns.com cdn.cookielaw.org click.easypower.com div.show gateway.zscaler.net gateway.zscalertwo.net gateway.zscloud.net leap13.github.io login.zscloud.net mozbar.moz.com *.statuspage.io remove.video s.company-target.com skytraf.xyz www.ciuvo.com zswpmanager.wip.mmc.com wp-rocket.me/ app.vwo.com *.visualwebsiteoptimizer.com https://bentleysystems.my.site.com/; img-src 'self' blob: data: www.bentley.com https: t.co *.visualwebsiteoptimizer.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com; manifest-src 'self' www.bentley.com; media-src 'self' blob: data: https:; report-uri https://6449169ef1e3671a29137d52.endpoint.csper.io?v=7; worker-src 'self' blob:; 4 frame-ancestors 'self'; // Add other policies on a new line here // And another one here 4 default-src * 'unsafe-inline' 'unsafe-eval' ; child-src blob: ; worker-src 'self' https://via.batch.com blob: ; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' ; connect-src * ; media-src * ; img-src * data: blob: ; frame-src * ; frame-ancestors 'self' ; style-src * data: 'unsafe-inline' ; font-src * data: ; 4 frame-ancestors 'self' https://splytech.io https://*.splytech.io 4 default-src 'self' blob: https://*.facebook.com https://*.facebook.net https://*.adsrvr.org https://*.api.schwarz https://*.assets.schwarz https://*.batch.com https://*.bing.com https://bat.bing.net https://*.cliplister.com https://*.cookiebot.com https://*.creativecdn.com https://*.criteo.com https://*.exactag.com https://*.instana.io https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.experimentation.dev https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-shop.com https://*.lidl.de https://*.lidlplus.com https://*.livebuy.io https://*.medallia.eu https://mycliplister.com https://*.mycliplister.com https://*.peakprotect.com https://*.pingdom.net https://*.virtualearth.net https://*.friendlycaptcha.com https://*.googleapis.com https://asset.schwarz https://autosuggest.search.hereapi.com https://bidswitch.net https://cdn.cookielaw.org https://*.clarity.ms https://creativecdn.com https://form.lidl.com https://*.onetrust.com https://lidl.de https://lidl.media01.eu https://*.google-analytics.com https://region1.analytics.google.com https://s.kelkoogroup.net https://s.kk-resources.com https://sdk.virtualearth.net https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://*.doubleclick.net https://test.formcycle.vdc.lidl https://www.awin1.com https://www.google.be https://www.google.com https://google.com https://www.google.cz https://www.google.nl https://www.google.pl https://www.google.sk https://www.googleadservices.com https://*.gstatic.com https://youtube.com https://*.youtube-nocookie.com https://*.youtube.com https://www.googletagmanager.com https://lidlplusprod.blob.core.windows.net https://lidl.media.schwarz https://upeimagesprd.blob.core.windows.net https://lidlplusstorage.blob.core.windows.net https://*.scon.schwarz wss://endpoint-prod.scon.schwarz https://*.simplesurance.com https://*.frcapi.com https://*.app.baqend.com intent: wss://127.0.0.1:* https://*.8select.io https://*.adyen.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.epoq-systems.de https://*.epoq.de https://*.finapi.io https://*.fitanalytics.com https://*.lidl-info.com https://*.online-metrix.net https://*.parcellab.com https://*.paypalobjects.com https://*.paypal.com https://*.semtrack.de https://*.simplesurance.de https://*.sit.sys.odj.cloud https://*.solutenetwork.com https://analytics.google.com https://analytics.tiktok.com https://balancechecks.tx-gate.com https://cloud.mail.lidl.de https://dmp.theadex.com https://facebook.com https://h.online-metrix.net https://tracking.s24.com https://utiqcontent.com https://www.google-analytics.com https://www.lacmp.net https://www.moebel.de https://*.tailortool.de https://utiq.mno.link https://mobile-token.telekom.de https://tmi.vodafone.de https://o2de.mno.link https://*.osapiens.cloud data: https://csp.cre.lidl-shop.com; frame-src 'self' https://*.facebook.com https://*.facebook.net https://*.adsrvr.org https://*.cliplister.com https://*.cookiebot.com https://*.creativecdn.com https://*.criteo.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.experimentation.dev https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.livebuy.io https://*.medallia.eu https://*.pingdom.net https://*.googleapis.com https://balancechecks.tx-gate.com https://bidswitch.net https://creativecdn.com https://form.lidl.com https://forms-prod.enc-test.de/ https://ldl.viewer.cit-fusion.com https://lidl.de https://lidl.media01.eu https://*.google-analytics.com https://region1.analytics.google.com https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://*.doubleclick.net https://test.formcycle.vdc.lidl https://www.awin1.com https://www.google.com https://www.googleadservices.com https://*.gstatic.com https://youtube.com https://*.youtube-nocookie.com https://*.youtube.com https://www.googletagmanager.com https://www.lidl-gewinnspiel.de https://www.youtube.com https://link.tink.com https://manuals.sit-connect.com https://*.frcapi.com intent: https://*.adyen.com https://*.bizrate.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.ftrace.com https://*.lidl-info.com https://*.mynetfair.com https://*.paypal.com https://*.sit.az.odj.cloud https://*.sit.sys.odj.cloud https://*.vrxs.de https://api.theadex.com https://ar.lidl.com https://balancechecks.tx-gate.com https://facebook.com https://h.online-metrix.net https://lidl-giftcard.eu https://review.apps.01.cf.eu01.stackit.cloud https://www.edge-cdn.net https://www.lidl-gewinnspiel.de https://www.lidl-giftcard.eu https://utiq.mno.link https://*.osapiens.cloud; img-src 'self' blob: https://*.facebook.com https://*.facebook.net https://*.360yield.com https://*.addthis.com https://*.adnxs.com https://*.assets.schwarz https://*.bing.com https://*.cat-ret.assets.lidl https://*.cdn.flavedo.io https://*.cliplister.com https://*.cookiebot.com https://*.criteo.com https://*.instana.io https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.experimentation.dev https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://*.lidl.de https://*.lidlplus.com https://*.livebuy.io https://*.medallia.eu https://*.mycliplister.com https://*.retail.lidl.net https://*.retail.vdc.lidl https://*.searchhub.io https://*.smartadserver.com https://*.virtualearth.net https://*.googleapis.com https://asset.schwarz https://bidswitch.net https://cdn.cookielaw.org https://content.odj.cloud https://*.clarity.ms https://cm.adform.net https://form.lidl.com https://lidl.de https://lidl.media01.eu https://*.google-analytics.com https://region1.analytics.google.com https://size.lidl.com https://s.kelkoogroup.net https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://sync.targeting.unrulymedia.com https://*.doubleclick.net https://test.formcycle.vdc.lidl https://www.adobe.com https://www.awin1.com https://cdn.flavedo.io https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.tr https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.is https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.googleadservices.com https://*.gstatic.com https://www.lidl-shop.be https://www.lidl-shop.cz https://www.lidl-shop.nl https://www.lidl-shop.sk https://www.lidl-sklep.pl https://www.w3.org https://x.bidswitch.net https://youtube.com https://*.creativecdn.com https://*.youtube.com https://www.googletagmanager.com https://lidlplusprod.blob.core.windows.net https://lidl.media.schwarz https://upeimagesprd.blob.core.windows.net https://lidlplusstorage.blob.core.windows.net https://c1.adform.net https://ce.lijit.com https://criteo-partners.tremorhub.com https://*.teads.tv https://dpm.demdex.net https://e1.emxdgt.com https://eb2.3lift.com https://exchange.mediavine.com https://hb.yahoo.net https://id5-sync.com https://jadserve.postrelease.com https://matching.ivitrack.com https://mycliplister.com https://pixel.rubiconproject.com https://*.casalemedia.com https://sync-criteo.ads.yieldmo.com https://sync.1rx.io https://rt.udmserve.net https://ssc-cms.33across.com https://ads.yieldmo.com https://s.seedtag.com https://sync.go.sonobi.com https://fast.nexx360.io https://*.upe.schwarz https://media.sit-connect.com https://api.scon-assets.schwarz https://*.app.baqend.com moz-extension: https://*.adition.com https://*.adscale.de https://*.advertising.com https://*.adyen.com https://*.bizrate.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.epoq-systems.de https://*.epoq.de https://*.finapi.io https://*.fitanalytics.com https://*.lidl-info.com https://*.online-metrix.net https://*.openx.net https://*.parcellab.com https://*.paypalobjects.com https://*.paypal.com https://*.pubmatic.com https://*.semtrack.de https://*.simplesurance.de https://*.sit.sys.odj.cloud https://*.solutenetwork.com https://*.stickyadstv.com https://*.taboola.com https://*.twiago.com https://*.yahoo.com https://*.yieldlab.net https://analytics.google.com https://analytics.tiktok.com https://balancechecks.tx-gate.com https://contextual.media.net https://dmp.theadex.com https://facebook.com https://h.online-metrix.net https://lh3.googleusercontent.com https://match.adsrvr.org https://match.sharethrough.com https://pubsaf.global.ssl.fastly.net https://prodeastusmappscreative.azureedge.net https://sync.outbrain.com https://translate.google.com https://via.placeholder.com https://visitor.omnitagjs.com https://utiqcontent.com https://www.econda-monitor.de https://www.google-analytics.com https://www.ladenzeile.de https://www.lead-alliance.net https://*.tailortool.de data:; object-src 'self' https://*.facebook.com https://*.facebook.net https://*.batch.com https://*.cookiebot.com https://*.criteo.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.leaflets.schwarz https://*.lidl-shop.com https://*.lidl.de https://*.livebuy.io https://asset.schwarz https://bidswitch.net https://form.lidl.com https://lidl.de https://lidl.media01.eu https://*.google-analytics.com https://region1.analytics.google.com https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://test.formcycle.vdc.lidl https://www.google.com https://www.googleadservices.com https://*.gstatic.com https://youtube.com https://*.youtube.com https://www.googletagmanager.com https://manuals.sit-connect.com https://*.lidl-info.com https://*.online-metrix.net https://facebook.com https://h.online-metrix.net; script-src 'self' blob: https://*.facebook.com https://*.facebook.net https://*.adsrvr.org https://*.api.schwarz https://*.batch.com https://*.bing.com https://*.cookiebot.com https://*.creativecdn.com https://*.criteo.com https://*.exactag.com https://*.instana.io https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.experimentation.dev https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.livebuy.io https://*.medallia.eu https://mycliplister.com https://*.mycliplister.com https://*.peakprotect.com https://*.pingdom.net https://*.searchhub.io https://*.virtualearth.net https://*.friendlycaptcha.com https://*.googleapis.com https://adservice.google.com https://asset.schwarz https://bidswitch.net https://cdn.cookielaw.org https://*.clarity.ms https://creativecdn.com https://form.lidl.com https://*.onetrust.com https://lidl.de https://lidl.media01.eu https://*.google-analytics.com https://region1.analytics.google.com https://s.kk-resources.com https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://*.doubleclick.net https://test.formcycle.vdc.lidl https://www.awin1.com https://www.google.com https://www.googleadservices.com https://*.gstatic.com https://youtube.com https://*.youtube.com https://www.googletagmanager.com https://*.scon.schwarz https://partnersbenefits-uat-we.k8s.scrm.apps.schwarz https://*.app.baqend.com 'unsafe-eval' 'unsafe-inline' https://*.8select.io https://*.adyen.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.dynatrace.com https://*.epoq-systems.de https://*.epoq.de https://*.finapi.io https://*.fitanalytics.com https://*.lidl-info.com https://*.online-metrix.net https://*.parcellab.com https://*.paypalobjects.com https://*.paypal.com https://*.semtrack.de https://*.simplesurance.de https://adservice.google.de https://analytics.tiktok.com https://api.theadex.com https://balancechecks.tx-gate.com https://cdn.ravenjs.com https://cloud.mail.lidl.de https://cm.g.doubleclick.net https://code.etracker.com https://dmp.theadex.com https://dsp.adfarm1.adition.com https://facebook.com https://h.online-metrix.net https://s.ytimg.com https://tracking.s24.com https://www.dwin1.com https://www.etracker.de https://www.google-analytics.com https://www.lacmp.net https://www.ladenzeile.de https://www.moebel.de https://*.tailortool.de https://frontend.prod.utiq-aws.net; style-src 'self' https://*.bing.com https://*.cookiebot.com https://*.criteo.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.experimentation.dev https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-shop.com https://*.lidl.de https://*.medallia.eu https://*.googleapis.com https://asset.schwarz https://bidswitch.net https://form.lidl.com https://lidl.de https://lidl.media01.eu https://*.google-analytics.com https://region1.analytics.google.com https://sdk.virtualearth.net https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://test.formcycle.vdc.lidl https://www.google.com https://www.googleadservices.com https://*.gstatic.com https://www.lidl-shop.be https://www.lidl-shop.cz https://www.lidl-shop.nl https://www.lidl-shop.sk https://www.lidl-sklep.pl https://youtube.com https://*.youtube.com https://www.googletagmanager.com https://partnersbenefits-uat-we.k8s.scrm.apps.schwarz https://*.app.baqend.com 'unsafe-inline' https://*.epoq-systems.de https://*.epoq.de https://*.fitanalytics.com https://*.lidl-info.com https://*.parcellab.com https://*.sit.sys.odj.cloud https://facebook.com; frame-ancestors 'self' https://*.lidl.com https://*.livebuy.io https://beeem.co; report-uri https://csp.cre.lidl-shop.com/csp/report; base-uri 'self'; form-action 'self' https://*.facebook.com https://*.facebook.net https://accounts.lidl.com https://survey.g.doubleclick.net https://payments.lidlplus.com https://*.sit.az.odj.cloud; 4 frame-ancestors 'self' https://bendingspoons.com https://staging.bendingspoons.com https://bendingspoons-website.prismic.io 4 default-src 'self' data: gap: https://*.maersk.com https://*.maersk.com.cn https://*.maersk.io https://*.maerskline.com https://*.apmoller.net https://*.go-mpulse.net https://*.salesforceliveagent.com https://*.force.com *.mpstat.us *.akstat.io https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.akamaihd.net https://*.igodigital.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://*.logs.datadoghq.eu https://100qrcey9nsltilmpwezagts.blob.core.windows.net https://*.cookieinformation.com https://*.bing.com https://*.virtualearth.net https://*.visualforce.com https://*.contentsquare.net https://stats.g.doubleclick.net https://resources.digital-cloud.medallia.eu https://ubt-lb.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://hcaptcha.com https://*.hcaptcha.com https://clientstream.launchdarkly.com https://app.launchdarkly.com https://events.launchdarkly.com https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://p.teads.tv; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.maersk.com https://*.maersk.com.cn https://*.maersk.io https://js.adsrvr.org https://*.maerskline.com https://*.apmoller.net https://*.akamaihd.net https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.steelcentral.net *.mpstat.us *.akstat.io https://*.igodigital.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://pub.s1.exacttarget.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://*.google-analytics.com https://*.cookieinformation.com https://www.datadoghq-browser-agent.com/datadog-rum-eu.js https://*.bing.com https://*.virtualearth.net https://*.contentsquare.net https://*.contentsquare.com https://www.datadoghq-browser-agent.com/datadog-rum.js https://screencapture.kampyle.com https://screencapture-cdn.kampyle.com https://resources.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://snap.licdn.com https://px.ads.linkedin.com https://connect.facebook.net https://www.facebook.com https://js.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://*.decibelinsight.net https://*.decibel.com https://maersk.my.site.com https://maersk.my.salesforce-sites.com https://*.razorpay.com https://public.flourish.studio/resources/embed.js https://*.facebook.net https://*.audiencemanager.de https://*.ads-twitter.com https://connect.facebook.net/en_US/fbevents.js https://cdn.audiencemanager.de/conpixel.min.js https://static.ads-twitter.com/uwt.js https://js.adsrvr.org/up_loader.1.1.0.js https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://p.teads.tv https://*.kampyle.com https://*.medallia.eu; img-src 'self' data: https://*.maersk.com https://*.maersk.com.cn https://*.maersk.io https://insight.adsrvr.org https://t.teads.tv https://l.teads.tv https://ade.googlesyndication.com https://match.adsrvr.org https://*.maerskline.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://lh3.googleusercontent.com https://*.steelcentral.net https://*.vimeocdn.com https://*.youtube.com https://*.igodigital.com https://*.akamaihd.net https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://pixel.mathtag.com https://bs.serving-sys.com https://www.google.co.uk https://api.adsymptotic.com https://media-cdn.ipredictive.com https://*.linkedin.com https://*.facebook.com https://*.twitter.com https://vk.com https://mail.ru https://clickserve.dartsearch.net https://*.doubleclick.net https://*.google.dk https://secure.adnxs.com https://cs.adingo.jp https://admaym.com https://ih.adscale.de https://d.agkn.com https://ib.adnxs.com https://x.bidswitch.net https://stags.bluekai.com https://pix.btrll.com https://contextual.media.net https://dis.criteo.com https://e.nexac.com https://loadm.exelator.com https://cs.gssprt.jp https://global.ib-ibi.com https://ad.360yield.com https://dsum-sec.casalemedia.com https://beacon.krxd.net https://idsync.rlcdn.com https://ums.adtechus.com https://sync.adaptv.advertising.com https://us-u.openx.net https://simage2.pubmatic.com https://bh.contextweb.com https://idsync.reson8.com https://pixel.rubiconproject.com https://uipglob.semasio.net https://rtb-csync.smartadserver.com https://ad.sxp.smartclip.net https://sync.go.sonobi.com https://ce.lijit.com https://sync.search.spotxchange.com https://ads.stickyadstv.com https://delivery.swid.switchads.com https://aa.agkn.com https://ads.yahoo.com https://u3s.mathtag.com https://eu-u.openx.net https://serving.experianmarketingservices.digital https://uip.semasio.net https://fo-api.omnitagjs.com https://*.akstat.io https://*.bing.com https://*.virtualearth.net https://*.contentsquare.net https://screencaptue-cdn.kampyle.com https://resources.digital-cloud.medallia.eu https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://*.salesforce.com https://*.force.com https://maersk.my.salesforce-sites.com https://public.flourish.studio https://*.facebook.net https://*.audiencemanager.de https://*.ads-twitter.com https://connect.facebook.net/en_US/fbevents.js https://cdn.audiencemanager.de/conpixel.min.js https://static.ads-twitter.com/uwt.js https://js.adsrvr.org/up_loader.1.1.0.js https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://p.teads.tv https://*.kampyle.com https://*.medallia.eu https://server.arcgisonline.com; object-src 'self' ; style-src 'self' 'unsafe-inline' https://*.maersk.com https://*.maersk.com.cn https://*.maersk.io https://*.apmoller.net https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.maerskline.com https://*.force.com https://*.bing.com https://*.virtualearth.net https://resources.digital-cloud.medallia.eu https://screencaptue-cdn.kampyle.com https://nebula-cdn.kampyle.com https://hcaptcha.com https://*.hcaptcha.com https://maersk.my.site.com https://maersk.my.salesforce-sites.com https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://p.teads.tv; frame-src https://*.maersk.com https://*.maersk.com.cn https://insight.adsrvr.org https://www.googletagmanager.com https://match.adsrvr.org https://*.maersk.io https://*.maerskline.com https://*.apmoller.net http://emanage.maerskline.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.google.com https://www.youtube.com/embed/ https://player.vimeo.com/video/ https://service.force.com https://*.cookieinformation.com https://*.youku.com/ https://*.force.com/ https://*.salesforce.com https://app.powerbi.com http://my.maerskline.com https://*.doubleclick.net https://reporting.damco.com https://screencapture.kampyle.com https://nebula-cdn.kampyle.com https://resources.digital-cloud.medallia.eu https://js.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://maersk.my.site.com https://maersk.my.salesforce-sites.com https://*.razorpay.com https://flo.uri.sh/ https://*.facebook.net https://*.audiencemanager.de https://*.ads-twitter.com https://connect.facebook.net/en_US/fbevents.js https://cdn.audiencemanager.de/conpixel.min.js https://static.ads-twitter.com/uwt.js https://js.adsrvr.org/up_loader.1.1.0.js https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://p.teads.tv; font-src 'self' data: https://*.maersk.com https://*.maersk.com.cn https://*.maersk.io https://maersk-designsystem.azureedge.net https://*.maerskline.com https://*.apmoller.net https://*.gstatic.com https://*.googleapis.com https://resources.digital-cloud.medallia.eu https://nebula-cdn.kampyle.com https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://p.teads.tv; connect-src 'self' data: gap: https://*.maersk.com https://*.maersk.com.cn https://*.maersk.io https://login.microsoftonline.com https://t.teads.tv https://cm.teads.tv https://*.maerskline.com https://*.apmoller.net https://*.go-mpulse.net https://*.salesforceliveagent.com https://*.force.com *.mpstat.us *.akstat.io https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.akamaihd.net https://*.igodigital.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://*.logs.datadoghq.eu https://100qrcey9nsltilmpwezagts.blob.core.windows.net https://*.cookieinformation.com https://*.bing.com https://*.virtualearth.net https://*.visualforce.com https://*.contentsquare.net https://stats.g.doubleclick.net https://resources.digital-cloud.medallia.eu https://ubt-lb.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://hcaptcha.com https://*.hcaptcha.com https://clientstream.launchdarkly.com https://app.launchdarkly.com https://events.launchdarkly.com https://*.decibelinsight.net https://*.decibel.com wss://*.decibelinsight.net https://maersk.my.salesforce-scrt.com https://chatbot-test-app.herokuapp.com https://maersk.my.site.com https://maersk.my.salesforce-sites.com wss://proxy2.scm.maersk.com https://*.razorpay.com https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://*.kampyle.com https://*.medallia.eu; worker-src 'self' data: gap: https://*.maersk.com https://*.maersk.com.cn https://*.maersk.io https://*.maerskline.com https://*.apmoller.net https://*.go-mpulse.net https://*.salesforceliveagent.com https://*.force.com *.mpstat.us *.akstat.io https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.akamaihd.net https://*.igodigital.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://*.logs.datadoghq.eu https://100qrcey9nsltilmpwezagts.blob.core.windows.net https://*.cookieinformation.com https://*.bing.com https://*.virtualearth.net https://*.visualforce.com https://*.contentsquare.net https://stats.g.doubleclick.net https://resources.digital-cloud.medallia.eu https://ubt-lb.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://hcaptcha.com https://*.hcaptcha.com https://clientstream.launchdarkly.com https://app.launchdarkly.com https://events.launchdarkly.com https://insight.adsrvr.org https://acdn.adnxs.com https://px.ads.linkedin.com https://p.teads.tv blob:; 4 default-src https: blob: 'self' 'unsafe-inline' 'unsafe-eval' http://ngl.cengage.com https://embed.widencdn.net https://cengage.widen.net https://ngl.cengage.com https://*.cengage.com/; connect-src https://*.redditstatic.com https://*.reddit.com http://ngl.cengage.com https://ixfd2-api.bc0a.com https://ngl.cengage.com https://cengage630.outgrow.us https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 https://px.ads.linkedin.com https://*.survicate.com wss://*.zopim.com https://*.company-target.com https://*.demandbase.com https://*.zendesk.com https://*.zdassets.com https://*.cengage.com https://*.cengage.ca https://analytics.pangle-ads.com/api/v2/pangle_pixel https://*.cengage.info https://*.googleapis.com https://*.optimizely.com https://stats.g.doubleclick.net https://*.googleapis.com http://*.googleapis.com https://urldefense.com https://*.google-analytics.com http://*.google-analytics.com https://*.cookielaw.org https://*.bing.com https://*.onetrust.com https://*.supporthero.io https://*.addthis.com https://cengage.force.com https://tr.snapchat.com https://*.snapchat.com https://analytics.tiktok.com https://dev.visualwebsiteoptimizer.com https://tags.srv.stackadapt.com *.visualwebsiteoptimizer.com app.vwo.com https://*.evergage.com https://*.mouseflow.com https://*.evgnet.com https://cdn.linkedin.oribi.io https://qvdt3feo.com https://*.amplitude.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.redditstatic.com https://cdn.webexperiences.com https://cdn.bc0a.com/autopilot/f00000000283315/autopilot_sdk.js https://cdn.jsdelivr.net/npm/jquery@3.6.0/dist/jquery.min.js https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js https://cengage630.outgrow.us https://*.reddit.com *.visualwebsiteoptimizer.com app.vwo.com *.mountain.com https://*.zdassets.com https://*.evergage.com https://*.survicate.com https://*.demandbase.com https://*.company-target.com https://id.rlcdn.com https://*.cengage.com https://*.gstatic.com https://*.bing.com https://*.cookielaw.org https://*.onetrust.com https://*.rackcdn.com https://*.googleapis.com https://*.force.com https://cengage.my.salesforce.com https://*.salesforceliveagent.com https://sc-static.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.googletagmanager.com https://www.google.com https://snap.licdn.com https://*.vidyard.com https://cdn-cf.vidyard.com https://*.optimizely.com https://www.google-analytics.com https://img.en25.com https://*.eloqua.com https://static.ads-twitter.com https://analytics.twitter.com https://instant.page https://connect.facebook.net https://*.cloudfront.net https://www.youtube.com https://*.addthis.com https://*.addthisedge.com https://*.scribblecdn.net https://*.moatads.com https://*.clickcease.com https://*.tribalfusion.com https://analytics.tiktok.com https://cdn.evgnet.com https://cdn.evergage.com https://evergage.com https://dev.visualwebsiteoptimizer.com https://tags.srv.stackadapt.com https://*.mouseflow.com https://*.evgnet.com https://*.evergage.com https://cdn.linkedin.oribi.io https://tr.snapchat.com https://qvdt3feo.com https://*.amplitude.com https://*.navattic.com; style-src 'self' 'unsafe-inline' data: *.visualwebsiteoptimizer.com https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css https://*.evergage.com app.vwo.com s3.amazonaws.com http://ngl.cengage.com https://cengage.force.com https://service.force.com https://*.googleapis.com https://tags.srv.stackadapt.com/sa.css https://*.survicate.com; frame-src https://app.smartsheet.com app.vwo.com *.visualwebsiteoptimizer.com https://*.company-target.com https://cengage630.outgrow.us/ https://td.doubleclick.net/ https://*.cengage.com https://www.gale.com https://*.googletagmanager.com https://*.google.com https://cengage.widen.net https://*.widencdn.net/ https://*.force.com https://*.goconsensus.com https://*.supporthero.io https://*.approvemyviews.com/ https://*.optimizely.com https://*.snapchat.com https://*.fls.doubleclick.net https://*.vidyard.com https://cdn-cf.vidyard.com https://*.adobe.com https://cengage.postclickmarketing.com https://*.addthis.com https://*.mayvenstudios.com https://www.youtube.com https://*.mouseflow.com https://capture.navattic.com; frame-ancestors https://*.google.com 'self'; font-src 'self' data: https://*.gstatic.com https://*.googleapis.com https://*.mouseflow.com https://*.survicate.com; img-src 'self' *.visualwebsiteoptimizer.com chart.googleapis.com https://*.mouseflow.com wingify-assets.s3.amazonaws.com app.vwo.com https: data:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; upgrade-insecure-requests; 4 upgrade-insecure-requests; frame-ancestors localhost:3001 *.brigitte.de *.gala.de *.eltern.de *.essen-und-trinken.de *.urbia.de *.vorname.com *.wpf.digital; frame-src *; 4 default-src *; script-src 'unsafe-inline' 'unsafe-eval' *; worker-src 'self' 'unsafe-eval' blob: http: https: ; style-src 'unsafe-inline' *; img-src http: https: data: ; font-src http: https: data: blob: ; media-src * blob: 4 frame-ancestors 'self' *.ampproject.org *.zdbb.net 4 frame-ancestors 'self' https://*.main.messefrankfurt.com/ https://*.messefrankfurt.com/ 4 default-src https: data: wss: 'unsafe-inline' 'unsafe-eval';frame-ancestors https://*.motorola.com;media-src https: blob: data; img-src https: data: blob:; 4 frame-ancestors 'self' https://app.eu.contentful.com 4 base-uri 'self' *.nr-data.net; child-src blob:; connect-src 'self' wss://*.planetromeo.com wss://*.romeo.com wss://*.hunqz.com *.planetromeo.com *.romeo.com offline-page.pages.dev *.facebook.com *.gstatic.com *.googlesyndication.com *.doubleclick.net *.google-analytics.com *.nr-data.net *.smaato.net *.smaato.com *.maptiler.com *.report-uri.com wss://*.firebaseio.com *.googleapis.com *.zendesk.com *.videodelivery.net *.cloudflarestream.com; font-src 'self' *.gstatic.com *.typekit.net data:; form-action 'self' *.planetromeo.com *.romeo.com google.com; frame-ancestors *.romeo.com *.planetromeo.com *.hunqz.com; frame-src 'self' *.romeo.com *.planetromeo.com *.hunqz.com recaptcha.net https://challenges.cloudflare.com *.doubleclick.net *.google.com *.googlesyndication.com *.googletagservices.com *.blufm.de blufm.de *.firebaseio.com *.youtube.com *.facebook.com *.twitter.com; img-src https: data: blob: *.smaato.net *.videodelivery.net *.cloudflarestream.com; manifest-src 'self'; media-src 'self' blob: videodelivery.net *.cloudflarestream.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ampproject.org *.doubleclick.net *.googlesyndication.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ai *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gp *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.ms *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vg *.google.vu *.google.ws *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googletagservices.com https://challenges.cloudflare.com recaptcha.net *.newrelic.com *.nr-data.net *.siftscience.com *.smaato.net *.firebaseio.com *.twitter.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.typekit.net; worker-src 'self' blob:; default-src 'self' *.planetromeo.com *.romeo.com *.hunqz.com *.googlesyndication.com; 4 default-src 'self' *.mecd.es *.gob.es afirma://*; style-src 'self' 'unsafe-inline' https:; object-src 'none' ; img-src 'self' https: data:; frame-src 'self' https: blob:; frame-ancestors 'none' ; base-uri 'self'; form-action *; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; font-src 'self' https: data:; media-src 'self' https: data: blob: 4 require-trusted-types-for 'script'; base-uri 'none'; default-src 'self' *.gstatic.com https://storage.googleapis.com/gdm-deepmind-com-prod-public/; connect-src 'self' *.google-analytics.com *.gstatic.com services.google.com auditrecording-pa.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.g.doubleclick.net *.googleadservices.com https://storage.googleapis.com/gdm-deepmind-com-prod-public/; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com data: https://storage.googleapis.com/gdm-deepmind-com-prod-public/; frame-ancestors 'self' https://*.appspot.com https://*.corp.google.com; frame-src 'self' www.youtube.com https://storage.googleapis.com/deepmind-media/ ai.google deepmind.google accounts.google.com *.googletagmanager.com https://storage.googleapis.com/gdm-deepmind-com-prod-public/; img-src 'self' data: *.googleusercontent.com *.gstatic.com *.googletagmanager.com *.i.ytimg.com i.ytimg.com *.google.com *.googlesyndication.com *.googleadservices.com *.g.doubleclick.net https://storage.googleapis.com/gdm-deepmind-com-prod-public/; manifest-src 'self' https://storage.googleapis.com/gdm-deepmind-com-prod-public/; media-src 'self' *.googlevideo.com https://storage.googleapis.com/gdm-deepmind-com-prod-public/; style-src 'self' *.google.com *.gstatic.com https://fonts.googleapis.com 'sha256-wiM0pJPQ8Fbww0RrA8TrqToZf88RgzY0dkgHSw/AJxI=' https://storage.googleapis.com/gdm-deepmind-com-prod-public/; script-src 'self' 'strict-dynamic' *.google-analytics.com *.google.com *.gstatic.com *.youtube.com *.googletagmanager.com *.googleadservices.com 'sha256-KWKf7P1AQmtmfSwajTn6BTnyOVD+CRkaq48eFjNTr74=' 'sha256-hWJZtPTjFEm92PH5aseBNErCet/WJc75EraxvnC2Lf0=' 'sha256-5LrcY7GY2z+QqRXHQyyxR6dB7BPFqSSYaA7axRAqHkk=' 'sha256-samyDQo0v5hhK2T32PInf3o4VlhsNP/0gYDIKJb0z6M=' 'sha256-HbSxvI5lVq2tCH+/S2mS/78EDbrvLekQ7A2p7pZqiUI=' 'sha256-7Omk6HodJ937TIBzL2oiq8sWI001zV/8O35FR5AZ1Hg=' 'sha256-xqxppExHC08VdbK0iJAVDjMT22NLnNltYheGFMz3qXw=' 'sha256-SXvE5Lx8M4DFOz1yd8Wl2fAuQK0Y2QRMbgFEzEh9n9k=' 'sha256-ccU4Xbu1CoSyC+1IB/ab2zsw8sNzKrUZnTWydCWjsfk=' 'sha256-t1dplYiXQKQZFUt3FIP0IvEnEMmFrlB6P7ZNO43hais=' 'sha256-6/8igoyv4GGNPeBdRc4RtKUnQUKM6tpndmkAhE0A/fc=' https://storage.googleapis.com/gdm-deepmind-com-prod-public/ 4 frame-ancestors 'self' *.gdata.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata-advancedanalytics.com *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com pretix.eu oc-cdn-public-eur.azureedge.net global.frcapi.com eu.frcapi.com; frame-src 'self' gdata.jobbase.io player.captivate.fm gdata.onlyfy.jobs *.gdata.de *.consentmanager.net www.paypal.com *.criteo.com *.criteo.net *.onfastspring.com *.saferpay.com www.youtube-nocookie.com www.google.com www.google.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com www.awin1.com *.doubleclick.net bid.g.doubleclick.net tpc.googlesyndication.com *.googletagmanager.com fbanalytics.org m.youtube.com player.vimeo.com gdata.jobbase.io gdata-a.akamaihd.net pretix.eu oc-cdn-public-eur.azureedge.net *.facebook.com *.facebook.net global.frcapi.com eu.frcapi.com; report-uri https://www.gdatasoftware.com/__cspreporting__ 4 frame-ancestors https://*.publons.com:* http://*.publons.com:* https://publons.com:* https://cortellis.com:* https://*.cortellis.com:* http://*.cortellis.com:* https://cortellis.cn:* https://*.cortellis.cn:* http://*.cortellis.cn:* https://*.clarivate.com:* http://*.clarivate.com:* https://*.dev-wos.com:* http://*.dev-wos.com:* https://*.endnote.com:* http://*.endnote.com:* https://*.myendnoteweb.com:* http://*.myendnoteweb.com:* https://myendnoteweb.com:* https://*.dev-cortellis.com:* http://*.dev-cortellis.com:* https://*.ezproxy.auckland.ac.nz:* http://*.ezproxy.auckland.ac.nz:* http://*.dev.oneplatform.build:* https://*.dev.oneplatform.build:* https://*.cptest.idm.oclc.org:* https://*.idm.oclc.org:* https://*.libproxy.albany.edu:* https://*.twu.edu:* http://*.dev-cortellis.cn:* https://*.dev-cortellis.cn:* http://webofscience.com:* https://webofscience.com:* http://*.webofscience.com:* https://*.webofscience.com:* https://*.proxy.lnu.se:* https://*.ub.oru.se:* https://*.griffith.edu.au:* https://*.uexternado.edu.co:* http://*.s3-website-us-west-2.amazonaws.com:* https://*.s3-website-us-west-2.amazonaws.com:* https://*.msu.edu:* https://*.library.nova.edu:* https://*.dev-scholarone.com:* https://*.clarivate.cn:* https://*.dev-incites.com:* https://*.targetsafety.info:* https://*.gethealthbase.com:* https://*.clarivate.net:* http://*.library.vanderbilt.edu:* https://*.library.vanderbilt.edu:* https://*.dev-innovation.com:* https://*.derwentinnovation.com:* http://*.globalq.com:* https://*.globalq.com:* http://*.globalqinc.com:* https://*.globalqinc.com:* https://*.proxyucr.elogim.com:*; sandbox allow-top-navigation allow-same-origin allow-scripts allow-popups allow-forms allow-modals allow-popups-to-escape-sandbox 4 require-trusted-types-for 'script';report-uri /_/GoogleCloudUxWebAppCgcUi/cspreport 4 default-src 'none'; script-src 'self' *.b0e8.com *.bc0a.com blob: marvel-b2-cdn.bc0a.com www.google-analytics.com www.googletagmanager.com play.vidyard.com assets.vidyard.com unpkg.com *.newrelic.com snap.licdn.com static.ads-twitter.com analytics.twitter.com www.googleadservices.com script.hotjar.com static.hotjar.com j.6sc.co bam.nr-data.net geolocation.onetrust.com *.google.com tpc.googlesyndication.com maps.googleapis.com www.gstatic.com js.hsforms.net *.hsforms.com *.pressganey.com *.cdntwrk.com www.googleoptimize.com connect.facebook.net js.hs-scripts.com js.usemessages.com js.hs-analytics.net js.hs-banner.com cdn.cookielaw.org *.wistia.com *.wistia.net src.litix.io fast.wistia.com *.googletagmanager.com info.pressganey.com js.hsleadflows.net cdn.linkedin.oribi.io *.hubspot.com analytics.google.com *.zi-scripts.com *.zoominfo.com js.hsadspixel.net subscriptions.smartrecruiters.com static.smartrecruiters.com www.smartrecruiters.com jobpal-sm.s3.amazonaws.com pressganey.com cdn.jsdelivr.net *.castos.com 675-zyq-542.mktoweb.com googleads.g.doubleclick.net *.marketo.net *.pathfactory.com *.googleadservices.com *.google.com *.google.com/pagead/form-data *.googlesyndication.com pressganey.wistia.com *.forsta.com browser.sentry-cdn.com *.clarity.ms tracking.g2crowd.com cdn.drda.io cdn.cookielaw.org/scripttemplates/202602.1.0/otBannerSdk.js go.forsta.com ad.doubleclick.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' fonts.googleapis.com legal.pressganey.com static.smartrecruiters.com *.hsforms.com *.wistia.com *.cdntwrk.com *.googletagmanager.com *.google.com *.hubspot.com jobpal-sm.s3.amazonaws.com *.pressganey.com *.castos.com googleads.g.doubleclick.net *.pathfactory.com *.forsta.com 'unsafe-inline'; frame-ancestors 'self' library.forsta.com resources.rioseo.com pressganey.com *.pathfactory.com view-su2.highspot.com; frame-src 'self' play.vidyard.com vars.hotjar.com tpc.googlesyndication.com td.doubleclick.net *.google.com *.pressganey.com www.googletagmanager.com survey.us.confirmit.com js.hsforms.net *.hsforms.com www.facebook.com app.livestorm.co *.hubspot.com pressganey-20208516.hs-sites.com jobpal-sm.s3.amazonaws.com pressganey.com *.castos.com *.myworkdayjobs.com googleads.g.doubleclick.net *.pathfactory.com pressganey.wistia.com *.wistia.com *.wistia.net *.pathfactory.com www.youtube.com emergingrnleader.com view-su2.highspot.com cdn-app.pathfactory.com/:0 library.forsta.com forsta.com go.forsta.com open.spotify.com cdn.cookielaw.org/scripttemplates/202602.1.0/otBannerSdk.js www.rioseo.com; object-src 'none'; base-uri 'self'; form-action 'self' webto.salesforce.com *.hsforms.com www.facebook.com *.google.com *.hubspot.com jobpal-sm.s3.amazonaws.com pressganey.com googleads.g.doubleclick.net *.pathfactory.com; connect-src 'self' 'self' go.pressganey.com play.vidyard.com www.google-analytics.com cdn.cookielaw.org secure.adnxs.com stats.g.doubleclick.net bam.nr-data.net privacyportal.onetrust.com geolocation.onetrust.com www.google.com adservice.google.com *.googleapis.com *.googletagmanager.com *.googleapis.com maps.googleapis.com *.google.com *.6sc.co digitalfeedback.us.confirmit.com vc.hotjar.io *.hotjar.com wss://*.hotjar.com *.hsforms.com *.cdntwrk.com js.hs-banner.com https://*.litix.io https://*.wistia.com https://embedwistia-a.akamaihd.net https://api.glitch.com www.facebook.com cdn.linkedin.oribi.io *.hubspot.com analytics.google.com *.zi-scripts.com ws.zoominfo.com api.hubapi.com 61d78a8eb35a9f00ecfd7ee9.config.smooch.io jobpal-sm.s3.amazonaws.com pressganey.com cdn.growthbook.io px.ads.linkedin.com *.castos.com googleads.g.doubleclick.net *.mktoresp.com *.pathfactory.com www.google.com/ccm/collect *.googleadservices.com *.pressganey.com *.wistia.net browser.sentry-cdn.com *.6sense.com tracking-api.g2.com cdn.dreamdata.cloud *.clarity.ms cdn.cookielaw.org/scripttemplates/202602.1.0/otBannerSdk.js ad.doubleclick.net; font-src 'self' data: fonts.gstatic.com *.cdntwrk.com *.hubspot.com jobpal-sm.s3.amazonaws.com pressganey.com googleads.g.doubleclick.net *.pathfactory.com; media-src 'self' blob: data: *.wistia.com *.wistia.net embedwistia-a.akamaihd.net embed-fastly.wistia.com *.google.com *.hubspot.com jobpal-sm.s3.amazonaws.com pressganey.com *.castos.com googleads.g.doubleclick.net *.pathfactory.com; img-src https: data:; report-uri 4 frame-ancestors 'self' *.vistancenetworks.com *.ruckusnetworks.com *.punchout2go.com *.ariba.com; 4 report-uri https://gcp.api.snapchat.com/web-reporting/report;report-to main-endpoint 4 child-src 'self' https://*.convertiv.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.hotjar.com https://*.hsforms.com https://*.sitescout.com https://www.databank.com; connect-src 'self' https://*.akamaihd.net https://*.amazonaws.com https://*.company-target.com https://*.convertiv.com https://*.cookiebot.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io https://*.hs-sites.com https://*.hscollectedforms.net https://*.hsforms.com https://*.hsforms.net https://*.hubapi.com https://*.hubspot.com https://*.linkedin.com https://*.litix.io https://*.mktoresp.com https://*.mktoutil.com https://*.omappapi.com https://*.optimizely.com https://*.parsely.com https://*.salesloft.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.wistia.com https://*.wp.com https://*.youtube.com https://bat.bing.com https://bat.bing.net https://maps.googleapis.com https://obseu.bmccfortress.com https://tagmanager.google.com https://www.databank.com https://www.googletagmanager.com wss://*.hotjar.com; default-src 'self' https://*.convertiv.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://www.databank.com; font-src 'self' data: https://*.convertiv.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.gstatic.com https://*.wp.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.databank.com; frame-src 'self' https://*.convertiv.com https://*.cookiebot.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.doubleclick.net https://*.driftt.com https://*.facebook.com https://*.facebook.net https://*.google.com https://*.hotjar.com/ https://*.hs-sites.com https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hubspot.net https://*.instagram.com https://*.issuu.com https://*.marketo.com https://*.sitescout.com https://*.vimeo.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.wistia.com/ https://*.wordpress.com https://*.wp.com https://*.youtube.com https://s-static.ak.facebook.com https://tagmanager.google.com https://www.databank.com https://www.googletagmanager.com; img-src 'self' data: https://*.adentifi.com https://*.adnxs.com https://*.adroll.com https://*.adsymptotic.com https://*.agkn.com https://*.akamaihd.net https://*.bidr.io https://*.bidswitch.net https://*.bing.com https://*.cardlytics.com https://*.company-target.com https://*.convertiv.com https://*.cookiebot.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.hr https://*.gravatar.com https://*.gstatic.com https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hubspot.net https://*.hubspotusercontent-na1.net https://*.instagram.com https://*.linkedin.com https://*.openx.net https://*.owneriq.net https://*.parsely.com https://*.predictiveresponse.net https://*.reson8.com https://*.rlcdn.com https://*.sitescout.com https://*.usbrowserspeed.co https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.wistia.com https://*.wordpress.com https://*.wp.com https://*.yahoo.com https://*.youtube.com https://amps-production.imgix.net https://bat.bing.net https://googleads.g.doubleclick.net https://img.youtube.com https://maps.googleapis.com https://obseu.bmccfortress.com https://storage.pardot.com https://www.databank.com https://www.googletagmanager.com; media-src 'self' blob: data: file: https://*.akamaihd.net https://*.convertiv.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.wistia.com/ https://www.databank.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.adnxs.com/ https://*.adroll.com https://*.ads-twitter.com https://*.bing.com https://*.convertiv.com https://*.cookiebot.com https://*.crazyegg.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.demandbase.com https://*.doubleclick.net https://*.driftt.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.hotjar.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hsforms.com https://*.hsforms.net https://*.hsleadflows.net https://*.hubapi.com https://*.hubspot.com https://*.hubspot.net https://*.hubspotfeedback.com https://*.instagram.com https://*.jsdelivr.net https://*.licdn.com https://*.marketo.com https://*.marketo.net https://*.ml314.com https://*.optmnstr.com https://*.pardot.com https://*.parsely.com https://*.pixel.ad https://*.predictiveresponse.net https://*.remarketstats.com https://*.salesloft.com https://*.scriptintel.io https://*.twitter.com https://*.usbrowserspeed.com https://*.vimeo.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.wistia.com https://*.wp.com https://connect.facebook.net https://ml314.com https://obseu.bmccfortress.com https://tagmanager.google.com https://unpkg.com https://wistia.com https://www.clickcease.com https://www.databank.com https://www.googleadservices.com https://www.googletagmanager.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.convertiv.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://*.googleapis.com https://*.gravatar.com https://*.jsdelivr.net https://*.marketo.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.wp.com https://tagmanager.google.com https://www.databank.com; worker-src 'self' blob: data: file: filesystem: https://*.convertiv.com https://*.databank-website-develop.go-vip.net https://*.databank.com https://www.databank.com; frame-ancestors 'self' https://databank.com https://go.databank.com https://www.databank.com 4 default-src 'self' media.brightdata.com 'unsafe-inline' 'unsafe-eval' data: google.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vu *.google.ws *.googletagmanager.com *.google-analytics.com www.pagespeed-mod.com *.doubleclick.net www.youtube.com i.ytimg.com *.userway.org *.gravatar.com cdn.jsdelivr.net widget.trustpilot.com *.cloudflare.com yoast.com *.clarity.ms *.bing.com *.linkedin.com *.linkedin.cn snap.licdn.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com *.hubspot.com *.hsforms.net *.hsforms.com api.hubapi.com *.hsappstatic.net www.googleadservices.com *.googlesyndication.com *.googleapis.com *.calendly.com calendly.com *.vwo.com *.visualwebsiteoptimizer.com *.thesmilingelbows.com *.geetest.com brightdata.com *.brightdata.com *.mxpnl.net cdn.mxpnl.com *.comeet.com www.comeet.co *.reddit.com api.openai.com hola.org api-js.mixpanel.com *.oribi.io *.netstar-inc.com *.gstatic.com *.redditstatic.com *.6sc.co *.6sense.com *.quora.com ipqualityscore.com *.ipqualityscore.com *.ipqsnet.com *.debugbear.com js.hsadspixel.net fast.wistia.com hubspot-forms-static-embed.s3.amazonaws.com data.hockeystack.com *.bing.net *.mapbox.com cdn.plyr.io useruploads.vwo.io *.taboola.com s.yimg.jp *.yahoo.co.jp ai-analytics.brightinsights.com *.spotify.com ws://ai-analytics.brightinsights.com *.byspotify.com brightdata.chilipiper.com; frame-ancestors 'self'; worker-src blob: 'self';report-uri https://brightdata.com/web_api/report_csp 4 frame-ancestors 'self' www.liligo.fr; 4 default-src 'self' https:; connect-src 'self' https: wss://*.visitors.live wss://realtime.luckyorange.com/mqtt wss://in.visitors.live; font-src 'self' https: data:; img-src 'self' https: data: blob:; media-src 'self' blob: https://embed-ssl.wistia.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'report-sample' 'unsafe-inline' https:; worker-src 'self' blob:; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 4 default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 4 frame-ancestors 'self' http://tutorialcorreo.xsi.es http://correo.natural.es http://correo.mundored.com http://mundored.com https://correo.nuevecomanueve.es 4 default-src https: *.crazyegg.com; script-src http: https: blob: 'unsafe-inline' 'unsafe-eval' *.crazyegg.com js.zi-scripts.com ws-assets.zoominfo.com *.6sc.co *.6sense.com; frame-src http: https: data:; style-src http: https: 'unsafe-inline'; img-src http: https: data: blob: *.crazyegg.com *.6sc.co *.6sense.com; media-src http: https: data: blob:; font-src http: https: data:; connect-src http: https: wss: blob: *.crazyegg.com *.6sc.co *.6sense.com; child-src http: https: blob:; worker-src 'self' blob:; frame-ancestors 'self' https://dialpad.highspot.com/ https://view.highspot.com/ https://dialpad.allbound.com/ https://app.contentful.com 4 frame-ancestors 'self' https://*.breuninger.com 4 default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.boomtrain.com https://c1.rfihub.net https://live.rezync.com https://assets.adobedtm.com https://bat.bing.com https://bat.bing-int.com https://kit.fontawesome.com players.brightcove.net vjs.zencdn.net https://www.buzzsprout.com https://static.zohocdn.com https://sdk.ceros.com https://labs.ceros.com https://trk.techtarget.com https://connect.facebook.net https://creative-services.ceros.com https://www.googleadservices.com https://connect.facebook.net https://eloquatracking.iqvia.com https://script.hotjar.com https://img03.en25.com https://static.hotjar.com https://snap.licdn.com https://edge.fullstory.com https://www.clickcease.com https://cdn.pagesense.io https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://unpkg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://kit.fontawesome.com https://players.brightcove.net https://ajax.googleapis.com https://static.cloud.coveo.com https://tag.demandbase.com https://cookie-cdn.cookiepro.com https://www.google.com https://www.gstatic.com https://view.ceros.com https://tag.simpli.fi; img-src 'self' blob: data: https://i.liadm.com https://live.rezync.com https://bat.bing.com https://s.gravatar.com https://www.google.pl https://www.linkedin.com players.brightcove.net *.boltdns.net *.akamaihd.net *.brightcove.com *.brightcovecdn.com https://i.ibb.co https://ad.doubleclick.net https://www.google.co.in https://www.google.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://attr.ml-api.io https://secure.adnxs.com https://www.google-analytics.com https://www.facebook.com https://attr.ml-api.ios https://secure.adnxs.com https://s.ml-attr.com https://eloquatracking.iqvia.com https://metrics.brightcove.com https://cf-images.us-east-1.prod.boltdns.net https://id.rlcdn.com https://cookie-cdn.cookiepro.com https://www.iqvia.com https://*.wp.com/cdn.auth0.com https://px.ads.linkedin.com https://segments.company-target.com https://ade.googlesyndication.com/; style-src 'self' 'unsafe-inline' https://use.fontawesome.com players.brightcove.net https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://unpkg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' https://geolocation.onetrust.com https://report.clarity.ms https://events.api.boomtrain.com https://people.api.boomtrain.com https://unpkg.com https://bat.bing.com https://bat.bing-int.com https://region1.analytics.google.com *.boltdns.net players.brightcove.net edge.api.brightcove.com *.akamaihd.net *.brightcovecdn.com https://region1.google-analytics.com https://metrics.hotjar.io https://stats.g.doubleclick.net https://analytics.google.com https://ibc-flow.techtarget.com https://vc.hotjar.io https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://pagesense-collect.zoho.com https://edge.fullstory.com https://rs.fullstory.com https://www.google-analytics.com https://td.doubleclick.net https://www.google.com https://bcbolt446c5271-a.akamaihd.net https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://manifest.prod.boltdns.net https://ka-f.fontawesome.com https://edge.api.brightcove.com https://cookie-cdn.cookiepro.com https://api.company-target.com https://pagead2.googlesyndication.com https://ad.doubleclick.net/ https://static.cloud.coveo.com https://privacyportal.cookiepro.com; font-src 'self' 'unsafe-inline' https://kit.fontawesome.com players.brightcove.net https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://ka-f.fontawesome.com data:; worker-src 'self' 'unsafe-inline' blob:; media-src 'self' blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; frame-src 'self' https://a.rfihub.com https://20874701p.rfihub.com players.brightcove.net https://www.buzzsprout.com https://view.ceros.com https://11057559.fls.doubleclick.net https://www.facebook.com https://td.doubleclick.net https://s.company-target.com https://www.google.com https://view.ceros.com https://www.googletagmanager.com https://*.fls.doubleclick.net; upgrade-insecure-requests; 4 frame-ancestors 'self' https://*.ensineme.com.br https://*.estacio.br https://*.yduqs.com.br https://*.wyden.com.br https://*.ibmec.br https://*.idomed.com.br https://*.damasio.com.br 4 frame-ancestors 'self' https://bioland.we.network/ https://my.dlv.de/ 4 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline' 4 frame-ancestors 'self' *.authorize.net 4 block-all-mixed-content; frame-src 'self' info.marsh.com datawrapper.dwcdn.net *.brightcove.net *.brightcove.com s.company-target.com mmc.demdex.net *.demandbase.com *.doubleclick.net *.googlesyndication.com consent-pref.trustarc.com www.googletagmanager.com customervoice.microsoft.com forms.office.com mmc-assets.foleon.com 4 default-src 'self' https://s14415.pcdn.co https://s14416.pcdn.co https://s14417.pcdn.co https://s14418.pcdn.co https://s14419.pcdn.co; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.en25.com http://*.marketo.net https://*.6sc.co https://*.bing.com https://*.bizible.com https://*.brandwatch.com https://*.capterra.com https://*.clarity.ms https://*.claydar.com https://*.cloudflare.com https://*.cloudfront.net https://*.cookielaw.org https://*.doubleclick.net https://*.driftt.com https://*.eloqua.com https://*.en25.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.highcharts.com https://*.hotjar.com https://*.hotjar.io https://*.instagram.com https://*.linkedin.com https://*.marketo.com https://*.marketo.net https://*.neutral.ttwstatic.com https://*.optimizely.com https://*.oraclecloud.com https://*.pingdom.net https://*.podscribe.com https://*.qualified.com https://*.quora.com https://*.reddit.com https://*.segreencolumn.com https://*.storylane.io https://*.tiktok.com https://*.tiktokcdn-us.com https://*.tiktokcdn.com https://*.ttwstatic.com https://*.twitter.com https://*.wistia.com https://*.wistia.net https://*.youtube.com https://*.zi-scripts.com https://*.zoominfo.com https://cdn.jsdelivr.net/npm/@twemoji/api@15.1.0/dist/twemoji.min.js https://cdn.jsdelivr.net/npm/chart.js@4.4.1/dist/chart.umd.min.js https://cdn.jsdelivr.net/npm/chartjs-chart-wordcloud@4.3.0/build/index.umd.min.js https://cdn.jsdelivr.net/npm/chartjs-chart-wordcloud@4.3.0/dist/chartjs-chart-wordcloud.umd.min.js https://code.highcharts.com/10.3.3/highcharts.js.map https://js.zi-scripts.com https://s14415.pcdn.co https://s14416.pcdn.co https://s14417.pcdn.co https://s14418.pcdn.co https://s14419.pcdn.co https://snap.licdn.com https://static.ads-twitter.com https://unpkg.com/@dotlottie/player-component@2.7.5/dist/dotlottie-player.js https://unpkg.com/@lottiefiles/lottie-player@0.2.0/dist/lottie-player.js img04.en25.com rum-static.pingdom.net wss://*.qualified.com; style-src 'self' 'unsafe-inline' https://*.ttwstatic.com https://fonts.googleapis.com https://s14415.pcdn.co https://s14416.pcdn.co https://s14417.pcdn.co https://s14418.pcdn.co https://s14419.pcdn.co; font-src 'self' data: https://fonts.gstatic.com https://s14415.pcdn.co https://s14416.pcdn.co https://s14417.pcdn.co https://s14418.pcdn.co https://s14419.pcdn.co; img-src 'self' data: http://1.gravatar.com https: https://*.ibytedtos.com https://*.ibyteimg.com https://*.pingdom.net https://*.tiktokcdn-us.com https://*.tiktokcdn.com https://s14415.pcdn.co https://s14416.pcdn.co https://s14417.pcdn.co https://s14418.pcdn.co https://s14419.pcdn.co ttps://p16-tiktokcdn-com.akamaized.net; media-src *.qualified.com https://*.ibytedtos.com https://*.tiktokcdn-us.com https://*.tiktokcdn.com; connect-src 'self' *.clarity.ms *.google.co.in *.google.de *.google.ro *.googleadservices.com api.brandwatch.com http://*.mktoresp.com https://*.6sc.co https://*.6sense.com https://*.adnxs.com https://*.analytics.google.com https://*.bing.com https://*.bing.net https://*.bizible.com https://*.brandwatch.com https://*.capterra.com https://*.claydar.com https://*.cloudflare.com https://*.cookielaw.org https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.ae https://*.google.co.uk https://*.google.com https://*.google.com.mx https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.highcharts.com https://*.hotjar.com https://*.hotjar.io https://*.linkedin.com https://*.marketo.net https://*.mktoresp.com https://*.mktoutil.com https://*.onetrust.com https://*.optimizely.com https://*.pingdom.net https://*.podscribe.com https://*.qualified.com https://*.quora.com https://*.segreencolumn.com https://*.sentry.io https://*.t.co https://*.tiktok.com https://*.tiktokcdn-us.com https://*.tiktokcdn.com https://*.tiktokv.com https://*.tiktokw.us https://*.twitter.com https://*.wistia.com https://*.wistia.net https://*.zi-scripts.com https://*.zoominfo.com https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/@twemoji/api@15.1.0/dist/twemoji.min.js https://cdn.jsdelivr.net/npm/chart.js@4.4.1/dist/chart.umd.min.js https://cdn.jsdelivr.net/npm/chartjs-chart-wordcloud@4.3.0/build/index.umd.min.js https://code.highcharts.com https://google.com https://s14415.pcdn.co https://s14416.pcdn.co https://s14417.pcdn.co https://s14418.pcdn.co https://s14419.pcdn.co https://server-side-tagging-o6xcwbv53a-uc.a.run.app wss://*.hotjar.com wss://*.qualified.com; frame-src 'self' *.linkedin.com https://*.cdn.optimizely.com https://*.driftt.com https://*.reddit.com https://*.storylane.io https://*.tiktok.com https://*.tiktokcdn-us.com https://*.tiktokcdn.com https://*.tiktokv.com https://*.wistia.com https://*.wistia.net https://app.qualified.com https://connect.facebook.net https://facebook.com https://instagram.com https://platform.twitter.com https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://www.instagram.com https://www.tiktok.com https://www.youtube.com https://youtube.com; frame-ancestors 'self' *.brandwatch.com https://insights.hotjar.com; form-action 'self' https://*.facebook.com https://www.brandwatch.com; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; report-uri /csp-report/; 4 frame-ancestors 'self' https://www.renesas.cn http://www.renesas.cn https://icp.renesas.com http://icp.renesas.com https://icp.renesas.cn http://icp.renesas.cn 4 frame-ancestors 'self' https://www.carat.fiserv.com; 4 default-src 'self' data: ; child-src 'self' blob: ; img-src * data: blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.mollie.com https://remote.captcha.com https://hcaptcha.com https://*.hcaptcha.com blob: ; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com ; base-uri 'none' ; font-src 'self' data: ; form-action 'self' https://*.mollie.com ; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com blob: ; frame-ancestors 'self' ; connect-src 'self' https://xmpp.contactoffice.com https://hcaptcha.com https://*.hcaptcha.com https://blockchain.info https://api.coinlayer.com https://api.friendlycaptcha.com ; 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://fw-cdn.com https://euc-widget.freshworks.com https://www.clarity.ms https://scripts.clarity.ms https://api.mapbox.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.mapbox.com; font-src 'self' data: https://fonts.gstatic.com https://api.mapbox.com https://fonts.mapbox.com https://*.mapbox.com https://*.cdn.office.net; img-src 'self' data: blob: https: http: https://*.mapbox.com; connect-src 'self' https://api-bdc.net https://api-bdc.io https://api.bigdatacloud.net https://web.api-bdc.io https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://accounts.google.com https://github.com https://euc-widget.freshworks.com https://clientstream.launchdarkly.com https://events.launchdarkly.com https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://api.mapbox.com https://events.mapbox.com https://*.mapbox.com; frame-src 'self' https://accounts.google.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; worker-src blob: 4 default-src 'self' https: blob:;script-src 'self' https: 'unsafe-inline' 'unsafe-eval';style-src 'self' https: 'unsafe-inline' https://fonts.googleapis.com https://build.cloudbees.com;font-src 'self' https: data:;img-src 'self' https: data:;frame-ancestors 'self' https://*.contentful.com;worker-src 'self' blob:;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';script-src-attr 'none' 4 default-src https: blob: 'unsafe-inline' https://*.hotjar.com:* https://*.hotjar.io:* wss://*.hotjar.com *.crazyegg.com https://mailtrack.me ; script-src 'self' 'unsafe-inline' https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://embed.typeform.com https://d5phz18u4wuww.cloudfront.net https://cdnjs.cloudflare.com https://seal.digicert.com https://js.stripe.com https://www.googleadservices.com https://billing.quaderno.io https://www.gstatic.com https://s3-eu-west-1.amazonaws.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://d1fc8wv8zag5ca.cloudfront.net https://*.hotjar.com https://cdn.jsdelivr.net/gh/snowplow https://connect.facebook.net https://www.googletagmanager.com https://*.cookiebot.com *.crazyegg.com https://analytics.tiktok.com https://mailtrack.me ; img-src 'self' data: https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.es https://www.google.com https://mailtrackio.typeform.com https://www.googleadservices.es https://www.googleadservices.com https://googleads.g.doubleclick.net https://seal.digicert.com https://billing.quaderno.io https://s3-eu-west-1.amazonaws.com https://dc.ads.linkedin.com https://d1ptrxl5bj7757.cloudfront.net https://analytics-v2.mailtrack.io https://px.ads.linkedin.com https://www.linkedin.com https://www.facebook.com/tr/ https://www.facebook.com/privacy_sandbox/ https://www.googletagmanager.com https://templates-images-dev.s3.eu-west-1.amazonaws.com https://templates-images-prod.s3.eu-west-1.amazonaws.com https://*.cookiebot.com *.crazyegg.com https://mailtrack.me https://mt-video-dev.s3.eu-west-1.amazonaws.com https://mt-video-prod.s3.eu-west-1.amazonaws.com https://maildoc-dev.s3.eu-west-1.amazonaws.com https://maildoc.s3.eu-west-1.amazonaws.com ; object-src 'none'; font-src 'self' https://fonts.gstatic.com https://netdna.bootstrapcdn.com https://cdnjs.cloudflare.com https://s3-eu-west-1.amazonaws.com https://mailtrack.me ; worker-src blob: https://mailsuite.me https://mailsuite.com ; media-src 'self' data: blob: https://mailtrack.me https://mt-video-dev.s3.eu-west-1.amazonaws.com https://mt-video-prod.s3.eu-west-1.amazonaws.com ; 4 frame-ancestors depositfiles.com *.depositfiles.com depositfiles.org *.depositfiles.org dfiles.eu *.dfiles.eu dfiles.com *.dfiles.com 4 default-src 'self' *.bim.com.tr *.bim.ma *.bim.eg *.bimcell.com.tr *.file.com.tr *.google.com *.google.com.tr *.cloudflare.com *.gstatic.com *.doubleclick.net *.bootstrapcdn.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.jquery.com *.facebook.net *.youtube.com *.youtube-nocookie.com *.hr-link.net hr-link.net 'unsafe-inline' 'unsafe-eval' data:; 4 default-src https: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' https://app.kameleoon.com https://*.paessler.com; form-action 'self' https://forms.hsforms.com https://*.paessler.com; connect-src 'self' https: wss://*.qualified.com; media-src 'self' https://*.qualified.com https://*.cloudfront.net; font-src 'self' https: data:; worker-src 'self' blob:; manifest-src 'self'; base-uri 'none'; object-src 'none'; img-src https: data: 4 frame-ancestors 'self' https://brevo.com https://*.brevo.com https://*.51b.dev 4 frame-ancestors https://*.gsmaevents.com https://gsma.force.com https://gsma.my.site.com 4 upgrade-insecure-requests; frame-ancestors 'self' https://*.experiencecloud.adobe.com https://experiencecloud.adobe.com https://experience.adobe.com; 4 frame-ancestors 'self' *.cube365.net *.thecube.net *.siliconangle.com *.thecuberesearch.com 4 upgrade-insecure-requests; frame-ancestors *.centurylink.com *.corp.intranet; 4 object-src 'self'; report-uri https://ayba8dhs.uriports.com/reports/report; report-to default 4 base-uri 'self'; child-src blob:; connect-src 'self' https://www.veeva.com https://veeva.matomo.cloud https://cdn.matomo.cloud https://cdn.cookielaw.org https://cdn.jsdelivr.net https://lltrck.com https://bam.nr-data.net https://nr-data.net https://*.wistia.com https://*.litix.io/ https://fast.wistia.net https://cdnjs.cloudflare.com https://*.sentry-cdn.com/ https://veeva.theorgwiki.com https://hcaptcha.com https://*.hcaptcha.com https://geo.wpforms.com; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://*.wistia.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.veeva.com https://fast.wistia.net https://fast.wistia.com https://explore.veeva.com https://newassets.hcaptcha.com https://*.arcade.software https://www.surveymonkey.com/ https://hcaptcha.com https://*.hcaptcha.com; img-src 'self' data: blob: https://www.veeva.com https://veevabasics.veeva.com https://vaultbasics.veeva.com https://cdn.cookielaw.org https://lltrck.com https://*.wistia.com https://*.wistia.net; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net; object-src 'self' https://www.veeva.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdn.cookielaw.org https://veeva.matomo.cloud https://cdn.matomo.cloud https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.sentry-cdn.com/ https://cdn.jsdelivr.net https://lltrck.com https://js-agent.newrelic.com https://momentjs.com https://explore.veeva.com https://js.hcaptcha.com https://www.veeva.com https://hcaptcha.com https://*.hcaptcha.com https://ipapi.co; style-src 'self' blob: 'unsafe-inline' https://www.veeva.com https://fonts.googleapis.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://explore.veeva.com https://fast.wistia.com https://hcaptcha.com https://*.hcaptcha.com; worker-src 'self' blob:; upgrade-insecure-requests 4 default-src 'self' 'unsafe-inline' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.cookielaw.org https://www.googletagmanager.com https://addsearch.com https://*.addsearch.com https://*.searchcdn.com https://d20vwa69zln1wj.cloudfront.net https://www.google-analytics.com https://www.googleanalytics.com https://*.outbrain.com https://snap.licdn.com https://assets.apollo.io https://www.redditstatic.com https://googleads.g.doubleclick.net https://*.hs-scripts.com https://analytics.tiktok.com https://connect.facebook.net https://j.6sc.co https://amplify.outbrain.com https://tr.outbrain.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hs-banner.com https://js.hsleadflows.net https://js.hubspot.com https://js.hsforms.net https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/releases/ https://s8.searchcdn.com https://grid.is https://edge.fullstory.com https://www.comeet.co https://player.vimeo.com https://www.youtube.com https://apollo.io https://cdn.ampproject.org https://bugcrowd.com https://assets.bugcrowdusercontent.com https://www.google.com https://optimize.google.com https://www.googleoptimize.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://js.hscta.net https://js-eu1.hscta.net https://no-cache.hubspot.com https://*.hubspot.com https://*.hs-sites.com https://*.hs-sites-eu1.com https://cta-service-cms2.hubspot.com https://tagmanager.google.com https://www.gstatic.com https://bat.bing.com https://*.omappapi.com https://widget.manychat.com https://app.calculatorstudio.co https://cdn.userway.org https://static.oktopost.com https://okt.rapyd.net https://www.clarity.ms https://scripts.clarity.ms https://js.adsrvr.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.addsearch.com https://*.searchcdn.com https://*.cloudfront.net https://optimize.google.com https://www.comeet.com https://tagmanager.google.com https://www.googletagmanager.com https://www.googleoptimize.com https://*.omappapi.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://cdn.userway.org; img-src 'self' https: data: blob:; connect-src 'self' https://googleads.g.doubleclick.net https://www.google.com https://px.ads.linkedin.com https://px.ads.linkedin.com https://aplo-evnt.com https://api.ipstack.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://analytics.google.com https://www.google-analytics.com https://privacyportal-eu.onetrust.com https://stats.g.doubleclick.net https://ipv6.6sc.co https://analytics.tiktok.com https://dashboard.rapyd.net https://api.hubapi.com https://*.hubspot.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://cdn.linkedin.oribi.io https://c.6sc.co https://edge.fullstory.com https://rs.fullstory.com https://secure.adnxs.com https://*.visualwebsiteoptimizer.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://*.omappapi.com https://app.vwo.com https://api.userway.org https://cdn.userway.org https://*.api.userway.org https://o.clarity.ms https://insight.adsrvr.org; font-src 'self' data: https://fonts.gstatic.com https://cdn.userway.org; frame-ancestors 'self' https://www.google.com https://grid.is https://www.rapyd.is; frame-src https://www.rapyd.net https://*.outbrain.com https://td.doubleclick.net https://aax-eu.amazon-adsystem.com https://www.facebook.com https://optimize.google.com https://www.google.com https://forms.hsforms.com https://grid.is https://www.rapyd.is https://www.comeet.co https://player.vimeo.com https://bugcrowd.com https://www.googleoptimize.com https://www.youtube.com https://apollo.io https://s-eu1.hscta.net https://no-cache.hubspot.com https://*.hs-sites-eu1.com https://*.hs-sites.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://www.googletagmanager.com https://app.calculatorstudio.co https://cdn.userway.org https://insight.adsrvr.org 4 script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' data: https://js.driftt.com https://widget.drift.com https://ajax.googleapis.com https://maps.googleapis.com https://optimize.google.com https://www.youtube.com https://cdnjs.cloudflare.com https://www.google.com https://tagmanager.google.com https://www.googleoptimize.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://partner.googleadservices.com https://adservice.google.com https://adservice.google.ca https://tpc.googlesyndication.com https://cookie-cdn.cookiepro.com https://hubspot.clearbit.com https://forms.hsforms.com https://client-registry.mutinycdn.com https://js.hs-scripts.com https://js.hsforms.net https://js.hs-analytics.net https://js.hsadspixel.net https://js.hs-banner.com https://client.mutinycdn.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://connect.facebook.net https://googleads.g.doubleclick.net https://bat.bing.com https://static.hotjar.com https://tag.clearbitscripts.com https://j.6sc.co https://www.clickcease.com https://metadata-static-files.sfo2.cdn.digitaloceanspaces.com https://script.hotjar.com https://reveal.clearbit.com https://x.clearbitjs.com https://snap.licdn.com https://tag.demandbase.com https://tribl.io https://hackerone.com https://www.clarity.ms https://k.clarity.ms https://js.chilipiper.com/marketing.js https://tracking.g2crowd.com https://*.prod.mplat-ppcprotect.com https://*.lunio.ai https://serve.nrich.ai https://tag.nrich.ai https://tag.unifyintent.com https://cdn.dreamdata.cloud https://js.partnerstack.com https://cdn.jsdelivr.net https://js-na1.hs-scripts.com https://rechargeapps.chilipiper.com/concierge-js/cjs/concierge.js https://dev.visualwebsiteoptimizer.com https://app.vwo.com https://www.redditstatic.com https://scripts.clarity.ms https://c.amazon-adsystem.com https://static.claydar.com https://cdn.claydar.com https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net; 4 default-src 'self' *.hadev.co.za *.hostafrica.ke *.hostafrica.com *.tawk.to; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.semrush.com cdn.simplesat.io https://maillist-manage.com *.maillist-manage.com *.mxpnl.com *.googletagmanager.com *.googleadservices.com *.gstatic.com *.clarity.ms *.jsdelivr.net *.typekit.net *.fontawesome.com *.google.com *.twitter.com *.tawk.to *.google-analytics.com *.doubleclick.net *.youtube.com https://tally.so; style-src 'self' 'unsafe-inline' *.typekit.net cdn.simplesat.io *.googletagmanager.com *.googleadservices.com *.gstatic.com *.tawk.to *.jsdelivr.net *.fontawesome.com *.googleapis.com; img-src 'self' * *.hadev.co.za *.hostafrica.ke *.hostafrica.com data: *.google.com *.google.co.za *.googletagmanager.com *.bing.com *.clarity.ms *.gstatic.com *.google-analytics.com *.tawk.to *.doubleclick.net; font-src 'self' data: *.gstatic.com *.tawk.to *.fontawesome.com *.typekit.net *.gstatic.com; connect-src 'self' wss://*.semrush.com api.simplesat.io *.semrush.com api.amplitude.com *.hostafrica.com *.mixpanel.com *.maillist-manage.com *.googlesyndication.com *.google.com *.fontawesome.com wss://*.tawk.to *.tawk.to *.googletagmanager.com *.clarity.ms *.google-analytics.com *.doubleclick.net *.googleadservices.com; frame-src 'self' blob: *.semrush.com *.groovefunnels.com *.groove.cm *.doubleclick.net *.gstatic.com *.twitter.com *.youtube.com *.tawk.to *.google.com *.googleadservices.com https://tally.so https://www.googletagmanager.com; frame-ancestors 'self'; worker-src 'self' blob:; 4 frame-ancestors 'self' *.model-t.cc.commerce.ondemand.com *.devleaseweb.com *.leaseweb.com 4 default-src 'none'; connect-src 'self' https://releases.grapheneos.org/; font-src 'self'; img-src 'self'; manifest-src 'self'; script-src 'self'; style-src 'self'; webrtc 'block'; form-action 'none'; frame-ancestors 'none'; base-uri 'none'; require-trusted-types-for 'script'; trusted-types 'none' 4 frame-ancestors 'self' https://manhattan.institute https://admin.manhattan.institute https://www.city-journal.org https://www.adamsmithsociety.com 4 img-src 'self' data: https: 4 frame-src *; frame-ancestors 'self'; 4 frame-ancestors 'self' https://1984.demo-site.is; 4 default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' code.jquery.com www.googletagmanager.com *.googletagmanager.com tagmanager.google.com www.googleadservices.com *.googleadservices.com optimize.google.com *.googleapis.com js.hs-banner.com js.hs-scripts.com www.google-analytics.com *.google-analytics.com static.hotjar.com script.hotjar.com *.hotjar.com bizographics.com static.ads-twitter.com *.postcodeanywhere.co.uk services.postcodeanywhere.co.uk *.pcapredict.com *.loqate.com *.addressy.com api.addressy.com *.gbgplc.com snap.licdn.com *.facebook.net googleads.g.doubleclick.net js.hs-analytics.net js.hsleadflows.net js.hsadspixel.net sjs.bizographics.com px.ads.linkedin.com analytics.twitter.com www.google.com *.google.com *.gstatic.com platform.linkedin.com js.usemessages.com addtocalendar.com *.sharethis.com amplify.outbrain.com js.hsforms.net forms.hsforms.com *.onetrust.com bat.bing.com use.typekit.net cdnjs.cloudflare.com *.opmnstr.com snid.snitcher.com a.trstplse.com *.wistia.com *.wistia.net player.vimeo.com *.demandbase.com src.litix.io *.litix.io cdn.jsdelivr.net static.codepen.io platform.twitter.com zucvhpjgqj.execute-api.ap-southeast-2.amazonaws.com hosted.mastersoftgroup.com a.omappapi.com unpkg.com npmcdn.com secure.perk0mean.com ruler.nyltx.com *.clickcease.com www.clickcease.com monitor.clickcease.com tr.outbrain.com analytics.nyltx.com ifaqs.flexanswer.com static.zdassets.com *.buzzsprout.com *.sg.va.sabio.cloud js.monitor.azure.com *.monitor.azure.com j.6sc.co *.6sc.co *.6sense.com tracking.g2crowd.com js.hubspot.com *.customersure.com *.visualwebsiteoptimizer.com www.atmrum.net *.atmrum.net *.cloudfront.net scout-cdn.salesloft.com *.maze.co esm.sh *.esm.sh secure.imaginative-24.com webeo-web-content.s3-eu-west-1.amazonaws.com www.clarity.ms scripts.clarity.ms *.clarity.ms secure.intelligent-business-7.com secure.agile-company-365.com ldynamicspublicapi.leadforensics.com secure.leadforensics.com scripts.webeo.com my.g2.com *.g2.com *.sentry-cdn.com cdn.segment.com api.segment.io hm.baidu.com s3-us-west-2.amazonaws.com b-code.liadm.com rp.liadm.com idx.liadm.com *.bing.com; style-src 'self' blob: 'unsafe-inline' *.googleapis.com *.googletagmanager.com tagmanager.google.com optimize.google.com fonts.googleapis.com addtocalendar.com *.loqate.com cloudflare.com cdnjs.cloudflare.com *.typekit.net *.pcapredict.com *.addressy.com *.postcodeanywhere.co.uk *.gbgplc.com fast.wistia.com cdn.jsdelivr.net a.omappapi.com *.sg.va.sabio.cloud ifaqs.flexanswer.com *.cloudfront.net unpkg.com *.maze.co webeo-web-content.s3-eu-west-1.amazonaws.com *.hotjar.com; img-src 'self' data: blob: *.gravatar.com gbg-global.azureedge.net *.postcodeanywhere.co.uk *.pcapredict.com *.addressy.com *.gbgplc.com t.co *.google.com *.gstatic.com www.glassdoor.co.uk glassdoor.co.uk *.google.co.uk *.google-analytics.com *.googleusercontent.com *.googletagmanager.com *.facebook.com *.hubspot.com cdnjs.cloudflare.com stats.g.doubleclick.net googleads.g.doubleclick.net pagead2.googlesyndication.com maps.gstatic.com maps.googleapis.com www.googletagmanager.com www.google-analytics.com optimize.google.com *.sharethis.com dashboard.umbraco.org px.ads.linkedin.com www.linkedin.com tr.outbrain.com amplifypixel.outbrain.com *.vimeo.com *.vimeocdn.com i.vimeocdn.com p.typekit.net bat.bing.com c.bing.com a.opmnstr.com p.adsymptotic.com *.omappapi.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net match.prod.bidr.io segments.company-target.com syndication.twitter.com analytics.twitter.com connect.facebook.net *.onetrust.com id.rlcdn.com ifaqs.flexanswer.com *.loqate.com gbgstorage01.blob.core.windows.net *.sg.va.sabio.cloud *.zopim.io *.placeholder.com *.hsforms.com b.6sc.co *.6sc.co *.visualwebsiteoptimizer.com gbgcmsprdsto.blob.core.windows.net gbgcmsprdblobcdn.azureedge.net *.maze.co secure.imaginative-24.com *.clarity.ms webeo-web-content.s3-eu-west-1.amazonaws.com images.g2crowd.com www.g2.com hm.baidu.com *.hotjar.com secure.adnxs.com; font-src 'self' data: *.gstatic.com *.typekit.net *.wistia.com cdnjs.cloudflare.com script.hotjar.com a.omappapi.com ifaqs.flexanswer.com s3-us-west-2.amazonaws.com *.sg.va.sabio.cloud *.maze.co cdn.jsdelivr.net unpkg.com; media-src 'self' data: blob: *.wistia.net *.wistia.com embedwistia-a.akamaihd.net static.zdassets.com *.vimeo.com *.vimeocdn.com; worker-src 'self' blob:; child-src 'self' blob:; connect-src 'self' *.google-analytics.com *.analytics.google.com api.hubapi.com *.hubspot.com *.hsappstatic.net *.hotjar.com vc.hotjar.io content.hotjar.io *.sharethis.com *.postcodeanywhere.co.uk *.pcapredict.com *.addressy.com *.gbgplc.com gbgplc.com decollector.tealeaf.ibmcloud.com gbg-global.azureedge.net www.facebook.com *.vimeo.com *.vimeocdn.com *.wistia.com *.wistia.net *.litix.io embedwistia-a.akamaihd.net *.onetrust.com *.omappapi.com api.opmnstr.com performance.typekit.net api.trstplse.com api.company-target.com stats.g.doubleclick.net segments.company-target.com hosted.mastersoftgroup.com *.loqate.com wss: ir.q4europe.com *.lottiefiles.com snid.snitcher.com analytics.nyltx.com ekr.zdassets.com ifaqs.flexanswer.com flexanswer1656.zendesk.com docs.idscan.com monitor.clickcease.com *.sg.va.sabio.cloud dc.services.visualstudio.com forms.hsforms.com gbg.workable.com www.workable.com *.atmrum.net gbg-cms-web-uat-staging.azurewebsites.net gbg-cms-web-dev.azurewebsites.net gbg.local maps.googleapis.com *.execute-api.ap-southeast-2.amazonaws.com *.execute-api.us-west-2.amazonaws.com cdn.linkedin.oribi.io px.ads.linkedin.com m1.openfpcdn.io *.applicationinsights.azure.com js.monitor.azure.com *.monitor.azure.com ipv6.6sc.co *.6sc.co *.6sense.com *.customersure.com demotiles.maplibre.org api.maptiler.com scout.salesloft.com *.maze.co cdn.jsdelivr.net tracking.g2crowd.com tracking-api.g2.com secure.adnxs.com *.clarity.ms ldynamicspublicapi.leadforensics.com www.google.com *.google.com *.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com my.g2.com www.g2.com *.g2.com api.segment.io cdn.segment.com unpkg.com pro.ip-api.com alocdn.com a.usbrowserspeed.com esm.sh *.esm.sh *.bing.com *.googletagmanager.com; frame-src 'self' www2.gbgplc.com *.vimeo.com vimeo.com *.youtube.com *.vimeocdn.com platform.twitter.com syndication.twitter.com *.fls.doubleclick.net td.doubleclick.net vars.hotjar.com *.hotjar.com www.facebook.com stats.g.doubleclick.net fast.wistia.net fast.wistia.com www.glassdoor.co.uk www.google.com optimize.google.com www.linkedin.com ir.q4europe.com c.sharethis.mgr.consensu.org *.hsforms.com *.onetrust.com *.postcodeanywhere.co.uk *.pcapredict.com *.addressy.com *.gbgplc.com *.hubspot.com app.hubspot.com *.hs-sites.com codepen.io *.loqate.com *.buzzsprout.com *.umbraco.com www.edisoninvestmentresearch.com *.customersure.com docs.google.com www.g2.com www.fxiaoke.com www.googletagmanager.com *.googletagmanager.com bid.g.doubleclick.net; frame-ancestors 'self' *.loqate.com gbgplc.sharepoint.com; 4 frame-ancestors *.tostadora.fr *.tostadora.co.uk *.tostadora.com *.tostadora.it *.latostadora.com tostadora.fr tostadora.co.uk tostadora.com tostadora.it latostadora.com www.latostadora.dock:* www.tostadora.fr.dock:* www.tostadora.it.dock:* www.tostadora.co.uk.dock:* www.tostadora.com.dock:* mx.latostadora.dock:*; 4 default-src 'self'; script-src 'unsafe-eval' 'self' https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://static.cdn.prismic.io https://prismic.io https://texthelp.tfaforms.net https://www.google.com https://www.gstatic.com https://s.saleswingsapp.com https://static.hotjar.com https://script.hotjar.com https://plus.browsealoud.com https://www.browsealoud.com https://*.speechstream.net https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://wikisum.texthelp.com https://mautic.texthelp.com https://mautic-staging.texthelp.com https://embed.typeform.com/next/embed.js https://connect.facebook.net https://snap.licdn.com https://www.youtube.com https://*.amplitude.com https://a.omappapi.com/ https://player.cloudinary.com https://cloudinary.com https://online4.superoffice.com https://cdn.jsdelivr.net/npm/@rive-app/canvas@2.23.10/rive.js 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.browsealoud.com https://plus.browsealoud.com https://texthelp.tfaforms.net https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com https://mautic.texthelp.com/media/css/ https://mautic-staging.texthelp.com/media/css/ https://embed.typeform.com/next/css/widget.css https://*.amplitude.com https://a.omappapi.com/ https://player.cloudinary.com; connect-src 'self' blob: https://plus.browsealoud.com https://www.browsealoud.com https://en.wikipedia.org https://wikisum.texthelp.com https://wiki-summarizer-eu.texthelp.com https://simplify-us.texthelp.com https://browsealoud-webservices-8.texthelp.com https://browsealoud-webservices-eu.texthelp.com https://babm.texthelp.com https://*.speechstream.net https://stats.g.doubleclick.net https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://everway.cdn.prismic.io https://analytics.formassembly.com https://texthelp.tfaforms.net https://typeahead.formassembly.com https://consentcdn.cookiebot.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://to.go.saleswingsapp.com https://helium.saleswings.pro https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://api.typeform.com/single-embed/ https://px.ads.linkedin.com https://*.amplitude.com https://unpkg.com https://cdn.jsdelivr.net https://api.omappapi.com/ https://a.omappapi.com https://z.omappapi.com https://player.cloudinary.com https://res.cloudinary.com https://cloudinary.com https://api.ipdata.co https://texthelp.tfaforms.net/api_v2/altcha/challenge; child-src 'self' https://content.googleapis.com https://www.googletagmanager.com/ns.html; worker-src 'self' blob:; media-src 'self' blob: https://*.speechstream.net https://*.amplitude.com https://res.cloudinary.com https://player.cloudinary.com; font-src 'self' https://fonts.gstatic.com data: https://script.hotjar.com https://a.omappapi.com/ https://api.omappapi.com/; img-src 'self' data: blob: https://webworx.texthelp.com https://browsealoud-webservices-8.texthelp.com https://browsealoud-webservices-eu.texthelp.com https://www.browsealoud.com https://plus.browsealoud.com https://upload.wikimedia.org https://www.google-analytics.com https://stats.g.doubleclick.net https://everway.cdn.prismic.io https://images.prismic.io https://imgsct.cookiebot.com https://*.google-analytics.com https://*.googletagmanager.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.google.com https://google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.co.uk https://www.google.ca https://www.google.dk https://www.google.com.au https://www.google.co.in https://www.google.ie https://www.google.co.nz https://www.google.nl https://www.google.it https://www.google.se https://www.google.es https://www.google.com.ph https://www.google.com.mx https://www.google.de https://www.google.com.pk https://www.google.co.id https://www.google.ae https://www.google.fr https://www.google.co.za https://www.google.com.br https://www.google.co.jp https://www.google.com.sg https://www.google.fi https://www.google.co.il https://www.google.ee https://www.google.no https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com https://px.ads.linkedin.com https://www.facebook.com https://*.amplitude.com https://a.omappapi.com/ https://api.omappapi.com/ https://res.cloudinary.com; object-src 'none'; frame-src 'self' https://content.googleapis.com/ https://everway.prismic.io https://www.youtube.com https://www.google.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://td.doubleclick.net https://mautic.texthelp.com https://mautic-staging.texthelp.com https://form.typeform.com/ https://registration.events.ringcentral.com/ https://player.cloudinary.com https://online4.superoffice.com/; form-action 'self' https://texthelp.tfaforms.net https://mautic.texthelp.com https://mautic-staging.texthelp.com https://event.on24.com https://www.n2y.com/ https://www.texthelp.com https://play.goconsensus.com; base-uri 'none' 4 frame-ancestors 'self' https://commerceinsights.ibmcloud.com 4 script-src 'self' https://upstox.com https://uat.upstox.com https://www.googletagmanager.com https://snap.licdn.com https://static.ads-twitter.com https://connect.facebook.net https://static-cdn.trackier.com https://bat.bing.com http://bat.bing.com https://googleads.g.doubleclick.net https://assets.uat1.upstox.com https://onelinksmartscript.appsflyer.com https://api-js.mixpanel.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://upstox.com https://uat.upstox.com https://www.googletagmanager.com https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://assets.upstox.com https://upstox.com https://uat.upstox.com https://assets.uat1.upstox.com https://t.co https://analytics.twitter.com https://px.ads.linkedin.com https://www.google.co.in https://www.facebook.com https://bat.bing.com https://www.google.com https://www.linkedin.com https://adservice.google.com https://www.googletagmanager.com https://ad.doubleclick.net; font-src 'self' https://upstox.com https://uat.upstox.com https://assets.uat1.upstox.com https://fonts.gstatic.com; connect-src 'self' https://www.google.com https://www.google.co.in https://px.ads.linkedin.com https://analytics.google.com https://www.facebook.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://bat.bing.com https://upstox.com https://assets.upstox.com https://uat.upstox.com https://assets.uat1.upstox.com https://service.upstox.com https://service-uat.upstox.com https://api-js.mixpanel.com https://www.googletagmanager.com https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://9507240.fls.doubleclick.net; media-src 'self'; object-src 'none' 4 frame-ancestors 'self' https://*.qtx.dev https://*.dev.qtxquartz.com https://*.stage.qtxquartz.com https://www.fiercewireless.com https://www.fiercetelecom.com https://sample.dragonforms.com https://*.questexinfo.com http://resources.questex.com https://resources.questex.com 4 frame-ancestors 'self' https://*.easyname.com https://*.easyname.at; 4 upgrade-insecure-requests; frame-ancestors 'self' *.reforma.com *.elnorte.com *.mural.com.mx *.gruporeforma.com *.agenciareforma.com *.avisosdeocasion.com *.elviernesnocuesta.com aristeguinoticias.com *.ezproxy.iteso.mx creative-preview-an.com ib.adnxs-simple.com mediation.adnxs.com ib.adnxs.com adsdk.microsoft.com *.safeframe.googlesyndication.com *.espacior.com *.kromatica.com *.grupo.reforma.com; 4 default-src 'self'; frame-ancestors 'self'; font-src 'self' https:; img-src 'self' data: https:; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https: ;form-action 'self' https://*.hsforms.com; object-src 'none'; base-uri 'self'; script-src-elem 'self' 'unsafe-inline' https://js.hsadspixel.net https://js.hs-banner.com https://js.hscollectedforms.net https://js.hs-analytics.net http://*.googletagmanager.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://*.go-mpulse.net https://siteimproveanalytics.com https://secure.iron0walk.com https://*.cookielaw.org https://*.marketo.com https://snap.licdn.com https://*.google.com https://*.doubleclick.net https://*.onetrust.com https://*.akstat.io https://*.akamaihd.net https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.mktoresp.com https://*.clarity.ms https://*.marketo.net https://*.lfeeder.com https://*.intentsify.io https://*.discover.com https://*.ceros.com https://*.ceros.site https://*.demandbase.com https://*.lf-discover.com https://*.usbrowserspeed.com https://*.company-target.com https://*.remarketstats.com https://*.liadm.com https://*.clickcertain.com https://*.googleadservices.com https://*.sharethis.com https://*.google.ca https://*.google-analytics.com https://*.quotemedia.com https://*.gstatic.com https://*.crwdcntrl.com https://js-na1.hs-scripts.com/47147980.js https://*.hsforms.net; connect-src 'self' https://api.hubapi.com https://forms.hscollectedforms.net https://static.hsappstatic.net https://*.hubapi.com https://*.hscollectedforms.net https://*.go-mpulse.net https://*.linkedin.com https://*.cookielaw.org https://*.marketo.com https://*.google.com https://*.doubleclick.net https://*.onetrust.com https://*.akstat.io https://*.akamaihd.net https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.mktoresp.com https://*.clarity.ms https://*.marketo.net https://*.lfeeder.com https://*.intentsify.io https://*.discover.com https://*.ceros.com https://*.ceros.site https://*.demandbase.com https://*.lf-discover.com https://*.usbrowserspeed.com https://*.company-target.com https://*.remarketstats.com https://*.liadm.com https://*.clickcertain.com https://*.googleadservices.com https://*.sharethis.com https://*.google.ca https://*.google-analytics.com https://*.quotemedia.com https://*.gstatic.com https://*.crwdcntrl.com https://*.hsforms.net https://*.hsforms.com; frame-src 'self' https://*.googletagmanager.com/ https://*.youtube.com https://*.company-target.com https://*.liadm.com https://*.ceros.com https://*.ceros.site https://*.doubleclick.net https://*.sharethis.com https://*.hsforms.com; 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://connect.facebook.net https://static.doubleclick.net https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://recaptcha.net https://www.recaptcha.net/recaptcha/api.js https://www.gstatic.com; style-src 'self' 'unsafe-inline' 'report-sample' https://www.facebook.com https://connect.facebook.net https://www.gstatic.com; object-src 'none'; base-uri 'self'; connect-src 'self' careem.com platform.careemapis.com https://stats.g.doubleclick.net https://jnn-pa.googleapis.com https://play.google.com https://*.googlevideo.com https://googleads.g.doubleclick.net https://www.google.com https://analytics.google.com https://www.google-analytics.com https://remittance-service.pvt-cx.gw.staging.teamdisplayed.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com recaptcha.net https://www.youtube.com; img-src 'self' data: https://careem-catalog-media.imgix.net https://www.facebook.com https://yt3.ggpht.com https://i.ytimg.com https://www.gstatic.com https://www.google.com/pagead https://googleads.g.doubleclick.net https://www.google.com.pk https://careem-public-web-media.media.careem.com https://careem-public-web-media.imgix.net https://upload-cdn.careem.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self' blob: https://upload-cdn.careem.com https://careem-public-web-media.media.careem.com https://careem-public-web-media.imgix.net; report-uri https://646c74d0974ac544f93aad6a.endpoint.csper.io/?v=3; worker-src https://recaptcha.net; form-action 'self' 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.ads-twitter.com *.adyen.com *.adalyser.com *.agilone.com *.algolia.net *.algolianet.com c0.adalyser.com *.analytics.google.com *.bing.com *.bounceexchange.com *.bouncex.net *.cdnbasket.net *.cdnwidget.com *.collect.igodigital.com *.contentsquare.net *.criteo.com *.facebook.com *.facebook.net *.fls.doubleclick.net *.g.doubleclick.net *.ggpht.com *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.igodigital.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.klarnaservices.com *.liadm.com *.monetate.net *.nextdoor.com *.nr-data.net *.onetrust.com *.pepperjam.com *.pinimg.com *.pinterest.com *.revlifter.io *.rsa3dsauth.co.uk *.scene7.com *.securesuite.co.uk *.smarterhq.io *.snapchat.com *.staging.bigcontent.io *.studentbeans.com *.twitter.com *.ventrica.io *.wknd.ai ad.doubleclick.net ade.googlesyndication.com algolia.net algolianet.com analytics.tiktok.com api.addressy.com api.official-coupons.com api.official-deals.co.uk app.contentsquare.com bid.g.doubleclick.net clarks.a.bigcontent.io cdn.c1.amplience.net cdn.cookielaw.org cdn.media.amplience.net cdn.static.amplience.net checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com cloud.email.clarks.com cookie-cdn.cookiepro.com edgeshoppingstatic.azureedge.net fonts.googleapis.com insights.algolia.io int-ds-shared-1.monetate.org js-agent.newrelic.com kargo.clarks.com localhost:2323 marketer.monetate.net pay.google.com pippio.com *.experticity.com *.expertvoice.com private-media-node12.s3.eu-west-1.amazonaws.com res.cloudinary.com sc-static.net t.co t.contentsquare.net t.paypal.com t.pepperjamnetwork.com tagmanager.google.com td.doubleclick.net the.sciencebehindcommerce.com tr2.smarterhq.io www.ascendpartner.com www.awin1.com *.clarity.ms www.dwin1.com www.googleadservices.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com www.upsellit.com www.youtube.com youtube.com https://www.clarks.co.uk/assets/ https://www.clarksusa.com/assets/ https://google.com/pay x.bidswitch.net ib.adnxs.com dis.criteo.com contextual.media.net pixel.rubiconproject.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv eb2.3lift.com hb.yahoo.net c1.adform.net cm.adform.net visitor.omnitagjs.com r.casalemedia.com id5-sync.com ad.360yield.com matching.ivitrack.com exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com match.sharethrough.com criteo-partners.tremorhub.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com ib.adnxs.com dpm.demdex.net gum.criteo.com beacon.krxd.net metatest.clarks.com metaevents-1p.stitcherads.com kargo.clarks.com metaevents.stitcherads.com prf.hn form.jotform.com/241913106756052 cdn.jotfor.ms/s/umd/latest/for-form-embed-handler.js *.awin1.com *.zenaps.com https://www.dwin1.com https://the.sciencebehindecommerce.com https://*.wepowerconnections.com https://*.roeyecdn.com https://*.roeye.com access.myunidays.com images.unidays.world *.myunidays.com *.unidays.world *.prod.unidays.io https://flo.uri.sh/ https://flo.uri.sh/visualisation/* https://public.flourish.studio/resources/* *.attentivemobile.com *.attn.tv https://clarks.attn.tv/* *.klaviyo.com *.gocertify.me *.narvar.com *.yotpo.com cdn-widgetsrepository.yotpo.com staticw2.yotpo.com p.yotpoapi.com *.smooch.io *.zdassets.com *.zdusercontent.com *.zendesk.com *.zopim.com clarkscs.zendesk.com ekr.zdassets.com ekr.zendesk.com media.smooch.io static.zdassets.com v2assets.zopim.io zendesk-eu.my.sentry.io https://*.ingest.*.sentry.io https://*.twilio.com wss://*.zendesk.com wss://*.zopim.com wss://api.smooch.io wss://clarkscs.zendesk.com wss://voice-js.roaming.twilio.com https://d3k81ch9hvuctc.cloudfront.net/company/SzjbVD/images/ https://d3k81ch9hvuctc.cloudfront.net/company/Vi474Y/images/ https://d3k81ch9hvuctc.cloudfront.net/company/X8bLXb/images/ https://d3k81ch9hvuctc.cloudfront.net/company/XyZ4PK/images/ https://d3k81ch9hvuctc.cloudfront.net/company/X68UL9/images/ https://d3k81ch9hvuctc.cloudfront.net/company/TUPhxz/images/ https://d3k81ch9hvuctc.cloudfront.net/company/SCGrft/images/ https://d3k81ch9hvuctc.cloudfront.net/company/TNqrkg/images/ https://d3k81ch9hvuctc.cloudfront.net/company/XPmW2X/images/ cdn.attn.tv dfflv.clarks.com sbkpo.clarks.com clarks-us.attn.tv clarks-ca.attn.tv clarks.attn.tv creatives.attn.tv events.attentivemobile.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vu *.google.ws https://bff.prod.aws.clarks.com/graphql cognito-idp.eu-west-1.amazonaws.com https://www.clarks.com https://preview.clarks.com; worker-src blob:; font-src 'self' data: fonts.gstatic.com *.klarnacdn.net *.unidays.world *.klaviyo.com cdn-widgetsrepository.yotpo.com; frame-ancestors 'self'; upgrade-insecure-requests ; 4 frame-ancestors 'self' *.ncmec.org *.missingkids.org *.adobecqms.net *.ncmecad.net *.articulate.com articulateusercontent.com ncmec.docebosaas.com learn.secondcity.com *.dcbstatic.com; 4 default-src 'self'; img-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; 4 frame-ancestors 'self' https://*.etracker.com https://*.it-nr.de https://*.itk-rheinland.de https://*.duesseldorf.de https://*.rhein-kreis-neuss.de 4 object-src 'none'; base-uri 'self'; frame-ancestors 'self' http://localhost:8080 https://cms.dev.ecom.mueller.de https://cms.test.ecom.mueller.de https://cms.prod.ecom.mueller.de; 4 frame-ancestors experience.adobe.com service.experiencecloud.adobe.com scandichotelsab.experiencecloud.adobe.com 4 object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; 4 base-uri 'none' 4 default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src 'unsafe-inline' 'unsafe-eval' *; script-src 'unsafe-inline' 'unsafe-eval' *; img-src * data: about:; frame-src 'self' *; worker-src blob:; object-src https://wnyc-project-prod.s3.amazonaws.com; frame-ancestors 'self' localhost *; media-src 'self' *; 4 object-src 'none'; frame-ancestors https://*.neoed.ca https://*.neoed.com https://*.neoed.net https://*.neogov.com https://*.neogov.net https://*.planitpolice.com https://*.powerdms.com https://*.powerdms.net; upgrade-insecure-requests; 4 frame-ancestors https://tongji.baidu.com 4 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://am-assets.pl www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com accounts.google.com widget.helpcrunch.com connect.facebook.net secure.payu.com script.hotjar.com static.hotjar.com js.stripe.com chat.dropped.net.pl widget.trustpilot.com aftermarket.helpcrunch.com embed.helpcrunch.com;style-src 'self' 'unsafe-inline' https://am-assets.pl fonts.googleapis.com accounts.google.com chat.dropped.net.pl; 4 default-src 'self' https://*.allkeyshop.com https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://www.google.com https://www.google.fr https://*.gstatic.com https://www.google-analytics.com https://www.googletagservices.com https://www.googletagmanager.com https://www.recaptcha.net https://*.googleusercontent.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.google-analytics.com https://www.google.com/s2/ https://static.zdassets.com https://ekr.zdassets.com https://allkeyshop.zendesk.com wss://allkeyshop.zendesk.com wss://*.zopim.com https://v2assets.zopim.io https://steamcdn-a.akamaihd.net https://avatars.steamstatic.com https://*.twitch.tv https://static-cdn.jtvnw.net https://static-cdn.jtvnw.net/ https://discord.com https://cdn.discordapp.com/avatars/ https://www.youtube.com https://s.ytimg.com https://i.ytimg.com/ https://*.gravatar.com https://www.tiktok.com/ https://*.ttwstatic.com/ https://i0.wp.com/www.allkeyshop.com https://connect.facebook.net/ https://graph.facebook.com https://platform-lookaside.fbsbx.com https://*.fbcdn.net/ https://*.cloudfront.net/facebook/ https://*.cloudfront.net/twitter/ https://*.cloudfront.net/instagram/ https://platform.twitter.com/ https://platform.x.com/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com/ajax/libs http://cdn.sendpulse.com https://cdn.sendpulse.com https://static.hotjar.com https://script.hotjar.com https://widget.gleamjs.io https://gleam.io https://js.gleam.io https://ad.doubleclick.net https://do6911745127z.cloudfront.net/scripts/master/goclecd.js https://system.warlegend.net 'unsafe-inline' data:; style-src 'self' https://*.allkeyshop.com https://*.allkeyshop.ru https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://*.ttwstatic.com/ https://cdn.jsdelivr.net https://cdn.sendpulse.com https://www.google.com/recaptcha 'unsafe-inline'; img-src 'self' https://*.allkeyshop.com https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://www.google.com https://www.google.fr https://*.gstatic.com https://www.google-analytics.com https://www.googletagservices.com https://www.googletagmanager.com https://www.recaptcha.net https://*.googleusercontent.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.google-analytics.com https://www.google.com/s2/ https://static.zdassets.com https://ekr.zdassets.com https://allkeyshop.zendesk.com wss://allkeyshop.zendesk.com wss://*.zopim.com https://v2assets.zopim.io https://steamcdn-a.akamaihd.net https://avatars.steamstatic.com https://*.twitch.tv https://static-cdn.jtvnw.net https://static-cdn.jtvnw.net/ https://discord.com https://cdn.discordapp.com/avatars/ https://www.youtube.com https://s.ytimg.com https://i.ytimg.com/ https://*.gravatar.com https://www.tiktok.com/ https://*.ttwstatic.com/ https://i0.wp.com/www.allkeyshop.com https://connect.facebook.net/ https://graph.facebook.com https://platform-lookaside.fbsbx.com https://*.fbcdn.net/ https://*.cloudfront.net/facebook/ https://*.cloudfront.net/twitter/ https://*.cloudfront.net/instagram/ https://platform.twitter.com/ https://platform.x.com/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com/ajax/libs http://cdn.sendpulse.com https://cdn.sendpulse.com https://static.hotjar.com https://script.hotjar.com https://widget.gleamjs.io https://gleam.io https://js.gleam.io https://ad.doubleclick.net https://do6911745127z.cloudfront.net/scripts/master/goclecd.js https://system.warlegend.net data: https://www.googletagmanager.com 4 default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' capi-automation.s3.us-east-2.amazonaws.com *.acswapp.com *.team.blue *.gstatic.com *.google.com *.acsbapp.com mhosting.hu *.mhosting.hu *.iubenda.com cookiebot.com *.cookiebot.com googleapis.com *.googleapis.com trustpilot.com *.trustpilot.com googletagmanager.com *.googletagmanager.com googleads.g.doubleclick.net analytics.tiktok.com connect.facebook.net snap.licdn.com bat.bing.com *.ads-twitter.com c.seznam.cz *.hotjar.com *.ladesk.com srv.isy-teamblue.services srv.motu-teamblue.services *.adform.net www.youtube.com *.clarity.ms; style-src 'self' 'report-sample' 'unsafe-inline' cdn.jsdelivr.net *.mhosting.hu cdn.iubenda.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.acsbapp.com *.doubleclick.net *.facebook.com *.mhosting.hu *.clarity.ms *.iubenda.com googleapis.com *.googleapis.com *.google.com pagead2.googlesyndication.com px.ads.linkedin.com analytics.tiktok.com bat.bing.com *.google-analytics.com *.motu-teamblue.services; font-src 'self' pw.w.org cdn.jsdelivr.net; frame-src 'self' blob: *.team.blue *.google.com *.mhosting.hu *.apps.ladesk.com *.iubenda.com td.doubleclick.net webonic.ladesk.com www.googletagmanager.com; img-src 'self' data: *.google.sk *.facebook.net srv.motu-teamblue.services *.google.com *.doubleclick.net pw.w.org ps.w.org *.googletagmanager.com *.bing.com *.mhosting.hu *.clarity.ms www.facebook.com www.google.com www.google.hu; manifest-src 'self'; media-src 'self'; 4 frame-ancestors 'self' http://renaissance.lookbookhq.com https://renaissance.lookbookhq.com http://renaissance.pathfactory.com https://renaissance.pathfactory.com http://content.renaissance.com https://content.renaissance.com 4 connect-src 'self' *.edenred.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google-analytics.com https://cdn.cookielaw.org https://*.onetrust.com http://*.xiti.com https://api.websitecarbon.com https://www.google.com; font-src 'self' *.edenred.com https://cdn.cookielaw.org https://fonts.googleapis.com https://fonts.gstatic.com data: https://cdnjs.cloudflare.com; img-src 'self' *.edenred.com https://cdn.cookielaw.org data: https://api.mapbox.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.ytimg.com; media-src 'self' *.edenred.com; object-src 'self' *.edenred.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.edenred.com https://cdn.cookielaw.org https://fonts.googleapis.com fonts.googleapis.com cdn.cookielaw.org https://fonts.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://tagmanager.google.com https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tag.aticdn.net https://api.mapbox.com https://cdn.jsdelivr.net https://connect.facebook.net cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com www.gstatic.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.edenred.com https://cdn.cookielaw.org https://fonts.googleapis.com fonts.googleapis.com cdn.cookielaw.org https://fonts.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://tagmanager.google.com https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tag.aticdn.net https://api.mapbox.com https://cdn.jsdelivr.net https://connect.facebook.net cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline' *.edenred.com https://cdn.cookielaw.org https://fonts.googleapis.com fonts.googleapis.com cdn.cookielaw.org https://fonts.gstatic.com https://tagmanager.google.com cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com https://api.mapbox.com https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' *.edenred.com; report-uri https://www.edenred.com/fr/system/reporting/csp; report-to csp 4 form-action 'self'; frame-ancestors 'self'; 4 default-src 'self' blob: *;base-uri 'self';font-src 'self' data: https://apps.mypurecloud.com/ https://chat.kindlycdn.com/ https://cdn.braze.eu https://use.fontawesome.com;form-action 'self' *;frame-ancestors 'self' *;img-src 'self' data: *;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' *;script-src-attr 'none';style-src 'self' 'unsafe-inline' *;worker-src 'self' blob: 4 frame-ancestors 'self' https://cms.hanleywood.com 4 base-uri 'none'; 4 frame-ancestors 'self' https://*.zbj.com https://*.tianpeng.com https://*.chatm.com https://*.mysipo.com https://*.zhubajie.la *.zbjdev.com hljcg.hlj.gov.cn *.qjzbj.com 4 default-src * 'unsafe-inline' 'unsafe-eval' blob: data:; img-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * 'unsafe-inline' 'unsafe-eval' data:; worker-src * blob:; frame-ancestors 'self' https://a.cms.omniupdate.com; 4 default-src 'self' data: https://account.stock3.com https://stock3.com https://*.stock3.com https://*.guidants.com https://*.godmode-trader.de https://*.boerse-go.de https://*.guidants-trading.de https://*.brokerize.com https://crypto.donaucapital.de wss://*.stock3.com wss://status.guidants.com wss://*.boerse-go.de wss://*.guidants-trading.de wss://*.brokerize.com https://mein.finanzen-zero.net https://mein.zero-staging.net https://mein.t5.zero-test.net https://consentcdn.cookiebot.com https://consent.cookiebot.com http://localhost:* ws://localhost:*; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://account.stock3.com https://stock3.com https://*.stock3.com https://*.guidants.com https://*.godmode-trader.de https://*.boerse-go.de https://*.guidants-trading.de https://*.brokerize.com https://crypto.donaucapital.de wss://*.stock3.com wss://status.guidants.com wss://*.boerse-go.de wss://*.guidants-trading.de wss://*.brokerize.com https://*.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://doubleverify.com https://*.doubleverify.com https://is.stock3.com https://as.stock3.com https://track.adform.net https://s1.adform.net https://s2.adform.net https://code.createjs.com https://cdnjs.cloudflare.com/ajax/libs/gsap/ https://feed.goldencross.de https://cdn.adspirit.de https://kerlundcie.adspirit.de https://ad.doubleclick.net https://s0.2mdn.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagservices.com; connect-src https://account.stock3.com https://stock3.com https://*.stock3.com https://*.guidants.com https://*.godmode-trader.de https://*.boerse-go.de https://*.guidants-trading.de https://*.brokerize.com https://crypto.donaucapital.de wss://*.stock3.com wss://status.guidants.com wss://*.boerse-go.de wss://*.guidants-trading.de wss://*.brokerize.com https://*.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://mein.finanzen-zero.net https://mein.zero-staging.net https://mein.t5.zero-test.net http://localhost:* ws://localhost:* https://doubleverify.com https://*.doubleverify.com https://track.adform.net https://googleads4.g.doubleclick.net https://pagead2.googlesyndication.com https://ade.googlesyndication.com; style-src 'unsafe-inline' 'self' https://is.stock3.com https://data.boerse-go.de https://api.stock3.com https://s1.adform.net https://s2.adform.net https://fonts.googleapis.com; frame-src https://account.stock3.com 'self' https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://tradematch.sgmarkets.com https://open.spotify.com https://embed.podcasts.apple.com https://consentcdn.cookiebot.com https://consent.cookiebot.com https://is.stock3.com https://c1.adform.net https://cdn.adspirit.de https://s0.2mdn.net https://tpc.googlesyndication.com https://c.bannerflow.net; img-src 'self' https: data: blob: *.googleusercontent.com http://localhost:* ws://localhost:*; font-src 'self' data: https://fonts.gstatic.com 4 frame-ancestors 'self' *.acsitefactory.com; 4 frame-ancestors 'self' http://dezshira.in/ http://www.dezshira.com/ https://www.china-briefing.com https://www.india-briefing.com https://www.vietnam-briefing.com https://www.aseanbriefing.com https://www.middleeastbriefing.com/ 4 default-src 'self' blob: data: *; style-src 'self' 'unsafe-inline' * https://heapanalytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: * https://cdn.us.heap-api.com https://heapanalytics.com; img-src 'self' blob: data: * https://heapanalytics.com; connect-src 'self' blob: data: * https://c.us.heap-api.com https://heapanalytics.com; font-src 'self' blob: data: * https://heapanalytics.com; frame-ancestors 'self' https://xodo-web.sanity.studio; 4 frame-src 'self' youtube.com www.youtube.com www.dailymotion.com assirmforum21-backend.liveforum.space assirmforum21.liveforum.space; worker-src 'self' blob: assirmforum21-backend.liveforum.space assirmforum21.liveforum.space; child-src 'self' assirmforum21-backend.liveforum.space assirmforum21.liveforum.space 4 frame-ancestors https://*.walmart.com 4 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://vippsmobilepay.boost.ai https://vippsmobilepaytest.boost.ai https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google.com https://www.gstatic.com https://vipps.no https://www.vipps.no https://vipps.se https://www.vipps.se https://mobilepay.dk https://www.mobilepay.dk https://mobilepay.fi https://www.mobilepay.fi; connect-src 'self' https://vippsmobilepay.boost.ai https://vippsmobilepaytest.boost.ai https://consent.cookiebot.com https://consentcdn.cookiebot.com https://zai55r7s.api.sanity.io wss://zai55r7s.api.sanity.io https://api-eu.mixpanel.com https://www.google.com https://test.salesforce.com https://webto.salesforce.com https://vipps--uat.sandbox.my.salesforce.com; style-src 'self' 'unsafe-inline' https://vipps.no https://www.vipps.no https://vipps.se https://www.vipps.se https://mobilepay.dk https://www.mobilepay.dk https://mobilepay.fi https://www.mobilepay.fi; img-src 'self' blob: data: https://vipps.no https://mobilepay.dk https://imgsct.cookiebot.com https://cdn.sanity.io https://i.ytimg.com; font-src 'self' https://designsystem.vippsmobilepay.com; frame-src 'self' https://consentcdn.cookiebot.com/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://www.google.com/; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://vippsmobilepay-uat.sanity.studio/ https://vippsmobilepay.sanity.studio/ https://www.sanity.io/; upgrade-insecure-requests 4 upgrade-insecure-requests;frame-ancestors 'self' ; 4 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'self' https://prod.bittimittari.fi https://registry.domain.fi https://*.traficom.fi; connect-src 'self' https://analytiikka.ahtp.fi https://stat.traficom.fi; img-src 'self' data: https://prod.bittimittari.fi https://analytiikka.ahtp.fi https://registry.domain.fi https://*.traficom.fi; script-src 'self' 'unsafe-inline' https://stat.traficom.fi https://analytiikka.ahtp.fi; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; font-src 'self'; form-action 'self'; upgrade-insecure-requests 4 base-uri none; connect-src 'self' https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.kbc.be https://*.kbc.com https://*.kbcsecurities.com https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.24plus.be https://*.omtrdc.net https://dpm.demdex.net https://kbc.symex.be https://uat.serversidegraphics.com https://*.trustarc.com https://uk.personalcard.net https://www.facebook.com https://*.contentsquare.net https://admp-tc-mediahuis.adtlgc.com https://es6-elasticapm.kbc.be https://es6-elasticapm-a.kbc.be https://onesignal.com https://*.googleapis.com https://www.google.com https://adservice.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.adobe.com https://viewlicense.adobe.io https://*.adobedc.net https://adobedc.demdex.net http://localhost:8443 https://x9y-p.local.intapp.eu/ https://d36ygvu01nuobw.cloudfront.net https://*.komgo.io https://evnt.byspotify.com https://px.ads.linkedin.com https://snap.licdn.com https://pixel.byspotify.com https://bat.bing.com https://pixels.spotify.com https://bat.bing.net https://assets.adobedtm.com; child-src 'self' blob: https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc-group.com https://*.omniture.com https://assets.adobedtm.com https://kbcgroup.demdex.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.com/recaptcha/ https://www.youtube-nocookie.com https://*.instagram.com https://kbc.symex.be https://*.trustarc.com https://code3.adtlgc.com/ https://scdn.cxense.com/ https://player.hihaho.com/ https://*.adobedc.net https://snap.licdn.com https://acrobatservices.adobe.com; default-src 'self'; font-src 'self' data: https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.googleapis.com https://fonts.gstatic.com https://*.trustarc.com; frame-ancestors 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbcgroup.com https://*.kbc-group.com https://*.kbcgroup.eu https://*.adobe.com; img-src 'self' data: https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.contentsquare.net https://*.doubleclick.net https://*.facebook.com https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbcsecurities.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.24plus.be https://*.omtrdc.net https://*.adobemc.com https://action.metaffiliation.com https://*.instagram.com https://scontent.cdninstagram.com https://cbc.azureedge.net https://cm.everesttech.net https://csi.gstatic.com https://*.linkedin.com https://dpm.demdex.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://*.googleapis.com https://maps.gstatic.com https://mba.azureedge.net https://mbj.azureedge.net https://pixel.everesttech.net https://scomcluster.cxense.com https://secure.adnxs.com https://t.co https://touch.azureedge.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.be https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://img.youtube.com https://youtu.be https://*.truste.com https://*.trustarc.com https://cdn.publish.macrobond.net https://*.cxense.com https://*.contentsquare.net https://refini.tv https://product.datastream.com https://d36ygvu01nuobw.cloudfront.net https://*.komgo.io https://scookies-adobe.kbc-group.com https://bat.bing.com https://bat.bing.net https://px.ads.linkedin.com https://dc.ads.linkedin.com; media-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbcsecurities.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.24plus.be https://cbc.azureedge.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://mba.azureedge.net https://mbj.azureedge.net https://touch.azureedge.net; object-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be; script-src 'self' data: blob: filesystem: 'unsafe-eval' 'unsafe-inline' https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbcsecurities.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kbc-group.com https://*.24plus.be https://*.omtrdc.net https://adhese.mediahuis.be https://analytics.twitter.com https://*.instagram.com https://scontent.cdninstagram.com https://assets.adobedtm.com https://connect.facebook.net https://dpm.demdex.net https://googleads.g.doubleclick.net https://*.googleapis.com https://pixel.everesttech.net https://platform.twitter.com https://s.ytimg.com https://secure.adnxs.com https://snap.licdn.com https://static.ads-twitter.com https://www.everestjs.net https://www.google.com/recaptcha/ https://www.google.com/pagead/ https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.youtube-nocookie.com https://www.youtube.com https://t.contentsquare.net https://contentsquare.com https://code3.adtlgc.com https://*.trustarc.com https://*.truste.com https://*.cxense.com https://shared.mediahuis.be https://t.contentsquare.net https://contentsquare.com https://*.contentsquare.com https://player.hihaho.com/ https://documentservices.adobe.com/ https://uk.personalcard.net https://d36ygvu01nuobw.cloudfront.net https://*.komgo.io https://bat.bing.com https://bat.bing.net https://pixel.byspotify.com https://snap.licdn.com https://acrobatservices.adobe.com; style-src 'self' 'unsafe-inline' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbcsecurities.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://cdn.tt.omtrdc.net https://*.googleapis.com https://uk.personalcard.net https://d36ygvu01nuobw.cloudfront.net https://*.komgo.io; manifest-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.24plus.be https://cdn.tt.omtrdc.net https://*.googleapis.com; worker-src 'self' blob: 4 default-src 'self' https://*.diligent.com https://*.flowise.theanswer.ai https://*.theanswer.ai localhost:8888 https://*.facebook.com vitals.vercel-insights.com https://*.hubapi.com https://*.hsforms.com https://*.hs-scripts.com https://*.hsforms.net https://*.hscollectedforms.net https://*.netlify.app https://*.googletagmanager.com https://*.google-analytics.com https://cdn.optimizely.com https://cdn3.optimizely.com https://app.optimizely.com https://*.optimizely.com https://*.qualified.com https://*.cookiebot.com https://*.greenhouse.io; style-src 'self' 'unsafe-inline' https://diligent.com https://*.diligent.com fonts.googleapis.com vitals.vercel-insights.com https://*.hs-scripts.com https://*.hsforms.net https://*.googletagmanager.com https://*.google-analytics.com http://*.marketo.com https://*.marketo.com https://*.netlify.app; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://diligent.com https://*.diligent.com https://*.flowise.theanswer.ai https://*.theanswer.ai https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://www.gstatic.com vitals.vercel-insights.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.jquery.com https://ajax.googleapis.com https://*.hs-scripts.com https://*.hsforms.net netlify-cdp-loader.netlify.app http://*.marketo.com https://*.marketo.com https://www.redditstatic.com https://js.zi-scripts.com https://diligent.widget.insent.ai https://*.netlify.app https://cdn.bizible.com https://*.rudderlabs.com https://connect.facebook.net https://snap.licdn.com https://static.ads-twitter.com https://bat.bing.com https://j.6sc.co https://ct.capterra.com https://munchkin.marketo.net https://*.googlesyndication.com https://*.chilipiper.com https://*.crazyegg.com https://*.doubleclick.net https://*.cookiebot.com https://cdn.cr-proxy.com https://cdn.vector.co https://cdn.optimizely.com https://cdn3.optimizely.com https://app.optimizely.com https://*.optimizely.com https://js.qualified.com https://boards-api.greenhouse.io https://*.greenhouse.io https://play.vidyard.com https://*.liadm.com https://*.usbrowserspeed.com; connect-src 'self' https://diligent.com https://*.diligent.com https://*.flowise.theanswer.ai https://*.theanswer.ai localhost:8888 https://*.facebook.com vitals.vercel-insights.com https://*.hubapi.com https://*.hsforms.com https://*.hs-scripts.com https://*.hsforms.net https://*.hscollectedforms.net https://*.netlify.app https://*.googletagmanager.com https://*.google-analytics.com https://pagead2.googlesyndication.com https://js.zi-scripts.com https://*.zoominfo.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com https://api.rudderstack.com https://px.ads.linkedin.com https://*.mktoresp.com http://*.mktoresp.com https://*.dataplane.rudderstack.com https://c.6sc.co https://ipv6.6sc.co https://epsilon.6sense.com https://*.chilipiper.com https://*.rudderlabs.com https://*.crazyegg.com https://*.google.com https://*.doubleclick.net https://*.cookiebot.com https://cdn.cr-proxy.com https://api.cr-proxy.com https://*.qualified.com wss://*.qualified.com https://cdn.optimizely.com https://cdn3.optimizely.com https://app.optimizely.com https://*.optimizely.com https://boards-api.greenhouse.io https://*.greenhouse.io https://ingesteer.services-prod.nsvcs.net https://bat.bing.com https://api.vector.co https://*.vector.co https://*.liadm.com; font-src 'self' https://diligent.com https://*.diligent.com fonts.gstatic.com https://*.hs-scripts.com https://*.hsforms.net data: https://*.googletagmanager.com https://*.google-analytics.com https://*.netlify.app; frame-src 'self' https://diligent.com https://*.diligent.com lastrev.com forms.hsforms.com https://app.netlify.com https://play.vidyard.com https://www.youtube.com https://www.youtube-nocookie.com https://*.theanswer.ai https://*.flowise.theanswer.ai https://*.googletagmanager.com https://*.google-analytics.com https://*.marketo.com https://diligent.widget.insent.ai https://*.netlify.app https://*.chilipiper.com https://*.fls.doubleclick.net https://www.facebook.com https://*.facebook.com https://*.cookiebot.com https://*.optimizely.com https://*.cdn.optimizely.com https://cdn.optimizely.com https://cdn3.optimizely.com https://app.optimizely.com https://*.qualified.com https://*.navattic.com https://embed.podcasts.apple.com https://*.liadm.com https://*.vector.co; img-src * data: https://diligent.com https://*.diligent.com https://*.googletagmanager.com https://*.ctfassets.net https://*.google-analytics.com https://*.netlify.app https://*.qualified.com; media-src * data:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://*.facebook.com; frame-ancestors 'self' https://lastrev.com https://lr-live-editor.netlify.app https://*.theanswer.ai https://*.flowise.theanswer.ai http://localhost:3333 https://localhost:3333 https://*.sanity.studio https://*.sanity.io https://*.netlify.app https://diligent.com https://*.diligent.com; block-all-mixed-content; upgrade-insecure-requests; 4 default-src 'self' http: https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' 4 block-all-mixed-content; default-src 'self' blob: https://*.wistia.com https://*.wistia.net; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://use.typekit.net https://www.googletagmanager.com cdn.cookielaw.org *.sdworx.com *.pardot.com a458c8fcc5c8447d898446e84c87217b.js.ubembed.com www.google-analytics.com assets.ubembed.com cdn.landbot.io connect.facebook.net *.clarity.ms bat.bing.com snap.licdn.com *.firebaseio.com www.googleoptimize.com *.googleapis.com https://assets.calendly.com https://web103.reachmee.com https://tracking.intentsify.io https://secure.norm0care.com https://webeo-web-content.s3-eu-west-1.amazonaws.com https://static.landbot.io https://www.youtube.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://secure.agile-company-365.com https://cdn.leadinfo.net https://form.jotform.com https://*.hotjar.com https://optimize.google.com my.visme.co https://*.skedify.io *.sleeknote.com *.visualwebsiteoptimizer.com app.vwo.com https://*.jotform.ms https://*.jotform.com https://app.readpeak.com/js/rpa.js https://sdworx.stackbase.nl/ https://tags.inzynk.io/6ol4roju/iztag.js https://*.inzynk.io https://vercel.live/ https://webeo-web-content.s3-eu-west-1.amazonaws.com https://cdn.jsdelivr.net https://ldynamicspublicapi.leadforensics.com https://secure.intelligent-business-7.com https://vercel.live https://va.vercel-scripts.com/v1/speed-insights/script.debug.js https://plugin.skedify.io https://*.sleeknote.com px.ads.linkedin.com/ *.convertexperiments.com https://bat.bing.net https://sdworx-payhr.co.uk/ https://cdn.dmsales.com https://analytics.greensender.pl https://cdn.jotfor.ms https://d-code.liadm.com/ https://*.vector.co https://*.usbrowserspeed.com https://*.ip-api.com https://*.pexipengage.com https://*.lfeeder.com https://*.leadfeeder.com https://tags.sdworx.com https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.sentry-cdn.com/ https://va.vercel-scripts.com/v1/script.debug.js https://*.claydar.com https://*.usercentrics.eu https://www.redditstatic.com; style-src 'self' 'report-sample' 'unsafe-inline' data: *.typekit.net fonts.googleapis.com cdn.landbot.io *.googletagmanager.com https://assets.calendly.com https://plugin.skedify.io https://*.hotjar.com https://optimize.google.com *.visualwebsiteoptimizer.com app.vwo.com s3.amazonaws.com https://webeo-web-content.s3-eu-west-1.amazonaws.com https://vercel.live https://*.sleeknote.com https://fonts.googleapis.com https://cdn.jotfor.ms https://tags.sdworx.com https://fast.wistia.com https://cdn.sdworx.com; img-src 'self' data: blob: *.typekit.net cdn.cookielaw.org fonts.gstatic.com www.google-analytics.com *.googleapis.com https://px.ads.linkedin.com www.linkedin.com bat.bing.com www.facebook.com p.adsymptotic.com https://*.ads.linkedin.com https://*.gstatic.com https://assets.calendly.com i.ytimg.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googletagmanager.com https://development-q5nzhaa-wz6c625n6znns.eu-5.platformsh.site https://develop-sr3snxi-wz6c625n6znns.eu-5.platformsh.site https://acceptance-yfiuy3a-wz6c625n6znns.eu-5.platformsh.site https://sdworx-country-cms.prd.reference.be https://country-cms.prd.sdworx.com https://*.hotjar.com https://optimize.google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ai www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.ms www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vg www.google.vu www.google.ws *.sleeknote.com *.visualwebsiteoptimizer.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com https://*.jotform.ms https://*.jotform.com https://c.clarity.ms https://webeo-web-content.s3-eu-west-1.amazonaws.com https://vercel.live https://vercel.com https://development-q5nzhaa-srgqxffdos4hk.eu-5.platformsh.site https://acceptance-yfiuy3a-srgqxffdos4hk.eu-5.platformsh.site https://sdworx-lms-cms.prd.reference.be https://strgeuwaccsdworxlearning.blob.core.windows.net https://static.landbot.io https://www.sdworx.com https://strgeuwprdsdworxlearning.blob.core.windows.net https://cdne-euw-acc-ext-sdworxlearning.azureedge.net https://cdne-euw-dev-ext-sdworxlearning.azureedge.net https://cdne-euw-prd-ext-sdworxlearning.azureedge.net blob: sleeknotestaticcontent.sleeknote.com analytics.sleeknote.com https://lms-cms.prd.sdworx.com https://bat.bing.net https://sdworx-payhr.co.uk/ https://www.dmsales.com https://analytics.greensender.pl https://cdn.jotfor.ms https://*.sdworx.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.convertexperiments.com https://collector.leadinfo.net https://*.lfeeder.com https://*.leadfeeder.com https://tags.sdworx.com https://*.wistia.com https://*.wistia.net https://*.usercentrics.eu https://pagead2.googlesyndication.com https://www.redditstatic.com https://alb.reddit.com; font-src 'self' data: fonts.googleapis.com use.typekit.net https://use.typekit.net https://fonts.gstatic.com cdn.landbot.io https://*.hotjar.com *.sleeknote.com https://vercel.live https://assets.vercel.com https://cdn.jotfor.ms https://*.wistia.com https://*.wistia.net https://cdn.sdworx.com; connect-src 'self' *.typekit.net fonts.gstatic.com *.onetrust.com *.googleapis.com cdn.cookielaw.org googleads.g.doubleclick.net www.google-analytics.com analytics.google.com stats.g.doubleclick.net *.pardot.com *.landbot.io *.sdworx.com *.clarity.ms wss://*.firebaseio.com *.firebaseio.com *.analytics.google.com https://*.algolia.net https://*.algolianet.com https://*.apm.eu-west-1.aws.cloud.es.io https://cdn.linkedin.oribi.io https://idx.liadm.com https://www.facebook.com https://ldynamicspublicapi.leadforensics.com https://collector.leadinfo.net https://api.leadinfo.com wss://*.hotjar.com https://*.hotjar.io https://*.hotjar.com https://a458c8fcc5c8447d898446e84c87217b.events.ubembed.com https://bat.bing.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ai www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.ms www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vg www.google.vu www.google.ws cdnjs.cloudflare.com *.sleeknote.com *.visualwebsiteoptimizer.com app.vwo.com https://px.ads.linkedin.com/wa/ https://sdworx.stackbase.nl/ px.ads.linkedin.com/ https://ldynamicspublicapi.leadforensics.com https://vercel.live wss://ws-us3.pusher.com https://*.ingest.sentry.io https://*.sleeknote.com *.convertexperiments.com https://*.inzynk.io https://bat.bing.net https://sdworx-payhr.co.uk/ https://*.leadinfo.net https://eu-api.jotform.com https://pro.ip-api.com/ https://api.vector.co/ https://*.google-analytics.com https://*.googletagmanager.com https://tags.sdworx.com https://*.litix.io https://*.wistia.com https://*.wistia.net http://*.wistia.com http://*.wistia.net https://*.algolia.net https://*.sentry-cdn.com/ https://api.claydar.com https://*.usercentrics.eu https://pagead2.googlesyndication.com https://www.redditstatic.com https://alb.reddit.com https://reddit.com; base-uri 'self'; form-action 'self' https://www.facebook.com/tr/ https://eu-submit.jotform.com; frame-src https://player.springcast.app/ *.firebaseio.com https://*.hotjar.com https://calendly.com go.sdworx.com https://www.youtube.com https://www.youtube-nocookie.com https://trainings.sdworx.de https://datawrapper.dwcdn.net https://survey.sdworx.com https://web103.reachmee.com https://www.videoask.com https://embed.acast.com https://a458c8fcc5c8447d898446e84c87217b.pages.ubembed.com https://www.google.com https://outlook.office365.com https://www.sd.be https://optimize.google.com https://form.jotform.com https://www.facebook.com my.visme.co https://eu-submit.jotform.com/ https://*.skedify.io *.sleeknote.com onsite-subscribe.getdrip.com app.vwo.com *.visualwebsiteoptimizer.com https://iswebb.com/ https://td.doubleclick.net/ https://vercel.live/ https://www.googletagmanager.com/ https://sdworx-payhr.co.uk/ https://forms.office.com/ https://widgets-cache.jotform.io https://www.jotform.com https://*.sdworx.com https://*.ivoox.com https://*.pexipengage.com https://tags.sdworx.com https://fast.wistia.com https://www.calculatorvenituri.ro/ https://fast.wistia.com https://fast.wistia.net https://www.appdemostore.com/ https://web.cmp.usercentrics.eu/ https://app.usercentrics.eu/ https://calculatorvenituri.sdworx.ro/ https://*.buzzsprout.com; worker-src 'self' blob:; media-src 'self' blob: https://development-q5nzhaa-wz6c625n6znns.eu-5.platformsh.site https://develop-sr3snxi-wz6c625n6znns.eu-5.platformsh.site https://acceptance-yfiuy3a-wz6c625n6znns.eu-5.platformsh.site https://sdworx-country-cms.prd.reference.be https://country-cms.prd.sdworx.com https://lms-cms.prd.sdworx.com https://*.wistia.com https://*.wistia.net; frame-ancestors 'none'; object-src 'none' 4 frame-ancestors 'self' *.storyblok.com; 4 default-src * blob: 'unsafe-inline' 'unsafe-eval'; script-src * blob: 'unsafe-inline' 'unsafe-eval'; worker-src * blob: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: 'unsafe-inline'; frame-ancestors 'self'; form-action *; report-to endpoint-1 4 connect-src *; default-src 'self'; font-src * data:; frame-src *; img-src * data:; media-src * blob:; object-src *; script-src * blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 4 frame-ancestors 'none'; form-action 'self' https://forms-eu1.hsforms.com https://forms-na1.hsforms.com https://forms.hsforms.com; base-uri 'self' 4 frame-ancestors 'self' https://www.carmudi.com.ph https://uat.carmudi.com.ph https://uat1.carmudi.com.ph 4 frame-ancestors 'self' https://rtsports.com https://www.rtsports.com; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://resources-library.keyfactor.com https://jukebox.pathfactory.com https://www.quantumquestgames.com https://js.hsforms.net https://code.jquery.com https://cdnjs.cloudflare.com https://use.typekit.net https://cdnjs.cloudflare.com https://cdn-app.pathfactory.com https://cdn.jsdelivr.net https://fast.wistia.com https://fast.wistia.net https://js.hs-analytics.net https://js-na1.hs-scripts.com https://js.hscollectedforms.net https://js.hsadspixel.net https://js.hs-banner.com https://js.hsleadflows.net https://www.googletagmanager.com https://browser.sentry-cdn.com https://bat.bing.com https://www.clarity.ms https://www.brighttalk.com https://js.qualified.com https://tracking.g2crowd.com https://static.oktopost.com https://js.adsrvr.org https://okt.to https://js.hubspot.com https://static.hsappstatic.net https://cdn.cookielaw.org https://snap.licdn.com https://a.quora.com https://www.redditstatic.com https://nitroscripts.com https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net https://connect.facebook.net https://j.6sc.co https://cdn-ilbndhj.nitrocdn.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://js.hsforms.net https://cdn.dreamdata.cloud https://cdn.drda.io https://platform.twitter.com https://scripts.clarity.ms https://r3.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://r2.visualwebsiteoptimizer.com https://r1.visualwebsiteoptimizer.com https://www.google.com https://www.google.ca https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.it https://www.google.nl https://www.google.com.au https://www.google.com.br https://www.google.co.jp https://www.google.co.in https://*.google.ca https://cdn.pathfactory.com https://www.accelevents.com ; style-src 'self' 'unsafe-inline' data: blob: https://fonts.googleapis.com https://use.typekit.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://use.typekit.net https://cdn-app.pathfactory.com https://p.typekit.net https://js.hs-analytics.net https://browser.sentry-cdn.com https://fast.wistia.com https://app.cdn.lookbookhq.com https://cdn-app.pathfactory.com https://cdn-ilbndhj.nitrocdn.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://fonts.gstatic.com https://www.quantumquestgames.com https://cdn.pathfactory.com https://www.accelevents.com https://db8bazm4jsbrb.cloudfront.net ; img-src 'self' data: blob: https://customer-assets.qualified.com https://408597.fs1.hubspotusercontent-na1.net https://www.google.ca https://p.typekit.net https://cdnjs.cloudflare.com https://fast.wistia.com https://secure.gravatar.com https://forms.hsforms.com https://q.quora.com https://alb.reddit.com https://px.ads.linkedin.com https://forms-na1.hsforms.com https://forms-na1.hsforms.com https://cdn.cookielaw.org https://forms-na1.hsforms.com https://c.clarity.ms https://*.bing.com https://www.linkedin.com https://embed-ssl.wistia.com https://app.cdn.lookbookhq.com https://fast.wistia.net https://track.hubspot.com https://dev.visualwebsiteoptimizer.com https://plugin-updates.wpengine.com https://b.6sc.co https://www.facebook.com https://www.keyfactor.com https://px4.ads.linkedin.com https://s.w.org https://r4.visualwebsiteoptimizer.com https://cdn.pathfactory.com https://fonts.gstatic.com https://r3.visualwebsiteoptimizer.com https://r1.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com https://cdnjs.cloudflare.com https://cdn.cookielaw.org https://forms.hsforms.com https://track.hubspot.com https://www.quantumquestgames.com https://raw.githubusercontent.com https://www.googletagmanager.com https://www.google.com https://cdn.cookielaw.org wss://*.qualified.com https://fast.wistia.net https://insight.adsrvr.org https://res.cloudinary.com https://d2413hm4ynib6z.cloudfront.net https://d3inifm0rz1zun.cloudfront.net https://messenger-assets.qualified.com ; connect-src 'self' data: https://pipedream.wistia.com https://stats.g.doubleclick.net https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hsforms.com https://distillery.wistia.com https://fast.wistia.net https://forms.hsforms.com https://js.hs-banner.com https://forms.hscollectedforms.net https://cdn.cookielaw.org https://px.ads.linkedin.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com https://geolocation.onetrust.com https://forms.hubspot.com https://*.clarity.ms https://jukebox.pathfactory.com https://privacyportal.onetrust.com https://fast.wistia.com https://embed-cloudfront.wistia.com https://dev.visualwebsiteoptimizer.com wss://ws.qualified.com https://app.qualified.com https://okt.to https://tracking.g2crowd.com https://tracking-api.g2.com https://exceptions.hubspot.com https://yoast.com https://nitropack.io https://www.google.com https://to.getnitropack.com https://pagead2.googlesyndication.com https://spcollector.pathfactory.com https://epsilon.6sense.com https://bat.bing.com https://connect.facebook.net https://j.6sc.co https://c.6sc.co https://ipv6.6sc.co https://secure.adnxs.com https://c.6sc.co https://cdn-ilbndhj.nitrocdn.com https://boards.greenhouse.io https://www.recaptcha.net https://js.hsforms.net https://google.com https://cdn.dreamdata.cloud https://r5.visualwebsiteoptimizer.com https://insight.adsrvr.org https://r6.visualwebsiteoptimizer.com wss://ws5.qualified.com https://www.facebook.com https://r4.visualwebsiteoptimizer.com https://fg8vvsvnieiv3ej16jby.litix.io https://r2.visualwebsiteoptimizer.com https://r3.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://www.google-analytics.com https://www.google.com https://www.google.ca https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.it https://www.google.nl https://www.google.com.au https://www.google.com.br https://www.google.co.jp https://www.google.co.in https://*.google.ca https://www.quantumquestgames.com https://cdn.pathfactory.com https://resources-library.keyfactor.com https://jukebox.pathfactory.com https://cdn-app.pathfactory.com https://static.hsappstatic.net https://js.hs-banner.com wss://*.qualified.com https://fast.wistia.net https://*.google.com https://*.doubleclick.ne https://apiv3.accelevents.com https://api.accelevents.com https://api.ipgeolocation.io https://apiro.accelevents.com ; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com https://use.typekit.net https://cdnjs.cloudflare.com https://fast.wistia.com https://fast.wistia.net https://cdn-app.pathfactory.com https://cdn.pathfactory.com https://www.quantumquestgames.com https://www.accelevents.com ; object-src 'self' ; media-src 'self' blob: https://app.qualified.com; frame-src 'self' https://fast.wistia.net blob: data: https://www.keyfactor.com https://www.brighttalk.com https://insight.adsrvr.org https://match.adsrvr.org https://td.doubleclick.net https://app.qualified.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://app.hubspot.com https://keyfactor.com http://keyfactorstage.wpenginepowered.com https://app.qualified.com https://www.facebook.com https://forms.hsforms.com https://dev.visualwebsiteoptimizer.com https://www.keyfactor.com https://open.spotify.com https://online.fliphtml5.com https://app.qualified.com https://www.googletagmanager.com https://www.youtube.com; child-src 'self' blob: ; upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://keyfactor.mindtickle.com https://admin.mindtickle.com; 4 default-src 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' data: blob: wss: https: edge.adobedc.net adobedc.demdex.net *.adobe.com *.adobe.io cdn.cookielaw.org assets.adobedtm.com kit.fontawesome.com ka-p.fontawesome.com munchkin.marketo.net adobedc.demdex.net snap.licdn.com *.drift.com js.driftt.com js.zi-scripts.com j.6sc.co geolocation.onetrust.com ipv6.6sc.co c.6sc.co b.6sc.co epsilon.6sense.com px.ads.linkedin.com static.cloud.coveo.com boards.greenhouse.io *.mktoresp.com *.zoominfo.com job-boards.greenhouse.io api.company-target.com *.org.coveo.com synopsysnonproduction2yln023as.analytics.org.coveo.com *.brighttalk.com brighttalk.com js.zi-scripts.com *.blackduck.com blackduck.com players.brightcove.net *.brightcove.com manifest.prod.boltdns.net *.brightcovecdn.com googletagmanager.com *.googletagmanager.com *.google.com *.google.ca *.google.co.uk google.co.in google.com *.google-analytics.com google-analytics.com googleads.g.doubleclick.net td.doubleclick.net *.googleapis.com *.gstatic.com *.leadspace.com *.clarity.ms *.bing.com *.bing.net *.bing-int.com *.6sc.co *.6sense.co 846-esg-342.mktoutil.com 801-wre-860.mktoutil.com *.youtube.com *.widget.surveymonkey.com *.surveymonkey.com cdn.smassets.net *.qualified.com *.redditstatic.com; 4 frame-ancestors 'self' ; upgrade-insecure-requests; frame-src 'self' *.adsrvr.org *.marketo.com *.marketodesigner.com *.mktoweb.com *.experience.adobe.com *.adobe.net acrobatservices.adobe.com player.vimeo.com app.supademo.com app.heygen.com documentcloud.adobe.com insight.adsrvr.org *.demdex.net consent.cookiebot.com consentcdn.cookiebot.com *.youtube.com *.infrontfinance.com *.doubleclick.net *.googletagmanager.com ; connect-src 'self' wss://*.infrontservices.com *.adsrvr.org https://www.facebook.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.leadinfo.com *.leadinfo.net https://li-replay.s3-accelerate.amazonaws.com https://*.ldnfrpl.com *.infrontservices.com *.marketo.com *.marketodesigner.com *.mktoweb.com *.experience.adobe.com *.adobe.net *.adobe.io wss://*.adobe.io *.doubleclick.net *.google.com analytics.ahrefs.com cdn.linkedin.oribi.io 633-ybp-923.mktoresp.com 633-ybp-923.mktoutil.com analytics.funnelfuel.io *.linkedin.com static1.r66net.com *.demdex.net cm.everesttech.net assets.adobedtm.com consent.cookiebot.com consentcdn.cookiebot.com *.2o7.net *.salesloft.com *.clarity.ms *.tt.omtrdc.net bat.bing.net cdnjs.cloudflare.com cdn.jsdelivr.net ; img-src 'self' *.leadinfo.net *.videostep.com *.infrontservices.com assets.adoberesources.net lh3.googleusercontent.com *.doubleclick.net *.linkedin.com *.b26net.com *.googletagmanager.com *.google-analytics.com *.clarity.ms *.facebook.com *.bing.com *.bing.net *.google.com s.videostep.com dev.day.com secure.adnxs.com *.invibes.com *.demdex.net cm.everesttech.net assets.adobedtm.com *.cookiebot.com *.2o7.net data: *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat ; font-src *.infrontfinance.com *.leadinfo.net *.infront.co *.typekit.net data: cdn.jsdelivr.net ; style-src *.infrontfinance.com *.leadinfo.net *.googleapis.com *.infront.co 'unsafe-inline' *.typekit.net cdn.jsdelivr.net ; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.infrontfinance.com *.leadinfo.net https://*.ldnfrpl.com *.infrontservices.com *.googleadservices.com *.infront.co scout-cdn.salesloft.com connect.facebook.net analytics.ahrefs.com *.marketo.com *.marketodesigner.com *.mktoweb.com *.experience.adobe.com *.adobe.net munchkin.marketo.net static.r66net.com static.r66net.net *.doubleclick.net k.r66net.com u.videostep.com *.licdn.com analytics.funnelfuel.io bat.bing.com js.adsrvr.org *.adobeaemcloud.com assets.adoberesources.net acrobatservices.adobe.com documentcloud.adobe.com *.youtube.com *.adobedtm.com *.azure.com *.azureedge.net *.googleapis.com *.googletagmanager.com *.adservice.google.com *.google-analytics.com dqm.crownpeak.com consent.cookiebot.com consentcdn.cookiebot.com *.2o7.net *.omtrdc.net *.tt.omtrdc.net assets.adobedtm.com *.demdex.net cm.everesttech.net *.salesloft.com *.clarity.ms cdnjs.cloudflare.com cdn.jsdelivr.net ; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.infrontfinance.com *.leadinfo.net https://*.ldnfrpl.com *.infrontservices.com *.googleadservices.com *.infront.co scout-cdn.salesloft.com connect.facebook.net analytics.ahrefs.com *.marketo.com *.marketodesigner.com *.mktoweb.com *.experience.adobe.com *.adobe.net munchkin.marketo.net static.r66net.com static.r66net.net *.doubleclick.net k.r66net.com u.videostep.com *.licdn.com analytics.funnelfuel.io bat.bing.com js.adsrvr.org *.adobeaemcloud.com assets.adoberesources.net acrobatservices.adobe.com documentcloud.adobe.com *.youtube.com *.adobedtm.com *.azure.com *.azureedge.net *.googleapis.com *.googletagmanager.com *.adservice.google.com *.google-analytics.com dqm.crownpeak.com consent.cookiebot.com consentcdn.cookiebot.com *.2o7.net *.omtrdc.net *.tt.omtrdc.net assets.adobedtm.com *.demdex.net cm.everesttech.net *.salesloft.com *.clarity.ms cdnjs.cloudflare.com cdn.jsdelivr.net ; 4 frame-ancestors https://*.descartes.com https://*.folloze.com; report-uri /report-csp-violation 4 base-uri 'self'; connect-src 'self' blob: data: https://*.applicationinsights.azure.com https://js.monitor.azure.com https://matomo.dekra.bawue.com https://*.clarity.ms https://c.bing.com https://*.g.doubleclick.net https://dekra-dev-search-api.e-spirit.cloud https://dekra-search-api.e-spirit.cloud https://*.google.ad https://*.google.ae https://*.google.al https://*.google.am https://*.google.as https://*.google.at https://*.google.az https://*.google.ba https://*.google.be https://*.google.bf https://*.google.bg https://*.google.bi https://*.google.bj https://*.google.bs https://*.google.bt https://*.google.by https://*.google.ca https://*.google.cat https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.co.ao https://*.google.co.bw https://*.google.co.ck https://*.google.co.cr https://*.google.co.id https://*.google.co.il https://*.google.co.in https://*.google.co.jp https://*.google.co.ke https://*.google.co.kr https://*.google.co.ls https://*.google.co.ma https://*.google.co.mz https://*.google.co.nz https://*.google.co.th https://*.google.co.tz https://*.google.co.ug https://*.google.co.uk https://*.google.co.uz https://*.google.co.ve https://*.google.co.vi https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.com https://*.google.com.af https://*.google.com.ag https://*.google.com.ar https://*.google.com.au https://*.google.com.bd https://*.google.com.bh https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.com.bz https://*.google.com.co https://*.google.com.cu https://*.google.com.cy https://*.google.com.do https://*.google.com.ec https://*.google.com.eg https://*.google.com.et https://*.google.com.fj https://*.google.com.gh https://*.google.com.gi https://*.google.com.gt https://*.google.com.hk https://*.google.com.jm https://*.google.com.kh https://*.google.com.kw https://*.google.com.lb https://*.google.com.ly https://*.google.com.mm https://*.google.com.mt https://*.google.com.mx https://*.google.com.my https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.com.np https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.com.pr https://*.google.com.py https://*.google.com.qa https://*.google.com.sa https://*.google.com.sb https://*.google.com.sg https://*.google.com.sl https://*.google.com.sv https://*.google.com.tj https://*.google.com.tr https://*.google.com.tw https://*.google.com.ua https://*.google.com.uy https://*.google.com.vc https://*.google.com.vn https://*.google.cv https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.dz https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.gy https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.ie https://*.google.im https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.jo https://*.google.kg https://*.google.ki https://*.google.kz https://*.google.la https://*.google.li https://*.google.lk https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.mn https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.ne https://*.google.nl https://*.google.no https://*.google.nr https://*.google.nu https://*.google.pl https://*.google.pn https://*.google.ps https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.ru https://*.google.rw https://*.google.sc https://*.google.se https://*.google.sh https://*.google.si https://*.google.sk https://*.google.sm https://*.google.sn https://*.google.so https://*.google.sr https://*.google.st https://*.google.td https://*.google.tg https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.tt https://*.google.vu https://*.google.ws https://*.google-analytics.com https://maps.googleapis.com https://places.googleapis.com/ https://*.googletagmanager.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://cdn.linkedin.oribi.io https://dc.services.visualstudio.com https://*.linkedin.com https://api.newsletter2go.com https://*.snapengage.com https://bat.bing.net https://bat.bing.com https://mapsresources-pa.googleapis.com https://aorta.clickagy.com https://hemsync.clickagy.com https://js.zi-scripts.com https://ws.zoominfo.com https://*.zkcdn.net https://*.doubleclick.net https://*.crwdcntrl.net https://*.adobedtm.com https://webforms-live-qa.dekra.com https://*.googleadservices.com https://*.demandbase.com https://serve.albacross.com https://tags.srv.stackadapt.com https://srv.stackadapt.com https://*.company-target.com; default-src 'self'; manifest-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com; form-action 'self'; frame-ancestors 'self' https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting; frame-src 'self' https://*.doubleclick.net https://*.googletagmanager.com https://vars.hotjar.com https://player.vimeo.com https://www.youtube.com https://v.qq.com https://hemsync.clickagy.com https://dekracloud.sharepoint.com https://global.frcapi.com https://eu.frcapi.com https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting https://sso.e-spirit.hosting https://*.demandbase.com https://*.company-target.com; img-src 'self' data: https://*.baidu.com https://*.bing.com https://*.clarity.ms https://media.dekra.com https://media-test.dekra.com https://*.g.doubleclick.net https://dekra-media.e-spirit.cloud https://dekradev-media.e-spirit.cloud https://dekraqa-media.e-spirit.cloud https://dekraprod-media.e-spirit.cloud https://connect.facebook.net https://www.facebook.com/tr/ https://www.facebook.com/privacy_sandbox/ https://*.google.ad https://*.google.ae https://*.google.al https://*.google.am https://*.google.as https://*.google.at https://*.google.az https://*.google.ba https://*.google.be https://*.google.bf https://*.google.bg https://*.google.bi https://*.google.bj https://*.google.bs https://*.google.bt https://*.google.by https://*.google.ca https://*.google.cat https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.co.ao https://*.google.co.bw https://*.google.co.ck https://*.google.co.cr https://*.google.co.id https://*.google.co.il https://*.google.co.in https://*.google.co.jp https://*.google.co.ke https://*.google.co.kr https://*.google.co.ls https://*.google.co.ma https://*.google.co.mz https://*.google.co.nz https://*.google.co.th https://*.google.co.tz https://*.google.co.ug https://*.google.co.uk https://*.google.co.uz https://*.google.co.ve https://*.google.co.vi https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.com https://*.google.com.af https://*.google.com.ag https://*.google.com.ar https://*.google.com.au https://*.google.com.bd https://*.google.com.bh https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.com.bz https://*.google.com.co https://*.google.com.cu https://*.google.com.cy https://*.google.com.do https://*.google.com.ec https://*.google.com.eg https://*.google.com.et https://*.google.com.fj https://*.google.com.gh https://*.google.com.gi https://*.google.com.gt https://*.google.com.hk https://*.google.com.jm https://*.google.com.kh https://*.google.com.kw https://*.google.com.lb https://*.google.com.ly https://*.google.com.mm https://*.google.com.mt https://*.google.com.mx https://*.google.com.my https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.com.np https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.com.pr https://*.google.com.py https://*.google.com.qa https://*.google.com.sa https://*.google.com.sb https://*.google.com.sg https://*.google.com.sl https://*.google.com.sv https://*.google.com.tj https://*.google.com.tr https://*.google.com.tw https://*.google.com.ua https://*.google.com.uy https://*.google.com.vc https://*.google.com.vn https://*.google.cv https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.dz https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.gy https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.ie https://*.google.im https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.jo https://*.google.kg https://*.google.ki https://*.google.kz https://*.google.la https://*.google.li https://*.google.lk https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.mn https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.ne https://*.google.nl https://*.google.no https://*.google.nr https://*.google.nu https://*.google.pl https://*.google.pn https://*.google.ps https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.ru https://*.google.rw https://*.google.sc https://*.google.se https://*.google.sh https://*.google.si https://*.google.sk https://*.google.sm https://*.google.sn https://*.google.so https://*.google.sr https://*.google.st https://*.google.td https://*.google.tg https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.tt https://*.google.vu https://*.google.ws https://*.google-analytics.com https://*.googleapis.com https://*.googletagmanager.com https://maps.gstatic.com https://*.hotjar.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://*.snapengage.com https://i.ytimg.com https://twin-iq.kickfire.com https://bat.bing.net https://bat.bing.com https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting https://*.demandbase.com https://tags.srv.stackadapt.com https://*.albacross.com https://id.rlcdn.com; media-src https://dekra-media.e-spirit.cloud https://dekradev-media.e-spirit.cloud https://dekraqa-media.e-spirit.cloud https://dekraprod-media.e-spirit.cloud https://dkrcamarasprt.cl:502 https://dkrcamarasprt.cl:503 https://dkrcamarasprt.cl:504 https://dkrcamarasprt.cl:505 https://dkrcamarasprt.cl:506 https://dkrcamarasprt.cl:507 https://dkrcamarasprt.cl:508 https://dkrcamarasprt.cl:509; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://hm.baidu.com https://matomo.dekra.bawue.com https://*.clarity.ms https://googleads.g.doubleclick.net https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting https://connect.facebook.net https://www.google.com https://www.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.hotjar.com https://*.hs-scripts.com https://snap.licdn.com https://*.snapengage.com https://twin-iq.kickfire.com https://bat.bing.net https://bat.bing.com https://js.zi-scripts.com https://ws.zoominfo.com https://tags.clickagy.com https://*.zkcdn.net https://*.doubleclick.net https://*.crwdcntrl.net https://*.adobedtm.com https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting https://cdn.jsdelivr.net/npm/@friendlycaptcha/sdk/site.min.js https://*.demandbase.com https://serve.albacross.com https://tags.srv.stackadapt.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hotjar.com https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting https://tags.srv.stackadapt.com; worker-src blob:; upgrade-insecure-requests 4 img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; worker-src blob:; 4 default-src 'self'; connect-src *; font-src * data: blob:; media-src * data:; frame-src 'self' mailto: tel: *.acuvue.com *.acuvue.ru *.adsrvr.org *.brightcove.com *.brightcove.net *.cloudflare.com *.doubleclick.net *.eprize.net *.google.com *.googletagmanager.com *.livechatinc.com *.mypurecloud.com *.opinionstage.com *.optimizely.com *.platformsh.site *.qualtrics.com *.surveymonkey.com *.valassis.eu *.voiston.ai *.walkme.com *.walls.io *.yandex.ru *.yandex.com *.contentstack.io *.youtube.com; frame-ancestors 'self' *.ta-to.com *.acuvue.com; img-src * data: blob:; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adsrvr.org *.ads-twitter.com *.amazon-adsystem.com *.appsflyer.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.contentsquare.com *.contentsquare.net *.contextweb.com *.cookielaw.org *.doubleclick.net *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jquery.com *.licdn.com *.line-scdn.net *.livechatinc.com *.macromill.com *.mieru-ca.com *.mypurecloud.com *.newrelic.com *.onetrust.com *.optimizely.com *.outbrain.com *.makeupar.com *.perfectcorp.com *.pulseinsights.com pym.nprapps.org *.qualtrics.com *.seznam.cz *.smartnews-ads.com *.tiktok.com *.tiktokcdn.com *.tiktokcdn-us.com *.valassis.eu *.walkme.com *.yahoo.co.jp *.yandex.com *.yandex.ru *.yimg.jp *.youcamapi.cn *.youtube.com *.zemanta.com walls.io; style-src 'self' 'unsafe-inline' *.googleapis.com *.googletagmanager.com *.gstatic.com *.mypurecloud.com *.onetrust.com *.optimizely.com *.walkme.com; child-src 'self' blob:; worker-src 'self' blob:; report-to endpoint-1 4 default-src 'self'; connect-src 'self' *.nr-data.net https://*.go-mpulse.net https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://*.akstat.io https://csp.withgoogle.com https://maps.googleapis.com *.nanorep.co *.nanorep.com https://*.monsido.com https://*.nr-data.net https://shyrka-prod-usw2.s3.us-west-2.amazonaws.com https://*.newrelic.com https://*.usw2.pure.cloud wss://*.usw2.pure.cloud *.weglot.com cdn-api-weglot.com https://*.qualtrics.com https://*.flickr.com https://duo4kh6u2c.execute-api.us-east-1.amazonaws.com https://participant.connect.us-east-1.amazonaws.com wss://telmwsbut1jjsq.transport.connect.us-east-1.amazonaws.com *.crowdriff.com https://3il8on7wmc.execute-api.us-east-1.amazonaws.com https://dtn7rvxwwlhud.cloudfront.net wss://ve9ssukgvevbtq.transport.connect.us-east-1.amazonaws.com https://www.google.com/recaptcha/ https://www.google.com/ccm/ https://px.ads.linkedin.com/ https://*.adtrafficquality.google; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src 'self' https://cse.google.com https://www.googletagmanager.com https://calendar.google.com https://outlook.office365.com https://*.monsido.com *.youtube.com *.vimeo.com *.nanorep.com *.tableau.com *.arcgis.com https://app.powerbi.com https://app.powerbigov.us https://*.usw2.pure.cloud https://*.qualtrics.com https://www.google.com https://recaptcha.google.com/recaptcha/ https://syndicatedsearch.goog/ https://td.doubleclick.net/ https://accounts.google.com/ https://admin.google.com/ https://access.workspace.google.com/ http://dom-river-test.iowa.gov/ https://*.iowa.gov https://iowadot.gov https://iowadnr.gov https://ipers.org https://opportunityiowa.gov https://statelibraryofiowa.gov https://*.adtrafficquality.google https://lookerstudio.google.com https://dataviz.iowa.gov https://qualtrics.com https://engage.iowa.gov https://public.tableau.com https://iwddata.iwd.iowa.gov https://data.idph.state.ia.us https://data.iowa.gov; img-src 'self' data: https: *.nr-data.net *.google.com; media-src 'self' https://ugc-gallery-clips.crowdriff.com https://cdn.crowdriff.com; object-src 'self' https://*.usw2.pure.cloud; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.nr-data.net https://*.go-mpulse.net https://cse.google.com https://googletagmanager.com https://js-agent.newrelic.com https://tagmanager.google.com https://www.google.com https://*.googletagmanager.com https://*.monsido.com *.youtube.com *.vimeo.com *.nanorep.com *.nanorep.co https://*.google.com https://*.newrelic.com https://*.usw2.pure.cloud *.weglot.com cdn-api-weglot.com https://*.qualtrics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com public.tableau.com nonce-; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.google-analytics.com *.google.com https://*.monsido.com *.youtube.com *.vimeo.com *.nanorep.co *.nanorep.com https://partner.googleadservices.com https://maps.googleapis.com https://*.usw2.pure.cloud *.weglot.com cdn-api-weglot.com https://js-agent.newrelic.com https://s.go-mpulse.net https://*.qualtrics.com https://*.flickr.com *.crowdriff.com https://dtn7rvxwwlhud.cloudfront.net https://www.gstatic.com/recaptcha/ https://googleads.g.doubleclick.net/ https://snap.licdn.com/ https://*.adtrafficquality.google cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cse.google.com https://unpkg.com public.tableau.com; style-src 'self' 'unsafe-inline' *.google.com www.googletagmanager.com https://*.monsido.com *.youtube.com *.vimeo.com *.nanorep.co *.nanorep.com https://fonts.googleapis.com *.weglot.com cdn-api-weglot.com https://*.qualtrics.com *.crowdriff.com cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob: data:; frame-ancestors 'self' 4 frame-ancestors 'self'; object-src 'self'; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' blob:; 4 base-uri 4 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; 4 frame-ancestors 'self' https://*.scoalaintuitext.ro https://*.intuitext.com https://*.intuitext.ro https://assessment-player.intuitext.com 4 default-src data: https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; font-src https: data: https://fonts.googleapis.com https://fonts.gstatic.com; connect-src https: wss:; worker-src blob: 4 object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 4 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google.com https://www.gstatic.com; frame-src https://www.google.com; connect-src 'self' https://www.google.com; 4 default-src 'none'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.xilo.net; object-src 'none'; style-src 'self' data: 'unsafe-inline' https://*.xilo.net; img-src 'self' blob: data: https://*.xilo.net; media-src 'self' data: https://*.xilo.net; frame-src *; font-src *; form-action 'self' https://*.xilo.net; connect-src 'self' https://*.xilo.net wss://*.xilo.net; manifest-src 'self' https://*.xilo.net; frame-ancestors 'self' https://*.xilo.net; worker-src 'self' blob:; report-uri https://sentry.xilo.net/api/3/security/?sentry_key=558ec00c6ab34073c96015172684209a 4 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; worker-src 'self' blob:; 4 font-src * data:; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: cdn.orsted.com *.azureedge.net orsted.com.au *.app.cookieinformation.com *.euroland.com *.eurolandir.com cdn.appdynamics.com *.eum-appdynamics.com *.googletagmanager.com *.gstatic.com *.googleoptimize.com www.googleadservices.com *.googleapis.com *.bing.com *.doubleclick.net *.t.co *.pardot.com *.youtube.com *.linkedin.com *.twitter.com *.globenewswire.com *.23video.com delivery.twentythree.com orsted.containers.piwik.pro orsted.piwik.pro *.crazyegg.com unpkg.com cs.lf-discover.com *.puzzel.com *.arcgis.com code.jquery.com *.lfeeder.com orsted-global-graduate-programme.simplecast.com omny.fm cdnjs.cloudflare.com *.bootstrapcdn.com *.defgo.com *.defgo.net *.vimeo.com presscloud.com *.ritzau.dk *.simplecast.com *.elnet.danskenergi.dk *.sli.do *.audioboom.com *.licdn.com *.adsrvr.org *.soundcloud.com *.google.com *.google.com.my *.google.nl *.google.dk *.facebook.net; 4 frame-ancestors 'self' https://*.nethealth.com https://*.therapy.nethealth.com 4 object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests 4 frame-ancestors 'self' *.qidian.com *.hongxiu.com *.yuewen.com *.qq.com *.qdmm.com *.readnovel.com *.xs8.cn *.xxsy.net *.tingbook.com *.lrts.me *.ywurl.cn *.qdwenxue.com *.if.qidian.com www.gameloop.com *.xs.cn *.rongshuxia.com 4 frame-ancestors 'self' http://localhost:8000 http://*.localhost:8000 https://*.dev.000.ue-ict.net/ https://dev.000.ue-ict.net/ https://*.pre.000.ue-ict.net/ https://pre.000.ue-ict.net/ https://*.universidadeuropea.com/; 4 object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests 4 frame-ancestors 'self' *.applytojob.com 4 script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https://*.hsforms.net https://engage.airfleet.co https://dev.visualwebsiteoptimizer.com https://app.lemlist.com https://public.api.tofuhq.com https://www.googletagmanager.com https://connect.facebook.net https://munchkin.marketo.net https://a.omappapi.com https://js.zi-scripts.com https://snap.licdn.com https://a.omappapi.com https://static.addtoany.com https://cdn.cookielaw.org https://googleads.g.doubleclick.net https://www.redditstatic.com https://static.ads-twitter.com https://js.navattic.com https://bat.bing.com https://ws-assets.zoominfo.com https://mend.widget.insent.ai https://sdk.teamme.link https://lp.mend.io https://app.revenuehero.io https://fast.wistia.com https://browser.sentry-cdn.com https://app.vwo.com https://*.qualified.com/; frame-ancestors 'self' https://mend.io https://*.mend.io https://capture.navattic.com https://*.vwo.com; style-src 'self' 'unsafe-inline' https://a.omappapi.com https://sdk.teamme.link https://lp.mend.io; 4 object-src 'none'; base-uri 'self'; 4 script-src 'self' 'unsafe-inline' 4 default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 4 default-src 'self' api-v2.psg777.com https://www.google.com *;script-src 'self' 'unsafe-eval' blob: cdnjs.cloudflare.com https://www.google.com https://challenges.cloudflare.com;img-src 'self' * blob: data: https://www.google.com;connect-src 'self' api-v2.psg777.com https://www.google.com https://challenges.cloudflare.com;frame-ancestors 'self' https://www.google.com;base-uri 'self';form-action 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 4 base-uri 'self'; object-src 'self'; frame-ancestors 'self' 4 default-src 'self'; img-src 'self' https://piwiks.celibest.com https://www.google-analytics.com https://trc.taboola.com https://www4.celibest.com https://www.celibest.com https://www.celibnord.com https://www.celibouest.com https://www.celibparis.com https://www.celiblyon.com https://www.celibrhonealpes.com https://www.celibsud.com https://www.celibsudouest.com https://toodate-rekognition.s3.eu-west-1.amazonaws.com https://toodate-rekognition-a.s3.eu-west-1.amazonaws.com *.paypal.com *.paypalobjects.com *.venmo.com data:; script-src 'self' https://piwiks.celibest.com https://www.google-analytics.com https://www.googletagmanager.com https://code.createjs.com https://www.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://www.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; form-action 'self' https://systempay.cyberpluspaiement.com https://www.paypal.com *.hipay.com; media-src 'self'; base-uri 'self'; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://www.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com; frame-src 'self' https://www.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com; frame-ancestors 'self'; child-src 'self' https://www.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com; object-src 'none'; 4 frame-ancestors 'self'; form-action 'self' 4 default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://c.clarity.ms https://c.bing.com *.clarity.ms *.betufa.com ufshseo-cdn.mybet789.com natural-sunrise-eea00ccd45.media.strapiapp.com https://images.dmca.com https://widget.reviews.io; media-src self data: *.betufa.com ufshseo-cdn.mybet789.com natural-sunrise-eea00ccd45.media.strapiapp.com; script-src 'self' 'unsafe-inline' https://www.clarity.ms *.clarity.ms https://www.googletagmanager.com https://static.cloudflareinsights.com https://widget.trustpilot.com https://images.dmca.com https://widget.reviews.io; frame-src https://widget.trustpilot.com; connect-src 'self' https://*.betufa.com https://staging-api.ufabet.sh https://ufshseo-content.mybet789.com https://content.ufanews.com https://api.staging.myufa.com https://ajax-login-portal.mybet789.com https://one.one.one.one/cdn-cgi/trace https://www.googletagmanager.com https://www.clarity.ms *.clarity.ms https://www.google-analytics.com https://j.clarity.ms https://widget.trustpilot.com; 4 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; frame-src 'none'; object-src 'none' 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.amazonaws.com *.resonate.com *.qualified.com *.usbrowserspeed.com *.cookielaw.org *.googletagmanager.com *.bing.com *.licdn.com *.hotjar.com *.driftt.com *.terminus.services *.demandbase.com *.doubleclick.net *.vidyard.com *.facebook.com *.facebook.net *.marketo.net *.monitor.azure.com *.googleadservices.com *.adobedtm.com analytics-sm.com *.24-astute.com *.affec.tv *.adnxs.com *.adentifi.com *.google.com *.gstatic.com *.cloudflareinsights.com *.redditstatic.com *.bat.bing-int.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net *.googletagmanager.com *.googleapis.com; img-src 'self' data: pixel.rubiconproject.com sp.analytics.yahoo.com *.everesttech.net *.vidyard.com *.cookielaw.org *.ads.linkedin.com *.terminus-services.com *.terminus.services *.bing.com *.rlcdn.com *.google.com *.adsrvr.org *.company-target.com *.adentifi.com *.doubleclick.net *.facebook.com *.linkedin.com driftt.imgix.net *.googleadservices.com *.everesttech.net *.demdex.net *.google.ca analytics-sm.com *.go.affec.tv *.adnxs.com trkn.us *.reddit.com *.googletagmanager.com; font-src 'self' data: *.qualified.com; connect-src 'self' wss: https: *.qualified.com wss://ws8.qualified.com; media-src 'self' 'unsafe-inline' *.qualified.com; frame-src 'self' *.qualified.com *.doubleclick.net *.googletagmanager.com *.company-target.com *.driftt.com *.vidyard.com *.demdex.net *.google.com hackerone.com *.facebook.com; 4 default-src 'self' blob: applepay.cdn-apple.com appleid.cdn-apple.com accounts.google.com *.almaty-ffin.global acs.bpcprocessing.net bankffin.kz centinelapi.cardinalcommerce.com *.cloudflare.com *.consentmanager.net api.cyberity.ru *.doubleclick.net www.facebook.com ffin.ae ffin.global *.freedom24.com *.freedombroker.global secure.freedompay.kz secure-collector.zen.com *.google-analytics.com *.analytics.google.com pay.google.com code.jivosite.com code.jivo.ru *.mail.ru api.sumsub.com *.tfos.com *.tradernet.com *.tradernet.kz *.tradernet.global *.tradernet.ru *.tradernet.by widget.trustpilot.com ddc.worldpay.com yastatic.net youtube.com *.youtube.com *.zdassets.com; img-src 'self' 'unsafe-inline' blob: data: st.ffdigital.eu *.almaty-ffin.global *.appsflyer.com bat.bing.com *.carrotquest.app *.carrotquest.io inappstory.com/stories/loader.gif *.consentmanager.net *.clarity.ms *.doubleclick.net earn.broker earn.eu *.f.bank www.facebook.com ffin.global *.freedom24.com w8ben.freedomholdingcorp.com cs.getinappstory.com gocpa.cloud www.googletagmanager.com www.google-analytics.com www.google.am www.google.com www.google.kz www.google.ru www.google.com.cy www.google.com.vn google.com.cy google.am google.kz chart.googleapis.com www.gstatic.com trade.inveza.com code.jivosite.com code.jivo.ru *.kursiv.media top-fwz1.mail.ru trade.mind-money.eu content.mql5.com *.onelink.me oninvest.com t.co *.tfos.com *.tradernet.by *.tradernet.com *.tradernet.kz *.tradernet.ru turlov.co.za analytics.twitter.com vk.com login.vk.com ddc.worldpay.com mc.yandex.ru v2.zopim.com mc.yandex.com *.oninvest.com *.ffin.tr *.ffin.ae *.youtube.com static.geetest.com static.geevisit.com i.ytimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: ffin.global *.freedom24.com www.google-analytics.com pay.google.com cdn.jsdelivr.net *.tradernet.com *.tradernet.ru yastatic.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' accounts.google.com www.google-analytics.com www.gstatic.com code.jivosite.com code.jivo.ru cdn.jsdelivr.net yastatic.net static.geetest.com; font-src 'self' data: applepay.cdn-apple.com *.appsflyer.com cdn.carrotquest.app cs.getinappstory.com fonts.gstatic.com v2.zopim.com; connect-src 'self' blob: *.amazonaws.com wss://*.amazonaws.com *.appsflyer.com api.carrotquest.app rts-v2.carrotquest.app/websocket_connect_time wss://rts-v2.carrotquest.app/websocket_connect_time realtime-services-eu.carrotquest.io wss://realtime-services-eu-chat-2.carrotquest.io wss://realtime-services-eu.carrotquest.io api.carrottrack.app/users/$self_user/events api.carrottrack.app/users/$self_user/props wss://wss.cifra-broker.ru *.clarity.ms *.consentmanager.net/delivery/ suggestions.dadata.ru stats.g.doubleclick.net wss://wss.earn.broker wss://wss.ffdigital.eu wss://wss.ffin.ae ffin.global wss://wss.ffin.tr mo.ffinpay.ru eun1.fptls.com eun1.fptls.com *.freedom24.com wss://wss.freedom24.com wss://wss.freedombroker.kz api.getinappstory.com/v2/ *.google-analytics.com *.analytics.google.com analytics.google.com google.com pay.google.com www.google.com accounts.google.com pagead2.googlesyndication.com *.gstatic.com appleid.apple.com appleid.cdn-apple.com iframe.ly wss://wss.inveza.com *.jivo.ru wss://*.jivo.ru *.jivosite.com wss://*.jivosite.com top-fwz1.mail.ru www.mczbf.com wss://wss.mind-money.eu content.mql5.com www.sjwoe.com *.taboola.com wss://wss.almaty-ffin.global wss://wss.tfos.com wss://wss.tradernet.am *.tradernet.by wss://wss.tradernet.by *.tradernet.com wss://*.tradernet.com wss://wss.tradernet.dev wss://wssdev.tradernet.dev wss://wss.tradernet.global wss://wss.freedombroker.global wss://wss.tradernet.kg wss://wss.tradernet.kz *.tradernet.ru sentry.dev.tradernet.ru dev-sentry.dev.tradernet.ru tradernet.ru wss://wss.tradernet.ru wss://wss2.tradernet.ru wss://wss.tradernet.ua wss://wss.tradernet.uz wss://*.typi.team *.typi.team wss://wss.walletsolutions.eu wss://wss.wisdompointcapital.com ddc.worldpay.com mc.yandex.com mc.yandex.ru secure-collector.zen.com *.online-metrix.net ekr.zdassets.com *.zendesk.com v2.zopim.com widget-mediator.zopim.com wss://widget-mediator.zopim.com; frame-ancestors 'self' https://*.bankffin.kz https://*.f.bank https://*.freedom24.com https://*.tradernet.com https://bankffin.kz https://freedom24.ru; 4 frame-ancestors 'self' https://*.garagedoorsau.com.au https://garagedoorsau.com.au 4 frame-ancestors 'none'; base-uri 'self'; object-src 'none' 4 worker-src blob:;default-src 'self' http://www.ltgplc.com/ https://go.ltgplc.com https://go.to.peoplefluent.com https://pf-marketing.kzoplatform.com https://pf-customers.kzoplatform.com https://gomo.kzoplatform.com https://percolate.blogtalkradio.com https://www.blogtalkradio.com http://www.ltgplc.com/ https://go.ltgplc.com https://www.youtube.com https://go.pardot.com https://www.clickcease.com https://td.doubleclick.net https://*.propensity.com https://*.js.ubembed.com https://*.ubembed.com https://*.g2.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.g2.com https://*.ubembed.com https://js.storylane.io https://peoplefluent.storylane.io;script-src-elem 'self' 'unsafe-inline' https://snap.licdn.com https://microapps.pf-labs.net https://go.to.peoplefluent.com https://ltg.breezy.hr https://pi.pardot.com/ https://www.googletagmanager.com https://tagmanager.google.com https://sjs.bizographics.com https://static.ads-twitter.com https://www.googleadservices.com https://bat.bing.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://go.ltgplc.com https://analytics.twitter.com https://www.clickcease.com https://monitor.clickcease.com https://go.to.peoplefluent.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.clarity.ms https://*.clarity.ms https://*.brilliantchap.com https://www.youtube.com https://*.brilliantlocco.com https://*.propensity.com https://*.js.ubembed.com https://*.ubembed.com https://*.ubembed.com https://*.g2.com https://jscloud.net https://js.storylane.io https://peoplefluent.storylane.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://microapps.pf-labs.net https://cdn.inspectlet.com https://go.to.peoplefluent.com https://ltg.breezy.hr https://sjs.bizographics.com https://analytics.twitter.com https://static.ads-twitter.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://tagmanager.google.com https://www.google-analytics.com https://www.googletagmanager.com https://pi.pardot.com https://go.ltgplc.com https://monitor.clickcease.com https://go.to.peoplefluent.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.clickcease.com https://www.clarity.ms https://*.clarity.ms https://*.brilliantchap.com https://*.brilliantlocco.com https://*.propensity.com https://*.js.ubembed.com https://*.ubembed.com https://*.g2.com https://*.ubembed.com https://js.storylane.io https://peoplefluent.storylane.io;font-src 'self' data: https://ui.peoplefluent.com https://use.typekit.net https://fonts.gstatic.com https://js.storylane.io https://peoplefluent.storylane.io;style-src 'self' 'unsafe-inline' https://ui.peoplefluent.com https://microapps.pf-labs.net https://use.typekit.net https://p.typekit.net https://tagmanager.google.com https://fonts.googleapis.com https://tagmanager.google.com https://www.googletagmanager.com https://*.propensity.com https://*.js.ubembed.com https://*.ubembed.com https://*.g2.com https://js.storylane.io https://peoplefluent.storylane.io;img-src 'self' data: https://d33wubrfki0l68.cloudfront.net https://t.co https://cdn.sanity.io https://www.google-analytics.com https://stats.g.doubleclick.net https://linkedin.com https://www.linkedin.com https://px.ads.linkedin.com https://bat.bing.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://s.clarity.ms https://c.bing.com https://*.clarity.ms https://*.brilliantchap.com https://i.ytimg.com https://googleads.g.doubleclick.net https://*.brilliantlocco.com https://px4.ads.linkedin.com https://px.ads.linkedin.com https://www.googleadservices.com https://bat.bing.net https://js.storylane.io https://peoplefluent.storylane.io https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat;media-src 'self' data: https://cdn.sanity.io https://*.propensity.com https://*.js.ubembed.com https://*.ubembed.com https://*.ubembed.com https://*.g2.com https://*.propensity.com https://*.js.ubembed.com https://*.ubembed.com https://*.g2.com https://js.storylane.io https://peoplefluent.storylane.io;connect-src 'self' https://ltg.breezy.hr https://www.google-analytics.com https://go.to.peoplefluent.com https://stats.g.doubleclick.net https://monitor.clickcease.com https://region1.analytics.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.clickcease.com https://adservice.google.com https://*.google.com https://cdn.linkedin.oribi.io https://s.clarity.ms https://*.clarity.ms https://*.brilliantchap.com https://*.api.sanity.io https://px.ads.linkedin.com https://*.brilliantlocco.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://*.propensity.com https://*.js.ubembed.com https://*.ubembed.com https://*.g2.com https://*.ubembed.com https://www.googleadservices.com https://bat.bing.net https://jscloud.net https://js.storylane.io https://peoplefluent.storylane.io 4 frame-ancestors 'self' https://dvag.test.dlstages01.dvag.de https://dvag.dev.dlstages01.dvag.de https://static.test.dlstages01.dvag.de https://static.dev.dlstages01.dvag.de https://static-career.test.dlstages01.dvag.de https://static-career.dev.dlstages01.dvag.de https://static-campaigns.dev.dlstages01.dvag.de https://berater.finanzanalyse.dvag https://uat.berater.finanzanalyse.dvag https://staging.berater.deutschefin.tech https://vpd.finanzanalyse.dvag https://uat.vpd.finanzanalyse.dvag https://finanzanalyse.dvag https://www.finanzanalyse.dvag https://uat.finanzanalyse.dvag https://benutzerkonto.abnahme.dvag https://benutzerkonto.dvag https://catalog.finanzanalyse.dvag https://uat.catalog.finanzanalyse.dvag 4 default-src 'self' *.lytx.com data:; script-src 'self' 'unsafe-eval' *.lytx.com ct.capterra.com rs.fullstory.com edge.fullstory.com cdn.bizible.com ug-webapp-public-production.s3.amazonaws.com fonts.googleapis.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.doubleclick.net *.googlesyndication.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com cdn.cookielaw.org *.onetrust.com *.wistia.com *.wistia.net *.marketo.com *.marketo.net *.sentry-cdn.com *.cloudfront.net bat.bing.com snap.licdn.com *.6sc.co *.zi-scripts.com 'unsafe-inline'; style-src 'self' *.lytx.com fonts.googleapis.com *.gstatic.com *.onetrust.com cdn.cookielaw.org cdn.jsdelivr.net *.marketo.com *.marketo.net 'unsafe-inline'; img-src 'self' *.lytx.com www.google-analytics.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net *.linkedin.com *.facebook.com *.youtube.com *.vimeo.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com *.onetrust.com *.wistia.com *.wistia.net *.marketo.com *.marketo.net *.publuu.com publuu.com data: https:; connect-src 'self' www.googleadservices.com googleads.g.doubleclick.net lytx.my.salesforce.com rs.fullstory.com edge.fullstory.com secure.adnxs.com a.usbrowserspeed.com api.usergems.com www.google-analytics.com www.google.com *.googleapis.com *.googlesyndication.com stats.g.doubleclick.net analytics.google.com *.linkedin.com *.facebook.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com cdn.cookielaw.org cdn.jsdelivr.net *.onetrust.com *.wistia.com *.wistia.net *.marketo.com *.marketo.net *.mktoresp.com *.publuu.com publuu.com *.sentry.io *.sentry-cdn.com *.6sc.co *.6sense.com; frame-src 'self' *.lytx.com *.google.com www.googletagmanager.com *.youtube.com *.vimeo.com *.linkedin.com *.facebook.com *.wistia.com *.wistia.net *.publuu.com publuu.com *.tiled.co *.outgrow.us *.marketo.com *.marketo.net; media-src 'self' *.lytx.com *.wistia.com *.wistia.net data: blob:; font-src 'self' fonts.gstatic.com *.onetrust.com *.wistia.com *.wistia.net data:; worker-src 'self' blob:; frame-ancestors 'self' *.lytx.com lytx-cms-stage-2025.azurewebsites.net lytx-cms-prod-2025.azurewebsites.net; object-src 'none'; base-uri 'self'; 4 object-src 'self';frame-ancestors 'self'; 4 default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://cdn-ukwest.onetrust.com https://img.en25.com https://connect.facebook.net https://use.typekit.net https://az416426.vo.msecnd.net https://www.civica.com https://snap.licdn.com https://cdnjs.cloudflare.com https://*.episerver.net https://www.youtube.com https://geolocation.onetrust.com/ https://s3121.t.eloqua.com https://cdn.tiny.cloud/ https://static.oktopost.com/ https://okt.to/ https://*.demandbase.com/ https://s2079104782.t.eloqua.com/ https://cdn.cookielaw.org/ https://*.hotjar.com https://js.monitor.azure.com/; connect-src 'self' https://*.onetrust.com https://*.visualstudio.com https://*.google-analytics.com https://stats.g.doubleclick.net https://s3121.t.eloqua.com https://civica-privacy.my.onetrust.com https://cookiesuksouth.blob.core.windows.net/ https://cdn.linkedin.oribi.io https://img.en25.com https://*.demandbase.com/ https://api.company-target.com https://www.google.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://cdn.cookielaw.org/ https://segments.company-target.com https://tracking.civica.co.uk/ https://*.hotjar.com wss://ws.hotjar.com https://*.hotjar.io https://pagead2.googlesyndication.com/ https://js.monitor.azure.com/; object-src 'none'; media-src 'self' data:; img-src 'self' data: https://www.facebook.com https://*.eloqua.com https://p.typekit.net https://*.google-analytics.com https://*.linkedin.com https://www.google.com https://www.google.co.uk https://www.google.co.in https://licensebuttons.net https://p.adsymptotic.com https://sp.tinymce.com https://*.onetrust.com https://www.googletagmanager.com https://id.rlcdn.com/ https://segments.company-target.com/ https://www.hootsuite.com/; style-src 'self' 'unsafe-inline' data: https://cdn.tiny.cloud; frame-ancestors 'self'; child-src 'self'; frame-src 'self' https://www.youtube.com https://*.fls.doubleclick.net/ https://player.vimeo.com https://www.facebook.com/ https://s.company-target.com/ https://www.googletagmanager.com/; font-src 'self' https://use.typekit.net; 4 script-src-elem 'self' https://www.gstatic.com/recaptcha/ *.ampproject.net/ https://ad.atdmt.com https://www.google.com/recaptcha/api.js www.google-analytics.com ajax.googleapis.com https://cdn.ampproject.org https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https://adservice.google.com/adsid/integrator.js https://adservice.google.com.vn/adsid/integrator.js https://googleads.g.doubleclick.net/ https://pagead2.googlesyndication.com/pagead/js/r20190408/r20190131/show_ads_impl.js 4 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://infinity.infracom.se; frame-src 'self' https://www.google.com/recaptcha/ https://www.youtube-nocookie.com https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 4 connect-src 'self' data.enseignementsup-recherche.gouv.fr https://*.index-education.com index-education.matomo.cloud cdn.matomo.cloud https://*.friendlycaptcha.com/ https://vimeo.com https://apm-web.index-education.com/ ndx.plus *.ndx.plus https://*.datatables.net https://data.geopf.fr https://*.clarity.ms;default-src 'self' *.bootstrapcdn.com ndx.plus *.ndx.plus https://*.index-education.com;frame-ancestors 'self' ;frame-src 'self' *.index-education.france https://static.scelliuspaiement.labanquepostale.fr *.openstreetmap.org http://*.index-education.net https://*.index-education.net *.hyperplanning.fr *.pronote-campus.net http://*.vimeo.com https://vimeo.com https://*.vimeo.com https://www.youtube.com https://*.index-education.com https://app.mailjet.com;media-src 'self' https://*.vimeo.com https://vimeo.com https://*.index-education.com http://*.index-education.com;object-src 'self' *.index-education.france *.index-education.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' index-education.matomo.cloud cdn.matomo.cloud ndx.plus *.ndx.plus https://static.scelliuspaiement.labanquepostale.fr *.licdn.com *.tiny.cloud *.adobe.com *.cloudflare.com https://*.vimeo.com https://vimeo.com https://*.vimeocdn.com *.datatables.net https://*.index-education.com https://*.bootstrapcdn.com https://app.mailjet.com https://*.clarity.ms;style-src 'self' 'unsafe-inline' ndx.plus *.ndx.plus https://static.scelliuspaiement.labanquepostale.fr *.bootstrapcdn.com https://*.index-education.com http://*.index-education.com;font-src 'self' *.bootstrapcdn.com ndx.plus *.ndx.plus https://*.index-education.com *.index-education.net data:;worker-src 'self' blob: https://*.index-education.com;img-src 'self' https://*.index-education.com index-education.matomo.cloud cdn.matomo.cloud ndx.plus *.ndx.plus *.linkedin.com blob: data:; 4 default-src 'self'; base-uri 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.bing.com sc-static.net analytics.tiktok.com siteimproveanalytics.com *.msecnd.net *.snapchat.com *.cloudfront.net www.arla.ph www.arla.be www.arlafoods.ca www.arlafoods.de www.arla.com.cy *.tobasket.com *.foodinfluencersunited.nl *.foodinfluencersunited.com destinilocators.com code.jquery.com *.typekit.net *.aptrinsic.com *.jsdelivr.net *.doubleclick.net *.infogram.com *.adtrafficquality.google *.googletagservices.com cdn.lamp.avct.cloud arla-faq-climate.consulink.com *.licdn.com chat.consulink.ai *.bazaarvoice.com *.facebook.net *.facebook.com pinterest.com *.pinterest.com *.googleapis.com *.leadfamly.com azsaprmarketingecosystem.z6.web.core.windows.net azsaprmarketingecosystem.blob.core.windows.net cdn.cookielaw.org js.monitor.azure.com *.linkedin.com *.pinimg.com *.saleswingsapp.com snap.licdn.com *.clarity.ms *.youtube.com *.recaptcha.net *.applicationinsights.azure.com *.arla.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.google.com *.googlesyndication.com *.redditstatic.com; style-src 'self' 'unsafe-inline' www.arla.com www.arla.ph www.arla.be www.arlafoods.ca www.arlafoods.de www.arla.com.cy *.googleapis.com *.typekit.net *.aptrinsic.com *.jsdelivr.net arla-service.consulink.com chat.consulink.ai azsaprmarketingecosystem.blob.core.windows.net azsaprmarketingecosystem.z6.web.core.windows.net fonts.googleapis.com *.youtube-nocookie.com cdn.cookielaw.org *.gstatic.com; img-src data: 'self' blob: *.adtrafficquality.google *.snapchat.com *.siteimproveanalytics.io img.youtube.com *.ytimg.com collector.ontame.io www.arla.ph www.arla.be www.arlafoods.ca www.arlafoods.de www.arla.com.cy www.arla.com.au *.streaming.mediakind.com *.foodinfluencersunited.nl *.foodinfluencersunited.com *.turn.com *.tubemogul.com *.everesttech.net *.typekit.net mnd-assets.mynewsdesk.com *.cookielaw.org azsapradn.blob.core.windows.net mnd-assets-bunny.mynewsdesk.com mrct.org.uk *.distrivers.nl *.huuskes.nl *.werkenbijboon.nl *.googleusercontent.com *.bazaarvoice.com *.facebook.com *.facebook.net *.arla.com maps.gstatic.com maps.googleapis.com azarlaassets.blob.core.windows.net arlamedia.blob.core.windows.net azsaprmarketingecosystem.blob.core.windows.net *.bing.com *.reddit.com *.clarity.ms cdn.cookielaw.org *.linkedin.com *.google-analytics.com analytics.google.com *.googletagmanager.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.gstatic.com *.pinterest.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; font-src data: 'self' www.arla.com www.arla.ph www.arla.be www.arlafoods.ca www.arlafoods.de www.arla.com.cy *.googleapis.com *.typekit.net *.aptrinsic.com *.cloudfront.net azsaprmarketingecosystem.z6.web.core.windows.net fonts.gstatic.com; connect-src 'self' data: analytics.tiktok.com *.snapchat.com dc.services.visualstudio.com *.doubleclick.net www.arla.ph www.youtube.com www.arla.be www.arlafoods.ca www.arla.com.cy *.streaming.mediakind.com *.foodinfluencersunited.nl *.foodinfluencersunited.com *.typekit.net *.aptrinsic.com azsaprmarketingecosystem.z6.web.core.windows.net *.gstatic.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.applicationinsights.azure.com az416426.vo.msecnd.net *.googlesyndication.com *.adtrafficquality.google *.monitor.azure.com *.googleadservices.com *.linkedin.com chat.consulink.ai *.bazaarvoice.com *.facebook.com *.facebook.net *.cookielaw.org *.onetrust.com *.clarity.ms *.saleswingsapp.com *.pinterest.com *.arla.com *.arla.net *.redditstatic.com *.reddit.com ep-arla-vs-mediaservice-pr.westeurope.streaming.mediakind.com *.leadfamly.com *.recaptcha.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleapis.com js.monitor.azure.com; frame-src 'self' *.adtrafficquality.google *.googlesyndication.com app.brandheroes.com *.googleadservices.com *.googletagservices.com www.googletagmanager.com *.doubleclick.net *.snapchat.com *.foodinfluencersunited.nl *.foodinfluencersunited.com destinilocators.com arla-service.consulink.com arla-faq-climate.consulink.com chat.consulink.ai *.bazaarvoice.com *.recaptcha.net *.google.com *.googletagmanager.com *.pinterest.com *.arla.com *.facebook.com *.facebook.net *.youtube.com *.youtube-nocookie.com; media-src 'self' blob: arlamedia.blob.core.windows.net azsapradn.blob.core.windows.net *.mediakind.com; form-action 'self' www.arla.com www.arla.ph www.arla.be www.arlafoods.ca www.arlafoods.de www.arla.com.cy *.facebook.net *.recaptcha.net *.facebook.com; frame-ancestors 'self' chat.consulink.ai; 4 default-src 'self' wibu.com *.wibu.com 'unsafe-inline' 'unsafe-eval' *.brighttalk.com *.adobe.com *.wibu.us *.surveymonkey.com *.brightcove.net *.wibu.com *.typo3.org *.googleapis.com www.google-analytics.com *.google.com *.youtube.com *.youtube-nocookie.com *.youtube.de *.ytimg.com *.baidu.com *.nakanohito.jp *.pardot.com *.joomag.com *.cleverreach.de *.cloudfront.net *.amazonaws.com *.hubspot.com *.gstatic.com *.iiconsortium.org *.ddev.site *.friendlycaptcha.com cdn.jsdelivr.net px.ads.linkedin.com snap.licdn.com data:; img-src * data:; font-src 'self' data: *.wibu.com *.gstatic.com; frame-src 'self' *.wibu.com www.wibu.com *.googleapis.com www.google-analytics.com *.google.com *.google.de *.google.fr *.google.co.uk *.youtube.com *.youtube-nocookie.com *.youtube.de *.ytimg.com *.baidu.com *.joomag.com *.surveymonkey.com *.brighttalk.com *.hcaptcha.com; frame-ancestors 'self' https://*.wibu.com at.alicdn.com; worker-src blob:; 4 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: mediastream:; script-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline' data: blob: mediastream:; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * blob: data: 'unsafe-inline'; worker-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval' 4 default-src 'self'; connect-src *; font-src *; frame-src *; img-src * blob: data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval' blob:; worker-src 'self' blob:; style-src * 'unsafe-inline' 4 base-uri 'self'; frame-ancestors 'self' https://*.worldanimalprotection.org.uk; 4 frame-ancestors 'self' https://ntb-centrum.mironet.cz/ https://totem.apps.mironet.cz/ 4 default-src 'self'; img-src 'self' data: https://im16.inviewer.se https://mfstatic.com https://i3.ytimg.com https://cdn.cookielaw.org https://matomo.internetstiftelsen.se https://fonts.gstatic.com https://secure.gravatar.com https://*.libsyn.com https://*.internetstiftelsen.se https://internetstiftelsen.se https://s3-eu-north-1.amazonaws.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.rekai.se https://dj5ytzb70q57z.cloudfront.net https://internetstiftelsen.confetti.events https://mfstatic.com https://cdn.jsdelivr.net https://matomo.internetstiftelsen.se https://static.internetstiftelsen.se https://graphtool.internetstiftelsen.se https://privacyportal-eu-cdn.onetrust.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://cdn.lordicon.com https://*.readspeaker.com https://www.youtube.com https://connect.facebook.net; font-src 'self' data: https://d2wd18kp3k18ix.cloudfront.net https://*.onetrust.com https://fonts.gstatic.com https://*.internetstiftelsen.se; style-src 'self' 'unsafe-inline' https://*.onetrust.com https://mfstatic.com https://*.internetstiftelsen.se https://matomo.internetstiftelsen.se https://www.googletagmanager.com https://fonts.googleapis.com; manifest-src 'self' https://*.internetstiftelsen.se; connect-src 'self' https://*.rekai.se https://graphtool.internetstiftelsen.se https://api.services.confetti.events https://internetstiftelsen.confetti.events https://im16.inviewer.se https://*.mediaflow.com https://api.friendlycaptcha.com https://matomo.internetstiftelsen.se https://static.internetstiftelsen.se https://www.facebook.com https://region1.google-analytics.com https://cdn.cookielaw.org https://*.onetrust.com https://cdn.lordicon.com https://*.bugsnag.com https://*.readspeaker.com https://yoast.com; frame-src 'self' blob: https://internetstiftelsen.confetti.events https://www.google.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://*.libsyn.com; frame-ancestors 'self'; media-src 'self' https://*.libsyn.com 4 frame-ancestors 'self' tomshardware.fr www.tomshardware.fr tomsguide.fr www.tomsguide.fr cms.galaxiemedia.fr amp.tomsguide.fr amp.tomshardware.fr cdn.tomsguide.fr cdn.tomshardware.fr presence-pc.fr www.presence-pc.fr presence-pc.com www.presence-pc.com telecharger.tomsguide.fr telecharger.tomshardware.fr; 4 connect-src 'self' cookie.wieni.be www.google-analytics.com widget.usersnap.com 'sha256-4YMvBqS3vvUrtHeUMQvHMMjdLUOlOHQOgs5s+Wxepkk=' consent.cookiebot.com consentcdn.cookiebot.com api.dnsbelgium.be webwhois.nic.vlaanderen webwhois.nic.brussels cdn.linkedin.oribi.io dnsbelgium.matomo.cloud pagead2.googlesyndication.com https://www.facebook.com https://www.googletagmanager.com https://www.google.com https://connect.facebook.net; default-src 'self' static.dnsbelgium.be; font-src 'self' data: use.fontawesome.com fonts.gstatic.com; frame-src 'self' www.google.com maps.google.com www.youtube.com player.vimeo.com notfound-static.fwebservices.be *.youtube-nocookie.com consentcdn.cookiebot.com calendar.google.com accounts.google.com *.medialaancdn.be www.facebook.com www.toll-net.be s.pointerpro.com https://flo.uri.sh/ survey.dnsbelgium.be datawrapper.dwcdn.net e.infogram.com youtu.be https://www.googletagmanager.com/ https://connect.facebook.net; img-src wmimages.dnsbelgium.be 'self' data: www.google-analytics.com ssl.gstatic.com www.gstatic.com cdn.usernap.com www.countryflags.io static.dnsbelgium.be https://www.facebook.com i.ytimg.com *.ads.linkedin.com imgsct.cookiebot.com https://www.googletagmanager.com google-analytics.com https://connect.facebook.net; media-src 'self' www.youtube.com youtu.be vimeo.com player.vimeo.com static.dnsbelgium.be; object-src 'self'; script-src 'self' cookie.wieni.be www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com tagmanager.google.com 'sha256-n0qo0a+uNS3EBowOxlDJeqRRacNxVgew48Omj0IYROY=' api.usersnap.com resources.usersnap.com widget.usersnap.com cdn.usersnap.com 'sha256-3UZnJiUmLKDbXEjPsm9EHc0R7InC5uAtj5O1u68mBzM=' 'sha256-9JLcNkvDbyx27cZsDQUfhAXctCUn8uKZhZo7K5s+cZY=' 'sha256-4YMvBqS3vvUrtHeUMQvHMMjdLUOlOHQOgs5s+Wxepkk=' consent.cookiebot.com consentcdn.cookiebot.com https://connect.facebook.net www.youtube.com s.ytimg.com static.dnsbelgium.be snap.licdn.com www.toll-net.be/h5p/wp-content/plugins/h5p/h5p-php-library/js/h5p-resizer.js https://cdn.matomo.cloud/dnsbelgium.matomo.cloud/matomo.js s.pointerpro.com survey.dnsbelgium.be pagead2.googlesyndication.com 'sha256-7b0CKEQkvadz7B/pYgEMs74upd57DoxBlXRIWY8pdRg=' https://www.googletagmanager.com 'sha256-XlGJBFdn9wZ3QRSQmE5hz2h94YBoRCV09VOA9PNwEc4=' 'sha256-7jDSgL9/dTEn7w83QbKH2DxAZSXWTe5+pNgp0l6xaGI=' 'sha256-cyhAnyf/da35tv9DMBPcWxiXKF8KRetd7+NRa8ylykg=' 'sha256-A3Dbl/cByN6GbFswAlXt66hMeUW5GNI1G4g6LzsRv0o=' 'sha256-0RBExtvEZO5CsGJ2YygQGmydb+opVDaeBuMtzkrktFw='; style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com cookie.wieni.be tagmanager.google.com use.fontawesome.com; worker-src 'self' 4 default-src 'self' https://www.all-connect.net; img-src 'self' data: https://s.w.org https://ps.w.org; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' blob: 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; worker-src 'self' https://www.all-connect.net; frame-ancestors 'self' 4 default-src 'self' www.google.com storage.googleapis.com www.youtube.com secure.livechatinc.com locations.where2getit.com; connect-src 'self' www.facebook.com www.google-analytics.com api.ezai.io analytics.google.com truevaluemts.ezadtv.com dev-truevaluemts.ezad.io dev6.ezadtv.com; font-src * data:; img-src * data:; script-src * connect.facebook.net 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; style-src * 'unsafe-inline'; 4 base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://mpsnare.iesnare.com https://widget.trustpilot.com https://kit-pro.fontawesome.com https://www.googletagmanager.com https://bat.bing.com https://www.dwin1.com https://www.googleadservices.com https://www.google-analytics.com https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://region1.analytics.google.com https://region2.analytics.google.com https://region3.analytics.google.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://b.sbox.stats.paypal.com https://sdk.privacy-center.org https://api.privacy-center.org https://sibautomation.com https://in-automate.brevo.com https://pagead2.googlesyndication.com https://widget.botmind.io https://api.widget.botmind.ai https://matomo.123roulement.com https://matomojs.trackify.info https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://applepay.cdn-apple.com https://x.klarnacdn.net https://pay.google.com https://insights.algolia.io https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/search-insights https://tag.123kogellager.nl https://tag.123cuscinetti.it https://tag.123rodamiento.es https://apis.google.com https://www.gstatic.com 4 frame-ancestors https://*.contentstack.com; 4 default-src 'self' payments-de-sandbox.amazon.com payments-de.amazon.com payments.amazon.de *.algolia.net *.algolianet.com *.google.com ws://127.0.0.1:35729 degussa.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.algolia.net *.algolianet.com *.unpkg.com *.convertexperiments.com use.typekit.net *.googletagmanager.com *.google.com *.google-analytics.com *.gstatic.com *.googleapis.com connect.facebook.net *.payments-amazon.com payments-de-sandbox.amazon.com *.clarity.ms *.collanapay.com *.paypal.com degussa.com *.trustpilot.com https://lztdxm.degussa.com https://static.hotjar.com https://googleads.g.doubleclick.net https://script.hotjar.com https://snap.licdn.com https://*.klaviyo.com https://rdjmi2.degussa.com https://*.tiktok.com https://xyx8rg.degussa.com; style-src 'self' 'unsafe-inline' unpkg.com *.googletagmanager.com use.typekit.net fonts.googleapis.com tagmanager.google.com degussa.com https://p.typekit.net https://static.klaviyo.com https://static-tracking.klaviyo.com; img-src 'self' data: *.imgix.net *.basemaps.cartocdn.com *.stamen.com *.algolia.net *.algolianet.com *.unpkg.com *.google.com *.openstreetmap.org p.typekit.net *.googletagmanager.com *.google-analytics.com *.googleapis.com *.cloudfront.net *.ssl-images-amazon.com *.ggpht.com *.gstatic.com img.youtube.com *.clarity.ms *.paypalobjects.com degussa.com media.degussa-goldhandel.de https://www.google.de https://www.facebook.com https://px.ads.linkedin.com https://*.google.at https://*.google.ch https://connect.facebook.net https://px4.ads.linkedin.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat; font-src 'self' data: unpkg.com use.typekit.net fonts.gstatic.com degussa.com https://*.klaviyo.com; object-src 'self' degussa.com; media-src 'self' degussa.com; child-src 'self' *.google.com payments-de-sandbox.amazon.com payments-de.amazon.com payments.amazon.com *.algolia.net *.algolianet.com *.computop-paygate.com staticxx.facebook.com *.facebook.com *.youtube.com *.payments-amazon.com api-cdn.amazon.com degussa.com https://degussa.com https://api-js.datadome.co https://www.youtube.com/embed/ARjOIN-2B1s; form-action 'self' payments-de-sandbox.amazon.com payments-de.amazon.com payments.amazon.com *.algolia.net *.algolianet.com *.computop-paygate.com degussa.com *.goldrush.iits.tech *.mollie.com https://www.facebook.com; frame-ancestors 'self' degussa.com; connect-src 'self' ws://127.0.0.1:35729 *.algolia.io *.algolia.net *.algolianet.com *.openstreetmap.org *.google-analytics.com payments.amazon.com payments.amazon.de *.googleapis.com *.convertexperiments.com performance.typekit.net *.google-analytics.com *.clarity.ms *.paypal.com *.collanapay.com *.google.com degussa.com *.trustpilot.com https://lztdxm.degussa.com https://www.facebook.com wss://ws.hotjar.com https://content.hotjar.io https://vc.hotjar.io https://px.ads.linkedin.com *.googletagmanager.com https://www.googleadservices.com https://*.klaviyo.com https://metrics.hotjar.io https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.ch https://*.google.de https://*.google.es https://*.google.fr https://*.google.it https://*.google.nl https://*.google.pl https://rdjmi2.degussa.com https://*.tiktok.com https://api-js.datadome.co https://ad.doubleclick.net https://xyx8rg.degussa.com; frame-src 'self' *.paypal.com *.youtube.com *.google.com degussa.com *.trustpilot.com https://www.googletagmanager.com https://*.klaviyo.com https://www.facebook.com; 4 default-src 'self' *.sprinklr.com; script-src 'self' *.sprinklr.com *.googleapis.com *.amazonaws.com *.blob.core.windows.net; script-src-elem 'self' *.sprinklr.com *.googleapis.com *.amazonaws.com *.blob.core.windows.net; style-src 'self' *.sprinklr.com 'sha256-xM5aT+st2wk4RUcvDSyRgoWcTmBzODNcHHg+JKm7FtI=' 4 default-src * data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 4 default-src https:; font-src 'unsafe-inline' https: data:; child-src https: blob:; connect-src https: blob:; worker-src https: blob:; script-src 'unsafe-eval' 'unsafe-inline' 'self' https:; object-src; base-uri 'none'; style-src 'unsafe-inline' https: data:; img-src https: data:; 4 frame-ancestors 'self' https://www.mycme.com/ https://mycmesandbox.thoughtindustries.com https://nacesandbox.thoughtindustries.com https://www.naceonline.com/ 4 frame-ancestors https: 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.kaltura.com https://twitter.com https://platform.twitter.com https://syndication.twitter.com https://*.twimg.com https://connect.facebook.net https://facebook.com https://*.facebook.com https://*.googleapis.com https://maps.gstatic.com https://maps.google.com https://hosting.img.dk https://siteimproveanalytics.com https://*.global.siteimproveanalytics.io https://alarmeringsapp.like.st https://*.mouseflow.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.kaltura.com https://platform.twitter.com https://connect.facebook.net https://*.googleapis.com https://siteimproveanalytics.com https://cdn.mouseflow.com; style-src 'self' 'unsafe-inline' https://*.twimg.com https://*.googleapis.com https://hosting.img.dk; img-src 'self' 'unsafe-inline' data: https://*.kaltura.com https://*.twimg.com https://*.ggpht https://maps.gstatic.com https://maps.google.com https://hosting.img.dk https://*.siteimproveanalytics.io; frame-src 'self' 'unsafe-inline' https://twitter.com https://platform.twitter.com https://syndication.twitter.com https://*.twimg.com https://connect.facebook.net https://facebook.com https://*.facebook.com https://*.google.com https://www.dmi.dk https://surveys.enalyzer.com https://white-meadow-0e5747a03.3.azurestaticapps.net https://geoportal.mdsmap.dk; font-src 'self' https://dhm5hy2vn8l0l.cloudfront.net https://cdnapisec.kaltura.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 4 default-src 'none'; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval' cdn.cookielaw.org www.googletagmanager.com www.googleadservices.com snap.licdn.com/li.lms-analytics/insight.min.js js.hs-scripts.com/4398552.js googleads.g.doubleclick.net/pagead/; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob: android-webview-video-poster: px.ads.linkedin.com www.googletagmanager.com; media-src 'self' https: monkapps.com; frame-src 'self' https: www.youtube.com; frame-ancestors 'self'; font-src 'self' data: https: fonts.gstatic.com; connect-src 'self' https: cdn.cookielaw.org www.googleadservices.com www.google.com/pagead/ googleads.g.doubleclick.net/pagead/ www.google-analytics.com/g/collect; manifest-src 'self'; script-src-elem 'self' https: 'unsafe-inline' www.googletagmanager.com www.googleadservices.com; report-uri https://sentry.nadapada.net/api/125/security/?sentry_key=b569db56805c4e5f98879e39f0fc3053 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://connect.facebook.net https://wts.anexia-it.com https://www.googletagmanager.com https://bat.bing.com https://snap.licdn.com https://www.facebook.com https://cdn.cookielaw.org https://pagead2.googlesyndication.com https://www.youtube.com https://www.youtube-nocookie.com https://www.captcha.eu; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.livechatinc.com https://api.livechatinc.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://*.clarity.ms https://www.googletagmanager.com https://wts.anexia-it.com https://cdn.cookielaw.org https://pagead2.googlesyndication.com https://bat.bing.com https://snap.licdn.com https://connect.facebook.net https://ws.sharethis.com https://d1l6p2sc9645hc.cloudfront.net https://dwhbridge.anexia-it.com https://www.youtube.com https://www.youtube-nocookie.com https://www.captcha.eu; style-src 'self' 'unsafe-inline' https://www.captcha.eu; img-src 'self' data: https://anexia.com https://www.linkedin.com https://px4.ads.linkedin.com https://region1.analytics.google.com https://px.ads.linkedin.com https://bat.bing.com https://a.clarity.ms https://c.clarity.ms https://www.google-analytics.com https://www.google.com https://www.google.at https://www.google.de https://c.bing.com https://pagead2.googlesyndication.com https://cdn.cookielaw.org https://td.doubleclick.net https://facebook.com https://www.facebook.com https://*.facebook.com https://*.doubleclick.net https://*.bing.com https://*.licdn.com https://bat.bing.net https://www.googleadservices.com https://www.googletagmanager.com https://zertifikat.creditreform.at https://static.anexia-it.com https://data-mgmt.anexia-it.com https://www.captcha.eu; font-src 'self' data:; connect-src 'self' https://www.facebook.com https://www.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net https://wts.anexia-it.com https://www.linkedin.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.clarity.ms https://eu-api.friendlycaptcha.eu https://request.anexia-it.com https://request.anexia.com https://anexia.com https://cdn.cookielaw.org https://pagead2.googlesyndication.com https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://api.friendlycaptcha.com https://www.google.com https://td.doubleclick.net https://*.doubleclick.net https://*.facebook.com https://facebook.com https://*.bing.com https://*.licdn.com https://px.ads.linkedin.com https://bat.bing.net https://www.google.at https://google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.captcha.eu; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://*.doubleclick.net https://www.facebook.com https://*.facebook.com https://facebook.com https://*.bing.com https://*.licdn.com https://*.sharethis.com https://www.googleadservices.com https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; worker-src 'self' blob:; base-uri 'self'; report-to csp-endpoint 4 default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: 'self' 'unsafe-inline' 'unsafe-eval' * data:; 4 default-src 'self' 'unsafe-inline' *.myconnectsuite.com *.schoolinsites.com *.pcmac.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; font-src 'self' *; base-uri 'self'; form-action 'self' 'unsafe-inline' *; img-src 'self' *; connect-src 'self' *; frame-src *; media-src 'self' blob: *; worker-src 'self' blob: * 4 default-src *.myidx.cloud 'self' 'unsafe-inline' https://*.clarity.ms https://c.bing.com ajax.googleapis.com assets.investisdigital.com fonts.googleapis.com use.typekit.net google-analytics.com code.highcharts.com viz.tools.investis.com edge.api.brightcove.com *.brightcovecdn.com *.convertexperiments.com; script-src *.myidx.cloud 'self' 'unsafe-inline' 'unsafe-eval' js.hs-scripts.com cdnjs.cloudflare.com *.connectid.cloud js.hs-banner.com js.hs-analytics.net js.hsadspixel.net js.hubspot.com https://*.clarity.ms https://scripts.clarity.ms/0.8.27/clarity.js https://www.clarity.ms/tag/svc9v0m76w widget.prod.equally.ai https://widget.prod.equally.ai/equally-widget.min.js *.hsforms.net unpkg.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net api.reciteme.com sc.lfeeder.com googleads.g.doubleclick.net www.googletagmanager.com *.posthog.com app.posthog.com snap.licdn.com connect.facebook.net ajax.googleapis.com www.youtube.com cdn.jsdelivr.net code.jquery.com otp.tools.investis.com use.typekit.net google-analytics.com www.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com code.highcharts.com viz.tools.investis.com cdnjs.cloudflare.com *.investisdigital.com *.invdcloud-is.co.uk *.vimeocdn.com f.vimeocdn.com *.convertexperiments.com; style-src *.myidx.cloud 'self' 'unsafe-inline' 'unsafe-eval' widget.prod.equally.ai unpkg.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net api.reciteme.com google-analytics.com fonts.googleapis.com viz.tools.investis.com cdnjs.cloudflare.com cdn.jsdelivr.net *.investisdigital.com *.invdcloud-is.co.uk; object-src 'none'; connect-src *.myidx.cloud 'self' *.clarity.ms unpkg.com https://region1.analytics.google.com cdn.jsdelivr.net api.hubapi.com cta-service-cms2.hubspot.com *.connectid.cloud www.facebook.com static.hsappstatic.net cdnjs.cloudflare.com https://pagead2.googlesyndication.com widget.prod.equally.ai https://lb.prod.equally.ai/ https://www.facebook.com/tr/ https://analytics.google.com google.com *.hsforms.com *.posthog.com *.amazonaws.com https://www.google.com *.linkedin.com idxjobs-api.connectid.cloud https://signin.ultipro.com *.openweathermap.org stats.reciteme.com api.reciteme.com https://api.weatherapi.com/v1/current.json stats.g.doubleclick.net edge.api.brightcove.com google-analytics.com www.google-analytics.com *.google-analytics.com viz.tools.investis.com cookiemanager.investisdigital.com *.investisdigital.com metrics.convertexperiments.com signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com; base-uri 'self'; form-action 'self' *.hsforms.com; font-src *.myidx.cloud 'self' 'unsafe-inline' *.hsforms.com api.reciteme.com fonts.googleapis.com use.typekit.net google-analytics.com fonts.gstatic.com *.investisdigital.com * data: application; frame-src *.myidx.cloud 'self' *.hsforms.com *.hs-sites.com *.investis.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.doubleclick.net adfs.justretirement.com www.googletagmanager.com viz.tools.investis.com *.google.com irs.tools.investis.com otp.tools.investis.com connectidfeed.com *.connectidfeed.com www.youtube.com *.vimeo.com; img-src *.myidx.cloud 'self' 'unsafe-inline' * data: www.w3.org *.convertexperiments.com; media-src *.myidx.cloud 'self' *.investis.com; 4 frame-ancestors 'self' https://cdw.lookbookhq.com http://cdw.lookbookhq.com http://solutions.cdw.com https://solutions.cdw.com https://*.ampproject.org 4 default-src 'self'; frame-src 'self' aax-eu.amazon-adsystem.com ct.pinterest.com https://www.googletagmanager.com www.google.com www.youtube.com live.brame-gamification.com *.paypal.com www.facebook.com weatherwidget.io tpc.googlesyndication.com td.doubleclick.net *.taboola.com *.doubleclick.net; media-src 'self' *.taboola.com; img-src 'self' data: https://p1.outbrain.com https://a.mgid.com https://tr.blismedia.com maps.gstatic.com sp.analytics.yahoo.com maps.googleapis.com *.paypal.com uip.semasio.net www.google.com www.facebook.com www.google.gr bold.adman.gr cdn.cookielaw.org www.googletagmanager.com www.google.nl ads.travelaudience.com sherlock.adman.gr ad.doubleclick.net googleads.g.doubleclick.net adservice.google.com tr.outbrain.com cm.g.doubleclick.net ad.yieldlab.net pixel.rubiconproject.com image2.pubmatic.com ice.360yield.com ih.adscale.de ib.adnxs.com ads.betweendigital.com p1.zemanta.com a.mgid.com *.taboola.com *.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://googleads.g.doubleclick.net https://sitepixel.blis.com https://a.mgid.com *.zemanta.com c.amazon-adsystem.com ct.pinterest.com *.pinimg.com *.tiktok.com https://*.adform.net *.paypal.com *.paypalobjects.com *.braintreegateway.com sp.analytics.yahoo.com connect.facebook.net s.yimg.com maps.googleapis.com www.googletagmanager.com www.google.com www.youtube.com www.gstatic.com cdn.cookielaw.org weatherwidget.io ads.travelaudience.com www.googleadservices.com theferries.com tpc.googlesyndication.com tr.outbrain.com amplify.outbrain.com wave.outbrain.com js-tag.zemanta.com a.mgid.com https://www.redditstatic.com *.taboola.com *.doubleclick.net; connect-src 'self' https://www.facebook.com https://analytics-ipv6.tiktokw.us https://tr.blismedia.com aax-eu.amazon-adsystem.com ara.paa-reporting-advertising.amazon ct.pinterest.com *.tiktok.com *.zemanta.com https://pagead2.googlesyndication.com https://region1.google-analytics.com https://www.googleadservices.com https://amplify.outbrain.com maps.googleapis.com *.braintreegateway.com *.paypal.com *.paypalobjects.com *.braintree-api.com cdn.cookielaw.org *.analytics.google.com stats.g.doubleclick.net s.yimg.com privacyportal-eu.onetrust.com geolocation.onetrust.com adservice.google.com www.google.com www.google.gr tr.outbrain.com p1.outbrain.com https://mpc-prod-16-s6uit34pua-uk.a.run.app/events https://demo-1.conversionsapigateway.com/events https://alb.reddit.com *.taboola.com *.doubleclick.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; object-src 'none' 4 default-src 'self'; base-uri 'self'; connect-src 'self' *.clarity.ms https://browser.sentry-cdn.com https://platform-api.sharethis.com/sync.js.map https://*.azure.com https://tracking-api.g2.com https://consent.cookiebot.com https://q.clarity.ms/collect https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://analytics.google.com https://api.herefish.com https://c.6sc.co https://consentcdn.cookiebot.com https://distillery.wistia.com *.applicationinsights.azure.com https://embed-cloudfront.wistia.com https://fast.wistia.com https://ipv6.6sc.co https://js.zi-scripts.com https://l.sharethis.com https://pipedream.wistia.com https://px.ads.linkedin.com https://r.clarity.ms https://stats.g.doubleclick.net https://tracking.g2crowd.com https://ws.zoominfo.com https://www.google-analytics.com https://www.google.com *.crwdcntrl.net https://fg8vvsvnieiv3ej16jby.litix.io https://forms.hsforms.com; font-src 'self' *.epiqglobal.com *.bluemod.us https://cdnjs.cloudflare.com https://fonts.gstatic.com data: https://fast.wistia.com; frame-src 'self' *.epiqglobal.com *.bluemod.us *.bluemod.me https://fast.wistia.com https://app.herefish.com https://www.googletagmanager.com https://form.typeform.com https://www.youtube.com https://fast.wistia.net https://player.vimeo.com https://www.g2.com https://td.doubleclick.net https://consentcdn.cookiebot.com https://t.sharethis.com https://www.google.com https://go.epiqglobal.com/ https://www.buzzsprout.com; frame-ancestors 'self' *.epiqglobal.com *.bluemod.us *.bluemod.me; img-src 'self' data: *.bing.com *.clarity.ms *.bluemod.us *.bludmod.me *.epiqglobal.com *.linkedin.com https://www.besixth.com https://googleads.g.doubleclick.net https://f.hubspotusercontent20.net https://insights.hgpresearch.com https://privacy-policy.truste.com https://pic3.zhimg.com https://pages.hyperiongp.com https://besixth.com https://embed-ssl.wistia.com https://embedwistia-a.akamaihd.net https://fast.wistia.net https://storage.pardot.com https://via.placeholder.com *.sharethis.com https://b.6sc.co https://fast.wistia.com https://imgsct.cookiebot.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://forms-na1.hsforms.com/embed/v3/counters.gif https://*.vimeocdn.com; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; report-uri https://6658ad1fa52bdea0f50df6d5.endpoint.csper.io/; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' blob: https://scripts.clarity.ms https://api.herefish.com https://www.epiqglobal.com https://www.clarity.ms https://googleads.g.doubleclick.net https://snap.licdn.com https://embed.typeform.com https://fast.wistia.net https://player.vimeo.com https://www.googletagmanager.com https://platform-api.sharethis.com/panorama.js https://api.herefish.com/scripts/hf.js https://buttons-config.sharethis.com/js/60c0851926c3eb001107c372.js https://consent.cookiebot.com https://consentcdn.cookiebot.com https://fast.wistia.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/766208465/ https://j.6sc.co/6si.min.js https://js.monitor.azure.com/scripts/b/ai.2.min.js https://js.zi-scripts.com/zi-tag.js https://pi.pardot.com/analytics https://platform-api.sharethis.com/js/sharethis.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://t.sharethis.com/1/k/t.dhj https://tracking.g2crowd.com/attribution_tracking/conversions/1006581.js https://ws-assets.zoominfo.com/formcomplete.js https://www.clarity.ms/tag/dv7zchxaog https://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion.js https://www.googletagmanager.com/gtm.js https://js.sentry-cdn.com https://js.hsforms.net/forms/v2.js https://pi.pardot.com/pd.js https://go.epiqglobal.com https://www.buzzsprout.com https://www.google.com/recaptcha/api.js https://www.gstatic.com https://browser.sentry-cdn.com https://tracking-api.g2.com https://www.googleadservices.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com; style-src 'report-sample' 'self' 'unsafe-inline' https://app.herefish.com https://embed.typeform.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; worker-src blob:; 4 default-src 'self' blob: data: *.apple.com; connect-src 'self' *.apple.com *.apple.com.cn; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.apple.com; img-src 'self' data: *.apple.com *.cdn-apple.com; child-src 'self' *.apple.com blob: data: *.apple.com blob: data: *.cdn-apple.com; style-src 'self' 'unsafe-inline' *.apple.com; font-src 'self' data: *.apple.com 4 default-src https://faelix.net; img-src https://faelix.net https://faelix.net/static/ https://analytics.faelix.link https://platform.twitter.com https://syndication.twitter.com; script-src https://faelix.net/static/javascripts/ https://faelix.net/elasticlunr.min.js https://faelix.net/search_index.en.js https://analytics.faelix.link https://platform.twitter.com/widgets.js https://unpkg.com/website-carbon-badges@1.1.3/b.min.js 'unsafe-eval' 'unsafe-inline'; connect-src https://fulcrm.email/webform/1/5/faelix.net/website-enquiry/contact/person.name/person.email/email/8r7lurl0u31535mccf86l0r341l650f3 https://api.websitecarbon.com/b https://analytics.faelix.link; frame-src https://platform.twitter.com https://grafana.faelix.net https://youtu.be https://www.youtube.com; font-src https://faelix.net; style-src 'unsafe-inline' https://faelix.net/static/css/ https://faelix.net/static/main.css https://faelix.net/static/webfonts.css https://faelix.net/static/stylesheets/ https://faelix.net/static/iconoir/ 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: wss://* https://*; 4 default-src 'self' https://js.intercomcdn.com; script-src 'self' 'unsafe-inline' https://capi-automation.s3.us-east-2.amazonaws.com https://js.intercomcdn.com https://widget.intercom.io https://cdn-cookieyes.com https://rum-static.pingdom.net https://assets.makeforms.io https://cdn.moengage.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://kit.fontawesome.com https://www.gstatic.com https://analytics.tiktok.com https://www.google.com https://www.googletagmanager.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://connect.facebook.net https://static.ads-twitter.com https://analytics.twitter.com https://www.youtube.com https://www.googleadservices.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline' https://unpkg.com/ https://assets.makeforms.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://tagmanager.google.com https://www.googletagmanager.com; img-src 'self' blob: https://cdn-cookieyes.com https://gifs.intercomcdn.com https://downloads.intercomcdn.com https://static.intercomassets.com https://js.intercomcdn.com https://i.ytimg.com https://eu.media.makeforms.co https://assets.makeforms.io https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://g.doubleclick.net https://google.com https://*.g.doubleclick.net https://*.google.com https://ad.doubleclick.net https://ssl.gstatic.com https://fonts.gstatic.com data:; font-src 'self' data: https://fonts.intercomcdn.com https://fonts.intercomcdn.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://ka-f.fontawesome.com https://cdnjs.cloudflare.com https://ka-p.fontawesome.com; connect-src 'self' https://directory.cookieyes.com https://cdn-cookieyes.com https://log.cookieyes.com https://uploads.intercomcdn.com https://internet-up-realtime.intercom-messenger.com wss://primary-realtime.intercom-messenger.com wss://*.intercom.io wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://rum-collector-2.pingdom.net https://api.eu.makeforms.io https://track.eu.makeforms.io https://assets.makeforms.io https://api.eu1.makeforms.io https://www.google-analytics.com https://sdk-01.moengage.com https://ka-f.fontawesome.com https://analytics.tiktok.com https://www.facebook.com https://www.google.com https://ka-p.fontawesome.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://analytics.google.com; frame-src 'self' https://intercom-sheets.com https://www.youtube-nocookie.com https://www.google.com https://www.youtube.com https://forms.office.com https://sg.makeforms.co/; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://www.google.com; 4 default-src * data: blob: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self';block-all-mixed-content;upgrade-insecure-requests 4 default-src 'none' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com www.googletagmanager.com snap.licdn.com cookie-cdn.cookiepro.com cdn.cookielaw.org googletagmanager.com *.googleapis.com cdnjs.cloudflare.com www.google.com www.gstatic.com www.buzzsprout.com/ cdn.jsdelivr.net/gh/ckeditor/ static.pathmotion.io pathmotion.com equans.career-inspiration.com/ *.doubleclick.net *.googleadservices.com connect.facebook.net fbcdn.net cdn.jsdelivr.net consent.cookiebot.com siteimproveanalytics.com cdn.matomo.cloud cdn.siteimprove.net www.youtube-nocookie.com unpkg.com odyssiant.azureedge.net *.bootstrapcdn.com js-agent.newrelic.com *.linkedin.com snippet.capybara.lmc.cz s.go-mpulse.net tags.data-driven.fr *.byspotify.com *.tiktok.com cdn.cookielaw.org eu.textrecruit.com *.hotjar.com sc-static.net secure.data-insight365.com cdn.leadinfo.net *.ldnfrpl.com *.youtube.com bat.bing.net bat.bing.com *.clarity.ms symposium.dashboard.davenhr.com a.usbrowserspeed.com tag.demandbase.com js-eu1.hs-scripts.com js-eu1.hsadspixel.net js-eu1.hs-analytics.net js-eu1.hs-banner.com js-eu1.hscollectedforms.net js-eu1.hubspot.com tr.snapchat.com; object-src 'none' ; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net snippet.capybara.lmc.cz unpkg.com/leaflet@1.7.1/dist/leaflet.css unpkg.com/leaflet.markercluster/dist/MarkerCluster.css unpkg.com/leaflet.markercluster/dist/MarkerCluster.Default.css cdn.leadinfo.net; img-src 'self' data: https:;; media-src 'self' equans.widen.net; frame-src 'self' *.youtube.com/ *.youtube-nocookie.com/ *.vimeo.com/ apply.refline.ch engie.taleo.net www.google.com www.buzzsprout.com equans.career-inspiration.com/ facebook.com *.doubleclick.net/ cdn.linkedin.oribi.io www.facebook.com www.equans.co.uk json3d.tftlabs.com www.yousty.ch www.googletagmanager.com ohws.prospective.ch plan-group.acquiretm.com plan-groupca.acquiretm.com equans.widen.net share-eu1.hsforms.com; frame-ancestors 'self' https://n3g.4projects.com n3g.4projects.com; child-src 'self' https://*.youtube.com/ https://*.youtube-nocookie.com/ https://*.vimeo.com/ engie.taleo.net; font-src 'self' fonts.gstatic.com snippet.capybara.lmc.cz cdn.leadinfo.net data:; connect-src 'self' *.google-analytics.com googletagmanager.com *.googleapis.com *.google.com *.doubleclick.net snap.licdn.com *.cookiepro.com cdn.cookielaw.org geolocation.onetrust.com/ static.pathmotion.io pathmotion.com equans.career-inspiration.com api.mixpanel.com *.algolia.net equans.matomo.cloud privacyportal-fr.onetrust.com cdn.linkedin.oribi.io my2.siteimprove.com id.siteimprove.com contentassistant.eu.siteimprove.com id.eu.siteimprove.com *.algolianet.com *.odyssiant.com *.googlesyndication.com bam.nr-data.net *.linkedin.com *.algolianet.com api.capybara.lmc.cz *.ingest.sentry.io c.go-mpulse.net *.akstat.io *.tiktok.com *.byspotify.com *.textrecruit.tools *.akamaihd.net *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.data-driven.fr api.mapbox.com nominatim.openstreetmap.org siteimprove.com siteimproveanalytics.com siteimprove.net siteimproveanalytics.io api.leadinfo.com *.leadinfo.net *.ldnfrpl.com li-replay.s3-accelerate.amazonaws.com bat.bing.net bat.bing.com facebook.com *.clarity.ms pixels.spotify.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net unpkg.com symposium.dashboard.davenhr.com idx.liadm.com tr.snapchat.com facebook.com api.company-target.com api-eu1.hubapi.com forms-eu1.hscollectedforms.net cta-eu1.hubspot.com static.hsappstatic.net tag.demandbase.com; upgrade-insecure-requests 4 frame-ancestors 'self' https://manual-sanity-studio.vercel.app 4 img-src 'self' * data:; style-src 'self' 'unsafe-inline' *; upgrade-insecure-requests; frame-ancestors 'self'; 4 default-src https: 'unsafe-inline' 'unsafe-eval' data: connect-src: wss://chat.sbservers.cz wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://api.statsig.com https://featuregates.org https://statsigapi.net https://events.statsigapi.net https://api.statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cdn.jsdelivr.net img-src: https://chat.supportbox.cz script-src: 'unsafe-inline' https://chat.supportbox.cz style-src: https://chat.supportbox.cz blob: 4 connect-src maps.nextbike.net https://www.nextbox.at/ *.chatvisor.com rg-wl-hr-recruiting-chatbot-qrrkues.azurewebsites.net directline.botframework.com/v3/directline/ wss://directline.botframework.com/v3/directline/ wtb.maptiles.arcgis.com *.arcgisonline.com *.arcgis.com chatbot.wlb.at onlim-chatbot-production.s3.amazonaws.com *.onlim.com wss://cs.onlim.com wss://app.onlim.com/ wss://api.onlim.com/ *.vimeo.com vimeo.com *.addthis.com www.google-analytics.com routenplaner.verkehrsauskunft.at *.wienit.at *.api.wienenergie.at api.wienenergie.at service.wienerstadtwerke.at *.service.wienernetze.at service.wienernetze.at api.wstw.at int-api.wstw.at test-api.wstw.at styles.wienerstadtwerke.at 'self' lokalbahnen.containers.piwik.pro lokalbahnen.piwik.pro https://googleads.g.doubleclick.net *.googleadservices.com www.google.at www.google.com https://nominatim.openstreetmap.org immoh.containers.piwik.pro immoh.piwik.pro https://info.wienerlinien.at/api/form/v1/8896c.21k0oa6/null https://www.facebook.com/tr/ *.googleapis.com servicetreff.piwik.pro servicetreff.containers.piwik.pro wienit.containers.piwik.pro wienit.piwik.pro wipark.containers.piwik.pro wipark.piwik.pro https://px.ads.linkedin.com/ wienernetze.containers.piwik.pro wienernetze.piwik.pro wienerlinien.containers.piwik.pro wienerlinien.piwik.pro https://eu-api.friendlycaptcha.eu bestattungwien.piwik.pro jobs.wienerstadtwerke.at wienerstadtwerke.piwik.pro wienerstadtwerke.containers.piwik.pro digitalesgrab.friedhoefewien.at rns.matelso.de *.wienmobil.at bestattungwien.containers.piwik.pro log.wien; style-src https://d6tizftlrpuof.cloudfront.net/themes/production/wienerstadtwerke-test-design-wienerstadtwerke-feedbacklet-d69f3b461dc32d40f77b744a4b3eb522.css *.chatvisor.com rg-wl-hr-recruiting-chatbot-qrrkues.azurewebsites.net *.onlim.com fonts.googleapis.com 'unsafe-inline' styles.wienerstadtwerke.at 'self' lokalbahnen.containers.piwik.pro lokalbahnen.piwik.pro servicetreff.piwik.pro servicetreff.containers.piwik.pro immoh.containers.piwik.pro immoh.piwik.pro wienit.containers.piwik.pro wienit.piwik.pro wipark.containers.piwik.pro wipark.piwik.pro wienernetze.containers.piwik.pro wienernetze.piwik.pro wienerlinien.containers.piwik.pro wienerlinien.piwik.pro bestattungwien.containers.piwik.pro wienerstadtwerke.piwik.pro bestattungwien.piwik.pro wienerstadtwerke.containers.piwik.pro newsletter.wienit.at static.dvinci-easy.com; base-uri 'self' *.onlim.com; script-src https://googleads.g.doubleclick.net/ *.usabilla.com/ *.onlim.com *.onlim.com/ *.googletagmanager.com/ connect.facebook.net/ *.chatvisor.com rg-wl-hr-recruiting-chatbot-qrrkues.azurewebsites.net walls.io *.virtualq.io polyfill.io openstreetmap.org *.openstreetmap.org chatbot.wlb.at app.onlim.com/ *.vimeocdn.com ajax.googleapis.com maps.googleapis.com www.gstatic.com www.google.com www.google-analytics.com assets.adobedtm.com *.ytimg.com *.youtube.com styles.wienerstadtwerke.at 'unsafe-inline' 'unsafe-eval' 'self' lokalbahnen.containers.piwik.pro lokalbahnen.piwik.pro servicetreff.piwik.pro servicetreff.containers.piwik.pro wienernetze.piwik.pro wienerlinien.containers.piwik.pro https://www.googletagmanager.com/ *.adform.net immoh.containers.piwik.pro immoh.piwik.pro wienit.containers.piwik.pro wienit.piwik.pro wipark.containers.piwik.pro wipark.piwik.pro https://snap.licdn.com/ wienernetze.containers.piwik.pro wienerlinien.piwik.pro wienerstadtwerke.piwik.pro https://siteimproveanalytics.com static.dvinci-easy.com https://jobs.wienerstadtwerke.at wienerstadtwerke.containers.piwik.pro newsletter.wienit.at rns.matelso.de bestattungwien.containers.piwik.pro bestattungwien.piwik.pro https://app.onlim.com/chat-app/js/host.js *.googleadservices.com; worker-src blob: https://www.wienernetze.at https://www.wienerlinien.at/ https://www.wipark.at/ https://www.friedhoefewien.at/ https://www.immoh.at/ https://digitalesgrab.friedhoefewien.at/ https://www.wstw-immo.at/ https://www.eposa.at/ https://www.wlb.at/ https://partner.wienernetze.at/ https://www.gwsg.at/ https://www.bestattungwien.at/; frame-src https://langenacht.orf.at *.wienernetze.at/ lehrlingstest-wienerstadtwerke.azurewebsites.net video.eko.com ubscal.seeyou.at *.issuu.com issuu.com *.walls.io walls.io *.virtualq.io app.onlim.com www.whatchado.com *.vimeo.com vimeo.com *.youtube.com www.google.com www.bestattungwien.at *.friedhoefewien.at mailto: service.wienerstadtwerke.at 'self' https://www.googletagmanager.com/ terminreservierung.bestattungwien.at *.facebook.com youtu.be https://terminreservierung.staging.reinisch.tech/ *.youtu.be *.wienit.at/ https://einreichportal.waca.at https://www.servicetreff.at/reservierungstool-app/#/termindaten *.riddle.com www.riddle.com https://sketchfab.com/ https://td.doubleclick.net embeds.whatchado.com https://terminreservierung.reinisch.tech/; media-src 'self' data: *.onlim.com; img-src wienitedv.d3.sc.omtrdc.net *.wienernetze.at/ facebook.com/tr/ rg-wl-hr-recruiting-chatbot-qrrkues.azurewebsites.net *.wien.gv.at *.fluidtime.com *.arcgisonline.com onlim-chatbot-production.s3.eu-central-1.amazonaws.com onlim-base.s3.eu-central-1.amazonaws.com dacodi-production.s3.amazonaws.com *.onlim.com *.openstreetmap.org *.vimeocdn.com *.omtrdc.net *.2o7.net maps.googleapis.com maps.gstatic.com *.ytimg.com csi.gstatic.com chatbot.wlb.at *.wienit.at *.upstream-mobility.at blob: data: styles.wienerstadtwerke.at 'self' lokalbahnen.containers.piwik.pro lokalbahnen.piwik.pro *.googleadservices.com servicetreff.piwik.pro servicetreff.containers.piwik.pro immoh.containers.piwik.pro immoh.piwik.pro wienerlinien.containers.piwik.pro wienerstadtwerke.containers.piwik.pro wienerstadtwerke.piwik.pro bestattungwien.containers.piwik.pro https://googleads.g.doubleclick.net *.facebook.com wienit.containers.piwik.pro wienit.piwik.pro wipark.containers.piwik.pro wipark.piwik.pro https://px.ads.linkedin.com/ wienernetze.containers.piwik.pro wienernetze.piwik.pro wienerlinien.piwik.pro *.siteimproveanalytics.io https://siteimproveanalytics.com https://stwlciptstruct828prod.blob.core.windows.net/ bestattungwien.piwik.pro https://www.google.at/ https://www.google.at/pagead/ https://www.google.com/ https://www.google.com/pagead/; default-src 'self'; font-src bestattungwien.containers.piwik.pro *.chatvisor.com rg-wl-hr-recruiting-chatbot-qrrkues.azurewebsites.net data: styles.wienerstadtwerke.at chatbot.wlb.at *.onlim.com fonts.gstatic.com 'self' lokalbahnen.containers.piwik.pro lokalbahnen.piwik.pro servicetreff.piwik.pro servicetreff.containers.piwik.pro wipark.containers.piwik.pro wipark.piwik.pro wienerlinien.piwik.pro immoh.containers.piwik.pro immoh.piwik.pro wienit.containers.piwik.pro wienit.piwik.pro wienernetze.containers.piwik.pro wienernetze.piwik.pro wienerlinien.containers.piwik.pro https://d6tizftlrpuof.cloudfront.net/themes/production/wienerstadtwerke-test-design-wienerstadtwerke-font-file-url-de462eaa4f394073e3723d639af661c0.woff wienerstadtwerke.piwik.pro bestattungwien.piwik.pro wienerstadtwerke.containers.piwik.pro; 4 connect-src sync.datamind.ru geocode-maps.yandex.ru/1.x/ suggest-maps.yandex.ru *.datamind.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org eye.targetads.io top-fwz1.mail.ru an.yandex.ru pixel.gooroo.works api-qa.diginetica.net/v1/ rap.skcrtxr.com *.a.mts.ru sm.rtb.mts.ru vk.com 'self' *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.cdn-tinkoff.ru *.t-static.ru wss://*.tinkoff.ru wss://*.tcsbank.ru wss://*.tbank.ru business.tinkoff.ru business.tbank.ru business-webinars.bot.tinkoff-business.com sendsay.ru flijh.tb.ru gmzzu.tb.ru api.amplitude.com *.tb.ru tglk.ru confucius-public-configs.t-static.ru cobrowsing.tinkoff.ru cobrowsing.tbank.ru cdn.tbank.ru cfg.tinkoff.ru www.tbank.ru api-statist.tinkoff.ru baf.tinkoff.ru id.tbank.ru error-hub.tbank.ru origination.tinkoff.ru oplata.tinkoff.ru social.secrets.tbank.ru securepay.tinkoff.ru imgproxy.cdn-tinkoff.ru api.mindbox.ru forma.tbank.ru polls.tbank.ru b2g.tbank.ru fallback.cdn-tinkoff.ru; script-src sync.datamind.ru connect.ok.ru vk.com *.datamind.ru *.tinkoff.ru *.tcsbank.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net 'self' 'unsafe-eval' 'unsafe-inline' *.tbank-online.com tbank.ru *.tbank.ru *.cdn-tinkoff.ru *.t-static.ru blob: *.youtube.com sendsay.ru; img-src *.datamind.ru vk.com login.vk.com ad.mail.ru *.yandex.ru *.yandex.net *.sravni.ru www.banki.ru *.pool.datamind.ru statad.ru *.tinkoff.ru *.mail.ru dp.tinkoffinsurance.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz yastatic.net eye.targetads.io top-fwz1.mail.ru 'self' data: *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru business.t-static.ru *.ads.linkedin.com *.linkedin.com *.googleusercontent.com *.cloud.google.com *.googleapis.com *.adhigh.net px.adhigh.net *.adsymptotic.com; frame-src vk.com static.datamind.ru connect.ok.ru *.datamind.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yastatic.net metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr webvisor.com *.webvisor.com 'self' blob: data: *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru www.youtube.com rutube.ru youtu.be; report-uri https://www.tbank.ru/api/front/pfpsme/log/csp-error?appName=pfpsme&sentryDsnKey=b7cae0fa7dd74b4489cd05596a20df38&sentryApiId=142; default-src 'self' *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinkoff.ru data:; font-src 'self' *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru *.tinkoff.ru data:; style-src 'unsafe-inline' 'self' *.tinkoff.ru *.tcsbank.ru *.tbank-online.com tbank.ru *.tbank.ru *.t-static.ru *.cdn-tinkoff.ru 4 default-src 'none'; connect-src 'self' https://assets.hcaptcha.com https://hcaptcha.com https://newassets.hcaptcha.com/; frame-src 'self' https://assets.hcaptcha.com https://hcaptcha.com https://newassets.hcaptcha.com/; script-src 'self' https://assets.hcaptcha.com https://hcaptcha.com https://newassets.hcaptcha.com/ 'unsafe-inline'; style-src 'unsafe-inline'; 4 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; object-src 'self'; connect-src wss: https: 4 frame-ancestors 'self' https://cloud.1c.fitness; 4 connect-src *.6sc.co *.marketo.com https://*.algolia.net https://*.analytics.google.com https://*.bizible.com https://*.clarity.ms https://*.elfsight.com https://*.google-analytics.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.litix.io https://*.sentry-cdn.com https://*.wistia.com https://*.wistia.net https://880-tzc-395.mktoresp.com https://ad.doubleclick.net/ https://adnxs.com https://analytics.google.com https://api.userway.org https://api-js.mixpanel.com https://app.cdn.lookbookhq.com https://app.qualified.com https://bat.bing.com https://bat.bing.net https://cdn.commoninja.com https://cdn.jsdelivr.net https://cdn.userway.org/ https://cdn77.api.userway.org/ https://cdn-app.pathfactory.com https://consentcdn.cookiebot.com https://content.hotjar.io https://core.service.elfsight.com https://eastus-8.in.applicationinsights.azure.com https://epsilon.6sense.com https://evnt.byspotify.com https://explore.medius.com https://googleads.g.doubleclick.net https://ipv6.6sc.co https://js.monitor.azure.com https://jukebox.pathfactory.com https://metrics.hotjar.io https://n.clarity.ms https://pi.pardot.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://tags.srv.stackadapt.com https://tracking.intentsify.io https://tracking-api.g2.com https://universe-static.elfsightcdn.com https://v.clarity.ms https://website-assets.commoninja.com https://widget-data.service.elfsight.com https://www.clarity.ms https://www.clickcease.com https://www.commoninja.com https://www.google.com https://www.googleadservices.com https://www.google-analytics.com 'self' wss://ws.hotjar.com wss://ws7.qualified.com;script-src *.6sc.co *.marketo.com http://tracking-api.g2.com/ https://*.bizible.com https://*.elfsight.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.sentry-cdn.com https://*.wistia.com https://*.wistia.net https://880-tzc-395.mktoweb.com https://apis.google.com https://app.cdn.lookbookhq.com https://bat.bing.com https://bat.bing.net https://cdn.bizible.com https://cdn.commoninja.com https://cdn.jsdelivr.net https://cdn.mxpnl.com https://cdn.userway.org/ https://cdn77.api.userway.org/ https://cdn-app.pathfactory.com https://cdnjs.cloudflare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://elfsightcdn.com https://googleads.g.doubleclick.net https://j.6sc.co https://js.monitor.azure.com https://js.qualified.com https://js.stripe.com https://munchkin.marketo.net https://pixel.byspotify.com https://script.hotjar.com https://scripts.clarity.ms https://snap.licdn.com https://src.litix.io https://static.hotjar.com https://tags.srv.stackadapt.com https://tracking.g2crowd.com https://universe-static.elfsightcdn.com https://www.clarity.ms https://www.clickcease.com https://www.google.com https://www.googleadservices.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline';img-src *.6sc.co *.marketo.com data: https://*.bizible.com https://*.bizibly.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.gstatic.com https://*.qualified.com https://*.wistia.com https://*.wistia.net https://adnxs.com https://b.6sc.co https://bat.bing.com https://c.bing.com https://c.clarity.ms https://cdn.bizible.com https://cdn.commoninja.com https://cdn.pathfactory.com https://cdn.userway.org/ https://cdn77.api.userway.org/ https://googleads.g.doubleclick.net https://i.ytimg.com https://imgsct.cookiebot.com https://monitor.clickcease.com https://pbcdn1.podbean.com https://phosphor.utils.elfsightcdn.com https://prodmediusumbstorage.blob.core.windows.net https://px.ads.linkedin.com https://px4.ads.linkedin.com https://s.ml-attr.com https://ssl.gstatic.com https://static.licdn.com https://www.google.com https://www.linkedin.com https://www.nqa.com https://yt3.ggpht.com 'self';style-src blob: https://*.googleapis.com https://*.gstatic.com https://880-tzc-395.mktoweb.com https://app.cdn.lookbookhq.com https://cdn.jsdelivr.net https://cdn.userway.org/ https://cdn77.api.userway.org/ https://cdnjs.cloudflare.com https://fonts.googleapis.com https://tags.srv.stackadapt.com 'report-sample' 'self' 'unsafe-inline';child-src blob:;media-src blob: data: https://*.qualified.com https://*.wistia.com https://*.wistia.net https://app.qualified.com https://cdn.commoninja.com 'self';worker-src blob: 'self';font-src data: https://*.wistia.com https://cdn.userway.org/ https://cdn77.api.userway.org/ https://fast.wistia.com https://fonts.gstatic.com https://js.qualified.com 'self';frame-src https://*.google.com https://*.poweredbyhackett.com https://880-tzc-395.mktoweb.com https://accounts.google.com https://app.qualified.com https://cdn.userway.org/ https://consentcdn.cookiebot.com https://expensya.navattic.com https://explore.medius.com https://express.theroishop.com https://fast.wistia.com https://fast.wistia.net https://insider.spendmatters.com https://js.stripe.com https://medius.navattic.com https://open.spotify.com https://pi.pardot.com https://www.clarity.ms https://www.google.com https://www.gstatic.com https://www.medius.com https://www.podbean.com https://www.youtube.com 'self';default-src https://*.wistia.com https://*.wistia.net 'self';frame-ancestors https://explore.medius.com https://www.expensya.com https://www.medius.com 'self';object-src 'none';base-uri 'self';manifest-src 'self' 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.bing.com https://*.amplitude.com https://*.hotjar.com https://*.sentry.io https://*.privacy-center.org https://*.launchdarkly.com; style-src 'self' 'unsafe-inline' https://*.hotjar.com https://fonts.googleapis.com https://*.gstatic.com; img-src * data: blob:; frame-src 'self' https://*.googletagmanager.com; connect-src 'self' https: wss: *.packitos.com; media-src 'self' data:; font-src 'self' data: *.packitos.com https://*.packlink.com https://*.hotjar.com https://fonts.gstatic.com; object-src 'none'; frame-ancestors 'none'; report-uri https://o90715.ingest.us.sentry.io/api/5675883/security/?sentry_key=a06b36e8665147f8a1ec3e1f84a15483; 4 default-src 'unsafe-inline' 'unsafe-eval' * data: blob:; frame-ancestors 'self' https://app.optimizely.com; 4 default-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; img-src * 'self' blob: data:; connect-src *; font-src *; frame-src *; object-src 'none'; base-uri 'self' https://static-2v.gitbook.com; form-action 'self' https://static-2v.gitbook.com *; frame-ancestors https: ; 4 frame-ancestors 'self' https://*.ariba.com 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' data: https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' data: https:; manifest-src 'self' https://mhgprod.blob.core.windows.net https://mhgprod-cdn-efeke3f5guabc4dh.z02.azurefd.net https://mhgstaging.blob.core.windows.net https://mhgstaging-a6aca9agb6epg7gh.z02.azurefd.net https://mhgdev.blob.core.windows.net; frame-src 'self' https://www.youtube.com https://www.instagram.com https://accounts.google.com https://www.facebook.com https://www.googleadservices.com https://*.doubleclick.net https://*.criteo.com https://*.ada.support https://*.adsrvr.org https://*.openx.net https://www.dianomi.com https://apply.creatory.singsaver.com.sg https://data.moneyhero.com.hk https://data.singsaver.com.sg https://data.money101.com.tw https://data.moneymax.ph; frame-ancestors 'self' https://apply.creatory.singsaver.com.sg https://apply.creatory.moneymax.ph; base-uri 'self'; form-action 'self' https://www.facebook.com https://identity.moneyhero.com.hk https://identity.singsaver.com.sg https://identity.money101.com.tw https://identity.moneymax.ph; report-uri /api/csp-report 4 frame-ancestors 'self' https://patient.nimblerx.com https://*.nimbleandsimple.com 4 SAMEORIGIN 4 frame-ancestors 'self' https://www.alandsbanken.fi https://www.alandsbanken.ax https://www.alandsbanken.se https://www.alandsbanken.com 4 default-src 'self' https: ws: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' admin.centralcardlab.com caihss.usbank.com cardlytics.fsvps.com consumer.centralcardlab.com insurance.usbankprepaidcards.com masteradmin.centralcardlab.com portal.cardaccesssite.com portal.clientaccesssite.com portal.paychekplus.com portalpvt.clientaccesssite.com portalpvt.paychekplus.com service.centralcardlab.com sms.fsvsecurecard.com sp.clientaccesssite.com www.accessmygc.com www.blueeliteapply.com www.centralcardlab.com www.elanprepaidcard.com www.elanrewardscard.com www.epaystubaccess.com www.epaystubplus.com www.fsvremote.com www.fsvsecurecard.com www.fsvwebservices.com www.mo-access.com www.myblueelite.com www.mychektoday.com www.mypayadvantage.com www.mysilverselect.com www.paychekplus.com www.paychekplusapply.com www.prepaidgiftbalance.com www.quickcardbalance.com www.rapidfs.com www.silverselectapply.com www.usbankaccelapay.com www.usbankexpensecard.com www.usbankfocus.com www.usbankfocusenroll.com www.usbankincentivecard.com www.usbankoptionscard.com www.usbankprepaidadmin.com www.usbankreliacard.com www.usbankrewardscard.com smetrics.usbank.com tags.tiqcdn.com cdn.appdynamics.com www.google.com www.googleadservices.com cdn.quantummetric.com www.googletagmanager.com googleads.g.doubleclick.net unpkg.com onlinebanking.usbank.com mpsnare.iesnare.com www.google-analytics.com bat.bing.com www.gstatic.com *.qualtrics.com *.socure.com *.marketingcloudapis.com *.apswebapps.com *.cpigateway.com *.creditsystem.com *.marketingcloudapis.com *.pendo.io *bank-dns.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' admin.centralcardlab.com caihss.usbank.com cardlytics.fsvps.com consumer.centralcardlab.com insurance.usbankprepaidcards.com masteradmin.centralcardlab.com portal.cardaccesssite.com portal.clientaccesssite.com portal.paychekplus.com portalpvt.clientaccesssite.com portalpvt.paychekplus.com service.centralcardlab.com sms.fsvsecurecard.com sp.clientaccesssite.com www.accessmygc.com www.blueeliteapply.com www.centralcardlab.com www.elanprepaidcard.com www.elanrewardscard.com www.epaystubaccess.com www.epaystubplus.com www.fsvremote.com www.fsvsecurecard.com www.fsvwebservices.com www.mo-access.com www.myblueelite.com www.mychektoday.com www.mypayadvantage.com www.mysilverselect.com www.paychekplus.com www.paychekplusapply.com www.prepaidgiftbalance.com www.quickcardbalance.com www.rapidfs.com www.silverselectapply.com www.usbankaccelapay.com www.usbankexpensecard.com www.usbankfocus.com www.usbankfocusenroll.com www.usbankincentivecard.com www.usbankoptionscard.com www.usbankprepaidadmin.com www.usbankreliacard.com www.usbankrewardscard.com smetrics.usbank.com tags.tiqcdn.com cdn.appdynamics.com www.google.com www.googleadservices.com cdn.quantummetric.com www.googletagmanager.com googleads.g.doubleclick.net unpkg.com onlinebanking.usbank.com mpsnare.iesnare.com www.google-analytics.com bat.bing.com www.gstatic.com *.qualtrics.com *.socure.com *.marketingcloudapis.com *.apswebapps.com *.cpigateway.com *.creditsystem.com *.marketingcloudapis.com *.pendo.io *bank-dns.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' admin.centralcardlab.com caihss.usbank.com cardlytics.fsvps.com consumer.centralcardlab.com insurance.usbankprepaidcards.com masteradmin.centralcardlab.com portal.cardaccesssite.com portal.clientaccesssite.com portal.paychekplus.com portalpvt.clientaccesssite.com portalpvt.paychekplus.com service.centralcardlab.com sms.fsvsecurecard.com sp.clientaccesssite.com www.accessmygc.com www.blueeliteapply.com www.centralcardlab.com www.elanprepaidcard.com www.elanrewardscard.com www.epaystubaccess.com www.epaystubplus.com www.fsvremote.com www.fsvsecurecard.com www.fsvwebservices.com www.mo-access.com www.myblueelite.com www.mychektoday.com www.mypayadvantage.com www.mysilverselect.com www.paychekplus.com www.paychekplusapply.com www.prepaidgiftbalance.com www.quickcardbalance.com www.rapidfs.com www.silverselectapply.com www.usbankaccelapay.com www.usbankexpensecard.com www.usbankfocus.com www.usbankfocusenroll.com www.usbankincentivecard.com www.usbankoptionscard.com www.usbankprepaidadmin.com www.usbankreliacard.com www.usbankrewardscard.com smetrics.usbank.com tags.tiqcdn.com cdn.appdynamics.com www.google.com www.googleadservices.com cdn.quantummetric.com www.googletagmanager.com googleads.g.doubleclick.net unpkg.com onlinebanking.usbank.com mpsnare.iesnare.com www.google-analytics.com bat.bing.com www.gstatic.com *.qualtrics.com *.socure.com *.marketingcloudapis.com *.apswebapps.com *.cpigateway.com *.creditsystem.com *.marketingcloudapis.com *.pendo.io *bank-dns.com; 4 default-src * data: blob: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors 'self' http://localhost:4200 https://cloudplayer.green-solutions.com; 4 default-src 'self'; base-uri 'self'; img-src 'self' https: data: ssl.gstatic.com *.vimeocdn.com *.googleapis.com *.gstatic.com *.google.com *.googleusercontent.com *.ggpht.com; font-src 'self' https://fonts.gstatic.com f.hubspotusercontent-eu1.net 25126500.fs1.hubspotusercontent-eu1.net *.delen.bank data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com tagmanager.google.com srv.stackadapt.com static.hsappstatic.net *.delen.bank; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' blob: tagmanager.google.com *.marker.io *.googletagmanager.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com; connect-src 'self' https: data: blob: *.google-analytics.com www.google-analytics.com *.hotjar.com *.hotjar.io *.google.com https://*.googleapis.com https://*.gstatic.com; frame-src 'self' google.com *.google.com *.hotjar.com player.vimeo.com open.spotify.com *.cookiebot.com app-eu1.hubspot.com *.googletagmanager.com cdn.raffle.ai vimeo.com *.vimeo.com *.dynamics.com www.google-analytics.com *.delen.be *.delen.bank *.delen.lu *.oyens.com *.typeform.com *.doubleclick.net https://app httpsdelen://app https://forms.office.com https://oyensappsimulator.acpt.delen.be https://delenappsimulator.acpt.delen.be https://login.acpt.delen.be https://online.acpt.delen.bank https://loginoyens.acpt.delen.be https://delenappsimulator.acpt.delen.lu https://delenchappsimulator.acpt.delen.lu https://login.acpt.delen.lu https://loginch.acpt.delen.lu platform.twitter.com https://forms-eu1.hsforms.com vimeo.com blog.delen.bank https://app.skeeled.com/api/offers https://js-eu1.hscollectedforms.net/collectedforms.js https://delen.bank/_hcms/api/apicall; worker-src blob:;; upgrade-insecure-requests 4 frame-ancestors 'self' https://*.storyblok.com; 4 default-src 'self'; connect-src 'self' cms.vintia.com cms.saltosystems.com cdn.cookielaw.org *.hotjar.com *.google-analytics.com stats.g.doubleclick.net analytics.google.com *.analytics.google.co *.onetrust.com *.linkedin.com *.clarity.ms *.google.com *.doubleclick.net *.hotjar.io *.googlesyndication.com pagead2.googlesyndication.com *.google.com google.com *.google.es google.es *.googleadservices.com *.googletagmanager.com; font-src 'self' data: *.googleapis.com fonts.gstatic.com; worker-src 'self' blob:; img-src 'self' data: *.google-analytics.com *.google.com *.google.es *.onetrust.com googleads.g.doubleclick.net *.clarity.ms *.googletagmanager.com *.bing.com *.storychief.com *.storyblok.com chart.googleapis.com *.gstatic.com *.linkedin.com px.ads.linkedin.com *.googleadservices.com; script-src 'self' 'unsafe-inline' *.onetrust.com stats.g.doubleclick.net googleads.g.doubleclick.net *.hotjar.com *.google-analytics.com *.google.com *.google.es *.gstatic.com *.googleadservices.com *.googletagmanager.com *.vintia.com *.clarity.ms *.licdn.com *.pardot.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.googletagmanager.com; frame-src 'self' cms.saltosystems.com *.google.com *.youtube.com *.facebook.com *.twitter.com *.doubleclick.net *.googletagmanager.com 4 frame-ancestors 'self' https://panel.onbolder.com; 4 frame-ancestors 'self' https://* http://* 4 img-src https: data:; 4 frame-ancestors 'self' https://*.com 4 frame-ancestors 'self' yousign.app; 4 frame-ancestors 'self' http://jack-wolfskin.com https://mywolfpack.jack-wolfskin.com http://staffbase.com capacitor://jack-wolfskin.com capacitor://staffbase.com; 4 default-src 'self' https://*; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*; style-src 'self' 'unsafe-inline' https://*; img-src 'self' data: blob: https://*; worker-src 'self' blob:; font-src 'self' data: https://*; connect-src 'self' webpack: https://*; 4 default-src 'self' data: snippet.maze.co heapanalytics.com tag.demandbase.com prompts.maze.co js.hs-analytics.net secure.intelligent-business-7.com api.investisdigital.com;child-src blob:;style-src 'self' blob: 'unsafe-inline' *.googleapis.com tagmanager.google.com optimize.google.com fonts.googleapis.com addtocalendar.com *.loqate.com cloudflare.com cdnjs.cloudflare.com *.typekit.net *.pcapredict.com *.addressy.com *.postcodeanywhere.co.uk *.gbgplc.com *.gbg.com fast.wistia.com cdn.jsdelivr.net a.omappapi.com *.sg.va.sabio.cloud *.stackadapt.com ifaqs.flexanswer.com du89v9a480hlb.cloudfront.net *.jquery.com heapanalytics.com *.maze.co *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net webeo-web-content.s3-eu-west-1.amazonaws.com;img-src 'self' 'unsafe-inline' *.gravatar.com data: gbg-global.azureedge.net *.postcodeanywhere.co.uk *.pcapredict.com *.addressy.com *.gbgplc.com *.gbg.com t.co/i/adsct *.google.com *.gstatic.com www.glassdoor.co.uk *.google.co.uk *.google-analytics.com *.googleusercontent.com *.facebook.com *.hubspot.com cdnjs.cloudflare.com stats.g.doubleclick.net glassdoor.co.uk maps.gstatic.com maps.googleapis.com www.googletagmanager.com www.google-analytics.com optimize.google.com *.sharethis.com dashboard.umbraco.org px.ads.linkedin.com www.linkedin.com tr.outbrain.com amplifypixel.outbrain.com *.vimeo.com p.typekit.net bat.bing.com a.opmnstr.com p.adsymptotic.com *.omappapi.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net match.prod.bidr.io segments.company-target.com syndication.twitter.com connect.facebook.net *.onetrust.com id.rlcdn.com ifaqs.flexanswer.com *.loqate.com gbgstorage01.blob.core.windows.net *.sg.va.sabio.cloud *.zopim.io *.placeholder.com i.vimeocdn.com gbgcmsprdsto.blob.core.windows.net gbgcmsprdblobcdn.azureedge.net analytics.twitter.com googleads.g.doubleclick.net *.stackadapt.com *.azr.footprintdns.com *.hsforms.com *.6sc.co *.6sense.com *.jquery.com heapanalytics.com *.maze.co js.hscta.net no-cache.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net webeo-web-content.s3-eu-west-1.amazonaws.com bat.bing.net;font-src 'self' *.gstatic.com *.typekit.net *.wistia.com cdnjs.cloudflare.com script.hotjar.com a.omappapi.com data: ifaqs.flexanswer.com s3-us-west-2.amazonaws.com *.sg.va.sabio.cloud heapanalytics.com *.maze.co;media-src 'self' *.wistia.net *.wistia.com embedwistia-a.akamaihd.net data: blob: static.zdassets.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' code.jquery.com www.googletagmanager.com tagmanager.google.com www.googleadservices.com optimize.google.com *.googleapis.com *.hs-banner.com *.hs-scripts.com www.google-analytics.com static.hotjar.com bizographics.com static.ads-twitter.com *.postcodeanywhere.co.uk *.pcapredict.com *.loqate.com *.addressy.com *.gbgplc.com *.gbg.com snap.licdn.com *.facebook.net googleads.g.doubleclick.net *.hs-analytics.net *.hsleadflows.net *.hsadspixel.net js.hscta.net *.hubspot.com static.hsappstatic.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hscollectedforms.net *.hubspotfeedback.com feedback.hubapi.com sjs.bizographics.com script.hotjar.com px.ads.linkedin.com analytics.twitter.com www.google.com *.gstatic.com platform.linkedin.com *.usemessages.com addtocalendar.com *.sharethis.com amplify.outbrain.com *.hsforms.net *.hsforms.com *.onetrust.com bat.bing.com use.typekit.net cdnjs.cloudflare.com *.opmnstr.com snid.snitcher.com a.trstplse.com *.wistia.com *.wistia.net player.vimeo.com *.demandbase.com src.litix.io cdn.jsdelivr.net static.codepen.io platform.twitter.com zucvhpjgqj.execute-api.ap-southeast-2.amazonaws.com hosted.mastersoftgroup.com a.omappapi.com unpkg.com secure.perk0mean.com ruler.nyltx.com *.clickcease.com analytics.nyltx.com ifaqs.flexanswer.com static.zdassets.com *.buzzsprout.com *.litix.io www.clickcease.com monitor.clickcease.com tr.outbrain.com *.sg.va.sabio.cloud js.monitor.azure.com *.atmrum.net *.stackadapt.com www.googleoptimize.com resources.customersure.com du89v9a480hlb.cloudfront.net js.hubspot.com *.6sc.co *.6sense.com cdn.heapanalytics.com heapanalytics.com *.maze.co secure.intelligent-business-7.com webeo-web-content.s3-eu-west-1.amazonaws.com ldynamicspublicapi.leadforensics.com secure.leadforensics.com assets.calendly.com *.clarity.ms;connect-src 'self' *.google-analytics.com *.hubapi.com *.hubspot.com *.hotjar.com vc.hotjar.io *.sharethis.com *.postcodeanywhere.co.uk *.pcapredict.com *.addressy.com *.gbgplc.com *.gbg.com decollector.tealeaf.ibmcloud.com gbg-global.azureedge.net www.facebook.com *.vimeo.com *.vimeocdn.com *.wistia.com *.wistia.net *.litix.io embedwistia-a.akamaihd.net *.onetrust.com *.omappapi.com api.opmnstr.com performance.typekit.net api.trstplse.com api.company-target.com stats.g.doubleclick.net segments.company-target.com hosted.mastersoftgroup.com *.loqate.com wss: ir.q4europe.com *.lottiefiles.com snid.snitcher.com analytics.nyltx.com ekr.zdassets.com ifaqs.flexanswer.com flexanswer1656.zendesk.com docs.idscan.com monitor.clickcease.com *.sg.va.sabio.cloud dc.services.visualstudio.com forms.hsforms.com gbg.workable.com www.workable.com *.atmrum.net *.stackadapt.com maps.googleapis.com api.investisdigital.com hubspot-forms-static-embed.s3.amazonaws.com gbg.customersure.com *.6sc.co *.6sense.com *.applicationinsights.azure.com cdn.linkedin.oribi.io heapanalytics.com *.maze.co js.hscta.net *.hs-banner.com *.hscollectedforms.net *.hsforms.com client-api.auryc.com *.clarity.ms ldynamicspublicapi.leadforensics.com www.google.com googleads.g.doubleclick.net pagead2.googlesyndication.com px.ads.linkedin.com bat.bing.net static.hsappstatic.net api.uxtweak.com js.monitor.azure.com;frame-src 'self' www2.gbgplc.com *.vimeo.com vimeo.com *.youtube.com *.vimeocdn.com platform.twitter.com syndication.twitter.com *.fls.doubleclick.net vars.hotjar.com www.facebook.com stats.g.doubleclick.net fast.wistia.net fast.wistia.com www.glassdoor.co.uk www.google.com optimize.google.com www.linkedin.com ir.q4europe.com c.sharethis.mgr.consensu.org *.hsforms.net *.hsforms.com play.hubspotvideo.com *.hubspot.net *.hs-sites.com *.onetrust.com *.postcodeanywhere.co.uk *.pcapredict.com *.addressy.com *.gbgplc.com *.hubspot.com app.hubspot.com codepen.io *.loqate.com *.buzzsprout.com www.edisoninvestmentresearch.com otp.tools.investis.com www.connectidfeed.com gbg.customersure.com *.6sc.co *.6sense.com *.hs-sites.com td.doubleclick.net calendly.com *.idology.com outlook.office365.com;frame-ancestors 'self' *.loqate.com gbgplc.interactgo.com;worker-src blob:; 4 frame-ancestors https://p-backoffice.b2c.gebr-heinemann.com/ 4 frame-ancestors 'self' mill3.studio 4 upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; img-src 'self' data: https:; 4 frame-ancestors 'self' https://app.storyblok.com/ 4 frame-ancestors https://dgbuilder2.io http://dgbuilder2.io 4 frame-ancestors accounts.shopbase.com:443 legacy-templates.shopbase.com:443 templates.shopbase.com:443 test-templates.shopbase.com:443 templates-test.shopbase.com:443 new-templates.shopbase.com:443 themes.shopbase.com:443 *.onshopbase.com:443 *.shopbase.net.cn:443 4 default-src * 'unsafe-inline' 'unsafe-eval' ; img-src * blob: data: 'unsafe-inline' ; font-src * data: 'unsafe-inline' ; media-src * blob: 'unsafe-inline' ; frame-src * data: 'unsafe-inline' 'unsafe-eval' ; 4 default-src 'self' https: wss:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-eval' https://analytics.ajla.net 'unsafe-inline' *.livechatinc.com *.tawk.to https://bam.nr-data.net https://translate-pa.googleapis.com/*; style-src 'self' blob: https: 'unsafe-inline'; report-uri https://sentry.io/api/1424323/security/?sentry_key=41c76badf8dd42cf9c908ee883619619 4 default-src https: ws: wss: data: 'unsafe-inline' 'unsafe-eval'; worker-src blob:; frame-ancestors 'self' 4 frame-ancestors 'self' https://sim-cms.net https://*.sim-cms.net https://*.azurewebsites.net https://salemnewschannel.com https://*.salemnewschannel.com http://localhost:* ws://localhost:*; 4 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; frame-src 'self' https:; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; upgrade-insecure-requests; 4 base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' https://app.storyblok.com; img-src 'self' data: *.storyblok.com *.baywa-re.com *.bayware-webdev.com images.admiralcloud.com imagebasics.admiralcloud.com *.googleapis.com maps.gstatic.com tm.baywa-re.com consent.cookiefirst.com https://www.google.de https://www.google.com https://google.com https://www.facebook.com googletagmanager.com *.googletagmanager.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://region1.analytics.google.com *.google-analytics.com https://t.co https://analytics.twitter.com *.g.doubleclick.net www.googleadservices.com pagead2.googlesyndication.com fonts.gstatic.com; object-src 'none'; script-src-attr 'self' 'unsafe-hashes' 'sha256-bwK6T5wZVTANitXbrTsel7kl/PyCjCd/Dq5Qoz3imjM='; style-src 'self' https: 'unsafe-inline' images.admiralcloud.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' player.admiralcloud.com https://errors.dkd.de; upgrade-insecure-requests; worker-src 'self' https: blob:; 4 default-src 'self' https://www-cdn01.avisonyoung.com https://api-eu1.hubspot.com https://analytics.avisonyoung.com; style-src 'self' 'unsafe-inline' https://www-cdn01.avisonyoung.com https://fonts.googleapis.com https://www-proxy01.avisonyoung.com https://platform.twitter.com https://ton.twimg.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://tagmanager.google.com https://fast.fonts.net https://cdn.foleon.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com https://optimize.google.com https://www.avisonyoungproperty.co.uk https://cdn.jsdelivr.net https://*.sharplaunch.com; font-src 'self' data: https://www-cdn01.avisonyoung.com https://www-proxy01.avisonyoung.com https://fonts.gstatic.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com https://*.hs-banner.com http://script.hotjar.com https://script.hotjar.com https://*.sharplaunch.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www-cdn01.avisonyoung.com https://www-proxy01.avisonyoung.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://pi.pardot.com https://go.avisonyoung.com https://platform.twitter.com https://www-cdn01.avisonyoung.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://ceros.com https://static.cloudflareinsights.com https://cdn.syndication.twimg.com https://maps.googleapis.com https://vimeo.com https://player.vimeo.com https://public.tableau.com https://widget.usersnap.com https://resources.usersnap.com https://ajax.googleapis.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com https://cdn.analytics.foleon.com https://previewer.foleon.com https://optimize.google.com https://e.infogram.com https://www.youtube.com https://static.hotjar.com https://script.hotjar.com https://avantanalytics.avisonyoung.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hsforms.com https://ext.chtbl.com https://www.googleoptimize.com https://js-eu1.hsleadflows.net https://www.google.com https://www.gstatic.com https://js-eu1.usemessages.com https://js-eu1.hsadspixel.net https://analytics.avisonyoung.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://snap.licdn.com https://js-eu1.hubspot.com https://cdn.jsdelivr.net https://www.avisonyoungproperty.co.uk https://sdk.sharplaunch.com https://cdnjs.cloudflare.com https://maps.google.com https://realtyads.com https://www.onelink-edge.com https://link.edgepilot.com https://analytics.sharplaunch.com https://*.sharplaunch.com https://secure.smart-enterprise-52.com https://js.zi-scripts.com https://tags.clickagy.com https://ajax.cloudflare.com https://tracking.walkthruit.com https://cdn.cookielaw.org; img-src https: data: blob:; frame-src 'self' https://platform.twitter.com https://syndication.twitter.com https://youtu.be https://www.youtube.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://www.google.com https://go.avisonyoung.com https://vimeo.com https://player.vimeo.com https://public.tableau.com https://forms.office.com *.youtube-nocookie.com https://experience.arcgis.com https://infogram.com https://optimize.google.com https://e.infogram.com https://vars.hotjar.com https://avantanalytics.avisonyoung.com https://*.hsforms.com https://omny.fm https://forms-eu1.hubspot.com https://app-eu1.hubspot.com https://analytics.avisonyoung.com https://player.cohostpodcasting.com https://bid.g.doubleclick.net https://open.spotify.com https://td.doubleclick.net https://app.powerbi.com https://realtyads.com https://api.mapbox.com https://videos.eventsquared.live https://www.googletagmanager.com https://aycamerchantblock.sharplaunch.com https://my.matterport.com https://kuula.co hemsync.clickagy.com https://embed.ricoh360.com https://streaming.eventsquared.live; connect-src 'self' https://www-cdn01.avisonyoung.com https://www.google-analytics.com https://maps.googleapis.com/ https://widget.usersnap.com https://api.analytics.foleon.com https://cdn.analytics.foleon.com https://api.foleon.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://hubspot-forms-static-embed.s3.amazonaws.com https://*.hsforms.com https://*.hs-banner.com https://static.hsappstatic.net https://web.chtbl.com https://stats.g.doubleclick.net https://forms-eu1.hubspot.com https://cdn.jsdelivr.net https://vimeo.com https://api-eu1.hubspot.com https://api-eu1.hubapi.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.com https://content.hotjar.io https://metrics.hotjar.io https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://cta-eu1.hubspot.com https://cdn.growthbook.io https://sdk.sharplaunch.com https://analytics.sharplaunch.com https://*.sharplaunch.com https://5igwwa7oi7.execute-api.us-east-1.amazonaws.com https://pagead2.googlesyndication.com aorta.clickagy.com hemsync.clickagy.com js.zi-scripts.com ws.zoominfo.com https://cdnjs.cloudflare.com https://mapsresources-pa.googleapis.com https://realtyads.com; media-src 'self' blob: https://www-cdn01.avisonyoung.com *.youtube-nocookie.com; object-src 'self' https://www-cdn01.avisonyoung.com *.youtube-nocookie.com; worker-src 'self' blob: 4 default-src 'self'; connect-src * data: 'unsafe-inline'; font-src *; frame-src *; img-src * blob: data: ; media-src *; object-src *; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline'; worker-src 'self' blob:; child-src blob:; 4 frame-ancestors https://r1132100004725-eu1-ifwe.3dexperience.3ds.com https://r1132100257819-eu1-ifwe.3dexperience.3ds.com https://dsext001-eu1-215dsi0708-ifwe.3dexperience.3ds.com https://r1132100381839-eu1-academia-ifwe.3dexperience.3ds.com https://dspart004-eu1-partners-ifwe.3dexperience.3ds.com https://dspart011-eu1-partners-ifwe.3dexperience.3ds.com https://my.3dexperience.3ds.com https://www.3ds.com; base-uri 'self' 4 default-src https://www.youtube-nocookie.com https://www.google.com/ https://storage.googleapis.com 'self'; connect-src wss://ws-eu.pusher.com wss://sage.kindly.ai https://ib.adnxs.com https://www.google.com https://f.clarity.ms https://www.clarity.ms https://consent.app.cookieinformation.com https://policy.app.cookieinformation.com https://adressesok.posten.no https://cdn.jsdelivr.net https://js.arcgis.com https://www.arcgis.com https://basemaps.arcgis.com https://cdn.arcgis.com https://static.arcgis.com https://utility.arcgis.com https://services.geodataonline.no https://vector.services.geodataonline.no https://geocode.arcgis.com https://stats.kaltura.com https://analytics.kaltura.com https://cdnapi.kaltura.com https://cdnapisec.kaltura.com https://cfvod.kaltura.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://px.ads.linkedin.com/wa/ https://posten-bring.force.com https://posten-bring.my.site.com https://posten-bring--crmfull.sandbox.my.site.com https://livestats.kaltura.com https://pagead2.googlesyndication.com https://klive.kaltura.com https://chat.kindlycdn.com https://bot.kindly.ai https://sage.kindly.ai https://ws-eu.pusher.com https://sockjs-eu.pusher.com https://storage.googleapis.com https://api.uxsignals.com https://widget.trustpilot.com https://api-us.mida.so https://api.typeform.com 'self'; base-uri 'self'; form-action https://tracking.bring.com https://tracking.bring.dk https://tracking.bring.se https://sporing.bring.no https://sporing.posten.no https://tracking.qa.bring.com https://tracking.qa.bring.dk https://tracking.qa.bring.se https://sporing.qa.bring.no https://sporing.qa.posten.no wss://ws-eu.pusher.com wss://sage.kindly.ai 'self'; script-src https://f.clarity.ms https://www.clarity.ms https://unpkg.com https://cdnapisec.kaltura.com https://cdnapi.kaltura.com https://www.gstatic.com https://www.google.com https://cdn.jsdelivr.net https://siteimproveanalytics.com https://acdn.adnxs.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleoptimize.com https://ssl.google-analytics.com https://policy.app.cookieinformation.com https://cloud.2.bring.com https://connect.facebook.net https://assets.strossle.com https://ib.adnxs.com https://snap.licdn.com https://www.bring.se https://www.bring.dk https://www.bring.nl https://adservice.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://cct.google https://js.arcgis.com https://ws.geonorge.no https://geocode.arcgis.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://player.vimeo.com https://posten-bring.force.com https://posten-bring.my.site.com https://posten-bring--crmfull.sandbox.my.site.com https://widget.trustpilot.com https://www.youtube.com https://chat.kindlycdn.com https://widget.uxsignals.com https://cdn.mida.so https://bat.bing.com https://embed.typeform.com 'unsafe-inline' 'unsafe-eval' 'self'; frame-src https://www.google.com https://www.googletagmanager.com https://cdnapi.kaltura.com https://cdnapisec.kaltura.com https://www.gstatic.com https://player.vimeo.com/ https://www.youtube-nocookie.com https://form.typeform.com https://policy.app.cookieinformation.com https://widget.trustpilot.com https://td.doubleclick.net https://bid.g.doubleclick.net https://*.fls.doubleclick.net https://www.youtube.com; object-src 'none'; img-src * data: blob:; style-src 'unsafe-inline' * ; font-src * data; worker-src blob:; media-src blob: https://cdnapi.kaltura.com https://cdnapisec.kaltura.com https://cfvod.kaltura.com https://www.kaltura.com https://storage.googleapis.com 4 frame-ancestors 'self' https://matomo.deinetuer.de 4 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com/; frame-src 'self' https://www.google.com/recaptcha/; style-src 'self' 'unsafe-inline'; img-src 'self' https://account.ycombinator.com; frame-ancestors 'self' 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://google.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hs-sites.com https://*.hsappstatic.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hubspot.com https://*.hubapi.com https://*.hubspotusercontent-na1.net https://*.salesforce.com https://*.cookiepro.com https://*.cookielaw.org https://*.onetrust.com https://*.clarity.ms https://bat.bing.com https://c.bing.com https://secure.data-insight365.com https://*.ahrefs.com https://analytics.ahrefs.com https://*.facebook.com https://*.facebook.net https://*.linkedin.com https://snap.licdn.com https://*.adnxs.com https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://*.algolia.io https://*.algolia.net https://*.algolianet.com https://*.moneris.com https://*.usemessages.com https://*.zoho.com https://*.zohopublic.com https://js.zi-scripts.com https://*.zoominfo.com https://*.landbot.io https://*.jotform.com https://*.surveymonkey.com https://*.smassets.net https://widget.surveymonkey.com https://pardot.com https://*.pardot.com https://*.crisis24.com https://*.crisis24.garda.com https://*.dayforcehcm.com https://cdn.jsdelivr.net https://vercel.com https://vercel.live https://*.vercel.com https://*.vercel.app https://*.vercel-scripts.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat; connect-src 'self' data: https://google.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hs-sites.com https://*.hsappstatic.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hubapi.com https://*.hubspot.com https://*.hubspotusercontent-na1.net https://*.salesforce.com https://*.cookiepro.com https://*.cookielaw.org https://*.onetrust.com https://*.clarity.ms https://bat.bing.com https://c.bing.com https://secure.data-insight365.com https://*.ahrefs.com https://analytics.ahrefs.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://*.linkedin.com https://snap.licdn.com https://*.adnxs.com https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://vimeo.com https://player.simplecast.com https://*.algolia.io https://*.algolia.net https://*.algolianet.com https://*.moneris.com https://*.usemessages.com https://js.zi-scripts.com https://*.zoominfo.com https://ws.zoominfo.com https://*.landbot.io https://*.jotform.com https://*.surveymonkey.com https://*.smassets.net https://widget.surveymonkey.com https://*.cloudinary.com https://*.crisis24.com https://*.garda.com https://*.gardaworld.com https://*.dayforcehcm.com https://*.mapbox.com https://*.zoho.com https://*.zohopublic.com https://*.6sc.co https://pardot.com https://*.pardot.com wss://ws-us3.pusher.com https://vercel.com https://vercel.live https://*.vercel.com https://*.vercel.app https://*.vercel-scripts.com; frame-src 'self' https://google.com https://*.google.com https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://player.simplecast.com https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hubspotusercontent-na1.net https://*.cookiepro.com https://*.cookielaw.org https://*.onetrust.com https://*.salesforce.com https://*.moneris.com https://*.zoho.com https://*.zohopublic.com https://*.facebook.com https://*.linkedin.com https://*.usemessages.com https://*.jotform.com https://*.surveymonkey.com https://widget.surveymonkey.com https://*.crisis24.com https://*.garda.com https://*.gardaworld.com https://*.dayforcehcm.com https://*.landbot.io https://pardot.com https://*.pardot.com https://vercel.live https://*.vercel.com https://*.vercel.app; style-src 'self' https://*.googleapis.com https://cdn.fonts.net https://cdn.jsdelivr.net https://*.cookiepro.com https://*.cookielaw.org https://*.onetrust.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://*.moneris.com https://*.smassets.net https://*.landbot.io 'unsafe-inline'; img-src 'self' data: blob: https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.ytimg.com https://i.vimeocdn.com https://*.vimeocdn.com https://*.hsforms.com https://*.hubspot.com https://*.hubspotusercontent-na1.net https://*.cookiepro.com https://*.cookielaw.org https://*.onetrust.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://*.linkedin.com https://snap.licdn.com https://*.doubleclick.net https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://*.adnxs.com https://bat.bing.com https://c.bing.com https://secure.data-insight365.com https://*.jotform.com https://*.surveymonkey.com https://*.smassets.net https://*.cloudinary.com https://*.crisis24.com https://*.garda.com https://*.gardaworld.com https://*.dayforcehcm.com https://*.mapbox.com https://pardot.com https://*.pardot.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat; font-src 'self' data: https://*.gstatic.com https://cdn.fonts.net https://*.landbot.io https://cdn.jsdelivr.net; media-src 'self' data: blob: https://*.crisis24.com https://*.garda.com https://*.gardaworld.com https://player.simplecast.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; form-action 'self' https://*.hsforms.net https://*.hsforms.com https://*.hscollectedforms.net https://*.hubspot.com https://*.facebook.com https://*.salesforce.com https://*.zoho.com https://*.zohopublic.com https://*.jotform.com https://pardot.com https://*.pardot.com; base-uri 'self'; frame-ancestors 'self' https://cms.crisis24.com; upgrade-insecure-requests; 4 default-src 'self'; base-uri 'self'; frame-src 'self' https://*.server.pro https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com https://challenges.cloudflare.com https://youtube.com https://*.youtube.com; child-src 'self' https://*.server.pro https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://*.server.pro; img-src 'self' https: data: blob:; font-src 'self' data: https:; worker-src 'self' blob:; media-src 'self' data:; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.js.stripe.com https://js.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com https://challenges.cloudflare.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.js.stripe.com https://js.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com; connect-src 'self' data: https://*.server.pro wss://*.server.pro https://api.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com https://*.googleapis.com https://api.curseforge.com https://api.modrinth.com https://api.modpacks.ch; upgrade-insecure-requests; 4 object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 4 default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *; 4 frame-ancestors 'self'; report-to csp-reports; 4 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline';frame-src * mailto: data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' *.acaa-cmps.com *.dbedirectory.com *.uhsvendors.com *.mdbecert.com *.mwdbe.com *.traviscountyhub.com *.civilrightsystem.com *.gob2g.com *.mwdsbe.com *.mwsbe.com *.sbeda.com *.thesupplierclearinghouse.com *.smwbe.com *.diversitycomplance.com *.civilrightsconnect.com *.b2gnow.com *.newnycontracts.com *.diversitysystem.com *.dbesystem.com *.civilrightsconnect.dot.gov *.sbdbe.com *.sctrca.org *.civilrightsconnect.dot.gov *.webnclink.org *.vendorreg.com *.txdotcms.com *.diversitysoftware.com *.sbecompliance.com; 4 default-src * https: data: 'unsafe-inline' 'unsafe-eval'; 4 nosniff 4 default-src * https: data: blob: wss: 'unsafe-inline' 4 frame-ancestors "none" 4 default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; worker-src * blob: data: 'unsafe-eval'; child-src * blob: data:; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; style-src * 'unsafe-inline' blob: data:; 4 frame-ancestors 'self' https://*.saleshood.com https://*.829stage.com; 4 default-src * 'unsafe-inline' 'unsafe-eval' data: wss: *; script-src * 'unsafe-inline' 'unsafe-eval' blob: data: *; img-src * 'unsafe-inline' 'unsafe-eval' data: *; frame-src * 'unsafe-inline' 'unsafe-eval' data: *; style-src * 'unsafe-inline' 'unsafe-eval' data: * 4 default-src 'self'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 4 upgrade-insecure-requests; frame-ancestors 'self' https://cms.quilium.app 4 default-src 'self' blob: about:; frame-ancestors 'self'; img-src 'self' 'unsafe-eval' data: blob: about: *.awin1.com *.doubleclick.net *.trbo.com *.gstatic.com *.google.de *.google.com *.youtube.com *.amazonaws.com *.bing.com *.clarity.ms photoservice.cloud *.google-analytics.com *.cdninstagram.com *.saal-digital.net *.saal-digital.com *.saal-digital.de *.photo-portal.shop *.googleusercontent.com *.paypal.com *.paypalobjects.com *.hotjar.com *.facebook.com *.ytimg.com *.cookiepro.com *.bing.net *.usercentrics.eu; script-src 'self' 'unsafe-eval' 'unsafe-inline' about: *.awin1.com *.sciencebehindcommerce.com *.roeyecdn.com *.dwin1.com *.trbo.com *.saal-digital.net *.photo-portal.shop *.clarity.ms *.bing.com *.hotjar.com *.facebook.net blob: about: *.cookiepro.com *.amazonaws.com photoservice.cloud *.google-analytics.com *.googletagmanager.com *.cdninstagram.com *.google.com *.paypalobjects.com *.paypal.com *.sovendus.com *.googleapis.com *.usercentrics.eu; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.amazonaws.com photoservice.cloud *.cookiepro.com fonts.googleapis.com *.hotjar.com *.saal-digital.net *.sovendus.com *.usercentrics.eu; font-src 'self' *.amazonaws.com photoservice.cloud oam-software.com *.ssw-software.com *.gstatic.com *.paypalobjects.com *.hotjar.com; connect-src 'self' data: blob: about: *.sciencebehindcommerce.com google.com *.dropboxapi.com *.eu-central-1.amazonaws.com photoservice.cloud *.doubleclick.net *.google-analytics.com *.google.com *.googleapis.com *.cookiepro.com *.googleusercontent.com *.saal-digital.net *.photo-portal.shop *.saal-digital.net *.amazoncognito.com *.paypal.com *.clarity.ms *.bing.com *.bing.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.sovendus.com *.usercentrics.eu; frame-src *; object-src 'none'; 4 frame-ancestors 'self' *.arcgis.com *.esri.com learn.esri.ca 4 object-src 'none'; frame-ancestors 'none' 4 default-src 'self'; connect-src *; img-src 'self' data: 4 frame-ancestors 'self'; object-src 'none'; frame-src 'self' youtube.com www.youtube.com google.com www.google.com secure.livechatinc.com www.paypal.com paypal.com ct.pinterest.com accounts.google.com www.googletagmanager.com https://my.matterport.com https://*.matterport.com data:; 4 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; base-uri 'self'; 4 default-src 'self'; script-src 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self'; img-src 'self' www.google-analytics.com; 4 default-src https: data: 'unsafe-inline' 4 object-src 'none'; base-uri 'none'; frame-ancestors 'none'; 4 default-src 'self'; script-src * 'self' 'unsafe-inline' 'unsafe-eval'; object-src *; style-src * 'self' 'unsafe-inline'; img-src * 'self' data: https:;; media-src *; frame-src *; frame-ancestors * 'self'; child-src * blob:; font-src * 'self' data: https:;; connect-src *; report-uri /log-report-uri/enforce 4 object-src * ; report-uri https://www.sunlife.ca/slfreporting/reportUri 4 frame-ancestors 'self' https://digiprom.cloud https://digiprom.systems https://digiprom.live https://digiprom.support https://digiprom.social https://digiprom.today https://digiprom.news https://digiprom.solutions https://digiprom.business https://digiprom.company https://digiprom.tv https://digiprom.education https://digiprom.tips https://digiprom.marketing https://digiprom.domains https://digiprom.website https://digiprom.systems https://digiprom.live https://digiprom.news https://digiprom.cards https://digiprom.directory https://digiprom.media https://digiprom.network https://digiprom.aupport https://digiprom.dev; 4 frame-ancestors 'none' ; 4 default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ; 4 frame-ancestors self http://localhost:8080 https://beta.centralapp.com https://business-dev.centralapp.com/ https://business.centralapp.com/ 4 upgrade-insecure-requests; frame-ancestors https://app.contentful.com 4 frame-ancestors 'self' https://digiprom.dev; 4 frame-ancestors https://suite34.emarsys.net; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubfef39b54e4afa416599740644771d1c2&dd-evp-origin=content-security-policy&ddsource=csp-report 4 default-src https: 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: *; media-src blob: 'self' *; font-src 'self' data: *; connect-src 'self' *; child-src blob: 'self' *; block-all-mixed-content; 4 default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; 4 upgrade-insecure-requests; default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob:; script-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; connect-src 'self' https: data: blob:; frame-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; 4 default-src 'self' *; script-src * 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; font-src * data:; img-src * data:; media-src 'self' * blob: data:; 4 frame-ancestors https://fi.tav.aero 4 default-src 'none'; script-src 'self'; script-src-elem 'self'; script-src-attr 'self'; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src 'self'; font-src 'self'; connect-src 'none'; media-src 'none'; object-src 'none'; child-src 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; form-action 'none'; upgrade-insecure-requests; block-all-mixed-content; sandbox; base-uri 'none'; manifest-src 'none' 4 upgrade-insecure-requests; default-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src https:; font-src 'self' https:; frame-src https:; frame-ancestors 'self'; img-src https://cdn.jsdelivr.net 'self' data: https:; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; child-src 'self' blob:; form-action 'self' 4 default-src 'self' *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com *.googletagmanager.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com cdn.checkout.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline' *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com; font-src 'self' data: *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com; img-src 'self' http://localhost:1337 https://*.amazonaws.com/site-cms-strapi.wheely.com/ https://*.amazonaws.com/site-cms-strapi.stg.wheely-dev.com/ https://*.amazonaws.com/site-cms-strapi.dev.wheely-dev.com/ https://*.amazonaws.com/static.wheely.com/ https://*.amazonaws.com/photos.wheely.com/ https://*.amazonaws.com/user-uploads-test.wheely.com/ https://*.amazonaws.com/user-uploads.wheely.com/ https://*.amazonaws.com/photos-test.wheely.com/ *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://*.googleapis.com https://*.gstatic.com *.googleusercontent.com data: blob: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://www.facebook.com https://connect.facebook.net; media-src 'self' https://*.amazonaws.com/site-cms-strapi.wheely.com/ https://*.amazonaws.com/site-cms-strapi.stg.wheely-dev.com/ https://*.amazonaws.com/site-cms-strapi.dev.wheely-dev.com/ https://*.amazonaws.com/static.wheely.com/ https://*.amazonaws.com/photos.wheely.com/ https://*.amazonaws.com/user-uploads-test.wheely.com/ https://*.amazonaws.com/user-uploads.wheely.com/ https://*.amazonaws.com/photos-test.wheely.com/ *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com https://js.intercomcdn.com; frame-src 'self' *.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net *.google.com https://hcaptcha.com https://*.hcaptcha.com https://js.checkout.com; connect-src 'self' *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com https://o18635.ingest.sentry.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com https://*.googleapis.com https://*.gstatic.com data: blob: https://hcaptcha.com https://*.hcaptcha.com https://js.checkout.com https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://stats.g.doubleclick.net https://www.facebook.com; child-src 'self' https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; form-action 'self' https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://www.facebook.com https://payment-3ds.com; report-uri https://o18635.ingest.sentry.io/api/1453113/security/?sentry_key=17e7a309684a4cc5a82504db707f1e7a; frame-ancestors *.wheely.com *.wheely.app *.wheely.ltd *.wheely.mobi *.wheely.st *.wheely.vip *.wheely.com.br *.wheely.biz wheely.revolutpeople.com *.wheely-dev.com *.wheely-dev.app *.wheely-dev.ltd *.wheely-dev.mobi 4 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob:; style-src * data: blob: 'unsafe-inline'; font-src * data: blob:; 4 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https:;connect-src 'self' https:;font-src 'self' https: data:;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';frame-ancestors 'self' 4 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.hetlmedia.com https://securepubads.g.doubleclick.net https://www.googletagservices.com https://prebid.adnxs.com https://ow.pubmatic.com https://*.pubmatic.com https://*.rubiconproject.com https://*.smartadserver.com https://*.sharethrough.com https://*.stpd.cloud https://*.lijit.com https://*.sovrn.com https://cdn.id5-sync.com https://*.media.net https://*.minutemedia.com https:; connect-src 'self' https: wss: https://securepubads.g.doubleclick.net https://www.googletagservices.com https://prebid.adnxs.com https://ow.pubmatic.com https://*.pubmatic.com https://*.rubiconproject.com https://*.smartadserver.com https://*.sharethrough.com https://*.stpd.cloud https://*.lijit.com https://*.sovrn.com https://cdn.id5-sync.com https://*.media.net https://*.minutemedia.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https: blob:; media-src 'self' https: blob:; worker-src 'self' blob:; manifest-src 'self'; 4 frame-ancestors 'self' https://*.sdcounty.ca.gov:*; 4 default-src * 'unsafe-eval' 'unsafe-inline' 'unsafe-dynamic' data: filesystem: about: blob: ws: wss: 4 script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.solar.eu https://bat.bing.net https://bat.bing.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://maps.googleapis.com https://cdnjs.cloudflare.com https://www.gstatic.com https://solargroup.containers.piwik.pro https://cdn.richrelevance.com https://dev.visualwebsiteoptimizer.com https://googletagmanager.com https://www.googletagmanager.com https://connect.facebook.net https://bpb.opendns.com https://integration.richrelevance.com https://staging.richrelevance.com https://recs.richrelevance.com https://www.recaptcha.net https://www.gstatic.com https://web-sdk-eu.aptrinsic.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://cdn.pushcrew.com https://snap.licdn.com https://dmcqaqmkk1tj3.cloudfront.net/solar.js https://cdn.jsdelivr.net/; font-src 'self' data: cdn.solar.eu https://*.amazonaws.com https://*.cloudfront.net https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' cdn.solar.eu https://consentcdn.cookiebot.com https://go.pardot.com https://web-sdk-eu.aptrinsic.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://cdn.pushcrew.com https://cdn.jsdelivr.net/; worker-src * blob: 4 frame-ancestors 'self' *.recia.fr *.netocentre.fr netocentre.fr *.touraine-eschool.fr *.chercan.fr colleges41.fr *.colleges41.fr e-college.indre.fr *.e-college.indre.fr mon-e-college.loiret.fr *.mon-e-college.loiret.fr *.colleges-eureliens.fr *.nextcloud.recia.aquaray.com 4 default-src 'none'; style-src-elem 'self' 'unsafe-inline' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https:; style-src-attr 'unsafe-inline'; font-src 'self' data: https:; frame-ancestors https://skoda-admin.porsche-holding.com; connect-src 'self' https: ws: wss: data:; manifest-src 'self' https:; media-src 'self' https: data:; frame-src 'self' https:; style-src 'self' 'unsafe-inline' https:; upgrade-insecure-requests 4 default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self' 4 upgrade-insecure-requests; frame-ancestors 'self' https://bots.getskitickets.com; 4 base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests 4 font-src data: https: 'self';connect-src data: https: wss: blob:;default-src 'unsafe-eval' 'unsafe-inline' data: https:;form-action https:;img-src 'self' data: https: blob:;media-src 'self';object-src 'none';script-src data: https: blob: 'unsafe-inline' 'unsafe-eval' id3.expertus.com.ua;style-src data: https: 'self' 'unsafe-inline' 4 default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.promptwatch.com https://promptwatch.com https://sst.www.ventilatieland.nl https://sst.www.ventilatieland.be ttps://sst.www.lueftungsland.de https://sst.www.ventilationland.co.uk https://sst.ventilatieland.nl https://sst.ventilatieland.be https://sst.lueftungsland.de https://sst.ventilationland.co.uk https://sst.ventigo.fr https://sst.ventigo.es https://sst.ventigo.it https://sst.ventigo.at https://sst.ventigo.pl https://sst.ventigo.dk https://sst.ventigo24.se https://sst.econox.nl https://sst.econox.be https://sst.maxicool.nl *.mollie.com *.aiden.cx *.thuiswinkel-cdn.org *.thuiswinkel.org https://snap.licdn.com https://js.stripe.com/v3 https://tagmanager.google.com https://www.googletagmanager.com *.clarity.ms *.trustedshops.com *.beslist.nl *.jotform.com https://surfly.com robin-storage.js *.ravecapture.com *.azureedge.net https://trustspot.io *.bing.com https://squeezely.tech *.msecnd.net *.criteo.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.facebook.net *.fontawesome.com *.googletagmanager.com *.google.com *.google.nl *.google-analytics.com *.googleadservices.com *.googleapis.com *.gstatic.com *.hotjar.com *.twitter.com *.vimeo.com *.youtube.com *.cloudsuite.com *.robinhq.com robincontentdesktop.blob.core.windows.net *.visualwebsiteoptimizer.com app.vwo.com blob:; img-src 'self' blob: *.promptwatch.com https://promptwatch.com *.visualwebsiteoptimizer.com https://sst.www.ventilatieland.nl https://sst.www.ventilatieland.be https://sst.www.lueftungsland.de https://sst.www.ventilationland.co.uk https://sst.ventilatieland.nl https://sst.ventilatieland.be https://sst.lueftungsland.de https://sst.ventilationland.co.uk https://sst.ventigo.fr https://sst.ventigo.es https://sst.ventigo.it https://sst.ventigo.at https://sst.ventigo.pl https://sst.ventigo.dk https://sst.ventigo24.se https://sst.econox.nl https://sst.econox.be https://sst.maxicool.nl *.linkedin.com https://cs.media.net *.google.be *.mollie.com *.clarity.ms *.criteo.net *.media.net https://widget.thuiswinkel-cdn.org *.thuiswinkel-cdn.org https://aa.agkn.com https://px.ads.linkedin.com https://bat.bing.net https://ssl.gstatic.com *.trustedshops.com *.cloudsuite.com data: *.cloudfront.net *.googleadservices.com *.amazonaws.com *.demdex.net *.squeezely.tech *.demex.net *.unrulymedia.com https://robincontentdesktop.blob.core.windows.net/ *.bing.com *.ventilatieland.nl *.econox.nl *.cloudsuite.com *.facebook.com *.fbcdn.net *.google.com *.google.nl *.googletagmanager.com *.google-analytics.com *.gstatic.com *.googleapis.com *.twitter.com *.vimeocdn.com *.youtube.com *.360yield.com *.yieldlab.net *.adform.net *.doubleclick.net https://contextual.media.net https://criteo-partners.tremorhub.com https://criteo-sync.teads.tv *.emxdgt.com *.3lift.com *.mediavine.com *.criteo.com *.adnxs.com https://id5-sync.com *.postrelease.com *.sharethrough.com *.ivitrack.com *.rubiconproject.com *.dmxleo.com *.casalemedia.com *.smartadserver.com *.pubmatic.com *.ads.yieldmo.com *.taboola.com *.1rx.io *.outbrain.com *.omnitagjs.com *.bidswitch.net app.vwo.com useruploads.vwo.io; font-src 'self' 'unsafe-inline' data: *.gstatic.com *.cloudsuite.com *.fontawesome.com *.onlinewebfonts.com data: *.typekit.net *.bootstrapcdn.com *.cloudflare.com *.amazonaws.com; style-src 'self' 'unsafe-inline' *.thuiswinkel-cdn.org https://tagmanager.google.com *.googletagmanager.com *.amazonaws.com *.cloudsuite.com *.googleapis.com *.typekit.net *.onlinewebfonts.com *.ravecapture.com *.visualwebsiteoptimizer.com app.vwo.com; connect-src 'self' *.promptwatch.com https://promptwatch.com *.visualwebsiteoptimizer.com https://sst.www.ventilatieland.nl https://sst.www.ventilatieland.be https://sst.www.lueftungsland.de https://sst.www.ventilationland.co.uk https://sst.ventilatieland.nl https://sst.ventilatieland.be https://sst.lueftungsland.de https://sst.ventilationland.co.uk https://sst.ventigo.fr https://sst.ventigo.es https://sst.ventigo.it https://sst.ventigo.at https://sst.ventigo.pl https://sst.ventigo.dk https://sst.ventigo24.se https://sst.econox.nl https://sst.econox.be https://sst.maxicool.nl https://squeezely.tech *.msecnd.net *.aiden.cx *.thuiswinkel-cdn.org *.trustedshops.com *.etrusted.com https://sjs.bizographics.com https://dc.ads.linkedin.com https://gw.linkedin.oribi.io https://cdn.linkedin.oribi.io https://p.adsymptotic.com https://px4.ads.linkedin.com https://px.ads.linkedin.com https://px.ads.linkedin.com/wa/ https://bat.bing.net *.googlesyndication.com *.bing.com *.clarity.ms *.beslist.nl https://surfly.com *.ravecapture.com *.hotjar.io *.robinhq.com sentry.cloudsuite.io *.hotjar.com wss://*.hotjar.com *.visualstudio.com *.criteo.com *.amazonaws.com *.doubleclick.net *.cloudsuite.com *.cloudsuite.io *.fontawesome.com *.googleapis.com *.google-analytics.com *.google.com https://google.com *.google.nl https://google.nl https://www.google.nl https://www.googleadservices.com *.googletagmanager.com *.vimeo.com *.youtube.com https://sentry.io https://*.ingest.sentry.io app.vwo.com; frame-src 'self' *.promptwatch.com https://promptwatch.com https://sst.www.ventilatieland.nl https://sst.www.ventilatieland.be https://sst.www.lueftungsland.de https://sst.www.ventilationland.co.uk https://sst.ventilatieland.nl https://sst.ventilatieland.be https://sst.lueftungsland.de https://sst.ventilationland.co.uk https://sst.ventigo.fr https://sst.ventigo.es https://sst.ventigo.it https://sst.ventigo.at https://sst.ventigo.pl https://sst.ventigo.dk https://sst.ventigo24.se https://sst.econox.nl https://sst.econox.be https://sst.maxicool.nl *.mollie.com https://youtu.be/ *.aiden.cx https://content.widget.thuiswinkel.org https://js.stripe.com *.googletagmanager.com https://surfly.com *.jotform.com *.robinhq.com *.doubleclick.net *.facebook.com *.google.com *.hotjar.com *.rsa3dsauth.co.uk *.securesuite.co.uk *.vimeo.com *.youtube.com *.criteo.com *.criteo.net *.visualwebsiteoptimizer.com app.vwo.com; media-src 'self' 4 default-src 'self' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' ;style-src 'self' 'unsafe-inline' ;img-src 'self' data: *.tile.openstreetmap.org;object-src 'none'; 4 frame-ancestors 'self' *.hotmart.com hotmart.com *.hotmart.host *.klickpages.com.br sun.eduzz.com http://*.monetizze.com.br https://*.monetizze.com.br http://aporasal.net https://aporasal.net http://adf.ly https://adf.ly 4 style-src 'self' 'unsafe-inline' 4 frame-ancestors 'self' multimaps360.de; 4 default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.go-mpulse.net maps.googleapis.com;worker-src 'none';object-src *;style-src 'self' 'unsafe-inline' fonts.googleapis.com;img-src 'self' blob: data: *.scalemates.com *.youtube.com *.akstat.io *.gstatic.com *.googleapis.com *.ytimg.com;media-src 'self';frame-src 'self' *.youtube.com;font-src 'self' *.gstatic.com data:;connect-src 'self' *.akstat.io *.scalemates.com *.go-mpulse.net maps.googleapis.com;report-uri https://reporting.go-mpulse.net/report/LLD9T-Q4RA5-2E42A-L3YP5-GSM4N 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: wss://webmessaging.usw2.pure.cloud *.usw2.pure.cloud https://wepowerconnections.com https://lantern.roeyecdn.com https://lantern.roeye.com *.visualwebsiteoptimizer.com *.vwo.com dpm.demdex.net bat.bing.com *.tvpixel.com *.adsrvr.org *.go-mpulse.net *.akstat.io *.akamaihd.net chart.googleapis.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.google.com *.googleapis.com https://google.com/pay *.gstatic.com *.wpsandwatch.com *.wpsandwatch.net *.kasandwatch.net *.collect.igodigital.com whirlpool-cdn.thron.com digitalassets-cdn.thron.com *.paypal.com apps.bazaarvoice.com *.bazaarvoice.com *.facebook.com *.facebook.net *.pinimg.com *.pinterest.com *.algolianet.com *.algolia.net https://insights.algolia.io *.ctfassets.net *.vtexassets.com https://vimeo.com *.vimeo.com *.vimeocdn.com *.youtube.com *.ytimg.com https://flagcdn.com *.sentry.io *.newrelic.com *.nr-data.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.contentsquare.net *.contentsquare.com *.onetrust.com *.cookielaw.org *.doubleclick.net *.criteo.com *.dwin1.com *.awin1.com *.zenaps.com *.airpr.com https://the.sciencebehindecommerce.com https://*.qualtrics.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/@alma/widgets@3.x.x/dist/widgets.min.css https://cdn.jsdelivr.net/npm/@alma/widgets@3.x.x/dist/widgets.umd.js https://unpkg.com/tailwindcss@%5E1.0/dist/tailwind.min.css https://cdn.tailwindcss.com/3.3.2 https://cdn.bc0a.com https://ixfd2-api.bc0a.com *.usablenet.com *.usablenet.dev https://assets.adobedtm.com *.mczbf.com *.emjcd.com *.sjwoe.com cj.dotomi.com cj.com s3-us-east-1.amazonaws.com s3-eu-west-1.amazonaws.com https://dct.kitchenaid.ie https://dct.kitchenaid.co.uk https://dct.kitchenaid.fr https://dct.kitchenaid.be https://dct.kitchenaid.nl https://dct.kitchenaid.de https://dct.kitchenaid.at https://dct.kitchenaid.it https://dct.kitchenaid.fi https://dct.kitchenaid.dk https://dct.kitchenaid.se https://dct.kitchenaid.es https://dct.kitchenaid.pt https://dct.kitchenaid.ch https://dct.kitchenaid.pl https://eu.klarnaevt.com https://api.sandbox.getalma.eu https://api.getalma.eu https://api.sandbox.getalma.eu/v2/payments/eligibility https://api.getalma.eu/v2/payments/eligibility *.klarna.com *.klarnacdn.net *.klarnaservices.com https://js.klarna.com/web-sdk/v1/klarna.js https://x.klarnacdn.net/ui/fonts/v1.3/fonts.css https://cdn.almapay.com *.adyen.com *.cdn.adyen.com *.execute-api.eu-west-1.amazonaws.com; img-src * data:; media-src *; frame-src *; frame-ancestors 'self' https://app.contentful.com *.kasandwatch.net https://www.google.com https://api.sandbox.getalma.eu https://api.getalma.eu; 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://www.marinetraffic.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self' https://app.socialscreen.com; media-src 'self' blob: https:; worker-src 'self' blob:; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com; img-src https: data:; object-src 'self' 4 frame-ancestors 'self' *.sivuviidakko.fi *.lianacms.com *.tagomocms.fi; 4 font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.gstatic.com https://fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com https://authentication.cardinalcommerce.com/ https://songbird.cardinalcommerce.com/ *.arcot.com https://secure2.arcot.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.onesignal.com https://aliss.os.tc https://aliss-test.os.tc https://*.cardinalcommerce.com https://*.clarity.ms https://publuu.com *.publuu.com *.arcot.com https://secure2.arcot.com *.userway.org 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.googleapis.com www.gstatic.com magefan.com cm.magefan.com *.disqus.com https://www.magezon.com *.onesignal.com https://img.onesignal.com https://h.online-metrix.net *.online-metrix.net https://*.cardinalcommerce.com https://cdn.jsdelivr.net https://purecatamphetamine.github.io https://*.clarity.ms *.adobesc.com *.publuu.com *.userway.org data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.disqus.com *.js-agent.newrelic.com *.bam.nr-data.net https://bam.nr-data.net *.onesignal.com https://onesignal.com https://h.online-metrix.net https://js-agent.newrelic.com https://*.cardinalcommerce.com https://www.google-analytics.com https://cdn.jsdelivr.net accounts.google.com connect.facebook.net *.bolt.com *.commerce-quick-checkout.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha unpkg.com/@adobe cdn.jsdelivr.net/npm/@adobe js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com s7.addthis.com *.userway.org https://assets-cdn.woowup.com https://js.pusher.com www.clarity.ms https://www.clarity.ms https://*.clarity.ms *.adobe.net *.adobedc.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com https://onesignal.com https://h.online-metrix.net https://js-agent.newrelic.com https://*.cardinalcommerce.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://*.clarity.ms *.userway.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.bam.nr-data.net https://bam.nr-data.net *.onesignal.com https://onesignal.com https://cdn.onesignal.com https://h.online-metrix.net *.online-metrix.net https://js-agent.newrelic.com https://maps.googleapis.com https://*.cardinalcommerce.com https://*.amazonaws.com *.facebook.com www.clarity.ms https://*.clarity.ms *.adobe.net *.adobedc.net *.publuu.com *.userway.org 'self' 'unsafe-inline'; child-src *.onesignal.com https://cdn.onesignal.com https://h.online-metrix.net https://js-agent.newrelic.com https://*.cardinalcommerce.com https://*.clarity.ms https://publuu.com *.publuu.com *.userway.org http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://fonts.gstatic.com https://fonts.googleapis.com https://*.clarity.ms https://publuu.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.integration2-hohc4oi-c2g6g5sgc4xo6.us-5.magentosite.cloud https://*.cardinalcommerce.com https://*.clarity.ms 'self' 'unsafe-inline'; 4 font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.hotjar.com *.zopim.com *.fontawesome.com data: 'self' data: cdn.honey.io www.mheducation.co.uk assets.merci-app.com at.alicdn.com cdn.scite.ai cdnjs.cloudflare.com fonts.bunny.net pouch-global-font-assets.s3.eu-central-1.amazonaws.com shopping.qantas.com www.mhprofessional.com *.wistia.com player.flipsnack.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.mheducation *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.mheducation *.weltpixel.com cdn.dnky.co *.hotjar.com *.facebook.com *.trustpilot.com *.criteo.com *.vidyard.com *.mheducation.com cloud.3dissue.net player.flipsnack.com *.cloudfront.net *.qualtrics.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google.com *.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.googleapis.com *.linkedin.com *.googletagmanager.com gallery.mailchimp.com *.trustedshops.com *.facebook.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net *.hsforms.net *.hsforms.com 'self' data: www.google.de adservice.google.com analytics.twitter.com app-sj01.marketo.com asia-s3-mhe-prod.s3.amazonaws.com cdn.honey.io cdn3.iconfinder.com co1.qualtrics.com covers.mhedu.com ecommerce.payulatam.com fonts.gstatic.com i.pinimg.com info.mheducation.com learn.mheducation.com log-papago.naver.com m.media-amazon.com mheducation-mea.github.io mhp-assets.s3.amazonaws.com px4.ads.linkedin.com region1.google-analytics.com simplesharebuttons.com siteintercept.qualtrics.com spain-s3-mhe-prod.s3.amazonaws.com t.co translate.google.com www-mheducation-ca.ezpminer.urmc.rochester.edu www.accessengineeringlibrary.com www.facebook.com *.google.co.uk www.linkedin.com www.mheducation.ca www.mheducation.com www.mheducation.es asia-s3-mhe-prod.s3-eu-west-1.amazonaws.com asia-s3-mhe-prod.s3.eu-west-1.amazonaws.com canada.p.ctidigital.com cdn.vidyard.com connect.facebook.net image.flaticon.com ir-in.amazon-adsystem.com latam-s3-mhe-prod.s3.eu-west-1.amazonaws.com login.dotomi.com media.msg.dotomi.com mhp-assets.s3.eu-west-1.amazonaws.com play.vidyard.com region1.analytics.google.com static.thenounproject.com ws-in.amazon-adsystem.com ad.doubleclick.net betterresearch.com canada.pre-prod.ctidigital.com ssl.google-analytics.com www.mheducation.co.in www.mhprofessional.com cdn.cookielaw.org cloud.3dissue.net fast.wistia.com player.flipsnack.com *.cloudfront.net *.qualtrics.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.google-analytics.com *.trustpilot.com *.newrelic.com *.nr-data.net cdn.jsdelivr.net *.googleoptimize.com *.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com *.hsforms.net *.hsforms.com https://www.googletagmanager.com tagmanager.google.com unpkg.com analytics.tiktok.com connect.facebook.net munchkin.marketo.net script.hotjar.com static.hotjar.com tools.luckyorange.com ucads-cdn.ucweb.com app-sj01.marketo.com gateway.zscalerone.net info.mheducation.com learn.mheducation.com nd3n4.m70vee7.com play.vidyard.com siteintercept.qualtrics.com static.ads-twitter.com code.jquery.com sleeknotecustomerscripts.sleeknote.com wsc2e.ez05w7r.com iframely.net www.google.com 4ddons.com 7896543.s3.amazonaws.com cdnjs.cloudflare.com ssl.google-analytics.com www.ili.ir www.mhprofessional.com www.pagespeed-mod.com cdn.cookielaw.org app-sjqe.marketo.com *.siteintercept.qualtrics.com *.payulatam.com *.cloudflare.com fast.wistia.com player.flipsnack.com *.cloudfront.net *.qualtrics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net *.gstatic.com tagmanager.google.com app-sj01.marketo.com cdn.honey.io info.mheducation.com learn.mheducation.com fonts.bunny.net www.mhprofessional.com fast.wistia.com player.flipsnack.com *.cloudfront.net 'self' 'unsafe-inline'; object-src info.mheducation.com player.flipsnack.com 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com asia-s3-mhe-prod.s3-eu-west-1.amazonaws.com content.studysync.com mhp-assets.s3.amazonaws.com spain-s3-mhe-prod.s3.amazonaws.com asia-s3-mhe-prod.s3.eu-west-1.amazonaws.com cloud.3dissue.net/14552/14572/14643/88645/index.html fast.wistia.com player.flipsnack.com *.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.nr-data.net *.clarity.ms *.facebook.com *.datatrics.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.net *.payulatam.com 128-sjw-347.mktoresp.com 128-sjw-347.mktoutil.com 303-fkf-702.mktoresp.com 303-fkf-702.mktoutil.com ad.doubleclick.net adservice.google.com api-preview.luckyorange.com centinelapi.cardinalcommerce.com csmetrics.hotjar.com geolocation.onetrust.com gjtrack.ucweb.com kg668dbov0.execute-api.us-east-1.amazonaws.com metrics.hotjar.io play.vidyard.com plugin.ucads.ucweb.com privacyportal.onetrust.com pubsub.googleapis.com region1.analytics.google.com settings.luckyorange.com siteintercept.qualtrics.com translate.googleapis.com vc.hotjar.io wedata.net ws2.hotjar.com www.facebook.com www.google.ad www.google.ae www.google.at www.google.be www.google.ca www.google.ch www.google.cl www.google.co.cr www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.co.th www.google.co.uk www.google.co.za www.google.co.zw www.google.com www.google.com.ar www.google.com.au www.google.com.bh www.google.com.co www.google.com.do www.google.com.ec www.google.com.fj www.google.com.gt www.google.com.hk www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pr www.google.com.sa www.google.com.sg www.google.com.tr www.google.cz www.google.de www.google.es www.google.gr www.google.hn www.google.hr www.google.it www.google.nl www.google.ru www.google.se analytics.tiktok.com cdn.linkedin.oribi.io content.hotjar.io realtime.luckyorange.com writer.cardinalcommerce.com ws.hotjar.com ws25.hotjar.com www.google.com.eg www.google.com.tw www.google.ie www.google.ro subwayblaze.com www.mhprofessional.com cdn.cookielaw.org wss://ws.hotjar.com *.wistia.com player.flipsnack.com *.cloudfront.net *.qualtrics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com play.vidyard.com player.flipsnack.com *.wistia.com *.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4 frame-ancestors 'self' https://*.biahosted.com https://*.paymentiq.io https://*.safecharge.com 4 default-src 'self'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; frame-src 'self'; form-action 'self' 4 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' data: https: blob:; frame-src 'self' https:; connect-src 'self' https:; 4 default-src 'self' https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.sprinklr.com 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline' *.bing.com https://*.fonts.net https://*.sprinklr.com content.securedvisit.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.cookielaw.org *.tiktok.com https://ct.pinterest.com https://storage.cloud.kargo.com *.invocacdn.com pnapi.invoca.net *.invoca.net https://*.recaptcha.net *.bridgestonetire.com hub.firestonecompleteautocare.com *.doubleclick.net *.adobedtm.com *.google-analytics.com *.everestjs.net *.pinimg.com *.hotjar.com *.bing.com *.googleadservices.com *.xg4ken.com *.facebook.net *.doubleclick.com *.googletagmanager.com *.akamaihd.net *.marchex.io *.everesttech.net *.iperceptions.com *.powerreviews.com *.iovation.com *.iesnare.com *.googleapis.com *.virtualearth.net *.recaptcha.net *.gstatic.com *.jquery.com *.twitter.com *.ads-twitter.com https://assets.adobedtm.com/ https://www.google.com/recaptcha/ https://login.dotomi.com/ https://www.youtube.com/ https://*.cloudfront.net/ https://*.incontact.com/ https://*.dialogtech.com/ https://*.sprinklr.com/ api.securedvisit.com content.securedvisit.com track.sv.rkdms.com sv.firestonetire.com sv.bridgestonetire.com https://live.rezync.com https://www.redditstatic.com https://*.undertone.com https://*.amazon-adsystem.com https://*.boomtrain.com https://*.rfihub.com https://*.rfihub.net https://*.lightboxcdn.com https://lightboxapi.azurewebsites.net https://*.netmng.com https://*adnxs.com ; img-src * data: blob: ; connect-src * ; frame-src 'self' api.securedvisit.com https://*.rfihub.com https://*.rfihub.net ; font-src 'self' https://*.fonts.net https://*.bridgestoneresources.com data:; media-src 'self' https://assets.bridgestonetire.com 4 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; 4 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; worker-src 'self' 'unsafe-inline' * blob:; 4 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; frame-src https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; 4 default-src 'self'; img-src 'self';script-src 'self' 'sha256-J+Y4l+yfxXd4cYzH9LhXUSHSb7zZu2bgddfCumVZJMo=';object-src 'none';form-action 'none';frame-src 'none';style-src 'self' 'sha256-OU0LTytxyR8kjQ+DRjRCDKhUAKEeH7rb0D5nBWOzRlQ=' 4 upgrade-insecure-requests;; upgrade-insecure-requests 4 default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; media-src 'self'; form-action 'self' https://www.server-team1.de https://www.server-team3.de; child-src 'self' https://www.google.com https://www.server-team1.de https://www.server-team3.de; frame-ancestors 'self'; connect-src 'self' https://api.imgur.com; report-uri 'self'; report-to 'self'; 4 frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk 4 frame-ancestors 'self' *.shoplineapp.com *.facebook.com; upgrade-insecure-requests; 4 style-src * 'self' 'unsafe-inline'; 4 script-src 'self' http://java.sun.com/jsp/jstl/core http://java.sun.com/jsp/jstl/fmt http://tiles.apache.org/tags-tiles 'unsafe-inline' 'wasm-unsafe-eval'; frame-src 'self' 4 default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.clarity.ms https://scripts.clarity.ms https://static.ads-twitter.com https://analytics.tiktok.com https://maps.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://www.gstatic.com https://sc-static.net https://tr.snapchat.com https://i.clarity.ms https://cdn.jsdelivr.net https://*.onesignal.com https://*.dengage.com https://*.firebasedatabase.app 'unsafe-inline' ; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' https://*.indolj.io https://fonts.gstatic.com; img-src 'self' data: https: https://assets.indolj.io https://console.indolj.io https://admin.indolj.io https://menu.indolj.pk https://menu.indolj.io https://staging.indolj.io https://carddiscounts.californiapizza.com.pk https://cdn1.iconfinder.com https://uat-system.indolj.io https://www.sliderrevolution.com https://sliderrevolution.com https://www.facebook.com https://analytics.tiktok.com https://stats.g.doubleclick.net https://www.google.com https://googleads.g.doubleclick.net https://cloud.symits.com https://www.clarity.ms https://sc-static.net https://i.clarity.ms https://eu-pcdn.dengage.com https://tr.snapchat.com; connect-src 'self' https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net https://analytics.tiktok.com https://graph.facebook.com https://www.clarity.ms https://scripts.clarity.ms https://sc-static.net https://www.google.com https://www.google.com.pk https://maps.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://tr.snapchat.com https://i.clarity.ms https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://identitytoolkit.googleapis.com https://cloud.symits.com https://*.dengage.com https://*.firebasedatabase.app wss://*.firebasedatabase.app https://*.google-analytics.com https://*.onesignal.com https://*.indolj.io https://*.easypaisa.com.pk; frame-src https://www.google.com https://maps.google.com https://www.googletagmanager.com https://td.doubleclick.net https://cloud.symits.com https://*.firebasedatabase.app; frame-ancestors 'self' https://*.indolj.io https://*.easypaisa.com.pk; object-src 'none'; base-uri 'self'; form-action 'self' https://*.easypaisa.com.pk; 4 connect-src * blob:; font-src * data:; frame-src *; img-src * blob: data:; media-src *; object-src *; frame-ancestors 'self' https://www.youtube.com https://player.vimeo.com https://drive.google.com https://*.dropbox.com 4 base-uri 'self'; frame-ancestors 'self' https://sage.pathfactory.com https://explore.sage.com; 4 script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist 3 default-src 'self' blob: https://*.cnn.com:* http://*.cnn.com:* *.cnn.io:* *.cnn.net:* *.turner.com:* *.turner.io:* *.ugdturner.com:* courageousstudio.com *.vgtf.net:*; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' blob: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: blob: *; media-src 'self' data: blob: *; font-src 'self' data: *; connect-src 'self' data: *; frame-ancestors 'self' https://*.cnn.com:* http://*.cnn.com https://*.cnn.io:* http://*.cnn.io:* *.turner.com:* courageousstudio.com; 3 default-src 'none'; font-src 'self'; style-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ; frame-ancestors 'none'; 3 frame-ancestors 'self' https://*.un.org; 3 connect-src 'self' *.maps.yandex.net api-maps.yandex.ru api.selectel.ru hog.selectel.ru https://chatwoot.selectel.ru wss://chatwoot.selectel.ru https://statuspal.io/api/v2/status_pages/selectel/summary https://*.mindbox.ru https://selectel.ru https://cdn.selectel.ru https://top-fwz1.mail.ru https://web.popmechanic.ru https://metrics.selectel.ru https://speedtest.selectel.ru leads.selectel.ru mc.yandex.ru suggest-maps.yandex.ru wss://api.selectel.ru wss://ws.selectel.ru www.youtube.com https://yulixr.ru/ https://hooks.zapier.com/hooks/catch/11509819/ https://hooks.zapier.com/hooks/catch/12416931/ https://script.google.com/a/macros/selectel.com/s/AKfycbzM4er3RoKbPw3cQALGtakLQ7xfTtUk8PETDoXQyYh6kiCLnhu1oO4iCy2CuhT38cGrCA/exec https://files.selectel.ru https://telegram.org/pxl https://core.service.elfsight.com; default-src 'none'; font-src 'self' data: https://cdn.selectel.ru https://6f3bf64a-14d1-4b68-9202-2a000ca072b9.selcdn.net; frame-ancestors 'self' my.selectel.ru promo.selectel.ru go.teachbase.ru learn.selectel.org webvisor.com metrika.yandex.ru; frame-src 'self' https://selectel.ru api-maps.yandex.ru calc.selectel.ru https://chatwoot.selectel.ru googleads.g.doubleclick.net https://forms.amocrm.ru/ https://player.vimeo.com/ https://vk.com/ https://vk.ru www.google.com www.google.ru www.youtube.com https://rutube.ru/ https://kinescope.io/ https://*.selectel.org; img-src https: data: blob:; manifest-src 'self'; media-src 'self' https://chatwoot.selectel.ru https://cdn.selectel.ru https://6f3bf64a-14d1-4b68-9202-2a000ca072b9.selcdn.net https://files.selectel.ru; object-src 'self' blob:; report-uri https://relay.selectel.ru/api/87/security/?sentry_key=33110db9255441e5b312279003c189b1 https://relay.selectel.ru/api/20/csp-report/?sentry_key=7af12a7683624269a0cab11188e3d86e; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.maps.yandex.net api-maps.yandex.ru cdn.ampproject.org hog.selectel.ru https://chatwoot.selectel.ru https://cdn.selectel.ru https://api.selectel.ru https://6f3bf64a-14d1-4b68-9202-2a000ca072b9.selcdn.net https://cse.google.com/adsense/search/async-ads.js https://cse.google.com/cse.js https://cse.google.com/cse/element/v1 https://s.ytimg.com https://static.popmechanic.ru https://top-fwz1.mail.ru https://vk.com https://vk.ru https://www.google.com https://metrics.selectel.ru mc.yandex.ru https://*.mindbox.ru https://widgets.mango-office.ru https://dct.mango-office.ru selectel.ru suggest-maps.yandex.ru www.google.com www.googleadservices.com www.gstatic.com www.youtube.com yastatic.net https://telegram.org/js/pixel.js https://elfsightcdn.com https://universe-static.elfsightcdn.com; style-src 'self' 'unsafe-inline' https://cdn.selectel.ru/ https://6f3bf64a-14d1-4b68-9202-2a000ca072b9.selcdn.net https://chatwoot.selectel.ru https://fonts.googleapis.com https://static.popmechanic.ru https://www.google.com/cse/static/element/ https://www.google.com/cse/static/style/look/v4/espresso.css https://*.mindbox.ru; upgrade-insecure-requests; 3 script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://ajax.googleapis.com https://googleads.g.doubleclick.net https://www.youtube.com https://survey.g.doubleclick.net https://maps.googleapis.com https://www.googleadservices.com;report-uri /us/_/BgcMiscSites/cspreport/allowlist;worker-src blob: 'self' 3 base-uri 'self';connect-src 'self' *.mikrotik.com *.mt.lv;default-src 'self';font-src 'self' data: i.mt.lv mikrotik.com;form-action 'self';frame-src 'self' *.mikrotik.com *.mt.lv chatwith.tools www.google.com youtu.be youtube.com www.youtube.com tiktube.com www.tiktube.com;img-src 'self' data: *.basemaps.cartocdn.com *.mt.lv *.routerboard.com i.ytimg.com mikrotik.com *.mikrotik.com tile.openstreetmap.org *.tile.openstreetmap.org;media-src 'self';object-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' data: chatwith.tools gstatic.com *.gstatic.com i.mt.lv mikrotik.com *.mikrotik.com;style-src 'self' 'unsafe-inline' i.mt.lv mikrotik.com *.mikrotik.com;frame-ancestors 'self' *.mt.lv 3 object-src 'none'; frame-ancestors 'self' *.amplitude.com amplitude--fulldev.sandbox.my.site.com amplitude.my.site.com 3 base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org; script-src 'self' *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net *.googletagmanager.com *.marketo.net *.atlassian.com utt.impactcdn.com *.google.com *.doubleclick.com *.googleadservices.com *.livechatinc.com *.bing.com *.quora.com *.yimg.jp *.clicktale.net *.linkedin.com *.twitter.com *.licdn.com *.demandbase.com *.doubleclick.net *.facebook.net *.redditstatic.com *.clearbitscripts.com *.clarity.ms *.vimeo.com *.google-analytics.com facebook.com *.facebook.com impactcdn.com *.impactcdn.com clearbitjs.com *.clearbitjs.com yahoo.co.jp *.yahoo.co.jp *.recaptcha.net *.ads-twitter.com *.intercom.io *.intercomcdn.com *.jsdelivr.net *.6sc.co *.6sense.com *.techtarget.com *.capterra.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org roundprincethere.com *.roundprincethere.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.public.atl-paas.net *.prod.atl-paas.net fonts.googleapis.com *.googletagmanager.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org 'unsafe-inline'; img-src 'self' blob: data: atlassian.com *.atlassian.com *.cookielaw.org *.gravatar.com *.wp.com fd-assets.prod.atl-paas.net pixel.pointmediatracker.com *.prod.public.atl-paas.net cnv.event.prod.bidr.io *.doubleclick.net *.clicktale.net *.bing.com rlcdn.com reddit.com quora.com *.rlcdn.com *.reddit.com *.quora.com *.ctfassets.net *.linkedin.com *.google.com *.google.com.au *.company-target.com *.facebook.com *.google-analytics.com *.twitter.com t.co *.intercomcdn.com *.intercomassets.com *.frontend.public.atl-paas.net *.orangelogic.com *.googletagmanager.com img.logo.dev *.atlassian.net sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org bytebucket.org *.bytebucket.org bitbucket-assetroot.s3.amazonaws.com; font-src 'self' *.ctfassets.net *.intercomcdn.com *.gstatic.com *.frontend.public.atl-paas.net *.atl.orangelogic.com; frame-ancestors 'none'; form-action 'self'; report-uri https://web-security-reports.services.atlassian.com/csp-report/wac-web; report-to csp-default-endpoint; connect-src 'self' ws: atlassian.com *.atlassian.com *.cookielaw.org *.onetrust.com *.public.atl-paas.net *.prod.atl-paas.net *.mktoresp.com *.ingest.sentry.io *.workato.com atlassian.sjv.io statsigapi.net *.statsigapi.net *.contentful.com atlassian.net *.clicktale.net *.contentsquare.net *.bing.com google-analytics.com company-target.com linkedin.com *.google-analytics.com *.company-target.com *.linkedin.com *.doubleclick.net *.reddit.com *.redditstatic.com *.google.com *.demandbase.com *.clarity.ms *.clearbit.com *.intercom.io *.algolianet.com *.algolia.net *.algolia.io *.recaptcha.net https://unpkg.com/@rive-app/ *.facebook.com *.orangelogic.com *.adnxs.com *.6sc.co *.6sense.com m.castle.io apis.auxia.io *.atlassian.net https://participant.connect.us-east-1.amazonaws.com wss://participant.connect.us-east-1.amazonaws.com *.connect.us-east-1.amazonaws.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org; worker-src 'self' blob:; frame-src 'self' *.youtube.com *.google.com *.doubleclick.net *.recaptcha.net *.atl-paas.net *.company-target.com *.googletagmanager.com *.atlassian.net; media-src 'self' *.ctfassets.net *.atlassian.com *.orangelogic.com 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' https: 3 default-src *.clarity.ms ml314.com *.romeo.liveclicker.com romeo.liveclicker.com cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval' 'self'; script-src https://unpkg.com https://cdnjs.cloudflare.com *.hawksearch.net https://cdn.insight.sitefinity.com https://dec.azureedge.net https://js.monitor.azure.com 'unsafe-inline' 'unsafe-eval' munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org web-chat.nativechat.com code.jquery.com kendo.cdn.telerik.com maps.google.com z.moatads.com v1.addthisedge.com *.googletagmanager.com *.quantcast.com *.quantserve.com *.quantcount.com cltgtstor001.blob.core.windows.net *.slgnt.us cdn.polyfill.io googleads.g.doubleclick.net static.ads-twitter.com snap.licdn.com *.adroll.com t.co analytics.twitter.com *.google.com *.linkedin.com *.33across.com *.hotjar.com cdn.jsdelivr.net ml314.com *.clarity.ms *.romeo.liveclicker.com romeo.liveclicker.com *.sitescout.com cdn01.basis.net *.pixel.ad *.surveymonkey.com cmp.inmobi.com *.onetrust.com assistant.woorank.com cdn.ribbonapp.com www.youtube.com *.sagepub.com app-sfrenderer-ci-westus-001.azurewebsites.net app-sfrenderer-dev-westus-001.azurewebsites.net app-sfrenderer-qa-westus-001.azurewebsites.net app-sfrenderer-uat-westus-001.azurewebsites.net app-sfrenderer-stg-westus-001.azurewebsites.net translate.google.com translate.googleapis.com translate-pa.googleapis.com www.google-analytics.com *.posthog.com public.virtualbadge.io static.virtualbadge.io solve-widget.forethought.ai https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api 'self'; style-src 'unsafe-inline' https://unpkg.com *.hawksearch.net https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googletagmanager.com *.romeo.liveclicker.com romeo.liveclicker.com *.sagepub.com app-sfrenderer-ci-westus-001.azurewebsites.net app-sfrenderer-dev-westus-001.azurewebsites.net app-sfrenderer-qa-westus-001.azurewebsites.net app-sfrenderer-uat-westus-001.azurewebsites.net app-sfrenderer-stg-westus-001.azurewebsites.net www.gstatic.com fonts.googleapis.com 'self'; connect-src *.hawksearch.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com https://dc.services.visualstudio.com *.mktoresp.com *.googletagmanager.com maps.googleapis.com *.quantcast.com *.quantserve.com *.quantcount.com *.hawksearch.com www.google.com googleads.g.doubleclick.net *.slgnt.us stats.g.doubleclick.net *.google.com *.linkedin.com *.adroll.com cdn.linkedin.oribi.io *.hotjar.com wss://*.hotjar.com *.hotjar.io ml314.com *.clarity.ms cmp.inmobi.com api.cmp.inmobi.com google.com *.googlesyndication.com *.onetrust.com www.woorank.com *.sagepub.com app-sfrenderer-ci-westus-001.azurewebsites.net app-sfrenderer-dev-westus-001.azurewebsites.net app-sfrenderer-qa-westus-001.azurewebsites.net app-sfrenderer-uat-westus-001.azurewebsites.net app-sfrenderer-stg-westus-001.azurewebsites.net nominatim.openstreetmap.org translate-pa.googleapis.com translate.googleapis.com www.google-analytics.com *.applicationinsights.azure.com js.monitor.azure.com assistant.woorank.com *.posthog.com public.virtualbadge.io unpkg.com 'self'; frame-src players.brightcove.net *.slgnt.us www.youtube.com www.buzzsprout.com *.sitescout.com *.surveymonkey.com *.sagepub.com www.googletagmanager.com public.virtualbadge.io solve-widget.forethought.ai; img-src data: https://cf-images.us-east-1.prod.boltdns.net https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.eloqua.com web-chat.nativechat.com maps.google.com *.quantserve.com *.quantcount.com t.co *.twitter.com *.google.com *.linkedin.com *.adroll.com x.bidswitch.net cm.g.doubleclick.net dsum-sec.casalemedia.com idsync.rlcdn.com pixel.rubiconproject.com us-u.openx.net sync.outbrain.com image2.pubmatic.com ups.analytics.yahoo.com sync.taboola.com eb2.3lift.com ib.adnxs.com *.google-analytics.com *.googletagmanager.com corwinpress.azureedge.net *.clarity.ms ml314.com ps.eyeota.net sync.crwdcntrl.net match.adsrvr.org dpm.demdex.net *.sitescout.com www.google.com.ni googleads.g.doubleclick.net cmn-cdn-uat-001.sagepub.com cmn-cdn-001.sagepub.com https://sagepubcoreweb.blob.core.windows.net *.sagepub.com *.openstreetmap.org *.onetrust.com www.gstatic.com translate.googleapis.com fonts.gstatic.com c.bing.com https://cdn.insight.sitefinity.com 'self'; font-src fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com cdnjs.cloudflare.com 'self' data:; media-src 'self' 3 default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' cursor.com *.cursor.com cursor.sh *.cursor.sh *.tiktok.com alb.reddit.com pixel-config.reddit.com www.redditstatic.com *.unifyintent.com *.cloudfront.net pro.ip-api.com *.liadm.com *.usbrowserspeed.com alocdn.com va.vercel-scripts.com vercel.live jobs.ashbyhq.com os.ryo.lu connect.facebook.net snap.licdn.com js.zi-scripts.com ws-assets.zoominfo.com *.chilipiper.com www.googletagmanager.com *.googletagmanager.com *.roadwayai.com www.googleadservices.com www.google.com pagead2.googlesyndication.com *.doubleclick.net s.pinimg.com sc-static.net *.snapchat.com chat.cdn-plain.com ; connect-src 'self' cursor.com *.cursor.com cursor.sh *.cursor.sh unifyintent.com *.unifyintent.com *.cloudfront.net pro.ip-api.com *.liadm.com *.usbrowserspeed.com alocdn.com 9xgnrndqve.execute-api.us-west-2.amazonaws.com api.ashbyhq.com jobs.ashbyhq.com api.conceptualhq.com ip.conceptualhq.com *.facebook.com facebook.com *.ads.linkedin.com snap.licdn.com featureassets.org prodregistryv2.org youtube.com *.youtube.com js.zi-scripts.com ws.zoominfo.com *.zoominfo.com *.chilipiper.com www.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com *.roadwayai.com *.mux.com stream.mux.com inferred.litix.io pagead2.googlesyndication.com www.googleadservices.com *.doubleclick.net www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws *.tiktok.com *.tiktokw.us pixel-config.reddit.com alb.reddit.com s.pinimg.com *.snapchat.com chat.uk.plain.com prod-uk-services-attachm-attachmentsuploadbucket2-1l2e4906o2asm.s3.eu-west-2.amazonaws.com ; worker-src 'self' blob: data: cursor.com *.cursor.com cursor.sh *.cursor.sh ; style-src 'self' 'unsafe-inline' cursor.com *.cursor.com cursor.sh *.cursor.sh fonts.googleapis.com ; img-src 'self' blob: data: cursor.com *.cursor.com cursor.sh *.cursor.sh *.tiktok.com alb.reddit.com www.redditstatic.com pbs.twimg.com *.public.blob.vercel-storage.com *.facebook.com facebook.com *.ads.linkedin.com *.chilipiper.com www.googletagmanager.com *.google-analytics.com *.mux.com image.mux.com images.lumacdn.com cdn.lu.ma prod-uk-services-workspac-workspacefilespublicbuck-vs4gjqpqjkh6.s3.amazonaws.com prod-uk-services-attachm-attachmentsbucket28b3ccf-uwfssb4vt2us.s3.eu-west-2.amazonaws.com i0.wp.com *.doubleclick.net pagead2.googlesyndication.com www.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws ct.pinterest.com *.snapchat.com ; media-src 'self' blob: data: cursor.com *.cursor.com cursor.sh *.cursor.sh *.public.blob.vercel-storage.com *.mux.com stream.mux.com ; font-src 'self' cursor.com *.cursor.com cursor.sh *.cursor.sh fonts.gstatic.com ; object-src 'none' ; base-uri 'self' ; form-action 'self' cursor.com *.cursor.com cursor.sh *.cursor.sh vercel.live *.chilipiper.com ; frame-src 'self' cursor.com *.cursor.com cursor.sh *.cursor.sh vercel.live jobs.ashbyhq.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com youtu.be *.chilipiper.com www.googletagmanager.com chat.uk.plain.com *.plain.com *.snapchat.com ; frame-ancestors 'self' cursor.com *.cursor.com cursor.sh *.cursor.sh ; upgrade-insecure-requests; 3 default-src *.asus.com *.asus.com.cn *.freshworksapi.com http://127.0.0.1:24830 http://127.0.0.1:24831 http://127.0.0.1:24832 https: 'unsafe-inline' 'unsafe-eval' blob: data: ws:;style-src * 'unsafe-inline';object-src *; script-src *.asus.com *.asus.com.cn https: 'unsafe-inline' 'unsafe-eval' blob: data:; frame-ancestors 'self' *.asus.com; 3 script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: https:; style-src 'self' 'unsafe-inline' blob: data: https:; default-src 'self' https:; img-src https: blob: data: android-webview-video-poster:; frame-src blob: data: https:; worker-src blob: data: https:; child-src blob: data: https:; object-src 'self'; font-src 'self' https: blob: data: safari-extension://*; media-src 'self' blob: data: https:; connect-src wss: blob: data: https: 3 base-uri 'self'; connect-src https://demo.synology.com:5001 https://*.demo.synology.com:5001 https://demo.synology.de:5001 https://*.demo.synology.de:5001 https://bat.bing.com https://mc.yandex.ru *.mouseflow.com https://in.hotjar.com/ https://vc.hotjar.io wss://*.hotjar.com/ analytics.twitter.com 'self' https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://www.facebook.com https://graph.facebook.com https://analytics.synology.com https://px.adhigh.net/ https://*.clarity.ms https://api-fra.livechatinc.com https://api.mapbox.com https://events.mapbox.com https://fw-cdn.com https://src.fwusercontent.com https://synologyc2.myfreshworks.com https://lottie.host/ https://webec.synodev.com https://webec-cn.synodev.com https://webec.synology.com https://webec.synology.cn https://*.synodev.com https://*.synology.com https://api.store-test.synology.com https://api.store.synology.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net/ https://*.googletagmanager.com https://pagead2.googlesyndication.com *.google-analytics.com *.analytics.google.com https://*.googleadservices.com https://*.google.com.tw https://www-ai.synology.com; default-src 'self'; font-src *.mouseflow.com 'self' data: https://synostatic.synology.com https://cdn.livechatinc.com https://use.typekit.net https://p.typekit.net https://themes.googleusercontent.com https://fonts.gstatic.com; frame-ancestors metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr *.webvisor.com 'self' https://*.facebook.com; frame-src *.mouseflow.com https://vars.hotjar.com/ 'self' https://*.synology.com https://*.facebook.com https://staticxx.facebook.com https://px.adhigh.net/ https://player.youku.com/ https://synology.jobbase.io https://secure.livechatinc.com https://secure-fra.livechatinc.com https://api-fra.livechatinc.com https://*.personio.com https://*.personio.de https://synology.onlyfy.jobs https://youtube.com https://www.youtube.com https://cse.google.com https://www.googletagmanager.com https://*.doubleclick.net https://optimize.google.com https://synoform.synology.com; img-src https://*.bing.com https://mc.yandex.ru https://alb.reddit.com *.mouseflow.com https://wcs.naver.com analytics.twitter.com https://t.co/ 'self' data: blob: https://*.synology.com https://global.download.synology.com https://cndl.synology.cn https://gallery.synology.com https://gallery.test.synology.inc https://global.synologydownload.com https://*.linkedin.com https://p.adsymptotic.com/d/px https://www.facebook.com https://*.clarity.ms https://c.bing.com https://secure.livechatinc.com https://secure-fra.livechatinc.com https://cdn.livechatinc.com https://api-fra.livechatinc.com https://cdn.livechat-files.com https://api.mapbox.com https://*.ytimg.com https://img.youtube.com https://*.google-analytics.com https://*.doubleclick.net https://*.googleapis.com https://*.google.com https://*.google.de https://*.google.com.tw https://*.gstatic.com https://*.googletagmanager.com *.google-analytics.com *.analytics.google.com; media-src 'self' https://gallery.synology.com https://download.synology.com https://fileres.synology.com/ https://cdn.livechatinc.com https://api-fra.livechatinc.com; object-src 'none'; script-src https://demo.synology.com https://demo.synology.de https://bat.bing.com https://mc.yandex.ru https://www.redditstatic.com *.mouseflow.com https://static.hotjar.com https://script.hotjar.com/ https://wcs.naver.net/wcslog.js https://analytics.twitter.com https://static.ads-twitter.com https://t.co/i/adsct 'self' blob: 'unsafe-eval' https://snap.licdn.com https://www.linkedin.com/px/ https://px.ads.linkedin.com https://sjs.bizographics.com/insight.min.js https://connect.facebook.net https://px.adhigh.net/ https://cdnjs.cloudflare.com https://synology.jobbase.io https://*.clarity.ms https://cdn.livechatinc.com https://code.jquery.com https://secure.livechatinc.com https://secure-fra.livechatinc.com https://accounts.livechatinc.com https://api.livechatinc.com https://api-fra.livechatinc.com https://synology.onlyfy.jobs https://api.mapbox.com fw-cdn.com https://*.freshsales.io https://synologyc2.myfreshworks.com https://unpkg.com 'nonce-b1556dea32e9d0cdbfed038fd7787275775ea40939c146a64e205bcb349ad02f' https://www.youtube.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://cse.google.com https://clients1.google.com https://tagmanager.google.com https://www.gstatic.com https://*.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://www.gstatic.cn https://www.recaptcha.net https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://synostatic.synodev.com https://synostatic.synology.com https://cdnjs.cloudflare.com https://cdn.livechat-files.com https://api.mapbox.com https://assets.freshsales.io https://use.typekit.net https://p.typekit.net https://www.google.com https://fonts.googleapis.com https://tagmanager.google.com https://www.googletagmanager.com https://optimize.google.com 3 media-src *.netgear.com;img-src *.demandware.net *.commercecloud.salesforce.com *.contentstack.io cdn.contentstack.io assets.contentstack.io placehold.co *.bazaarvoice.com *.google.com *.googletagmanager.com *.netgear.com *.facebook.com *.mobify-storefront.com *.crazyegg.com user-images.crazyeggcdn.com *.facebook.net *.pepperjam.com *.bing.com *.adsrvr.org *.criteo.com *.attn.tv *.amazon-adsystem.com *.paa-reporting-advertising.amazon rtb-csync.smartadserver.com x.bidswitch.net *.adnxs.com partner.mediawallahscript.com r.casalemedia.com ads.stickyadstv.com ad.360yield.com *.liadm.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com trends.revcontent.com *.rubiconproject.com sync-t1.taboola.com tapestry.tapad.com criteo-sync.teads.tv criteo-partners.tremorhub.com ade.clmbtech.com eb2.3lift.com sync.1rx.io dpm.demdex.net aa.agkn.com *.doubleclick.net *.tpmn.co.kr thrtle.com *.lijit.com *.simpli.fi *.openx.net *.pippio.com *.unrulymedia.com *.crwdcntrl.net ad.mrtnsvr.com *.imrworldwide.com *.yahoo.com *.rlcdn.com *.pubmatic.com *.bidr.io *.dmxleo.com *.dotomi.com *.ipredictive.com *.mathtag.com *.licdn.com *.linkedin.com *.datagrail.io *.adition.com *.stackadapt.com *.sportradarserving.com *.googlesyndication.com *.tribalfusion.com tg.socdm.com cs.adingo.jp *.chatanexpert.com fonts.gstatic.com user-sync.fwmrm.net *.optimizely.com *.glassboxdigital.io *.gbqofs.com *.gbqofs.io *.powerstarsbuilding.com *.hsforms.com *.hsforms.net *.hubspot.com *.google.co.uk *.google.de *.google.fr *.google.nl *.google.co.at *.google.be *.google.com.au *.google.co.jp *.google.co.in *.google.co.kr *.google.com.hk *.google.com.sg *.google.ru *.google.it *.google.es *.google.pl *.google.se *.google.ie *.googleadservices.com cs.media.net id5-sync.com *.yieldlab.net *.reddit.com bzrcdn.openai.com *.trustedshops.com q.stripe.com *.stripecdn.com *.inmobi.com data: insight.adsrvr.org 'self';script-src 'self' storage.googleapis.com cdn.jsdelivr.net apps.bazaarvoice.com *.api.bazaarvoice.com display.ugc.bazaarvoice.com cdn1-sandbox.affirm.com cdn1.sandbox.affirm.com cdn1.affirm.com maps.googleapis.com *.bazaarvoice.com 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.cookielaw.org *.onetrust.com *.google.com *.gstatic.com unpkg.com *.crazyegg.com *.facebook.net *.pepperjam.com *.bing.com *.adsrvr.org *.criteo.com *.attn.tv *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.facebook.com *.salesforce.com *.salesforce-sites.com *.force.com *.salesforceliveagent.com *.linkedin.com *.datagrail.io *.adition.com *.rubiconproject.com *.chatanexpert.com *.sportradarserving.com *.googlesyndication.com geoip-js.com user-sync.fwmrm.net *.datadoghq.com *.datadoghq-browser-agent.com *.liadm.com *.hs-scripts.com *.optimizely.com *.downloads.netgear.com *.forethought.ai *.glassboxcdn.com *.glassboxdigital.io *.gbqofs.com *.gbqofs.io *.powerstarsbuilding.com *.licdn.com *.doubleclick.net www.datadoghq-browser-agent.com www.google-analytics.com bat.bing.com bat.bing.com/p/insights snap.licdn.com *.hubspot.com *.hsanalytics.net *.hscollectedforms.net *.brighttalk.com *.youtube.com *.hsforms.com *.hsforms.net *.hs-analytics.net *.hs-banner.com recaptcha.net *.recaptcha.net *.cloudflareinsights.com *.trustedshops.com *.teads.tv pzapi-ij.com edge.fullstory.com *.fullstory.com *.upsellit.com *.redditstatic.com bzrcdn.openai.com js.stripe.com m.stripe.network *.px-cloud.net *.px-cdn.net ntgr--fullcopy.sandbox.my.site.com https://runtime.commercecloud.com;script-src-elem 'self' storage.googleapis.com cdn.jsdelivr.net apps.bazaarvoice.com *.api.bazaarvoice.com display.ugc.bazaarvoice.com cdn1-sandbox.affirm.com cdn1.sandbox.affirm.com cdn1.affirm.com maps.googleapis.com *.bazaarvoice.com 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.cookielaw.org *.onetrust.com *.google.com *.gstatic.com unpkg.com *.crazyegg.com *.facebook.net *.pepperjam.com *.bing.com *.adsrvr.org *.criteo.com *.attn.tv *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.facebook.com *.salesforce.com *.salesforce-sites.com *.force.com *.salesforceliveagent.com *.linkedin.com *.datagrail.io *.adition.com *.rubiconproject.com *.chatanexpert.com *.sportradarserving.com *.googlesyndication.com geoip-js.com user-sync.fwmrm.net *.datadoghq.com *.datadoghq-browser-agent.com *.liadm.com *.hs-scripts.com *.optimizely.com *.downloads.netgear.com *.forethought.ai *.glassboxcdn.com *.glassboxdigital.io *.gbqofs.com *.gbqofs.io *.powerstarsbuilding.com *.licdn.com *.doubleclick.net www.datadoghq-browser-agent.com www.google-analytics.com bat.bing.com bat.bing.com/p/insights snap.licdn.com *.hubspot.com *.hsanalytics.net *.hscollectedforms.net *.brighttalk.com *.youtube.com *.hsforms.com *.hsforms.net *.hs-analytics.net *.hs-banner.com recaptcha.net *.recaptcha.net *.cloudflareinsights.com *.trustedshops.com *.teads.tv pzapi-ij.com edge.fullstory.com *.fullstory.com *.upsellit.com *.redditstatic.com bzrcdn.openai.com js.stripe.com m.stripe.network *.px-cloud.net *.px-cdn.net ntgr--fullcopy.sandbox.my.site.com;connect-src api.cquotient.com *.c360a.salesforce.com *.contentstack.com *.cdn.contentstack.io cdn.contentstack.io assets.contentstack.io *.algolianet.com *.algolia.net insights.algolia.io cdn.jsdelivr.net *.bazaarvoice.com sandbox.affirm.com cdn-assets.affirm.com *.affirm.com affirm.com *.getalma.eu cdn.almapay.com *.google-analytics.com *.googletagmanager.com *.google.com google.com *.googleadservices.com *.doubleclick.net *.a.run.app 'self' 'unsafe-eval' 'unsafe-inline' *.mobify-storefront.com *.crazyegg.com *.facebook.net *.pepperjam.com *.bing.com *.adsrvr.org *.criteo.com *.attn.tv *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.facebook.com *.attentivemobile.com rtb-csync.smartadserver.com x.bidswitch.net ib.adnxs.com partner.mediawallahscript.com r.casalemedia.com ads.stickyadstv.com ad.360yield.com *.liadm.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com trends.revcontent.com *.rubiconproject.com sync-t1.taboola.com tapestry.tapad.com criteo-sync.teads.tv criteo-partners.tremorhub.com ade.clmbtech.com eb2.3lift.com sync.1rx.io dpm.demdex.net aa.agkn.com *.linkedin.com *.datagrail.io *.sportradarserving.com *.googlesyndication.com *.tribalfusion.com *.netgear.com *.chatanexpert.com geoip-js.com *.datadoghq.com browser-intake-datadoghq.com *.browser-intake-datadoghq.com www.datadoghq-browser-agent.com *.salesforce-sites.com *.optimizely.com *.forethought.ai *.glassboxdigital.io *.gbqofs.com *.gbqofs.io *.powerstarsbuilding.com www.google-analytics.com tracking.crazyegg.com rp.liadm.com ara.paa-reporting-advertising.amazon ssl.chatanexpert.com bat.bing.com bat.bing.com/p/insights *.hubspot.com *.hsforms.com *.hsforms.net *.hscollectedforms.net *.hs-banner.com recaptcha.net *.recaptcha.net *.google.co.uk *.google.de *.google.fr *.google.nl *.google.co.at *.google.be *.google.com.au *.google.co.jp *.google.co.in *.google.co.kr *.google.com.hk *.google.com.sg *.google.ru *.google.it *.google.es *.google.pl *.google.se *.google.ie *.fullstory.com *.reddit.com bzrcdn.openai.com bzr.openai.com api.stripe.com m.stripe.network *.apple.com *.paypal.com *.px-cloud.net *.px-cdn.net webpack: api.edq.com api.experianaperture.io api.experianmarketingservices.com ws2.ondemand.qas.com *.px-client.net fonts.gstatic.com ntgr.my.site.com nova.collect.igodigital.com *.trustedshops.com fonts.googleapis.com ntgr--fullcopy.sandbox.my.salesforce-scrt.com ntgr--fullcopy.sandbox.my.site.com rum.browser-intake-datadoghq.com obs.powerstarsbuilding.com https://runtime.commercecloud.com;worker-src 'self' blob: *.salesforce.com *.mobify-storefront.com localhost:3000 *.netgear.com;frame-ancestors 'self' *.contentstack.com *.optimizely.com *.netgear.com assets.contentstack.io https://runtime.commercecloud.com;frame-src *.netgear.com *.facebook.com *.affirm.com *.doubleclick.net *.googletagmanager.com *.a.run.app *.adsrvr.org *.criteo.com *.criteo.net *.paa-reporting-advertising.amazon *.attn.tv *.force.com *.salesforceliveagent.com *.datagrail.io *.youtube.com *.brighttalk.com *.hsforms.com *.hsforms.net recaptcha.net *.recaptcha.net *.chatanexpert.com *.optimizely.com *.downloads.netgear.com *.forethought.ai *.crazyegg.com assets.contentstack.io js.stripe.com hooks.stripe.com m.stripe.network *.stripecdn.com *.paypal.com paypalobjects.com *.paypalobjects.com *.px-cloud.net *.px-cdn.net crcldu.com *.crcldu.com ntgr--fullcopy.sandbox.my.site.com;style-src 'self' *.crazyegg.com *.chatanexpert.com 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net assets.contentstack.io ntgr--fullcopy.sandbox.my.site.com;script-src-attr 'unsafe-inline';default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';upgrade-insecure-requests 3 default-src https: data: https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.intercom.io wss://*.intercom.io https://js.intercomcdn.com 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https: mailto: tel: *.usercentrics.com https://vars.hotjar.com https://js.intercomcdn.com; worker-src 'self' blob: 3 default-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net ; script-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net sdk.privacy-center.org browser-update.org *.clarity.ms connect.facebook.net *.google.com *.gstatic.com *.googlesyndication.com *.googletagmanager.com *.google-analytics.com unpkg.com/web-vitals/ *.googleapis.com js.stripe.com *.paypal.com *.paypalobjects.com *.twitter.com *.youtube.com 'unsafe-inline' 'unsafe-eval' blob: ; style-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net *.google.com *.googleapis.com *.typekit.net code.iconify.design 'unsafe-inline' data: ; img-src * data: blob: ; font-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net *.typekit.net fonts.gstatic.com fonts.googleapis.com ff.static.1001fonts.net db.onlinewebfonts.com data: ; connect-src 'self' boardgamearena.com *.boardgamearena.com:* wss://*.boardgamearena.com:* *.boardgamearena.net wss://*.boardgamearena.net:* api.privacy-center.org *.clarity.ms *.facebook.com *.google.com *.gstatic.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.googleapis.com *.paypal.com *.bga.li blob:; frame-src 'self' boardgamearena.com *.boardgamearena.com:* *.slideshare.net *.youtube.com *.youtube-nocookie.com *.dailymotion.com *.trictrac.tv *.trictrac.net melodice.org js.stripe.com *.paypal.com *.twitter.com *.facebook.com *.google.com td.doubleclick.net *.blueorangegames.eu; frame-ancestors 'self' boardgamearena.com ; base-uri 'none' ; 3 upgrade-insecure-requests; connect-src * https:; img-src * data: https:; font-src * data:; script-src * blob: data: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob: data:; worker-src * blob: data: 3 style-src * blob: 'unsafe-inline'; script-src * blob: 'unsafe-inline' 'unsafe-eval'; worker-src * blob:; frame-ancestors 'self' http://*.carwale.com https://*.carwale.com https://*.bikewale.com https://*.cartrade.com https://*.lead2retail.in https://*.autobiz.in https://lms.bgauss.com https://*.cleverwebserver.com; report-uri /api/exceptions/; 3 frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; 3 default-src 'self'; style-src https: 'unsafe-inline'; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' https://privacy-cs.mail.ru/static/ https://top-fwz1.mail.ru/ https://yastatic.net/ https://cdn.ckeditor.com/ https://morp.firstvds.ru/ https://vk.com/ https://www.youtube.com/ https://cse.google.com/ wss://*.chathost.ru/ https://*.chathost.ru/ https://*.carrotquest.app/ https://www.googletagmanager.com/ https://www.google.com/ https://my.firstvds.ru/ https://www.google-analytics.com/ https://mc.yandex.ru/ https://mc.yandex.com/ https://smartcaptcha.yandexcloud.net/ https://www.gstatic.com/ https://cdn.botfaqtor.ru/ 'unsafe-inline'; img-src 'self' data: blob: https://my.firstvds.ru/ https://cdn.carrotquest.app/ https://*.carrotquest.app/; connect-src 'self' https://analytics.google.com/ https://stats.g.doubleclick.net/ https://api.carrottrack.app/ https://api1.carrottrack.app/ https://www.google-analytics.com/ https://*.carrottrack.io/ https://*.carrotquest.app/ wss://mc.yandex.ru/ wss://*.carrotquest.app/ https://mc.yandex.ru/ https://mc.yandex.com/ wss://*.chathost.ru/ https://*.chathost.ru/ https://*.botfaqtor.ru/ https://firstvds.live/status; frame-src 'self' https://mc.yandex.ru/ https://smartcaptcha.yandexcloud.net/ https://morp.firstvds.ru/ https://www.youtube.com/ https://www.google.com/ https://*.botfaqtor.ru/; font-src 'self' data: https://fonts.gstatic.com/ https://*.carrotquest.app/; media-src 'self' https://*.carrotquest.app/; object-src 'none'; frame-ancestors 'self' https://metrika.yandex.ru/ http://webvisor.com; 3 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data: blob:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 3 default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.awin1.com *.bskyb.com *.clicktale.net *.contentsquare.com *.contentsquare.net *.demdex.net *.dotomi.com *.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.google.ie *.googlesyndication.com *.googletagmanager.com *.intercom.io *.intercomcdn.com *.kampyle.com *.liveperson.net *.lpsnmedia.net *.lucidcx.com *.medallia.eu *.optimizely.com *.paa-reporting-advertising.amazon *.qualtrics.com *.redditstatic.com *.sky.com *.skyassets.com *.snapchat.com *.stripe.com *.taggstar.com *.tvsquared.com *.yext-pixel.com *.yimg.com *.zenaps.com aax-eu.amazon-adsystem.com acdn.adnxs.com analytics.tiktok.com analytics.twitter.com android-webview-video-poster: answers2-embed.sky.com.pagescdn.com api.branch.io api2.branch.io app.link https://apps.rokt.com https://apps.rokt-api.com https://apps.roktecommerce.com assets.adobedtm.com assets.sitescdn.net bat.bing.com britishskybroadcasti.tt.omtrdc.net c.amazon-adsystem.com c5.adalyser.com cdn-assets-prod.s3.amazonaws.com cdn.branch.io cdn.co-buying.com cdn.privacy-mgmt.com cdn.spatialbuzz.com cdn.tt.omtrdc.net cdnjs.cloudflare.com connect.facebook.net content.zeotap.com ct.pinterest.com edge.adobedc.net https://cdn.prod.uidapi.com https://js.adsrvr.org ib.adnxs.com js.smct.co js.smct.io lantern.roeyecdn.com maps.googleapis.com platform.twitter.com players.brightcove.net rules.quantcount.com s.pinimg.com s0.2mdn.net sc-static.net secure.adnxs.com secure.quantserve.com servedby.flashtalking.com sky.likewizesupport.com skycustomer.likewizesupport.com smct.co smct.io https://sourcemaps-wsdk.roktinternal.com static.ads-twitter.com tagmanager.google.com the.sciencebehindecommerce.com unpkg.com vjs.zencdn.net www.dwin1.com www.facebook.com www.googleadservices.com www.gstatic.com yahoo.com; style-src 'self' 'unsafe-inline' *.clicktale.net *.contentsquare.net *.doubleclick.net *.googlesyndication.com *.kampyle.com *.liveperson.net *.lpsnmedia.net *.medallia.eu *.sky.com *.skyassets.com assets.adobedtm.com assets.sitescdn.net fonts.googleapis.com players.brightcove.net s0.2mdn.net sky.likewizesupport.com sky.lucidcx.com skycustomer.likewizesupport.com tagmanager.google.com www.facebook.com www.googletagmanager.com www.gstatic.com; font-src 'self' data: *.google.co.uk *.google.com *.google.ie *.intercomcdn.com *.kampyle.com *.medallia.eu *.sky.com *.skyassets.com *.snapchat.com fonts.gstatic.com fonts.smct.co fonts.smct.io players.brightcove.net sky.likewizesupport.com sky.lucidcx.com skycustomer.likewizesupport.com use.typekit.net www.pinterest.com; img-src 'self' android-webview-video-poster: blob: data: *.akamaihd.net *.atdmt.com *.awin1.com *.boltdns.net *.brightcove.com *.brightcovecdn.com *.clicktale.net *.cloudfront.net *.contentsquare.net *.contentstack.io *.demdex.net *.dotomi.com *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.google.ie *.googlesyndication.com *.googletagmanager.com *.gumgum.com *.intercom.io *.intercomassets.com *.intercomassets.eu *.intercomcdn.com *.intercomcdn.eu *.kampyle.com *.liveperson.net *.lpsnmedia.net *.lucidcx.com *.medallia.eu *.mktgcdn.com *.online-metrix.net *.optimizely.com *.qualtrics.com *.reddit.com *.sky *.sky.com *.skyassets.com *.snapchat.com *.tvsquared.com *.yahoo.com *.yext-pixel.com *.zenaps.com 8th.io aax-eu.amazon-adsystem.com acdn.adnxs.com ad.doubleclick.net ade.googlesyndication.com adservice.google.com analytics.tiktok.com analytics.twitter.com api.branch.io api2.branch.io app.link assets.adobedtm.com bat.bing.com c.amazon-adsystem.com c5.adalyser.com cdn.branch.io cdn.privacy-mgmt.com cdn.smct.co cdn.smct.io cdn.spatialbuzz.com cms.quantserve.com connect.facebook.net ct.pinterest.com dmp.v.fwmrm.net ep.smct.co ep.smct.io events.smct.co ib.adnxs.com lantern.roeye.com live.staticflickr.com maps.googleapis.com maps.gstatic.com match.adsrvr.org mwzeom.zeotap.com pixel.quantserve.com players.brightcove.net pm.w55c.net px.smct.co px.smct.io s.pinimg.com s0.2mdn.net sc-static.net secure.adnxs.com servedby.flashtalking.com sky.likewizesupport.com skycustomer.likewizesupport.com smct.co smct.io ssl.gstatic.com t.co tags.w55c.net tracking.audio.thisisdax.com www.facebook.com www.googleadservices.com www.gstatic.com www.pinterest.com; connect-src 'self' android-webview-video-poster: blob: data: *.akamaihd.net *.akstat.io *.analytics.google.com *.assistant.watson.appdomain.cloud *.boltdns.net *.brightcovecdn.com *.bskyb.com *.clicktale.net *.contentsquare.net *.contentstack.io *.demdex.net *.doubleclick.net *.g.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.google.ie *.googlesyndication.com *.googletagmanager.com *.intercom.io *.intercomcdn.com *.intercomcdn.eu *.intercomusercontent.com *.kampyle.com *.liveperson.net *.lpsnmedia.net *.lucidcx.com *.medallia.eu *.optimizely.com *.paa-reporting-advertising.amazon *.qualtrics.com *.reddit.com *.redditstatic.com *.sky.com *.skyassets.com *.snapchat.com *.taggstar.com *.tvsquared.com *.wepowerconnections.com *.yext-pixel.com *.yext.com *.yextapis.com *.yimg.com aax-eu.amazon-adsystem.com acdn.adnxs.com ad.doubleclick.net analytics.tiktok.com api.amplitude.com api.amplitude.com api.branch.io api.iperceptions.com api.taggstar.com api2.branch.io app.link assets.adobedtm.com awk.epgsky.com bat.bing.com britishskybroadcasti.tt.omtrdc.net c.amazon-adsystem.com cdn-assets-prod.s3.amazonaws.com cdn.branch.io cdn.privacy-mgmt.com cdn.spatialbuzz.com cdn.taggstar.com cfg.smct.co cfg.smct.io cognito-identity.eu-west-1.amazonaws.com connect.facebook.net ct.pinterest.com digifaro-digital.stage.uk.monitoringsolutions.sky:8000 digifaro-digital.uk.monitoringsolutions.sky:8000 dmp.v.fwmrm.net edge.adobedc.net edge.api.brightcove.com ep.smct.co ep.smct.io faro-collector-prod-eu-west-0.grafana.net firehose.eu-west-1.amazonaws.com https://*.google.com https://*.prod.uidapi.com https://apps.rokt.com https://apps.rokt-api.com https://apps.roktecommerce.com https://prod.uidapi.com ib.adnxs.com insight.adsrvr.org ipb.smct.co ipb.smct.io ipl.smct.co ipl.smct.io js.smct.co js.smct.io maps.googleapis.com match.adsrvr.org mwzeom.zeotap.com paa-reporting-advertising.amazon pagead2.googlesyndication.com players.brightcove.net pm.w55c.net poc.idscan.cloud prod.idscan.cloud qa.taggstar.com s.pinimg.com s0.2mdn.net sc-static.net secure.adnxs.com sky.likewizesupport.com skycustomer.likewizesupport.com smct.co smct.io spl.zeotap.com the.sciencebehindecommerce.com vip.timezonedb.com wss://*.liveperson.net wss://*.sky.com www.facebook.com www.googleadservices.com www.gstatic.com www.pinterest.co.uk www.pinterest.com www.zenaps.com; frame-src 'self' blob: *.awin1.com *.bskyb.com *.clicktale.net *.contentsquare.net *.demdex.net *.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.google.ie *.googlesyndication.com *.kampyle.com *.liveperson.net *.lpsnmedia.net *.medallia.eu *.online-metrix.net *.optimizely.com *.paa-reporting-advertising.amazon *.qualtrics.com *.sky.com *.skyassets.com *.snapchat.com *.stripe.com *.zenaps.com 12660277.fls.doubleclick.net 1580034.fls.doubleclick.net 3662759.fls.doubleclick.net 6993240.fls.doubleclick.net aax-eu.amazon-adsystem.com acdn.adnxs.com analytics.twitter.com answers2-embed.sky.com.pagescdn.com api.branch.io api2.branch.io app.link https://apps.rokt.com https://apps.rokt-api.com https://apps.roktecommerce.com assets.adobedtm.com c.amazon-adsystem.com cdn.branch.io cdn.privacy-mgmt.com cdn.spatialbuzz.com connect.facebook.net ct.pinterest.com d2d7do8qaecbru.cloudfront.net dmp.v.fwmrm.net ib.adnxs.com insight.adsrvr.org lantern.roeye.com live.tvgenius.net ls.smct.co ls.smct.io match.adsrvr.org paa-reporting-advertising.amazon players.brightcove.net pm.w55c.net s.pinimg.com s0.2mdn.net sc-static.net secure.adnxs.com servedby.flashtalking.com sky.likewizesupport.com sky.lucidcx.com skycustomer.likewizesupport.com smct.co smct.io td.doubleclick.net universal.iperceptions.com w.etadirect.com www.facebook.com www.googleadservices.com www.googletagmanager.com www.pinterest.co.uk www.pinterest.com; frame-ancestors 'self'; worker-src blob: 'self' *.liveperson.net *.sky.com *.skyassets.com assets.adobedtm.com; child-src 'self' blob: *.intercom-sheets.com; media-src 'self' blob: data: *.akamaihd.net *.boltdns.net *.brightcovecdn.com *.cf.brightcove.com *.clicktale.net *.contentsquare.net *.contentstack.io *.demdex.net *.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.google.ie *.googlesyndication.com *.intercomcdn.com *.liveperson.net *.lpsnmedia.net *.media.brightcove.com *.sky.com *.skyassets.com assets.adobedtm.com bat.bing.com www.facebook.com; object-src 'self' *.sky.com; form-action *.intercom.help *.intercom.io; report-uri /csp-reports 3 frame-ancestors https://*.ccf.org https://clevelandclinic.ungerboeck.com https://*.clevelandclinic.org 3 default-src 'self'; style-src 'self' https://static.threema.ch 'unsafe-inline'; font-src 'self' https://static.threema.ch data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://hcaptcha-ws.threema.ch; script-src-elem 'self' https://hcaptcha-ws.threema.ch 'unsafe-inline' data:; frame-src 'self' https://hcaptcha-assets.threema.ch; img-src 'self' data: https://static.threema.ch blob: ; media-src 'self' data: blob:; connect-src 'self' wss://threema.com https://hcaptcha-assets.threema.ch https://static.threema.ch https://bugs.threema.ch ; object-src 'none'; worker-src 'self' blob:; child-src blob: https://hcaptcha-assets.threema.ch; frame-ancestors 'self'; form-action 'self' https://threema.com https://work.threema.ch ; base-uri https://threema.com; report-uri https://bugs.threema.ch/api/30/security/?sentry_key=33a83d833904ad024494585d9479b3c4; report-to default 3 default-src 'self'; connect-src 'self' https://*.polymarket.com https://*.polymarket.dev wss://*.polymarket.com wss://*.polymarket.dev https://*.polymarket.sh wss://*.polymarket.sh https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.web3modal.org https://*.amplitude.com https://*.alchemy.com https://*.alchemyapi.io https://assets.vercel.com https://vercel.live https://vercel.com https://cdp.customer.io https://vitals.vercel-insights.com https://*.magic.link https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.intercomcdn.com https://*.intercomcdn.eu https://*.intercomusercontent.com https://polymarket-upload.s3.us-east-2.amazonaws.com https://polymarket-next-assets.s3.amazonaws.com https://*.coinbase.com https://*.vercel-scripts.com https://*.google-analytics.com https://*.doubleclick.net https://www.google.com https://*.facebook.com https://*.facebook.net https://*.redditstatic.com https://*.reddit.com https://analytics.tiktok.com wss://ws-us3.pusher.com https://polygon-rpc.com https://static.ads-twitter.com https://sentry.io https://api.moonpay.com https://static.moonpay.com https://*.fun.xyz wss://*.fun.xyz https://*.quiknode.pro https://*.base.org https://*.zksync.io https://*.daimo.com wss://*.walletlink.org https://analytics-ipv6.tiktokw.us https://*.snapchat.com https://*.gist.build https://pro.ip-api.com https://www.googleadservices.com https://*.relay.link https://arb1.arbitrum.io https://mainnet.optimism.io https://56.rpc.thirdweb.com https://api.mainnet.abs.xyz https://*.eth https://*.llamarpc.com https://*.drpc.org https://*.publicnode.com https://*.gateway.tenderly.co https://*.meowrpc.com https://*.merkle.io https://*.monad.xyz https://1rpc.io https://rpc.hyperliquid.xyz https://rpc.hypurrscan.io https://rpc.ethereal.trade https://tiles.polymarket.com https://protomaps.github.io https://tile.openweathermap.org https://api.open-meteo.com https://cdn.jsdelivr.net https://*.platform.grcv.io https://*.grid.gg wss://*.grid.gg https://browser-intake-datadoghq.com https://browser-intake-datadoghq.eu https://*.appsflyersdk.com https://accounts.google.com/gsi/ https://*.jam.dev https://data.debugbear.com https://polymarket-video-ea81y.b-cdn.net https://*.sportradar.com wss://*.sportradar.com https://vendor.polymarket.com data:; script-src 'self' 'unsafe-eval' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.grid.gg https://*.magic.link https://static.moonpay.com https://www.youtube.com https://static.ads-twitter.com https://analytics.tiktok.com https://*.snapchat.com https://sc-static.net https://*.appsflyersdk.com https://*.jam.dev https://cdn.debugbear.com https://accounts.google.com/gsi/client https://player.twitch.tv https://widgets.sir.sportradar.com https://vendor.polymarket.com; script-src-elem 'self' 'unsafe-inline' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://*.grid.gg https://vercel.live https://*.magic.link https://static.moonpay.com https://static.ads-twitter.com https://analytics.tiktok.com https://cdp.customer.io https://www.dubcdn.com https://www.googletagmanager.com https://*.doubleclick.net https://*.snapchat.com https://sc-static.net https://www.youtube.com https://*.appsflyersdk.com https://*.jam.dev https://cdn.debugbear.com https://accounts.google.com/gsi/client https://player.twitch.tv https://widgets.sir.sportradar.com https://vendor.polymarket.com; frame-src 'self' blob: https://*.youtube.com https://*.walletconnect.com https://*.walletconnect.org https://*.magic.link https://vercel.live https://*.polymarket.com https://*.polymarket.dev https://*.googletagmanager.com https://*.google.com https://*.snapchat.com/ https://player.twitch.tv https://www.facebook.com https://buy.moonpay.com https://player.kick.com https://widget.pandascore.co https://*.swapped.com https://intercom-sheets.com https://www.intercom-reporting.com https://player.vimeo.com https://fast.wistia.net https://*.grid.gg https://*.jam.dev https://vendor.polymarket.com; frame-ancestors 'self' https://auth.magic.link chrome-extension://acmacodkjbdgmoleebolmdjonilkdbch; style-src 'self' 'unsafe-inline' https://vercel.live https://fonts.googleapis.com https://accounts.google.com/gsi/style https://widgets.sir.sportradar.com https://vendor.polymarket.com; img-src 'self' blob: data: https://images.polymarket.com https://polymarket-upload.s3.us-east-2.amazonaws.com https://assets.vercel.com https://*.walletconnect.com https://*.web3modal.org https://alb.reddit.com https://www.facebook.com https://vercel.com https://analytics.twitter.com https://t.co https://sdk-cdn.fun.xyz https://pbs.twimg.com https://www.google.com https://*.gstatic.com https://www.googleadservices.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://www.googletagmanager.com https://connect.facebook.net https://*.doubleclick.net https://tile.openweathermap.org https://*.swapped.com https://*.giphy.com https://*.grid.gg https://*.intercomcdn.com https://*.intercomcdn.eu https://downloads.au.intercomcdn.com https://*.intercom.io https://static.intercomassets.com https://static.intercomassets.eu https://static.au.intercomassets.com https://uploads.intercomusercontent.com https://*.intercom-attachments-1.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://*.appsflyersdk.com https://cdn.sanity.io https://*.sportradar.com https://vendor.polymarket.com; font-src 'self' data: https://assets.vercel.com https://js.intercomcdn.com https://fonts.intercomcdn.com https://vercel.live https://unpkg.com https://fonts.reown.com https://fonts.gstatic.com https://widgets.sir.sportradar.com https://vendor.polymarket.com; worker-src 'self' blob: https://vendor.polymarket.com; object-src 'none'; base-uri 'self' https://vendor.polymarket.com; media-src 'self' blob: https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://polymarket-upload.s3.us-east-2.amazonaws.com https://polymarket-video-ea81y.b-cdn.net; form-action 'self' https://*.polymarket.com https://*.polymarket.dev https://www.facebook.com https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io; report-to report-endpoint; upgrade-insecure-requests 3 frame-ancestors 'self' *.bazaarvoice.com 3 frame-ancestors *.gallupatwork.com *.gallupatwork.au *.gallupatwork.sg *.gallupatwork.uk *.gallup.com 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: https://fast.wistia.com https://fast.wistia.net; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http: blob:; connect-src 'self' https: http://fast.wistia.com http://fast.wistia.net http://pipedream.wistia.com wss://*.api.sanity.io wss://*.wistia.com wss://*.wistia.net; frame-src 'self' https:; font-src 'self' data: https:; media-src 'self' https: http: blob:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; 3 default-src http: https: data:; media-src http: https: data: blob: ey.com www.ey.com apps.ey.com aemapps.ey.com ey-preview.ey.com; img-src http: https: data: blob: assets.adoberesources.net lh3.googleusercontent.com; script-src http: https: data: 'self' 'unsafe-inline' assets.adobedtm.com players.brightcove.net edge.api.brightcove.com metrics.brightcove.com vjs.zencdn.net edge-player.wirewax.com manifest.prod.boltdns.net bcboltbde696aa-a.akamaihd.net cdn.cookielaw.org assets.adoberesources.net documentcloud.adobe.com aemapps.ey.com aemapps-preview.ey.com; style-src http: https: data: 'self' 'unsafe-inline' assets.adobedtm.com players.brightcove.net players.brightcove.net edge.api.brightcove.com metrics.brightcove.com vjs.zencdn.net edge-player.wirewax.com manifest.prod.boltdns.net bcboltbde696aa-a.akamaihd.net cdn.cookielaw.org *.typekit.net aemapps.ey.com aemapps-preview.ey.com ; connect-src http: https: data: *.adobe.io wss://*.adobe.io; worker-src http: https: data: blob: ey.com www.ey.com apps.ey.com aemapps.ey.com ey-preview.ey.com; font-src http: https: data: *.typekit.net; frame-ancestors ey.com www.ey.com apps.ey.com aemapps.ey.com ey-preview.ey.com; 3 upgrade-insecure-requests; frame-ancestors *.splunk.com *.touchcast.com *.salesforce.com *.cisco.com *.rainfocus.com; 3 form-action https:; frame-ancestors https://app.contentful.com https://verkada.teamaligned.com 3 upgrade-insecure-requests;frame-ancestors 'self' https://*.sueddeutsche.de https://*.jetzt.de https://*.szdm.io; 3 default-src 'unsafe-inline' 'unsafe-eval' vitals.vercel-insights.com https: data: wss://*.qualified.com *.arkoselabs.com; block-all-mixed-content; upgrade-insecure-requests 3 frame-ancestors https://*.ti.com https://*.ti.com.cn https://*.tij.co.jp; 3 frame-ancestors 'self'; object-src https://*.citrix.com https://capture.navattic.com; plugin-types application/x-shockwave-flash application/pdf 3 frame-ancestors 'self' appsec.aarp.org secure.aarp.org cms.aarp.org arenax-testing2-games.aarp.org test.giveback.aarp.org giveback.aarp.org aarpvolunteer.my.site.com aarp.staging.jibeapply.com aarp.devserver.cloud navigator.aarp.org earnpoints.aarp.org events.xg4ken.com ayuda-sp.aarp.org ayuda-s.aarp.org ayuda.aarp.org app.devserver.cloud nutrition.aarp.org aarp.jibeapply.com arenax-testing3-games.aarp.org aarp.theworkademy.com stage.jobskills.aarp.org jobskills.aarp.org feeds.aarp.org memberoffers.aarp.org aarp.org cdn.aarp.net appsec.aarp.org secure-pi.aarp.org test.elearn.aarp.org dev.livablemap.aarp.byf1.dev livablemap.aarp.org nextgen.jobs.aarp.org jobs.aarp.org arenax-testing-games.aarp.org games.aarp.org futureofhousing.aarp.org aarpfutureodev.wpengine.com aarpfohstage.wpengine.com help-s.aarp.org test.elearn.aarp.org elearn.aarp.org local.aarp.org staging.local.aarp.org longtermscorecard.org careers.aarp.org www.aarp.org yqa.livetech.dev yqa.test caretotalk.aarp.org policybook.aarp.org policybookdb8jfimehk.devcloud.acquia-sites.com livindexhub.aarp.org livabilityindex.aarp.org livablemap.aarp.org press.aarp.org stage.mediaroom.com policybookwmcd4qm5qv.devcloud.acquia-sites.com dev.livindex-21.aarp.byf1.dev stage.livindex-21.aarp.byf1.dev veterans.aarp.org learn.aarp.org help.aarp.org community.aarp.org services.share.aarp.org secure.aarp.org virtualevents.aarp.org cdn.kitewheel.com aarp.brand.live aarpsandbox.brand.live test.virtualevents.aarp.org elearn.aarp.org blog.aarp.org taxappointment.aarp.org banksafetraining.aarp.org virtualevents.aarp.org driversafetyclassroom.aarp.org; 3 default-src 'self' https://*.denic.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.denic.de https://denic.matomo.cloud https://cdn.matomo.cloud; img-src 'self' data: https://*.denic.de; base-uri 'self'; frame-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; connect-src 'self' https://denic.matomo.cloud 3 default-src 'none'; frame-ancestors 'none'; connect-src 'self' www.ntppool.org st.ntppool.org status.ntppool.org 8ll7xvh0qt1p.statuspage.io send.webform.dev; font-src fonts.gstatic.com; form-action 'self' send.webform.dev checkout.stripe.com; img-src 'self' data: st.ntppool.org st.pimg.net news.ntppool.org *.mapper.ntppool.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.statuspage.io st.ntppool.org st.pimg.net news.ntppool.org www.mapper.ntppool.org js.stripe.com send.webform.dev; style-src 'self' fonts.googleapis.com fonts.gstatic.com send.webform.dev st.ntppool.org st.pimg.net news.ntppool.org; report-uri https://ntppool.report-uri.com/r/t/csp/wizard 3 frame-ancestors check24.de *.check24.de 3 frame-ancestors 'self' resources.duo.com learn-cloudsecurity.cisco.com; 3 frame-ancestors 'self' https://*.saleshood.com 3 default-src 'self' https: *.mercedes-benz.com *.mercedes-benz.de *.corpinter.net *.usercentrics.eu *.googletagmanager.com *.krxd.net *.day.com *.anythingabout.net *.system360gmbh.de *.mercedes-benz-classic.com *.speedcurve.com alltime-stars.com cdn.jsdelivr.net *.mb-lounge.com *.eventbase.com narando.com *.narando.com *.googleapis.com maxcdn.bootstrapcdn.com cdn.plyr.io *.youtube.com *.youtube-nocookie.com *.ytimg.com *.google-analytics.com *.google.com *.google.de *.doubleclick.net shop.nostalgic.de *.gstatic.com cdn.ampproject.org amp.azure.net *.windows.net cmsdata.net booking-widget.quandoo.de api.corpinter.net *.facebook.net *.facebook.com *.atdmt.com *.adobe.com www.kinoheld.de mb-prototypes.swhost.in *.go-mpulse.net *.akstat.io my.matterport.com snap.licdn.com *.ads.linkedin.com p.adsymptotic.com *.linkedin.oribi.io sjs.bizographics.com embed.gomexlive.com playout.3qsdn.com data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.mercedes-benz.com; 3 frame-ancestors https://www.snowflake.com 3 default-src 'self' http: https: 3 frame-ancestors 'self' https://*.brightsites.co.uk; 3 child-src *.googletagmanager.com *.greenhouse.io *.vimeo.com https://*.qualified.com; connect-src *.clarity.ms *.6sc.co *.mutinyhq.io *.mutinyhq.com *.mutinycdn.com *.cookiefirst.com *.google-analytics.com *.analytics.google.com *.google-analytics.com *.googletagmanager.com *.google.com *.vimeocdn.com *.forethought.ai *.linkedin.com *.vidyard.com *.vimeo.com *.6sense.co *.6sense.com *.d2l.com wss://*.qualified.com https://*.qualified.com ads.doubleclick.net lottie.host e.calibermind.com app.navattic.com events.navattic.com dev.mytype.d2l.com.s3-website-us-west-2.amazonaws.com mytype.d2l.com dl102401s.searchunify.com dl182403p.searchunify.com d2y8arselzu8n4.cloudfront.net d14drb1667mvq0.cloudfront.net *.g2.com www.redditstatic.com bam.nr-data.net pagead2.googlesyndication.com secure.adnxs.com www.google.co.in www.google.co.nz www.google.co.uk www.google.co.vi www.google.com.br www.google.com.co www.google.com.mx www.google.ie 'self' 482-pda-858.mktoresp.com 482-pda-858.mktoutil.com conversions-config.reddit.com data: eps.6sc.co my.yoast.com pixel-config.reddit.com prod.customershome.com region1.analytics.google.com tracking.g2crowd.com translate.googleapis.com www.facebook.com www.google.ca www.googleadservices.com yoast.com vimeo.com *.visualwebsiteoptimizer.com app.vwo.com scout.salesloft.com; default-src *.clarity.ms *.6sc.co *.acuityplatform.com *.mutinyhq.io *.mutinyhq.com *.mutinycdn.com *.linkedin.com 'self' 'unsafe-inline' *.d2l.com dev.mytype.d2l.com.s3-website-us-west-2.amazonaws.com mytype.d2l.com c.bing.com secure.adnxs.com 482-pda-858.mktoresp.com alb.reddit.com analytics.google.com connect.facebook.net data: googleads.g.doubleclick.net ipv6.6sc.co munchkin.marketo.net origin.acuityplatform.com pixel-config.reddit.com 'self' tracking.g2crowd.com www.facebook.com www.google.com www.googletagmanager.com www.redditstatic.com www.youtube.com; font-src 'self' data: www.d2l.com dl102401s.searchunify.com dl182403p.searchunify.com fonts.gstatic.com dev.mytype.d2l.com.s3-website-us-west-2.amazonaws.com mytype.d2l.com https://*.qualified.com; form-action 'self' www.d2l.com www.facebook.com applications.zoom.us; frame-src *.googletagmanager.com *.greenhouse.io *.vidyard.com *.vimeo.com *.forethought.ai *.d2l.com 'self' blob: capture.navattic.com applications.zoom.us https://*.qualified.com td.doubleclick.net www.facebook.com www.google.com www.youtube.com www.buzzsprout.com *.visualwebsiteoptimizer.com app.vwo.com chat.learnwise.ai; img-src *.clarity.ms *.6sc.co *.mutinycdn.com *.analytics.google.com *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.vimeocdn.com *.linkedin.com *.vidyard.com *.d2l.com img.youtube.com cdn.shortpixel.ai c.navattic.com image.navattic.media i.ytimg.com d2y8arselzu8n4.cloudfront.net d14drb1667mvq0.cloudfront.net dl102401s.searchunify.com dl182403p.searchunify.com static.pheedloop.com assets.swoogo.com google.com pagead2.googlesyndication.com consent.cookiefirst.com secure.adnxs.com 'self' app.navattic.com c.bing.com alb.reddit.com data: fonts.gstatic.com secure.gravatar.com translate.google.com www.facebook.com www.google.ca blob: https://*.qualified.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io static.learnwise.dev capture.navattic.com; media-src mediastream: *.vimeo.com *.vimeocdn.com 'self' h5p.com https://*.qualified.com; object-src 'self'; script-src-attr 'unsafe-inline'; script-src-elem *.clarity.ms *.6sc.co *.acuityplatform.com *.mutinycdn.com *.cookiefirst.com *.greenhouse.io *.forethought.ai *.vidyard.com *.vimeo.com *.d2l.com https://*.qualified.com 'self' 'unsafe-inline' js.navattic.com cdn.shortpixel.ai js.navattic.com d2y8arselzu8n4.cloudfront.net d14drb1667mvq0.cloudfront.net pagead2.googlesyndication.com snap.licdn.com bam.nr-data.net apis.google.com connect.facebook.net googleads.g.doubleclick.net js-agent.newrelic.com js.storylane.io munchkin.marketo.net origin.acuityplatform.com cdn.calibermind.com tracking.g2crowd.com unpkg.com www.google.com www.googleadservices.com www.googletagmanager.com www.redditstatic.com yoast.com js.live.net www.dropbox.com www.buzzsprout.com *.visualwebsiteoptimizer.com app.vwo.com aiden.learnwise.ai scout-cdn.salesloft.com; script-src *.6sc.co *.acuityplatform.com *.mutinycdn.com *.googletagmanager.com *.googleadservices.com *.google.com *.vimeocdn.com *.vimeo.com *.greenhouse.io *.forethought.ai *.d2l.com 'self' 'unsafe-eval' 'unsafe-inline' js.navattic.com pagead2.googlesyndication.com snap.licdn.com bam.nr-data.net consent.cookiefirst.com client-registry.cdn.com connect.facebook.net googleads.g.doubleclick.net js-agent.newrelic.com munchkin.marketo.net tracking.g2crowd.com unpkg.com www.clarity.ms www.redditstatic.com aiden.learnwise.ai; style-src-attr 'unsafe-inline' dev.mytype.d2l.com.s3-website-us-west-2.amazonaws.com mytype.d2l.com; style-src-elem *.cookiefirst.com *.greenhouse.io *.d2l.com d2y8arselzu8n4.cloudfront.net d14drb1667mvq0.cloudfront.net 'self' 'unsafe-inline' data: fonts.googleapis.com www.gstatic.com dev.mytype.d2l.com.s3-website-us-west-2.amazonaws.com mytype.d2l.com *.visualwebsiteoptimizer.com app.vwo.com aiden.learnwise.ai www.googletagmanager.com; style-src 'self' 'unsafe-inline' d2y8arselzu8n4.cloudfront.net d14drb1667mvq0.cloudfront.net consent.cookiefirst.com dev.mytype.d2l.com.s3-website-us-west-2.amazonaws.com mytype.d2l.com pages.d2l.com https://*.qualified.com *.visualwebsiteoptimizer.com app.vwo.com aiden.learnwise.ai; worker-src 'self' blob:; frame-ancestors 'self' *.d2l.com app.mutinyhq.com applications.zoom.us vimeo.com player.vimeo.com; 3 frame-ancestors *.oray.com scrm-wx.weiling.cn 3 default-src 'self';connect-src *;style-src 'self' 'unsafe-inline';font-src 'self' data:;script-src 'self' 'unsafe-eval' *.nmrodam.com *.imrworldwide.com *.sensic.net *.gstatic.com;img-src 'self' data: *.ardmediathek.de *.ard.de *.tvxray.com *.nmrodam.com *.imrworldwide.com *.hs-data.com;media-src * mediastream: blob:;frame-src 'self' *.ard.de *.nmrodam.com *.imrworldwide.com *.sensic.net mailto: tg: threema: fb-messenger:;frame-ancestors *;worker-src 'self' blob: 3 default-src 'self';base-uri 'self';child-src blob:;connect-src 'self' wss: https: https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://func.bitwarden.com https://status.bitwarden.com https://us-central1-adaptive-growth.cloudfunctions.net https://pdf-convert.bitwarden.com https://aorta.clickagy.com https://hemsync.clickagy.com https://ws.zoominfo.com https://bitwarden.freshsales.io https://stats.g.doubleclick.net https://www.google-analytics.com https://api.hubapi.com https://forms.hubspot.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://bat.bing.com https://cdn.linkedin.oribi.io https://i.clarity.ms https://scout.salesloft.com https://script.crazyegg.com https://global.ketchcdn.com/ https://cdn.ketchjs.com/ https://*.demandbase.com https://*.company-target.com https://browser-intake-us3-datadoghq.com;img-src 'self' data: https: https://*.algolia.net https://images.ctfassets.net https://res.cloudinary.com https://www.google.com https://www.google-analytics.com https://i.ytimg.com https://*.hsforms.com https://track.hubspot.com https://analytics.twitter.com https://t.co https://alb.reddit.com https://aorta.clickagy.com https://bat.bing.com https://i.vimeocdn.com https://id.rlcdn.com https://idsync.rlcdn.com https://insight.adsrvr.org https://px.ads.linkedin.com https://p.adsymptotic.com https://stags.bluekai.com https://ct.capterra.com https://*.demandbase.com https://*.company-target.com;font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://*.typekit.net;form-action https://forms.hsforms.com https://www.facebook.com;frame-ancestors https://app.contentful.com;frame-src https://app.hubspot.com https://start.bitwarden.com https://*.doubleclick.net https://boards.greenhouse.io https://*.company-target.com https://docs.google.com https://forms.hsforms.com https://player.vimeo.com https://preview.widgets.ninetailed.io/ https://us02web.zoom.us https://www.facebook.com/ https://www.googletagmanager.com https://www.youtube.com https://*.hs-sites.com https://global.ketchcdn.com https://cdn.ketchjs.com/ https://app.contentful.com https://job-boards.greenhouse.io https://hemsync.clickagy.com https://insight.adsrvr.org;manifest-src 'self';object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://cdn.jsdelivr.net/ https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hsforms.net https://js.hubspot.com https://amplify.outbrain.com https://tr.outbrain.com https://wave.outbrain.com https://j.6sc.co https://tag.demandbase.com https://a.quora.com https://assets.freshsales.io https://bat.bing.com https://boards.greenhouse.io https://cdn.jsdelivr.net/npm/search-insights@2.0.4 https://cdn.pdst.fm https://global.ketchcdn.com https://cdn.ketchjs.com/ https://connect.facebook.net https://mountain.com https://*.mountain.com https://extend.vimeocdn.com https://googleads.g.doubleclick.net https://libraries.hund.io https://ml314.com https://*.ml314.com https://player.vimeo.com https://plausible.io https://script.crazyegg.com https://scout-cdn.salesloft.com https://snap.licdn.com https://static.ads-twitter.com https://static.xingcdn.com/xingtrk/index.js https://tag.clearbitscripts.com https://cdn.hubilo.com https://tags.clickagy.com https://js.usemessages.com https://ws.zoominfo.com https://www.clarity.ms https://scripts.clarity.ms https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://www.redditstatic.com https://x.clearbitjs.com https://app.contentful.com https://tags.clickagy.com/ https://js.zi-scripts.com https://js.adsrvr.org/ https://*.demandbase.com https://*.company-target.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://libraries.hund.io https://global.ketchcdn.com https://cdn.ketchjs.com/ https://*.typekit.net;worker-src 'self' blob: https://global.ketchcdn.com https://cdn.ketchjs.com/ 3 connect-src 'self' *.adentifi.com *.adnxs.com *.adobeaemcloud.com *.agkn.com *.analytics.google.com *.awswaf.com *.azurefd.net *.bing.com *.buyatoyota.com *.cloudfunctions.net *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.gstatic.com *.ipredictive.com *.lexus.com *.linkedin.com *.omtrdc.net *.prod.bidr.io *.rlcdn.com *.scene7.com *.teads.tv *.tomtom.com *.toyota.com *.toyotafinancial.com *.turn.com *.undertone.com *.yimg.com *.zappyride.com ads.scorecardresearch.com adserv.mobi alb.reddit.com api.iperceptions.com api.retargetly.com ara.paa-reporting-advertising.amazon at.alicdn.com bat.bing-int.com bat.bing.net browser-intake-datadoghq.com c.amazon-adsystem.com cdn.appdynamics.com cm.everesttech.net col.eum-appdynamics.com collection.decibelinsight.net conv-pix.adstk.io conversions-config.reddit.com ct.pinterest.com data: doh.cq0.co dpm.demdex.net dsp.tk0x1.com dsum-sec.casalemedia.com engagement-provider-preprod.iperceptions.com evnt.byspotify.com fonts.gstatic.com gdpr.loopme.com gep-tmna.my.salesforce-scrt.com gep-tmna.my.site.com google.com i18n.contentsquare.com insight.adsrvr.org invite-preprod.iperceptions.com ips-invite.iperceptions.com jnn-pa.googleapis.com kcc0.com lciapi.ninthdecimal.com ldti.syndication.kbb.com lm.serving-sys.com login.microsoftonline.com manage-api.ensighten.com maps.googleapis.com maps.gstatic.com match.adsrvr.org nexus-test.ensighten.com nexus.ensighten.com noembed.com pagead2.googlesyndication.com peornia-comargers.icu pixall.esm1.net pixel-config.reddit.com pixel.admedia.com pixel.logtrackback.com pixel.mathtag.com pixel.quantserve.com pixel.sitescout.com pixels.spotify.com post.iperceptions.com privacy.ensighten.com pt.ispot.tv px.gumgum.com rum.hlx.page s-a.innovid.com s.amazon-adsystem.com s.pinimg.com sd.iperceptions.com secure-ds.serving-sys.com secure.insightexpressai.com simage2.pubmatic.com snap.licdn.com snapshot.carfax.com sp.analytics.yahoo.com sync-eu.connectad.io tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.srv.stackadapt.com tags.w55c.net tapestry.tapad.com tcrp-stg.mmq.telematicsct.com tcrp.mmq.telematicsct.com tk0x1.com toyota-shopper-widget.zappy-ride.com toyota.demdex.net toystortemplatingengprod.blob.core.windows.net toystortemplatingengqa.blob.core.windows.net tr.snapchat.com tr6.snapchat.com universal.iperceptions.com wss://*.toyota.com www.googleadservices.com www.googletagmanager.com www.pinterest.com www.redditstatic.com www.youtube.com x.bidswitch.net zen-dco.innovid.com zz.connextra.com; font-src 'self' *.lexus.com *.linkedin.com *.toyota.com assets.alicdn.com at.alicdn.com data: fonts.googleapis.com fonts.gstatic.com login.microsoftonline.com manage.ensighten.com snap.licdn.com; frame-src 'self' *.adnxs.com *.bing.com *.contentsquare.net *.doubleclick.net *.ep-mimecast.snapchat.com *.facebook.com *.flashtalking.com *.google.com *.lexus.com *.teads.tv *.toyota.com *.zappyride.com bs.serving-sys.com col.eum-appdynamics.com collection-api.preprod.astutevoc.com ct.pinterest.com feedback.emplifi.io gep-tmna.my.salesforce-scrt.com gep-tmna.my.site.com insight.adsrvr.org lciapi.ninthdecimal.com ldti.syndication.kbb.com login.microsoftonline.com m.youtube.com match.adsrvr.org pixall.esm1.net pixel.admedia.com pixel.mathtag.com pixel.rubiconproject.com rtb.adgrx.com rtr.innovid.com s.amazon-adsystem.com toyota-shopper-widget.zappy-ride.com toyota.demdex.net toyota.evlife.co tr.snapchat.com universal-preprod.iperceptions.com universal.iperceptions.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; img-src 'self' *.adentifi.com *.adnxs.com *.adobeaemcloud.com *.agkn.com *.azurefd.net *.bing.com *.buyatoyota.com *.cloudfront.net *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.flashtalking.com *.google.co.in *.google.com *.inventoryrsc.com *.ipredictive.com *.lexus.com *.linkedin.com *.prod.bidr.io *.rlcdn.com *.scene7.com *.setproductsetup.com *.taboola.com *.taboolasyndication.com *.teads.tv *.toyota.com *.tribalfusion.com *.turn.com *.tvsquared.com *.undertone.com *.vindicosuite.co *.yimg.com *.zappyride.com 1f2e7.v.fwmrm.net abs.twimg.com acuityplatform.com ade.googlesyndication.com ads.scorecardresearch.com ads.stickyadstv.com adserv.mobi adservice.google.co.uk adswizz.com ag.innovid.com alb.reddit.com analytics.twitter.com api.retargetly.com arttrk.com bat.bing.net bs.serving-sys.com campaignmanager.com cm.everesttech.net cognitivlabs.com col.eum-appdynamics.com conv-pix.adstk.io ct.pinterest.com data.privacy.ensighten.com data: dealer-content-management-dev.azurewebsites.net dealer-content-management.azurewebsites.net dev.day.com dpm.demdex.net dsp.tk0x1.com dsum-sec.casalemedia.com eb2.3lift.com engagetosell.com fonts.gstatic.com gep-tmna.my.salesforce-scrt.com gep-tmna.my.site.com hb.yahoo.net hitcount-preprod.iperceptions.com i.ytimg.com img.alicdn.com insight.adsrvr.org ips-img.iperceptions.com ips-invite.iperceptions.com jadserve.postrelease.com kargo.com kcc0.com lciapi.ninthdecimal.com ldti.syndication.kbb.com log.pinterest.com login.microsoftonline.com maps.googleapis.com maps.gstatic.com match.adsrvr.org media.sabio.us mpp.vindicosuite.com nexus-test.ensighten.com nodetracker.datawrkz.com odr.mookie1.com pagead2.googlesyndication.com pbs.twimg.com peornia-comargers.icu photosite.setoyota.com pippio.com pixall.esm1.net pixel-ssn.quantserve.com pixel-sync.sitescout.com pixel.logtrackback.com pixel.mathtag.com pixel.quantserve.com pixel.rubiconproject.com pixel.sitescout.com pixel.tapad.com portphotos.setoyota.com pr-bh.ybp.yahoo.com pt.ispot.tv px.gumgum.com rtb.adgrx.com rtr.innovid.com s-a.innovid.com s.amazon-adsystem.com sd.iperceptions.com secure-ds.serving-sys.com secure.insightexpressai.com simage2.pubmatic.com snap.licdn.com snapshot.carfax.com sp.analytics.yahoo.com sslphotos.jato.com static.carfax.com static.reportdelivery.production.aws.carfax.io stats.wordpress.com sync.crwdcntrl.net sync.search.spotxchange.com t.co t.mookie1.com tag.tapad.com tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.bluekai.com tags.srv.stackadapt.com tags.w55c.net tapestry.tapad.com tk0x1.com tmsappqstorage01.blob.core.windows.net toyota.com toystortemplatingengprod.blob.core.windows.net toystortemplatingengqa.blob.core.windows.net trkn.us tubemogul.com twittercounter.com unrulymedia.com ups.analytics.yahoo.com us-u.openx.net www.google-analytics.com www.google.co.uk www.googleadservices.com www.googletagmanager.com www.gstatic.com www.pinterest.com www.youtube.com x.bidswitch.net yt3.ggpht.com zen-dco.innovid.com zz.connextra.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adnxs.com *.agkn.com *.awswaf.com *.azureedge.net *.azurefd.net *.bing.com *.buyatoyota.com *.cobrowse.oraclecloud.com *.contentsquare.com *.contentsquare.net *.doubleclick.net *.facebook.net *.force.com *.google.com *.lexus.com *.linkedin.com *.liveagentforsalesforce.com *.phenompeople.com *.prod.bidr.io *.rfihub.net *.rlcdn.com *.salesforceliveagent.com *.teads.tv *.tomtom.com *.toyota.com *.tribalfusion.com *.turn.com *.tvsquared.com *.yimg.com *.zappyride.com adserv.mobi api.retargetly.com assets.adobedtm.com assets.sitescdn.net bat.bing-int.com bs.serving-sys.com c.amazon-adsystem.com cdn.appdynamics.com cdn.decibelinsight.net cdn.pdst.fm consent.cookiebot.com cstatic.weborama.fr ct.pinterest.com ctcp.cybage.com dts.innovid.com ethn.io g.alicdn.com gep-tmna.my.salesforce-scrt.com gep-tmna.my.site.com global.toyota gnrcp.cybage.com i.loopme.me imgs.signifyd.com ips-invite.iperceptions.com js.adsrvr.org js.adstk.io ldti.syndication.kbb.com live.rezync.com login.microsoftonline.com maps.googleapis.com media.fraud.net nexus-test.ensighten.com nexus.ensighten.com onetag.tws.toyota.jp pagead2.googlesyndication.com peornia-comargers.icu pixel.admedia.com pixel.byspotify.com pixel.mathtag.com privacy.ensighten.com resources.digital-cloud.medallia.com rules.quantcount.com rum.hlx.page s-static.innovid.com s.pinimg.com s2.go-mpulse.net s7.addthis.com sc-static.net script.hotjar.com scripts.inmarkethub.com sd.iperceptions.com secure-ds.serving-sys.com secure.ethicspoint.com secure.quantserve.com snap.licdn.com snapshot.carfax.com static.ads-twitter.com static.hotjar.com tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.bluekai.com tags.srv.stackadapt.com toyota.com toyotaeffect.com tr.snapchat.com universal-preprod.iperceptions.com universal.iperceptions.com universaldefinitionsdev.blob.core.windows.net us.connextra.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.redditstatic.com www.toyota.ca www.toyota.mx www.toyotafinancial.com www.toyotaipsolutions.com www.toyotamobility.com www.youtube-nocookie.com www.youtube.com www1.toyotaoutfitters.com; style-src 'self' 'unsafe-inline' *.lexus.com *.tomtom.com *.toyota.com fonts.googleapis.com gep-tmna.my.salesforce-scrt.com gep-tmna.my.site.com manage-api.ensighten.com nexus-test.ensighten.com nexus.ensighten.com privacy.ensighten.com snapshot.carfax.com tags.srv.stackadapt.com www.gstatic.com www.youtube.com; default-src 'self' *.toyota.com login.microsoftonline.com; child-src 'self' blob:; media-src 'self' *.doubleclick.net *.toyota.com dts.innovid.com m.youtube.com pdst.fm s-static.innovid.com www.googleadservices.com www.youtube-nocookie.com www.youtube.com; worker-src 'self' 'unsafe-inline' *.toyota.com blob: data:;upgrade-insecure-requests; report-uri https://prod.webservices.toyota.com/csp-report 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; report-uri /report-csp-violation; upgrade-insecure-requests 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' cyberark.sc.omtrdc.net sc.omtrdc.net *.everesttech.net everesttech.net *.demdex.net demdex.net *.adobedtm.com adobedtm.com cyberark.tt.omtrdc.net tt.omtrdc.net *.typekit.net typekit.net *.akamaihd.net akamaihd.net s3.amazonaws.com *.amazonaws.com amazonaws.com s3.eu-central-1.amazonaws.com *.adnxs.com adnxs.com *.baidu.com baidu.com *.btttag.com btttag.com *.bluekai.com bluekai.com *.bootstrapcdn.com bootstrapcdn.com *.cdntwrk.com cdntwrk.com *.choozle.com choozle.com *.cloudflare.com cloudflare.com *.cloudfront.net cloudfront.net *.cyberark.com cyberark.com g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.driftt.com driftt.com *.ensighten.com ensighten.com *.facebook.com *.facebook.net facebook.com facebook.net *.fontawesome.com fontawesome.com *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bg *.google.bj *.google.bs *.google.by *.google.ca *.google.cd *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.com *.google.cz *.google.de *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.hn *.google.hr *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kz *.google.lk *.google.lt *.google.lu *.google.lv *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.rs *.google.ru *.google.sc *.google.se *.google.sk *.google.sn *.google.sr *.google.tg *.google.tn *.google.tt *.gstatic.com *.translate.goog google.ae google.al google.am google.at google.az google.ba google.be google.bg google.bj google.bs google.by google.ca google.cd google.ch google.ci google.cl google.cm google.cn google.co.ao google.co.bw google.co.cr google.co.id google.co.il google.co.in google.co.jp google.co.ke google.co.kr google.co.ls google.co.ma google.co.mz google.co.nz google.co.th google.co.ug google.co.uk google.co.uz google.co.ve google.co.za google.co.zw google.com google.com.ar google.com.au google.com.bd google.com.bh google.com.bn google.com.bo google.com.br google.com.bz google.com.co google.com.cy google.com.do google.com.ec google.com.eg google.com.et google.com.fj google.com.gh google.com.gt google.com.hk google.com.jm google.com.kh google.com.kw google.com.lb google.com.ly google.com.mm google.com.mt google.com.mx google.com.my google.com.ng google.com.ni google.com.np google.com.om google.com.pa google.com.pe google.com.ph google.com.pk google.com.pr google.com.py google.com.qa google.com.sa google.com.sg google.com.sl google.com.sv google.com.tr google.com.tw google.com.ua google.com.uy google.com.vc google.com.vn google.cz google.de google.dk google.dz google.ee google.es google.fi google.fr google.ge google.gr google.hn google.hr google.hu google.ie google.im google.iq google.is google.it google.je google.jo google.kz google.lk google.lt google.lu google.lv google.mg google.mk google.ml google.mn google.mu google.nl google.no google.pl google.pt google.ro google.rs google.ru google.sc google.se google.sk google.sn google.sr google.tg google.tn google.tt gstatic.com translate.goog googleadservices.com *.googleapis.com googleapis.com *.cloudfunctions.net cloudfunctions.net *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.herokuapp.com herokuapp.com *.hotjar.com *.hotjar.io hotjar.com hotjar.io *.jquery.com jquery.com *.jsdelivr.net jsdelivr.net *.linkedin.com ads.linkedin.com cdn.linkedin.oribi.io linkedin.com linkedin.oribi.io *.licdn.com licdn.com *.marketo.com *.marketo.net *.mktoresp.com marketo.com marketo.net mktoresp.com *.mktoutil.com mktoutil.com cognitive.microsofttranslator.com *.microsoft.com microsoft.com *.moz.com moz.com *.myfonts.net myfonts.net *.newrelic.com *.nr-data.net newrelic.com nr-data.net *.openx.net openx.net *.rlcdn.com rlcdn.com *.reddit.com *.redditstatic.com reddit.com redditstatic.com *.rubiconproject.com rubiconproject.com *.krxd.net krxd.net *.stackadapt.com srv.stackadapt.com stackadapt.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com *.twitter.com twitter.com *.6sc.co *.litix.io 6sc.co litix.io *.unpkg.com unpkg.com *.wistia.com wistia.com *.wistia.net wistia.net *.wpengine.com wpengine.com analytics.yahoo.com *.googleadservices.com *.duosecurity.com duosecurity.com yoast.com *.ceros.com ceros.com *.transistor.fm transistor.fm segreencolumn.com *.segreencolumn.com cnv.event.prod.bidr.io simpli.fi *.simpli.fi dpmsrv.com *.dpmsrv.com adnxs.com *.adnxs.com *.cloudflareinsights.com cloudflareinsights.com *.smartrecruiters.com smartrecruiters.com js.storylane.io/js/v2/storylane.js app.storylane.io demandbase.com *.demandbase.com company-target.com *.company-target.com venafi.cloud *.venafi.cloud venafi.eu *.venafi.eu vimeo.com *.vimeo.com data: blob:; upgrade-insecure-requests; 3 frame-ancestors 'self' http://sproutsocial.lookbookhq.com https://sproutsocial.lookbookhq.com http://sproutsocial.pathfactory.com https://sproutsocial.pathfactory.com https://*.sproutsocial.test https://*.sproutsocial.com https://sproutsocial.com; 3 default-src https://*.sprig.com *.userleap.com 'self' 'unsafe-inline'; script-src https://*.sprig.com *.userleap.com 'self' 'unsafe-inline' 'unsafe-eval' https://js.hsforms.net https://polyfill.io https://googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://js.hs-analytics.net https://js.hs-scripts.com https://cdn.heapanalytics.com https://js.hscollectedforms.net https://js.hs-banner.com https://js.usemessages.com https://js-na1.hs-scripts.com https://cdn.segment.com https://api.segment.io https://app.launchdarkly.com https://forms.hubspot.com https://rum-http-intake.logs.datadoghq.com https://snap.licdn.com https://static.ads-twitter.com https://analytics.twitter.com https://connect.facebook.net https://ws.zoominfo.com https://scout-cdn.salesloft.com https://googleads.g.doubleclick.net https://static.hsappstatic.net https://www.vimeo.com https://vimeo.com https://*.hsforms.com https://secure.cold5road.com/ https://*.mutinycdn.com https://*.mutinyhq.io https://ajax.googleapis.com https://*.chilipiper.com https://*.clearbitscripts.com https://*.clearbitjs.com https://*.clearbit.com https://www.google.com https://www.googleanalytics.com https://*.website-files.com https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmsfilter@1/cmsfilter.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmsload@1/cmsload.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmscore@1/cmscore.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-animation@1/animation.esm.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-cmsslider@1/cmsslider.js https://cdn.jsdelivr.net/npm/@finsweet/attributes-queryparam@1/queryparam.js https://cdn.jsdelivr.net/npm/@finsweet/attributes@2/ https://cdn.jsdelivr.net/npm/@splidejs/splide@4.1.4/dist/js/splide.min.js https://*.adroll.com https://tracking.g2crowd.com https://bat.bing.com https://tag.unifyintent.com https://www.redditstatic.com/ads/pixel.js https://*.opendns.com https://trk.crozdesk.com; connect-src blob: data: 'self' https://sprig.com https://*.sprig.com *.userleap.com *.ingest.sentry.io https://api.hubspot.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://google.com https://googletagmanager.com https://*.googletagmanager.com https://*.doubleclick.net https://cdn.segment.com https://api.segment.io https://events.launchdarkly.com https://app.launchdarkly.com https://forms.hubspot.com https://rum-http-intake.logs.datadoghq.com https://ws.zoominfo.com https://scout-cdn.salesloft.com https://scout.salesloft.com https://api.ashbyhq.com https://hubspot-forms-static-embed.s3.amazonaws.com https://*.hsforms.com https://*.mutinycdn.com https://*.mutinyhq.io https://*.mutinyhq.com https://*.chilipiper.com https://*.mux.com https://storage.googleapis.com https://*.clearbit.com https://cdn.linkedin.oribi.io https://*.website-files.com https://px.ads.linkedin.com https://forms.hscollectedforms.net https://bat.bing.com https://clientstream.launchdarkly.com https://tracking.g2crowd.com https://unifyintent.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com https://*.opendns.com https://trk.crozdesk.com https://*.hubspotvideo.com; img-src https://*.sprig.com *.userleap.com *.assets-servd.host data: 'self' https://track.hubspot.com https://heapanalytics.com https://*.linkedin.com https://t.co https://p.adsymptotic.com https://www.facebook.com https://*.google-analytics.com https://*.google.com https://googletagmanager.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.analytics.google.com https://*.doubleclick.net/ https://userleap.ghost.io https://*.hsforms.com https://i.vimeocdn.com https://www.gravatar.com https://*.googleadservices.com/ https://js.na.chilipiper.com https://*.mux.com https://*.mutinycdn.com https://*.mutinyhq.io https://analytics.twitter.com https://api.producthunt.com https://uploads-ssl.webflow.com https://*.website-files.com https://*.adroll.com https://i.ytimg.com https://bat.bing.com https://api.urlbox.io https://logo.clearbit.com https://alb.reddit.com/rp.gif https://*.opendns.com https://pixel.tapad.com https://8224380.fs1.hubspotusercontent-na1.net; style-src https://*.sprig.com *.userleap.com 'self' 'unsafe-inline' https://fonts.googleapis.com https://js.na.chilipiper.com https://fonts.googleapis.com https://*.website-files.com https://*.opendns.com https://cdn.jsdelivr.net/npm/@splidejs/splide@4.1.4/dist/css/splide-core.min.css; worker-src blob:; font-src https://*.sprig.com *.userleap.com 'self' data: https://fonts.gstatic.com https://app.sprig.com https://*.mutinycdn.com https://fonts.gstatic.com https://uploads-ssl.webflow.com https://*.website-files.com https://*.opendns.com; frame-src blob: https://sprig.com https://*.sprig.com *.userleap.com 'self' https://meetings.hubspot.com/ https://player.vimeo.com/ https://app.hubspot.com/ https://share.transistor.fm/ https://www.facebook.com/ https://*.hsforms.com/ https://*.doubleclick.net/ https://www.youtube.com/ https://*.chilipiper.com https://*.wistia.net https://cdn.embedly.com https://*.adroll.com https://*.opendns.com https://*.hubspotvideo.com; media-src blob: 'self' https://*.mux.com https://sprig.com https://servd-white-cougar.b-cdn.net https://*.website-files.com https://*.opendns.com https://8224380.fs1.hubspotusercontent-na1.net; form-action 'self' https://www.facebook.com/ https://*.hsforms.com/ https://*.opendns.com; frame-ancestors 'self' https://sprig.com/ https://*.sprig.com https://app.mutinyhq.com https://*.opendns.com; 3 default-src 'self'; script-src 'self' https://*.adobedtm.com https://*.adoberesources.net https://*.onetrust.com https://siteimproveanalytics.com https://jsdelivr.net https://*.jsdelivr.net https://*.libcal.com https://*.libanswers.com https://*.google.com https://www.google.com https://www.gstatic.com https://googletagmanager.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.facebook.net https://www.facebook.com https://*.youtube.com https://www.youtube.com https://*.youtube-nocookie.com https://*.instagram.com https://www.instagram.com https://*.contentsquare.net https://*.unsw.edu.au https://www.engineering.unsw.edu.au https://*.tiqcdn.com https://*.eventbrite.com.au https://www.eventbrite.com.au https://*.twitter.com https://*.flickr.com https://*.hlx.page https://*.licdn.com https://www.tiktok.com https://*.tiktok.com https://www.googleadservices.com https://*.googleadservices.com https://googleadservices.com https://*.fouanalytics.com https://*.adsrvr.org https://*.doubleclick.net https://*.fls.doubleclick.net https://*.linkedin.com https://*.app-us1.com https://*.demdex.net https://*.hsforms.net https://*.hsforms.com https://*.dwcdn.net https://*.hs-scripts.com https://*.hs-banner.com https://js-ap1.hs-analytics.net https://*.mazemap.com https://*.matterport.com https://*.scite.ai https://*.intercomcdn.com https://*.intercom.io https://*.b2c.com https://*.elfsight.com https://*.service.elfsight.com https://*.utils.elfsightcdn.com https://player.vimeo.com https://*.tableau.com https://*.cloudflare.com https://*.mathjax.org https://*.mailchimp.com https://*.amazonaws.com https://*.recaptcha.net https://www.recaptcha.net https://*.padlet.com https://scribehow.com https://*.flourish.studio wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://*.qcloud.com https://*.vod-qcloud.com https://pingjs.qq.com https://*.taboola.com https://*.mypurecloud.com.au https://*.cloudfront.net https://*.shorthand.com https://iframely.shorthand.com https://*.clickdimensions.com https://*.benchplatform.com https://*.yimg.com https://*.credly.com https://www.credly.com https://*.typeform.com https://*.blackbaudcdn.net https://*.unswcollege.edu.au https://*.calendly.com https://unsw.us1.list-manage.com https://unsw.us2.list-manage.com https://unsw.us3.list-manage.com https://unsw.us4.list-manage.com https://unsw.us5.list-manage.com https://unsw.us6.list-manage.com https://unsw.us7.list-manage.com https://unsw.us8.list-manage.com https://unsw.us9.list-manage.com https://unsw.us10.list-manage.com https://unsw.us11.list-manage.com https://unsw.us12.list-manage.com https://unsw.us13.list-manage.com https://unsw.us14.list-manage.com https://unsw.us15.list-manage.com https://unsw.us16.list-manage.com https://unsw.us17.list-manage.com https://unsw.us18.list-manage.com https://unsw.us19.list-manage.com https://unsw.us20.list-manage.com https://unsw.us21.list-manage.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com https://elfsightcdn.com https://*.elfsightcdn.com https://unswedge.mygo1.com https://*.mygo1.com https://go1.com https://*.go1.com data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.unsw.edu.au https://www.engineering.unsw.edu.au https://*.fontawesome.com https://googletagmanager.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.dwcdn.net https://*.mazemap.com https://*.scite.ai https://*.intercomcdn.com https://*.mailchimp.com https://*.typeform.com https://*.unswcollege.edu.au https://*.calendly.com https://unswedge.mygo1.com https://*.mygo1.com https://go1.com https://*.go1.com data: blob: 'unsafe-inline'; font-src 'self' https://*.unsw.edu.au https://www.engineering.unsw.edu.au https://*.fontawesome.com https://*.gstatic.com https://*.dwcdn.net https://*.scite.ai https://*.intercomcdn.com https://*.fontshare.com https://*.alicdn.com https://*.cloudflare.com https://*.amazonaws.com data: blob:; connect-src 'self' https://*.funnelback.squiz.cloud https://*.adobedc.net https://ns.adobe.com https://*.omtrdc.net https://*.unsw.edu.au https://www.engineering.unsw.edu.au https://*.unswcollege.edu.au https://*.google-analytics.com https://www.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://jsdelivr.net https://*.jsdelivr.net https://*.libcal.com https://*.libanswers.com https://*.onetrust.com https://*.google.com https://www.google.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.contentsquare.net https://*.linkedin.com https://*.ads.linkedin.com https://*.fouanalytics.com https://*.hlx.page https://*.demdex.net https://*.googleapis.com https://*.gstatic.com https://*.hsforms.net https://*.hsforms.com https://*.dwcdn.net https://*.b2c.com https://*.tiktok.com https://*.tiktokw.us https://*.facebook.net https://www.facebook.com https://www.googleadservices.com https://*.googleadservices.com https://googleadservices.com https://*.matterport.com https://*.hs-scripts.com https://*.hs-banner.com https://js-ap1.hs-analytics.net https://*.licdn.com https://*.mazemap.com https://*.scite.ai https://*.intercomcdn.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://googletagmanager.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.intercom.io wss://*.intercom.io https://*.elfsight.com https://*.service.elfsight.com https://*.utils.elfsightcdn.com https://polyfilljs.org https://*.scribehow.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://*.qcloud.com https://*.vod-qcloud.com https://*.taboola.com https://*.mypurecloud.com.au wss://*.mypurecloud.com.au https://*.cloudfront.net https://*.adsrvr.org https://*.shorthand.com https://iframely.shorthand.com https://*.clickdimensions.com https://*.benchplatform.com https://*.yimg.com https://*.credly.com https://www.credly.com https://*.recaptcha.net https://*.flickr.com https://*.typeform.com https://*.blackbaudcdn.net https://directline.botframework.com wss://directline.botframework.com https://unsw.us1.list-manage.com https://unsw.us2.list-manage.com https://unsw.us3.list-manage.com https://unsw.us4.list-manage.com https://unsw.us5.list-manage.com https://unsw.us6.list-manage.com https://unsw.us7.list-manage.com https://unsw.us8.list-manage.com https://unsw.us9.list-manage.com https://unsw.us10.list-manage.com https://unsw.us11.list-manage.com https://unsw.us12.list-manage.com https://unsw.us13.list-manage.com https://unsw.us14.list-manage.com https://unsw.us15.list-manage.com https://unsw.us16.list-manage.com https://unsw.us17.list-manage.com https://unsw.us18.list-manage.com https://unsw.us19.list-manage.com https://unsw.us20.list-manage.com https://unsw.us21.list-manage.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com https://unswedge.mygo1.com https://*.mygo1.com https://go1.com https://*.go1.com webpack://* data: blob:; img-src * data: blob:; media-src * data: blob:; frame-ancestors 'self' https://*.telt.unsw.edu.au https://*.google.com https://www.google.com https://*.au.panopto.com https://*.libwizard.com; frame-src 'self' https://*.unsw.edu.au https://www.engineering.unsw.edu.au https://*.forms.unsw.edu.au https://www.fonts.unsw.edu.au https://www.hostfiles.unsw.edu.au https://www.coursearchive.unsw.edu.au https://*.unswcollege.edu.au https://*.library.unsw.edu.au https://*.linkedin.com https://www.linkedin.com https://www.wrike.com https://login.microsoftonline.com https://*.google.com https://www.google.com https://*.youtube.com https://www.youtube.com https://*.youtube-nocookie.com https://*.mazemap.com https://*.soundcloud.com https://*.facebook.net https://www.facebook.com https://*.twitter.com https://*.eventbrite.com.au https://www.eventbrite.com.au https://*.spotify.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.hsforms.net https://*.hsforms.com https://*.matterport.com https://joom.ag https://*.joomag.com https://www.joomag.com https://*.service.anz https://unsw.au1.qualtrics.com https://*.smartsheet.com https://player.vimeo.com https://www.figma.com https://www.googletagmanager.com https://*.cs.link https://*.syd-2.linewize.net https://*.fliphtml5.com https://*.opendns.com https://*.tableau.com https://omny.fm https://*.theconversation.com https://*.zscalerone.net https://*.uri.sh https://*.dwcdn.net https://*.nogginapp.io https://*.mwginternal.com https://*.matterportvr.cn https://*.instagram.com https://www.instagram.com https://unsw.sharepoint.com https://*.ascentone.com https://*.maps.arcgis.com https://*.data.ictinternational.com https://www.sketch.com https://*.knightlab.com https://*.cloudfront.net https://*.tikee.io https://*.regionalpropertymarkets.com https://padlet.com https://*.app.carto.com https://scribehow.com https://*.shinyapps.io https://*.powerbi.com https://*.media.tumblr.com https://www.recaptcha.net https://*.gettyimages.com https://*.brevo.com https://mailchi.mp https://www.arcgis.com https://*.github.io https://*.media.tumblr.com https://*.au.panopto.com https://unswlibrary.libanswers.com https://vemcount.app https://*.shorthand.com https://iframely.shorthand.com https://fliphtml5.com https://*.campaign-archive.com https://*.adsrvr.org https://*.credly.com https://*.office.com https://*.nxt.blackbaud.com https://*.typeform.com https://*.calendly.com https://calendly.com https://embed.podcasts.apple.com https://*.mypurecloud.com.au https://unswedge.mygo1.com https://*.mygo1.com https://go1.com https://*.go1.com data: blob:; worker-src 'self' https://*.mypurecloud.com.au data: blob:; object-src 'self' https://*.youtube.com https://*.youtube-nocookie.com data: blob:; form-action 'self' https://*.hsforms.net https://*.hsforms.com https://*.civeng.unsw.edu.au https://unsw.us1.list-manage.com https://unsw.us2.list-manage.com https://unsw.us3.list-manage.com https://unsw.us4.list-manage.com https://unsw.us5.list-manage.com https://unsw.us6.list-manage.com https://unsw.us7.list-manage.com https://unsw.us8.list-manage.com https://unsw.us9.list-manage.com https://unsw.us10.list-manage.com https://unsw.us11.list-manage.com https://unsw.us12.list-manage.com https://unsw.us13.list-manage.com https://unsw.us14.list-manage.com https://unsw.us15.list-manage.com https://unsw.us16.list-manage.com https://unsw.us17.list-manage.com https://unsw.us18.list-manage.com https://unsw.us19.list-manage.com https://unsw.us20.list-manage.com https://unsw.us21.list-manage.com https://login.microsoftonline.com; report-uri /bin/unsw/common/csp-violation-report/endpoint 3 script-src 'self' data: 'unsafe-inline' 'unsafe-eval' documentservices.adobe.com *.dickssportinggoods.com *.cardinalcommerce.com api.cash.app cash.app *.akamaihd.net *.scene7.com app.link *.bazaarvoice.com *.radar.com *.googleapis.com *.certona.net *.certona.com res-x.com *.res-x.com maxcdn.bootstrapcdn.com c.go-mpulse.net akstat.io h.online-metrix.net tags.tiqcdn.com s.pinimg.com a.wishabi.com analytics.twitter.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com bat.bing.com beacon.riskified.com *.branch.io qognvtzku-x.global.ssl.fastly.net ciunnwhq.micpn.com connect.facebook.net ct.pinterest.com utt.impactcdn.com d2oh4tlt9mrke9.cloudfront.net dickssportinggoods.demdex.net dicks-sporting-goods.pxf.io dpm.demdex.net *.tt.omtrdc.net dsg2.btttag.com e.dickssportinggoods.com edge1.certona.net f.wishabi.net gateway.dcsg.com *.getmetrical.com img.riskified.com match.adsrvr.org *.kampyle.com *.nextdoor.com network.bazaarvoice.com network-a.bazaarvoice.com pinterest.adsymptotic.com pixel.rubiconproject.com pixel.tapad.com r.dlx.addthis.com sc-static.net smetrics.dickssportinggoods.com snap.adsrvr.org so.rlcdn.com static.ads-twitter.com t.co tr.snapchat.com www.facebook.com www.googletagmanager.com www.hlserve.com www.res-x.com x.skimresources.com *.criteo.com cdn.hlserve.com b.hlserve.com www.google.com *.g.doubleclick.net *.doubleclick.net *.googlesyndication.com adservice.google.com c.riskified.com ws.sessioncam.com www.googleadservices.com cdn.brandingbrand.com dsg2m.btttag.com www.google-analytics.com cdnjs.cloudflare.com *.cloudfront.net *.iesnare.com code.jquery.com www.paymentjs.firstdata.com www.gstatic.com www.everestjs.net www.paypal.com *.paypalobjects.com *.braintreegateway.com tagtracking.vibescm.com cdn.auth0.com polyfill.io cdn.tagdelivery.com *.truefitcorp.com *.affirm.com *.afterpay.com *.hlserve.com *.anyguide.com resources.digital-cloud.medallia.com *.anyroad.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com acs.entersektehs.com *.stylitics.com prod.accdab.net *.cdn-net.com *.syndigo.com *.zoovu.com *.curalate.com assets-barracuda-runner.azureedge.net *.liveperson.net *.lpsnmedia.net *.adoberesources.net *.adobedc.net *.attn.tv analytics.tiktok.com *.quantummetric.com *.bambuser.com *.mycustomizer.com *.flippenterprise.net *.collectivevoice.com ln-rules.rewardstyle.com accounts.google.com *.rokt.com *.tvpixel.com *.monetate.net *.reddit.com *.redditstatic.com *.granify.com *.tnapplications.com *.minionplatform.com blob: apps.byondxr.com acrobatservices.adobe.com ep2.adtrafficquality.google fundingchoicesmessages.google.com mczbf.com sjwoe.com cj.dotomi.com emjcd.com idsync.rlcdn.com *.mczbf.com *.cj.com *.adobemc.com *.techlab-cdn.com *.obsess-vr.com *.obsessvr.com s3.amazonaws.com/idme/ *.jebbit.com; worker-src blob:; frame-ancestors *.dickssportinggoods.com *.adobe.com *.experiencecloud.adobe.com *.adobemc.com; child-src *.cj.com *.monetate.net acrobatservices.adobe.com documentservices.adobe.com *.attn.tv dcsg.jotform.com *.dickssportinggoods.com *.quantummetric.com *.adyen.com *.afterpay.com *.paypal.com *.paypalobjects.com *.cardinalcommerce.com api.cash.app cash.app *.liveperson.net *.lpsnmedia.net dickssportinggoods.demdex.net *.criteo.com *.criteo.net *.minionplatform.com maps.google.com accounts.google.com hosted.where2getit.com mobile.where2getit.com fit.dksxchange.com www.thinglink.com dicks-cti.gvcommerce.com www.youtube.com *.truefitcorp.com *.affirm.com *.doubleclick.net *.g.doubleclick.net *.pinterest.com *.googleapis.com tr.snapchat.com resources.digital-cloud.medallia.com *.hlserve.com *.facebook.com static.ads-twitter.com *.tagdelivery.com *.fls.doubleclick.net prod.accdab.net www.cdn-net.com *.googlesyndication.com *.safeframe.googlesyndication.com www.google.com *.anyroad.com checkoutshopper-live.adyen.com checkoutshopper-live-us.adyen.com acs.entersektehs.com *.mycustomizer.com *.collectivevoice.com ln-rules.rewardstyle.com display.ugc.bazaarvoice.com api.bazaarvoice.com *.bazaarvoice.com *.curalate.com *.bambuser.com *.radar.com *.recaptcha.net *.rokt.com sketchfab.com blob: www.googletagmanager.com ep2.adtrafficquality.google *.adobemc.com *.techlab-cdn.com *.granify.com *.eprize.net; 3 default-src 'self' data: blob: *.boomplaymusic.com *.boomplay.com *.bphfive.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.boomplay.com *.bphfive.com *.google.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com *.gstatic.cn *.facebook.net *.twitter.com recaptcha.net *.google-analytics.com *.doubleclick.net *.adtrafficquality.google *.ampproject.org *.googleadservices.com; style-src 'self' 'unsafe-inline' data: https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; worker-src 'self' blob:; connect-src 'self' data: https:; frame-src 'self' https:; frame-ancestors 'self' *.boomplaymusic.com *.boomplay.com; 3 default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: wss: *.2o7.net *.ac-systems.com *.adobe.com *.adobe.io *.adobedtm.com *.adoberesources.net *.adsymptotic.com *.akamaihd.net *.amazonaws.com *.amelia.com *.arcgis.com *.atdmt.com *.base.be *.bbvms.com *.bluebillywig.com *.bluecoat.com bf72526xwo.bf.dynatrace.com *.clarity.ms *.cloudfront.net *.companymatch.me *.contentsquare.com *.contentsquare.net *.cookielaw.org *.customersaas.com *.day.com *.demdex.net *.doubleclick.net *.driftqa.com *.driftt.com *.everesttech.net *.facebook.com *.facebook.net *.fontawesome.com *.force.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.hotjar.com *.hotjar.io *.licdn.com *.linkedin.com *.litix.io *.loadinggif.com *.luckycycle.com *.marketo.net *.mktoresp.com *.mktoutil.com *.mobistar.be *.nettjar.com *.omtrdc.net *.onetrust.com *.oribi.io *.pegacloud.net *.pingvp.com *.pinimg.com *.pinterest.com *.premiumplus.io *.qelpcare.com *.salesforce.com *.salesforceliveagent.com *.sfdcstatic.com *.snapchat.com *.speedtestcustom.com *.telenet-ops.be *.telenet.be *.telenet.be:* *.telenet.be.seg.js *.telenetcampagnes.be *.typekit.net *.typography.com *.unpkg.com *.upc.ch *.usabilla.com *.vimeo.com *.webgains.com *.webgains.io *.wista.com *.wistia.com *.wistia.net *.youtube.com *.ytimg.com *.zdassets.com *.zendesk.com *.zentr.cc *.zentrick.com *.zopim.com *.zopim.io *.binkies3d.com app.insites.com cdn.clinch.co trk.clinch.co cookies-data.onetrust.io eur01.safelinks.protection.outlook.com html5-player.libsyn.com playlist.megaphone.fm widget.euw1.chat.pega.digital sc-static.net binkiesproductionweu.servicebus.windows.net binkiescontentnode.blob.core.windows.net binkiesteaserstorage.blob.core.windows.net online.publuu.com *.bing.com bytedance.com sslocal.com analytics.tiktok.com widget.trustpilot.com sdk.onfido.com api.onfido.com *.google.be *.google.nl cdn.taboola.com https://analytics-ipv6.tiktokw.us/ipv6/enrich_ipv6 trc.taboola.com; connect-src 'self' 'self' 'unsafe-eval' 'unsafe-inline' blob: data: wss: *.2o7.net *.ac-systems.com *.adobe.com *.adobe.io *.adobedtm.com *.adoberesources.net *.adsymptotic.com *.akamaihd.net *.amazonaws.com *.amelia.com *.arcgis.com *.atdmt.com *.base.be *.bbvms.com *.bluebillywig.com *.bluecoat.com bf72526xwo.bf.dynatrace.com *.clarity.ms *.cloudfront.net *.companymatch.me *.contentsquare.com *.contentsquare.net *.cookielaw.org *.customersaas.com *.day.com *.demdex.net *.doubleclick.net *.driftqa.com *.driftt.com *.everesttech.net *.facebook.com *.facebook.net *.fontawesome.com *.force.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.hotjar.com *.hotjar.io *.licdn.com *.linkedin.com *.litix.io *.loadinggif.com *.luckycycle.com *.marketo.net *.mktoresp.com *.mktoutil.com *.mobistar.be *.nettjar.com *.omtrdc.net *.onetrust.com *.oribi.io *.pegacloud.net *.pingvp.com *.pinimg.com *.pinterest.com *.premiumplus.io *.qelpcare.com *.salesforce.com *.salesforceliveagent.com *.sfdcstatic.com *.snapchat.com *.speedtestcustom.com *.telenet-ops.be *.telenet.be *.telenet.be:* *.telenet.be.seg.js *.telenetcampagnes.be *.typekit.net *.typography.com *.unpkg.com *.upc.ch *.usabilla.com *.vimeo.com *.webgains.com *.webgains.io *.wista.com *.wistia.com *.wistia.net *.youtube.com *.ytimg.com *.zdassets.com *.zendesk.com *.zentr.cc *.zentrick.com *.zopim.com *.zopim.io *.binkies3d.com app.insites.com cdn.clinch.co trk.clinch.co cookies-data.onetrust.io eur01.safelinks.protection.outlook.com html5-player.libsyn.com playlist.megaphone.fm widget.euw1.chat.pega.digital sc-static.net binkiesproductionweu.servicebus.windows.net binkiescontentnode.blob.core.windows.net binkiesteaserstorage.blob.core.windows.net online.publuu.com *.bing.com bytedance.com sslocal.com analytics.tiktok.com widget.trustpilot.com sdk.onfido.com api.onfido.com *.google.be *.google.nl cdn.taboola.com https://analytics-ipv6.tiktokw.us/ipv6/enrich_ipv6 trc.taboola.com https://wss.telenet.be https://wss.base.be https://*.google.com https://*.google.be https://*.doubleclick.net https://*.tiktokv.com https://analytics.tiktok.com https://www.google.be https://google.be https://analytics-ipv6.tiktokv.us https://analytics-ipv6.tiktokw.us/ipv6/enrich_ipv6; img-src 'self' blob: data: *.telenet.be *.telenet.be:* https: http: http://loadinggif.com *.doubleclick.net *.loadinggif.com binkiescontentnode.blob.core.windows.net binkiesdevnode.blob.core.windows.net *.tiktok.com *.onfido.com *.google.be *.google.nl cdn.taboola.com https://analytics-ipv6.tiktokw.us/ipv6/enrich_ipv6 trc.taboola.com; 3 default-src 'unsafe-inline' 'self' https: wss: data:; img-src blob: data: https:; media-src blob: data: https:; script-src 'unsafe-eval' 'unsafe-inline' https:; worker-src 'self' blob:; frame-ancestors 'self'; 3 frame-ancestors *.3ds.com *.solidworks.com; base-uri 'self' 3 frame-ancestors 'self' https://www.facebook.com; frame-src 'self' https://*.zyxel.com.tw https://www.youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.youtube-nocookie.com https://js-eu1.hsforms.net https://*.ytimg.com https://*.google.com https://*.googlevideo.com https://static.addtoany.com https://*.hsforms.net https://*.hubspot.com https://*.snapengage.com https://*.freshchat.com https://embed.fillout.com https://www.googletagmanager.com https://webforms.zyxel.cloud https://partner.zyxel.it; script-src 'self' 'report-sample' 'unsafe-inline' https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hs-analytics.net https://*.hsforms.net https://js-eu1.hscollectedforms.net https://*.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://cdn.jsdelivr.net https://connect.facebook.net https://munchkin.marketo.net https://script.crazyegg.com https://static.zdassets.com https://js.hs-scripts.com https://js.hsforms.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hs-analytics.net https://cdn.cookie-script.com https://s.adroll.com https://c.seznam.cz https://mc.yandex.ru https://www.snapengage.com https://*.googleapis.com https://d.adroll.com https://snap.licdn.com https://storage.googleapis.com https://u.heatmap.it https://script.hotjar.com https://static.hotjar.com https://*.doubleclick.net https://*.google.com https://*.cloudfront.net https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagservices.com https://*.googleoptimize.com https://*.nebula.zyxel.com https://cdnjs.cloudflare.com https://*.google-analytics.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://ssl.google-analytics.com https://www.google-analytics.com https://*.zyxel.com https://*.myzyxel.com https://www.gstatic.com https://www.google.com/recaptcha/ https://static.addtoany.com https://*.hubspot.com https://js.hscollectedforms.net https://report.cookie-script.com https://ind-widget.freshworks.com https://zyxel-support-help.freshchat.com https://server.fillout.com https://media.campaigner.com https://mpsnare.iesnare.com https://www.youtube.com https://*.youtube.com https://*.ytimg.com https://*.clarity.ms; style-src 'self' 'report-sample' 'unsafe-inline' https://*.nebula.zyxel.com https://*.google.com https://*.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.googleapis.com https://*.s3.amazonaws.com https://www.gstatic.com https://zyxel-support-help.freshchat.com https://ind-widget.freshworks.com https://media.campaigner.com https://mpsnare.iesnare.com; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.gstatic.com https://storage.googleapis.com; img-src 'self' data: https://*.zyxel.com https://*.zyxelgroup.com https://*.snapengage.com https://c.seznam.cz https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.cloudfront.net https://*.googleusercontent.com https://*.google.com https://*.google.fr https://*.google.com.tw https://*.gstatic.com https://*.doubleclick.net https://*.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://*.googlevideo.com https://*.facebook.com https://*.linkedin.com https://px.ads.linkedin.com https://storage.googleapis.com https://*.googletagmanager.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://track-eu1.hubspot.com/__ptq.gif; connect-src 'self' https://*.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://c.seznam.cz https://*.zyxel.com https://*.zyxelgroup.com https://*.googleapis.com https://*.google.com https://*.google.com.tw https://*.hotjar.com https://*.hsforms.net https://*.hubspot.com https://*.hscollectedforms.net https://*.snapengage.com https://*.cloudfront.net https://*.amazonaws.com https://*.facebook.com https://*.facebook.net https://*.linkedin.com https://*.campaigner.com https://*.freshchat.com https://*.fillout.com https://*.google-analytics.com https://script.crazyegg.com https://*.cookie-script.com https://*.jsdelivr.net https://*.hotjar.io https://*.clarity.ms; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 3 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' https: https://accounts.google.com/gsi/; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: https://accounts.google.com/gsi/client; style-src data: 'unsafe-inline' https: https://accounts.google.com/gsi/style; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob: https://accounts.google.com/gsi/; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'none' 3 object-src 'none'; connect-src https://stats-stg.jiosaavn.com https://stats.jiosaavn.com https://qa-api.jiosaavn.com https://staging-api.jiosaavn.com https://api1.jiosaavn.com https://public.releases.juspay.in 'self' https://static-cdn.trackier.com wss://wsstaging.jiosaavn.com wss://ws.jiosaavn.com https://identitytoolkit.googleapis.com https://securepubads.g.doubleclick.net https://www.google-analytics.com https://hbopenbid.pubmatic.com https://www.google.com https://www.gstatic.com https://pagead2.googlesyndication.com *.pubmatic.com https://sb.scorecardresearch.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' *.juspay.in/ https://payments.juspay.in/ https://api.assets.juspay.in/ https://sandbox.assets.juspay.in/ https://js.stripe.com https://public.releases.juspay.in https://api.juspay.in https://sandbox.juspay.in tez://upi/pay phonepe://pay paytmmp://upi/pay paytmmp://pay credpay://upi/pay upi://pay upi://mandate paytmmp://mandate paytmmp://upi/mandate phonepe://mandate tez://upi/mandate *.googlesyndication.com *.safeframe.googlesyndication.com https://ads.pubmatic.com https://www.google.com data: tez: upi: paytmmp: phonepe: https://*.jiocoupons.in; worker-src 'none';manifest-src 'self'; 3 script-src 'self' 'unsafe-eval' 'unsafe-inline' *.afterpay.com *.clearpay.co.uk *.clearpay.com *.googleapis.com public.fbot.me static.fbot.me campaign.fbot.me lcx-embed.bambuser.com www.googletagmanager.com *.onetrust.com *.cookielaw.org *.bizible.com hbiq.net cdn.branch.io sc-static.net snap.licdn.com connect.facebook.net *.linkedin.com *.facebook.com munchkin.marketo.net www.googleadservices.com cdn.dashhudson.com djnf6e5yyirys.cloudfront.net cdn.builder.io t.contentsquare.net www.google-analytics.com googleads.g.doubleclick.net app.link v5tufwer.micpn.com pi.pardot.com tag.clearbitscripts.com/v1/pk_ba428737ee82fd942f13030da0c2629b/tags.js tag.rmp.rakuten.com metadata-static-files.sfo2.cdn.digitaloceanspaces.com/pixel/lp.js x.clearbitjs.com/v2/pk_ba428737ee82fd942f13030da0c2629b/tracking.min.js x.clearbitjs.com/v2/pk_ba428737ee82fd942f13030da0c2629b/destinations.min.js analytics.tiktok.com afterpay-business-site.vercel.app afterpay-consumer-content-hub.vercel.app cdn.amplitude.com *.adsrvr.org *.pinimg.com *.snapchat.com j.6sc.co tag.demandbase.com www.workwithsquare.com player.vimeo.com widget.trustpilot.com embed.typeform.com websdk.appsflyer.com www.redditstatic.com; img-src * data:; object-src 'none'; base-uri 'none'; frame-src www.youtube-nocookie.com widget.trustpilot.com; frame-ancestors 'self' *.builder.io; 3 frame-ancestors learn.arcgis.com *.esri.com pro.arcgis.com doc.arcgis.com 3 frame-ancestors bell.ca *.bell.ca *.bellmts.ca *.virginmobile.ca *.virginplus.ca *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca *.luckymobile.ca *.quantummetric.com; script-src https://*.go-mpulse.net https://*.luckymobile.ca https://*.ujet.co https://*.ccaiplatform.com https://www.googletagmanager.com https://sc-static.net https://assets.adobedtm.com https://*.google-analytics.com https://*.postescanada-canadapost.ca https://*.nuance.com https://*.inq.com https://connect.facebook.net https://static.ads-twitter.com https://*.twitter.com https://ssl.geoplugin.net https://s.pinimg.com https://*.google.com https://*.gstatic.com https://*.vmobile.ca https://*.googleadservices.com https://*.stackadapt.com https://*.doubleclick.net https://*.bell.ca https://*.tiktok.com https://*.know-where.com https://*.korem.com https://*.googleapis.com https://*.coveo.com https://siteimproveanalytics.com https://*.licdn.com https://cdnjs.cloudflare.com https://*.youtube.com https://bat.bing.com https://tr.snapchat.com https://s.ytimg.com https://*.micpn.com https://*.clarity.ms https://*.telebec.com https://*.northerntel.ca https://*.analytics-egain.com https://*.branch.io https://app.link https://*.gbqofs.com https://*.visualwebsiteoptimizer.com https://cdn.cookielaw.org https://*.cookielaw.org https://*.quantummetric.com https://*.vaulting.io 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: ; object-src https://refer.bell.ca; 3 frame-ancestors 'self' *.appfolio.com *.appfolioinc.com *.appfolioinvestmentmanagement.com *.folio-guard.com *.storyblok.com 3 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src https: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests; report-uri https://lavoz.report-uri.io/r/default/csp/enforce 3 frame-ancestors 'self' *.drillisch-online.de *.1und1.de *.1und1.com profiseller.de *.profiseller.de *.1and1.com dsl.gmx.de dsl.web.de 1und1-premiumpartner.de *.1und1-premiumpartner.de 1und1-partner.de *.1und1-partner.de 1und1-mm.de *.1und1-mm.de 1und1-freenet.de *.1und1-freenet.de yourfone-partner.de *.yourfone-partner.de *.mouseflow.com *.1und1.cloud; 3 frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com; upgrade-insecure-requests 3 default-src 'self' https://static.expo.dev; connect-src 'self' https://api.expo.dev https://static.expo.dev https://job-artifacts.eascdn.net https://job-logs.eascdn.net https://staging-assets.eascdn.net https://assets.eascdn.net https://eas.expo.app https://cdp.expo.dev https://cdn.rudderlabs.com http://127.0.0.1:* https://qr.expo.dev https://status.expo.dev https://8tdse0ohgq-dsn.algolia.net https://qex7pb7d46-dsn.algolia.net https://sessions.bugsnag.com https://*.doubleclick.net https://api.github.com https://google.com https://*.google.com https://*.analytics.google.com https://*.google-analytics.com https://www.googleadservices.com https://*.googleapis.com https://pagead2.googlesyndication.com https://*.googletagmanager.com https://react-tweet.vercel.app https://reactnative.directory https://api.rudderstack.com https://9r24npb8.api.sanity.io https://9r24npb8.apicdn.sanity.io https://faro-collector-prod-us-east-3.grafana.net https://sentry.io https://o30871.ingest.sentry.io https://api.stripe.com https://api.logrocket.com https://*.typeform.com https://*.hubapi.com https://*.hubspot.com https://*.hsappstatic.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.hsforms.com https://px.ads.linkedin.com https://www.redditstatic.com https://pixel-config.reddit.com https://alb.reddit.com https://bzr.openai.com https://*.crazyegg.com https://*.kapa.ai https://www.recaptcha.net https://*.vexo.co; manifest-src 'self'; font-src 'self' data: https://static.expo.dev https://cdnjs.cloudflare.com https://fonts.gstatic.com; frame-src expo-orbit: https://*.datadoghq.com https://td.doubleclick.net https://www.google.com https://www.googletagmanager.com https://www.recaptcha.net https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://*.youtube.com https://embed.bsky.app https://*.logrocket.com https://*.typeform.com https://*.hubspot.com https://*.hs-sites.com https://*.hubspot.net https://*.hsforms.net https://*.hsforms.com https://*.vexo.co https://*.mediadelivery.net; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' https://static.expo.dev https://d2wy8f7a9ursnm.cloudfront.net https://googleads.g.doubleclick.net https://tagmanager.google.com https://www.google.com https://www.googleadservices.com https://www.recaptcha.net https://maps.googleapis.com https://pagead2.googlesyndication.com https://*.googletagmanager.com https://www.gstatic.cn https://www.gstatic.com https://cdn.rudderlabs.com https://js.stripe.com https://*.js.stripe.com https://www.youtube.com https://embed.bsky.app https://*.typeform.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hsforms.com https://*.hsleadflows.net https://snap.licdn.com https://www.redditstatic.com https://pixel-config.reddit.com https://bzrcdn.openai.com https://*.crazyegg.com https://*.kapa.ai; style-src 'self' 'unsafe-inline' https:; frame-ancestors 'self'; report-to expo 3 default-src 'self' *.usbank.com 'unsafe-inline' 'unsafe-eval' blob: data: cdn.appsflyer.com cdn.pdst.fm connect.facebook.net conv-tm.everesttech.net ct.pinterest.com d.agkn.com www.datadoghq-browser-agent.com browser-intake-datadoghq.com display.powerreviews.com dsum-sec.casalemedia.com eb2.3lift.com edge.adobedc.net assetts.adobedtm.com fast.fonts.net fonts.gstatic.com google.com hb.yahoo.net ib.adnxs.com idpix.media6degrees.com jadserve.postrelease.com match.sharethrough.com mid.rkdms.com mpsnare.iesnare.com opreq.observepoint.com partners.tremorhub.com pippio.com pixel.rubiconproject.com pixel.tapad.com players.brightcove.net *.invoca.net s.pinimg.com schema.milestoneinternet.com sc-static.net simage2.pubmatic.com siteimproveanalytics.com snap.licdn.com solutions.invocacdn.com ssa.gov static.3playmedia.com sync.bfmio.com sync.taboola.com sync.teads.tv sync-stgz.ads.yieldmo.com t.co tags.tiqcdn.com usbankinteractive.postclickmarketing.com utt.impactcdn.com vjs.zencdn.net websdk.appsflyer.com www.emjcd.com www.facebook.com www.googleadservices.com www.googletagmanager.com www.mczbf.com www.usbankedge.com x.bidswitch.net *.adoberesources.net *.adsrvr.org *.redditstatic.com *.reddit.com *.ads-twitter.com *.akamaihd.net *.amazonaws.com *.appdynamics.com *.bing.com *.boltdns.net *.brightcove.com *.brightcovecdn.com *.c3tag.com *.casalemedia.com *.company-target.com *.demandbase.com *.demdex.net *.doubleclick.net *.eum-appdynamics.com *.force.com *.glance.net *.glancecdn.net *.google.co.in *.google.com *.googleapis.com *.gstatic.com *.impactradius-event.com *.jsdelivr.net *.kitewheel.com *.knotch.com *.knotch-cdn.com *.krxd.net *.leadfusion.com *.linkedin.com *.loggly.com *.marketo.net *.miaprova.com *.mktoresp.com *.mktoutil.com *.mrpdata.net *.mykukun.com *.nextdoor.com *.ojrq.net *.omtrdc.net *.onetrust.com *.powerreviews.com *.pxf.io *.qualtrics.com *.quantummetric.com *.rlcdn.com *.ru4.com *.salesforceliveagent.com *.sandbox.file.force.com *.siteimproveanalytics.io *.sjv.io *.snapchat.com *.storygize.net *.tealiumiq.com *.turn.com *.typekit.net *.us.bank-dns.com *.videoamp.com *.yahoo.com *.youtube.com *.byspotify.com *.spotify.com *.dianomi.com *.pixel.admedia.com *.schemaapp.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.clickagy.com *.rokt.com *.rokt-api.com *.roktinternal.com *.zi-scripts.com *.zoominfo.com *.ispot.tv *.evolo.ai aa.agkn.com match.adsrvr.org wss://*.amazonaws.com wss://*.glance.net wss://mpsnare.iesnare.com; report-uri /svt/ecm/csp-violation-report 3 default-src 'self' * 'unsafe-inline' 'unsafe-eval' data:; form-action 'self' *; frame-src 'self' *; 3 default-src 'none'; base-uri 'none'; frame-src checkout.stripe.com *.google.com; frame-ancestors 'none'; style-src *.scryfall.com scryfall.com; script-src *.scryfall.com scryfall.com *.analytics.google.com *.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com *.cloudflareinsights.com checkout.stripe.com 'unsafe-eval'; img-src *.scryfall.io *.scryfall.com scryfall.com *.analytics.google.com *.google-analytics.com *.googletagmanager.com *.stripe.com data:; font-src *.scryfall.com scryfall.com; media-src *.scryfall.com scryfall.com; manifest-src *.scryfall.com scryfall.com; connect-src api.scryfall.com scryfall.com *.analytics.google.com *.google-analytics.com *.googletagmanager.com cloudflareinsights.com checkout.stripe.com; block-all-mixed-content; 3 frame-ancestors 'self' *.gov.on.ca *.ontario.ca *.ontariogovernment.ca; 3 frame-ancestors 'self' https://*.sella.it https://*.axerve.com https://*.gestpay.it https://*.coremedia.vm https://*.coremedia.cloud https://*.coremedia.io https://*.coremedia.com https://*.quickrun.io https://*.coremedia.rocks 3 default-src 'self' 'unsafe-inline' https://map.eitaa.com/; img-src 'self' data:; style-src 'self' 'unsafe-inline'; object-src 'self' data:; script-src 'self' 'unsafe-inline' https://map.eitaa.com/; 3 default-src 'self'; base-uri 'self'; img-src 'self' data: https:; media-src https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; upgrade-insecure-requests; frame-ancestors 'self' 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *; object-src 'none'; img-src data: *; worker-src 'self' blob:; 3 default-src 'self' https: 'unsafe-inline' 'unsafe-eval' chrome-extension: data: *.googleapis.com *.gstatic.com *.googleusercontent.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://recaptcha.net https://cdn.cookielaw.org blob:; object-src https:; style-src 'unsafe-inline' https:; img-src 'self' https: *.keepeek-dev.com *.keepeek.com https://cdn.cookielaw.org mediaassets.airbus.com data:; media-src 'self' https: *.keepeek-dev.com *.keepeek.com blob:; frame-src 'self' https: https://www.youtube.com/embed/ https://youtu.be https://www.google.com/maps/ *.keepeek-dev.com *.keepeek.com https://airbus2024eutfm.q4web.com; child-src blob: https://airbus2024eutfm.q4web.com; font-src https: data:; connect-src https: wss://ws.hotjar.com; report-uri /report-csp-violation; upgrade-insecure-requests 3 img-src 'self' data: *.xylem.live *.google.co.in *.google.com static.pw.live *.googletagmanager.com *.ytimg.com blob: *.amazonaws.com *.cloudfront.net *.facebook.com *.moengage.com *.youtube.com *.googleusercontent.com *.physicswallah.live *.pw.live *.gravatar.com *.snapchat.com *.curiousjr.com *.zoom.us zoom.us *.googleapis.com *.freshdesk.com *.clarity.ms cdn.shopify.com; 3 default-src 'self' https://feed.pghub.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://snippet.maze.co https://feed.pghub.io *.rudderstack.com cdn.rudderlabs.com https://z.moatads.com/ https://s.swiftypecdn.com/ https://connect.facebook.net/ https://js.adsrvr.org/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://www.googleadservices.com/ https://maps.googleapis.com https://unpkg.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://script.crazyegg.com https://api.ipify.org https://code.jquery.com/ https://c.lytics.io/ https://cdn.segment.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://pghub.io/ https://cdn.cookielaw.org/ https://survey.pg.com; style-src 'self' 'unsafe-inline' https://feed.pghub.io https://cdn.cookielaw.org/ https://c.lytics.io/ https://cdnjs.cloudflare.com https://unpkg.com https://survey.pg.com; object-src https://images.ctfassets.net/; base-uri 'self'; connect-src 'self' https://www.google.com https://geolocation.onetrust.com https://feeds.businesswire.com https://csapi-nonprod.pg.com https://csapi.pg.com https://downloads.ctfassets.net https://cdn.segment.com https://privacytermsprod.azureedge.net https://assets.ctfassets.net/ https://cdn.contentful.com https://mw-ar-recom-prod.pgapi.io/ https://staging-api.fr.pg.com/ https://gpdb-staging.name-coach.com/api/public/v1/pronunciations/phonetics https://gpdb.name-coach.com/api/public/v1/pronunciations/phonetics https://prompts.maze.co https://pagestates-tracking.crazyegg.com https://assets-tracking.crazyegg.com https://tracking.crazyegg.com https://api.fr.pg.com https://pg-poc-regulatory-app-test.azurewebsites.net https://s.swiftypecdn.com https://maps.googleapis.com https://script.crazyegg.com https://consent-api.onetrust.com https://api.segment.io/ https://match.adsrvr.org/ https://lj18wdvpyu-3.algolianet.com/ https://lj18wdvpyu-2.algolianet.com/ https://lj18wdvpyu-1.algolianet.com/ https://lj18wdvpyu-dsn.algolia.net/ https://www.google-analytics.com/ https://region1.google-analytics.com https://cdn.cookielaw.org *.rudderstack.com cdn.rudderlabs.com *.doubleclick.net https://stats.g.doubleclick.net https://survey.pg.com https://api.gcp.pgcloud.com; font-src 'self' https://feed.pghub.io https://survey.pg.com; frame-src 'self' https://survey.pg.com https://pgn2020news.q4web.com https://images.ctfassets.net/ https://www.youtube-nocookie.com/ https://feed.pghub.io https://www.facebook.com/ https://d.agkn.com/ https://www.youtube.com https://pandg.tapad.com https://www.google.com/ https://www.googletagmanager.com/; img-src 'self' blob: data: https://mms.businesswire.com/ https://feed.pghub.io https://www.facebook.com/ https://downloads.ctfassets.net/ https://px.moatads.com/ https://googleads.g.doubleclick.net/ https://www.confianzaonline.es *.akamaihd.net https://maps.gstatic.com https://maps.googleapis.com https://t.co https://www.google.com/ https://www.google.hr/ https://analytics.twitter.com https://s.amazon-adsystem.com/ https://c.lytics.io/ https://cdn.cookielaw.org/ https://www.googletagmanager.com/ https://match.adsrvr.org/ https://images.ctfassets.net https://pixel.tapad.com https://www.google-analytics.com https://i.ytimg.com https://survey.pg.com; manifest-src 'self'; frame-ancestors 'self' https://app.contentful.com; media-src 'self' https://feed.pghub.io https://videos.ctfassets.net/; worker-src blob:; 3 object-src 'none'; default-src * 'unsafe-inline' blob: data:; img-src * 'self' data: https: blob:; media-src * 'unsafe-inline' blob: data:; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; font-src * data: 3 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; worker-src blob: https:; connect-src ws: wss: https:; font-src 'self' https://themes.googleusercontent.com fonts.gstatic.com fonts.googleapis.com *.cloudfront.net *.tolunastart.com data:; 3 base-uri 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.cmh-1.pipedriveassets.com cdn.segment.com cdn-segment.pipedrive.com *.pipedrive.com *.pipedriveassets.com snap.licdn.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com snippet.growsumo.com cdn.cookielaw.org geolocation.onetrust.com www.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com www.gstatic.cn connect.facebook.net *.hotjar.com *.outbrain.com www.redditstatic.com www.youtube.com play.vidyard.com *.doubleclick.net *.taboola.com app.livestorm.co www.googleadservices.com static.ads-twitter.com https://*.browser-intake-datadoghq.com www-cms.pipedriveassets.com bat.bing.com *.quora.com js.grsm.io analytics.tiktok.com c.amazon-adsystem.com www.recaptcha.net recaptcha.net js.adsrvr.org secure.adnxs.com acdn.adnxs.com vitals.vercel-insights.com *.contentsquare.net app.contentsquare.com https://rs.eu1.fullstory.com https://static.xingcdn.com s.dpmsrv.com ib.adnxs.com a.dpmsrv.com d34r8q7sht0t9k.cloudfront.net scripts.rubiconredirect.com launcher.1mind.com pixel.rubiconredirect.com *.amplitude.com https://p.teads.tv https://s.yimg.com a.omappapi.com googleadservices.com tpc.googlesyndication.com analytics.twitter.com storage.googleapis.com aff.trypipedrive.com pipedrive.grsm.io; style-src 'self' 'unsafe-inline' cdn.cmh-1.pipedriveassets.com *.amplitude.com fonts.googleapis.com www.googletagmanager.com www-cms.pipedriveassets.com a.omappapi.com; frame-src cdn.cmh-1.pipedriveassets.com *.cdn.optimizely.com *.cdn-pci.optimizely.com www.facebook.com www.youtube.com www.youtube-nocookie.com www.google.com www.googletagmanager.com play.vidyard.com *.doubleclick.net app.livestorm.co tpc.googlesyndication.com airtable.com webforms.pipedrive.com s.amazon-adsystem.com www.recaptcha.net recaptcha.net *.adsrvr.org pipedrive.1mind.com pipedrive-sandbox.1mind.com https://p.teads.tv https://fledge.teads.tv *.hotjar.com *.lovable.app deployment-5fpmqbnntk.1mind.com deployment-fkr9bmv4gv.1mind.com pipedrive-sales-is-not-a-dirty-word.onrender.com; img-src 'self' data: https://*; object-src 'none'; worker-src 'self' blob:;; report-uri https://www.pipedrive.com/api/csp-reports 3 frame-ancestors 'self' https://*.ndtv.com https://*.ndtv.in https://*.ndtvshopping.com https://*.taboola.com https://*.ndtvgames.com https://*.ndtvprofit.com https://*.ndtvgoodtimes.com https://ndtv.com https://ndtv.in; 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://stats.windscribe.com https://*.windscribe.com https://*.windscribe.net https://js.stripe.com https://www.paypal.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://img.youtube.com https://support.windscribe.com https://garry3-be-prd.windscribe.com https://*.stripe.com https://*.paypal.com; font-src 'self' data:; frame-src 'self' https://www.youtube-nocookie.com https://docs.google.com https://js.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://embed.kumu.io; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.coinpayments.net; connect-src 'self' https://*.windscribe.com https://*.windscribe.net wss://*.windscribe.com wss://*.windscribe.net https://bigdig.energy https://api.stripe.com https://www.paypal.com https://www.sandbox.paypal.com 3 Upgrade-Insecure-Requests; object-src 'none'; frame-ancestors 'self' https://next2026.nutanix.com https://*.adobeaemcloud.com https://*.nutanix.com https://*.nutanix.cn https://*.ziftsolutions.com https://*.site.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ntnxdev.com https://*.adsrvr.org https://*.1mind.com https://*.quora.com https://*.soundcloud.com https://*.bizible.com https://*.pister.dev https://*.fontawesome.com https://*.youtube.com https://*.audiodub.app https://*.2o7.net https://*.6sc.co https://*.addtoany.com https://*.adobe.com https://*.adobedtm.com https://*.bing.com https://*.baidu.com https://*.brightcove.com https://*.brightcove.net https://*.bttrack.com https://*.cheqzone.com https://*.clarity.ms https://*.clearbit.com https://*.cloudflare.com https://*.cookielaw.org https://*.d41.co https://*.demandbase.com https://*.doubleclick.net https://*.driftt.com https://*.engagio.com https://*.everestjs.net https://*.facebook.net https://*.fullstory.com https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.cn https://*.gstatic.com https://*.hotjar.com https://*.hushly.com https://*.intercom.io https://*.intercomcdn.com https://*.licdn.com https://*.listenloop.com https://*.marketo.com https://*.marketo.net https://*.ml314.com https://*.adobeaemcloud.com https://*.adobeaemcloud.com.seg.js https://*.nutanix.cn https://*.nutanix.com https://*.nutanix.com.seg.js https://*.outbrain.com https://*.peerspot.com https://*.recaptcha.net https://*.redditstatic.com https://*.sndcdn.com https://*.twitter.com https://*.zemanta.com https://*.zencdn.net https://bttrack.com https://ml314.com https://*.jquery.com https://unpkg.com https://*.ziftsolutions.com https://ziftsolutions.com https://*.taboola.com https://*.microad.jp https://*.qualified.com https://*.stackadapt.com; connect-src 'self' https: wss://*.qualified.com data: blob:; img-src 'self' https: data: blob:; worker-src 'self' blob:; 3 default-src 'self' data: blob: 'unsafe-eval' 'report-sample' 'unsafe-inline' *.adyen.com adyen.com *.afterpay-beta.com afterpay-beta.com *.afterpay.com afterpay.com *.algolia.io algolia.io *.bazaarvoice.com bazaarvoice.com *.cloudflare.com cloudflare.com *.contentful.com contentful.com *.cookielaw.org cookielaw.org *.cquotient.com cquotient.com *.ctfassets.net ctfassets.net *.edq.com edq.com *.flipp.com flipp.com *.flippback.com flippback.com *.flippenterprise.net flippenterprise.net *.google.com google.com *.googletagmanager.com googletagmanager.com *.granify.com granify.com *.googlevideo.com googlevideo.com *.gstatic.com gstatic.com *.janrain.com janrain.com *.kampyle.com kampyle.com *.kaptcha.com kaptcha.com *.legitscript.com legitscript.com *.medallia.com medallia.com *.onetrust.com onetrust.com *.optimizely.com optimizely.com *.ordergroove.com ordergroove.com *.paypal.com paypal.com *.paypalobjects.com paypalobjects.com *.petsmart-dev.com petsmart-dev.com *.petsmart-qa.com petsmart-qa.com *.petsmart.ca petsmart.ca *.petsmart.com petsmart.com *.petsmartassets.com petsmartassets.com *.petsmartusermedia.com petsmartusermedia.com *.petsmartusermedia-qa.com petsmartusermedia-qa.com *.qas.com qas.com *.salsify.com salsify.com *.salsify-ecdn.com salsify-ecdn.com *.scene7.com scene7.com *.sentry.io sentry.io *.squarecdn.com squarecdn.com *.syndigo.cloud syndigo.cloud *.syndigo.com syndigo.com *.usablenet.com usablenet.com *.usablenet.dev usablenet.dev *.udev1a.net udev1a.net *.vercel.app vercel.app *.webcollage.net webcollage.net *.windows.net windows.net *.wishabi.com wishabi.com *.youtube.com youtube.com *.ytimg.com ytimg.com *.iesnare.com iesnare.com wss://mpsnare.iesnare.com *.33across.com 33across.com *.3lift.com 3lift.com *.ada.support ada.support *.adnxs.com adnxs.com *.adroll.com adroll.com *.adsrvr.org adsrvr.org *.adsymptotic.com adsymptotic.com *.advertising.com advertising.com *.agkn.com agkn.com app.link *.app.link *.barracuda.com barracuda.com *.bidswitch.net bidswitch.net *.bing.com bing.com bytedance: *.bluekai.com bluekai.com *.branch.io branch.io *.casalemedia.com casalemedia.com *.cloudfunctions.net cloudfunctions.net *.consensu.org consensu.org *.contentsquare.net contentsquare.net *.demdex.net demdex.net *.doubleclick.net doubleclick.net *.facebook.com facebook.com *.facebook.net facebook.net *.firebaseapp.com firebaseapp.com *.firebaseio.com firebaseio.com *.freespee.com freespee.com *.google-analytics.com google-analytics.com *.google.ca google.ca *.googleadservices.com googleadservices.com *.googleapis.com googleapis.com *.googlesyndication.com googlesyndication.com *.haujjd.net haujjd.net *.honey.io honey.io *.igodigital.com igodigital.com *.impactcdn.com impactcdn.com *.impactradius-event.com impactradius-event.com *.impct.site impct.site *.inmarkethub.com inmarkethub.com *.jsdelivr.net jsdelivr.net *.krxd.net krxd.net *.licdn.com licdn.com *.linkedin.com linkedin.com logs-01.loggly.com *.ojrq.net ojrq.net *.micpn.com micpn.com *.microad.jp microad.jp *.ml314.com ml314.com *.mountain.com mountain.com *.narrative.io narrative.io *.nextdoor.com nextdoor.com *.openx.net openx.net *.outbrain.com outbrain.com *.pinimg.com pinimg.com *.pinterdev.com pinterdev.com *.pinterest-anaheim.com pinterest-anaheim.com *.pinterest.com pinterest.com *.pinterest.okta.com pinterest.okta.com *.pubmatic.com pubmatic.com *.pusher.com pusher.com *.pxf.io pxf.io *.rakuten.com rakuten.com *.ravm.tv ravm.tv *.redditstatic.com redditstatic.com *.reddit.com reddit.com *.rlcdn.com rlcdn.com *.rubiconproject.com rubiconproject.com *.sc-static.net sc-static.net *.snap.com snap.com *.snapchat.com snapchat.com sslocal: *.taboola.com taboola.com *.tagmanager.google.com tagmanager.google.com *.tapad.com tapad.com *.tiktok.com tiktok.com *.tiktokw.us tiktokw.us *.treasuredata.com treasuredata.com *.uidapi.com uidapi.com *.upsellit.com upsellit.com *.web.app web.app *.xad.com xad.com *.yahoo.com yahoo.com *.yimg.com yimg.com *.w55c.net w55c.net; frame-ancestors 'none'; 3 default-src https: wss: blob: 'self' 'unsafe-inline' *.demandbase.com *.foxitesign.foxit.com salesforce.foxitesign.foxit.com *.evergage.com foxit.us-6.evergage.com *.visualwebsiteoptimizer.com app.vwo.com; img-src 'self' data: www.google.com *.google.com www.google-analytics.com *.google-analytics.com optimize.google.com www.googletagmanager.com *.googletagmanager.com *.stripe.com *.clarity.ms tribl.io px.ads.linkedin.com www.linkedin.com cc.swiftype.com *.bing.com images.g2crowd.com *.g2.com *.outbrain.com *.adroll.com alb.reddit.com 11145320.fls.doubleclick.net *.doubleclick.net www.facebook.com sealserver.trustwave.com i.imgur.com *.checkout.visa.com *.mastercard.com *.discovercard.com *.discover.com *.online-metrix.net q.quora.com d.adroll.com accounts.zendesk.com hero.kingpinkton.com ct.capterra.com tracking.g2crowd.com aorta.clickagy.com googleads.g.doubleclick.net srv.stackadapt.com pixel-sync.sitescout.com id.rlcdn.com js.chilipiper.com *.gravatar.com secure.gravatar.com *.hotjar.com *.paypal.com www.google.com.hk www.google.com.tw segments.company-target.com tags.srv.stackadapt.com cdn-cookieyes.com *.visualwebsiteoptimizer.com chart.googleapis.com app.vwo.com useruploads.vwo.io www.paypalobjects.com fonts.gstatic.com www.google.com.sg www.googleadservices.com pixel-config.reddit.com conversions-config.reddit.com *.6sc.co *.foxit.com *.g.doubleclick.net google.com *.foxitsoftware.com *.ytimg.com *.google.co.in *.vibe.co *.technologyadvice.com *.openai.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com static.cloudflareinsights.com kit.fontawesome.com www.google.com *.google.com www.googletagmanager.com *.googletagmanager.com *.googleadservices.com www.google-analytics.com *.google-analytics.com www.googleanalytics.com www.googleoptimize.com optimize.google.com googleads.g.doubleclick.net static.addtoany.com platform.twitter.com pi.pardot.com static.hotjar.com *.hotjar.com script.hotjar.com bat.bing.com s.swiftypecdn.com go.foxitinfo.com widget.trustpilot.com amplify.outbrain.com tr.outbrain.com q.quora.com 11145320.fls.doubleclick.net c.sf-syn.com scout-cdn.salesloft.com static.zdassets.com api.smooch.io widget-mediator.zopim.com tracking.g2crowd.com tags.srv.stackadapt.com *.zoominfo.com *.chilipiper.com www.redditstatic.com d.adroll.mgr.consensu.org d.adroll.com s.adroll.com snap.licdn.com connect.facebook.net static.ads-twitter.com sealserver.trustwave.com *.clarity.ms tribl.io *.stripe.com m.stripe.network *.paypal.com *.checkout.visa.com *.mastercard.com *.foxitesign.foxit.com *.discovercard.com *.discover.com h.online-metrix.net www.aexp-static.com www.paypalobjects.com *.youtube.com *.kingpinkton.com unpkg.com *.cloudfront.net tags.clickagy.com js.na.chilipiper.com public.profitwell.com st.foxitsoftware.cn *.demandbase.com apis.google.com www.google.com.hk js.driftt.com t.usermaven.com *.doubleclick.net google.com.tw paapi8916.d41.co cdn-0.d41.co a.quora.com *.rlcdn.com *.d41.co *.recaptcha.net *.gstatic.com cdn.evgnet.com *.company-target.com foxit.us-6.evergage.com *.evergage.com cdn-cookieyes.com *.visualwebsiteoptimizer.com app.vwo.com *.gstatic.cn *.foxit.com *.amazon-adsystem.com www.foxit.com ipinfo.io eu1-qa.foxitesign.foxit.com pagead2.googlesyndication.com *.6sc.co 6sc.co *.terminusapp.com player.vwo.me *.cookieyes.com *.foxitsoftware.com cloudflareinsights.com *.microsoft.com *.vibe.co *.amazonaws.com *.technologyadvice.com *.openai.com; style-src 'self' 'unsafe-inline' https: www.google-analytics.com www.googletagmanager.com *.googletagmanager.com optimize.google.com *.google.com s.swiftypecdn.com fonts.googleapis.com *.cloudflare.com tags.srv.stackadapt.com *.hotjar.com *.demandbase.com foxit.us-6.evergage.com *.visualwebsiteoptimizer.com www.foxit.com app.vwo.com *.technologyadvice.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com *.fontawesome.com script.hotjar.com *.hotjar.com *.evergage.com at.alicdn.com www.gartner.com; object-src 'self' *.foxitsoftware.com; worker-src 'unsafe-inline' 'self' blob:; connect-src *.visualwebsiteoptimizer.com app.vwo.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.hotjar.com *.hotjar.io *.zoominfo.com wss://ws.hotjar.com *.company-target.com www.google.com.sg *.foxitcloud.com bat.bing.com player.vwo.me *.reddit.com www.redditstatic.com *.linkedin.com *.6sc.co *.evergage.com *.foxitsoftware.com *.paypal.com *.google.com *.connectedpdf.com *.stripe.com www.g2.com *.foxit.com www.facebook.com *.clarity.ms *.cookieyes.com cdn-cookieyes.com *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net www.googleadservices.com pagead2.googlesyndication.com google.com *.googleapis.com *.google.co.in *.bing.net *.vibe.co *.amazonaws.com *.technologyadvice.com *.openai.com; frame-src app.vwo.com *.visualwebsiteoptimizer.com *.foxitsoftware.com td.doubleclick.net js.driftt.com s.company-target.com js.stripe.com www.sandbox.paypal.com www.recaptcha.net *.youtube.com www.foxit.com www.paypal.com na1.foxitesign.foxit.com www.google.com www.googletagmanager.com eu1-qa.foxitesign.foxit.com *.amazon-adsystem.com player.vwo.me *.stripe.com www.facebook.com *.paypal.com *.foxitcloud.com *.foxit.com *.g2.com; frame-ancestors *.foxit.com; 3 frame-ancestors 'self' *.springernature.com; 3 frame-ancestors 'self' *.wd.com westerndigital-privacy.relyance.ai centinelapi.cardinalcommerce.com; script-src 'self' www.youtube.com *.worldpay.com *.facebook.net static.westerndigital.com cdn.mouseflow.com script.crazyegg.com www.google-analytics.com bat.bing.com *.stackadapt.com *.googleadservices.com d.adroll.com googleads.g.doubleclick.net *.googletagmanager.com s.adroll.com snap.licdn.com www.googletagmanager.com trc.taboola.com analytics.xscreenattribution.com *.marketo.net *.trustarc.com www.redditstatic.com cdn.taboola.com tags.tiqcdn.com *.twitter.com s.go-mpulse.net static.ads-twitter.com js.adsrvr.org d.adroll.mgr.consensu.org s.ytimg.com unpkg.com *.marketo.com js.maxmind.com *.truste.com tagmanager.google.com *.relyance.ai *.adobe.com ajax.googleapis.com *.expertvoice.com *.experticity.com cdn1.sandbox.affirm.com cdn1-sandbox.affirm.com cdn1.affirm.com *.tt.omtrdc.net *.adobedtm.com *.sc.omtrdc.net www.google.com *.criteo.net *.criteo.com www.gstatic.com cdn.pdst.fm ext.chtbl.com *.signifyd.com *.bazaarvoice.com mpsnare.iesnare.com *.googleapis.com *.paypal.com tracking.channelsight.com gateway.foresee.com sc-static.net qoe-1.yottaa.net cdn.yottaa.com ecwportal.vertexsmb.com j.6sc.co s.yjtag.jp yjtag.yahoo.co.jp s.yimg.jp tag.demandbase.com paapi8935.d41.co cdn-0.d41.co id.rlcdn.com ecf.d41.co *.googlesyndication.com *.zinrelo.com wd-en.widget.custhelp.com script.mfilterit.net wafs.mfilterit.net 'unsafe-eval' apps.usw2.pure.cloud 'unsafe-inline'; 3 default-src 'self' https://*.acsbapp.com https://maxcdn.bootstrapcdn.com https://cdn.knightlab.com https://*.marketo.com https://*.google.com https://*.youtube.com https://*.gstatic.com https://*.gstatic.cn https://*.ul.com https://player.vimeo.com https://www.recaptcha.net *.salesforce-sites.com data: blob:; connect-src 'self' https://*.acsbapp.com https://*.wistia.com https://*.wistia.net *.wistia.cdn.com https://*.ul.com https://www.google-analytics.com https://*.google.com https://www.facebook.com https://stats.addtoany.com https://*.hotjar.com https://*.hotjar.io https://*.mktoutil.com https://*.mktoresp.com https://embedwistia-a.akamaihd.net https://sessions.bugsnag.com https://stats.g.doubleclick.net https://fg8vvsvnieiv3ej16jby.litix.io https://*.nr-data.net https://sheets-proxy.knightlab.com wss://*.hotjar.com https://csp.withgoogle.com https://cdn.linkedin.oribi.io https://*.linkedin.com https://*.litix.io https://*.qualtrics.com https://en.wikipedia.org/ *.my.salesforce-sites.com https://api.company-target.com https://acsbapp.com https://cdn.acsbapp.com https://*.trustarc.com *.demandbase.com demandbase.com company-target.com *.company-target.com https://uliodev.azure-api.net/informatica-email-phone/Global_Email_Phone_Validation https://io.ul.com/informatica-email-phone/Global_Email_Phone_Validation https://na1.ai.dm-us.informaticacloud.com/active-bpel/public/rt/cTHkDDQ8MOqgFALFbuPY0C/Global_Email_Phone_Validation_test https://ulenterpriseorg--devservice.sandbox.my.salesforce-scrt.com https://ulenterpriseorg--intdev.sandbox.my.salesforce-scrt.com https://ulenterpriseorg--sit.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.adobe.io wss://*.adobe.io https://adobeid-na1.services.adobe.com https://*.adobelogin.com https://auth.services.adobe.com https://delegated.identity.adobe.com https://www.recaptcha.net *.doubleclick.net *.6sc.co *.zi-scripts.com *.zoominfo.com https://*.algolia.net *.clickcease.com bat.bing.com https://www.googleadservices.com *.adobeaemcloud.com https://logx.optimizely.com https://*.optimizely.com wss://*.optimizely.com https://cdn.dreamdata.cloud https://pagead2.googlesyndication.com/ccm/collect *.clarity.ms https://track.dreamdata.io https://www.googletagmanager.com; font-src 'self' https://*.wistia.com https://maxcdn.bootstrapcdn.com https://cdn.knightlab.com https://*.gstatic.com https://*.gstatic.cn https://script.hotjar.com https://*.ul.com https://fast.wistia.com/ https://acsbapp.com https://consent.trustarc.com https://cdnjs.cloudflare.com https://*.typekit.net data: https://cdn.jsdelivr.net https://*.optimizely.com; frame-src 'self' https://*.marketo.com https://*.google.com https://player.vimeo.com https://*.youtube.com https://fast.wistia.com https://fast.wistia.net https://vars.hotjar.com https://www.facebook.com https://*.ul.com https://www.recaptcha.net https://*.addtoany.com https://*.doubleclick.net https://airtable.com https://ulsolutions.qualtrics.com *.salesforce.com *.salesforce-sites.com company-target.com *.company-target.com https://documentcloud.adobe.com https://ulenterpriseorg--devservice.sandbox.my.site.com https://ulenterpriseorg--intdev.sandbox.my.site.com https://ulenterpriseorg--sit.sandbox.my.site.com *.my.site.com experience.adobe.com js.stripe.com www.googletagmanager.com https://ulsolutions.outgrow.us https://consent-pref.trustarc.com https://a6724381200613376.cdn.optimizely.com https://a6724381200613376.cdn-pci.optimizely.com; img-src 'self' https://*.adroll.com https://*.linkedin.com https://*.facebook.com https://fast.wistia.com https://fast.wistia.net https://*.gstatic.com https://*.gstatic.cn https://*.google.com https://*.googleapis.com https://*.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://*.ul.com https://s.ml-attr.com https://*.adnxs.com https://attr.ml-api.io https://pixel.mathtag.com https://*.amazonaws.com https://*.acsbapp.com https://*.qualtrics.com *.trustarc.com https://ul.com https://id.rlcdn.com https://segments.company-target.com/validateCookie https://assets.adoberesources.net https://lh3.googleusercontent.com data: *.adobeaemcloud.com https://ulsolutions.outgrow.us *.kickfire.com *.6sc.co https://live-shimadzu.pantheonsite.io https://live-wwwul.pantheonsite.io https://live-latamul.pantheonsite.io https://live-emergo1.pantheonsite.io https://live-aunzul.pantheonsite.io https://live-vietnam-ul.pantheonsite.io https://test-shimadzu.pantheonsite.io https://test-wwwul.pantheonsite.io https://test-latamul.pantheonsite.io https://test-emergo1.pantheonsite.io https://test-aunzul.pantheonsite.io https://dev-shimadzu.pantheonsite.io https://dev-wwwul.pantheonsite.io https://dev-latamul.pantheonsite.io https://dev-emergo1.pantheonsite.io https://dev-aunzul.pantheonsite.io https://develop-shimadzu.pantheonsite.io https://develop-wwwul.pantheonsite.io https://develop-latamul.pantheonsite.io https://develop-emergo1.pantheonsite.io https://develop-aunzul.pantheonsite.io https://aunz.psapp.dev https://emergo.psapp.dev https://latam.psapp.dev https://shimadzu.psapp.dev https://ul.psapp.dev https://test-vietnam-ul.pantheonsite.io https://dev-vietnam-ul.pantheonsite.io https://develop-vietnam-ul.pantheonsite.io bat.bing.com https://img.youtube.com https://cdn.optimizely.com https://app.optimizely.com https://*.clarity.ms; media-src 'self' https://embedwistia-a.akamaihd.net https://*.wistia.com https://*.wistia.net *.wistia.cdn.com https://*.youtube.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.acsbapp.com https://*.sentry-cdn.com https://*.wistia.com https://*.wistia.net https://*.youtube.com https://*.vimeo.com https://connect.facebook.net https://*.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://*.gstatic.com https://*.gstatic.cn https://*.google.com https://googleads.g.doubleclick.net https://*.ul.com https://*.ul-renewables.com https://*.hotjar.com https://*.marketo.net https://www.recaptcha.net https://*.adroll.com https://*.ytimg.com https://snap.licdn.com https://*.adroll.mgr.consensu.org https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net https://cdn.c212.net https://c212.net https://pixel.mathtag.com *.cloudflare.com https://empoweringtrust.ul.com https://*.marketo.com https://browser-update.org https://acsbapp.com https://cdn.acsbapp.com https://*.qualtrics.com https://en.wikipedia.org https://tag.demandbase.com *.demandbase.com demandbase.com company-target.com *.company-target.com https://assets.adoberesources.net https://documentcloud.adobe.com https://service.force.com *.salesforce.com *.salesforceliveagent.com *.salesforce-sites.com *.lightning.force.com https://ulenterpriseorg--devservice.sandbox.my.site.com https://ulenterpriseorg--intdev.sandbox.my.site.com https://ulenterpriseorg--sit.sandbox.my.site.com *.my.site.com blob: https://ulsolutions.outgrow.us *.adobedtm.com *.doubleclick.net *.kickfire.com *.6sc.co *.zi-scripts.com https://src.litix.io *.clickcease.com bat.bing.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https://cdn.dreamdata.cloud https://cdn.drda.io https://pagead2.googlesyndication.com/ccm/collect cdn.jsdelivr.net consent.trustarc.com https://cdn.jsdelivr.net https://cdn.optimizely.com https://experience.adobe.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://acsbapp.com https://www.googletagmanager.com https://snap.licdn.com https://bat.bing.com https://static.hotjar.com https://www.youtube.com https://tag.demandbase.com https://j.6sc.co https://googleads.g.doubleclick.net https://script.hotjar.com https://www.clarity.ms https://fast.wistia.com https://js.zi-scripts.com https://scripts.clarity.ms blob: https://assets.adobedtm.com https://tags.clickagy.com https://js.adsrvr.org https://twin-iq.kickfire.com *.marketo.net *.adoberesources.net *.google.com *.gstatic.com https://*.optimizely.com *.qualtrics.com *.my.site.com https://cdn.drda.io https://cdn.dreamdata.cloud cdn.jsdelivr.net consent.trustarc.com https://cdn.jsdelivr.net https://cdn.optimizely.com https://empoweringtrust.ul.com https://experience.adobe.com; style-src 'self' 'unsafe-inline' https://acsbapp.com https://*.marketo.com https://static.addtoany.com https://*.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://empoweringtrust.ul.com https://*.typekit.net *.salesforce.com *.salesforce-sites.com https://ulenterpriseorg--devservice.sandbox.my.site.com https://ulenterpriseorg--intdev.sandbox.my.site.com https://ulenterpriseorg--sit.sandbox.my.site.com *.my.site.com https://ulsolutions.outgrow.us https://fast.wistia.com https://*.optimizely.com cdn.jsdelivr.net; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.optimizely.com *.my.site.com https://fonts.googleapis.com https://empoweringtrust.ul.com cdn.jsdelivr.net; frame-ancestors 'self' *.salesforce-sites.com *.force.com 3 default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.auswaertiges-amt.de *.babiel.com maps.googleapis.com *.friendlycaptcha.com; worker-src blob:; child-src blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://de.presidencymt.eu/assets/widget/widget.css; connect-src 'self' *.auswaertiges-amt.de *.babiel.com maps.googleapis.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; frame-src *.diplo.de *.auswaertiges-amt.de *.babiel.com *.frcapi.com platform.twitter.com platform.x.com www.facebook.com www.instagram.com syndication.twitter.com www.linkedin.com www.youtube-nocookie.com https://vk.com/ https://www.google.com/; script-src-elem 'self' 'unsafe-inline' localhost:3000 *.auswaertiges-amt.de *.babiel.com platform.twitter.com platform.x.com connect.facebook.net www.instagram.com maps.googleapis.com https://de.presidencymt.eu/assets/widget/widget.js https://vk.com/js/api/openapi.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net/npm/friendly-challenge@0.9.19/widget.module.min.js https://cdn.jsdelivr.net/npm/@friendlycaptcha/sdk@0.1.31/site.min.js; 3 upgrade-insecure-requests; default-src 'self' *.rockwellautomation.com *.rockwellautomation.com.cn rockwellautomation.scene7.com; img-src 'self' https: *.rockwellautomation.com *.rockwellautomation.com.cn rockwellautomation.scene7.com *.cookielaw.org data: www.googletagmanager.com www.google-analytics.com cm.everesttech.net dpm.demdex.net s1284661142.t.eloqua.com www.facebook.com *.virtualearth.net r.bing.com www.bing.com secure.adnxs.com app.gatedcontent.com app.formulayt.com px.ads.linkedin.com www.linkedin.com siteintercept.qualtrics.com blob: api1139.d41.co id.rlcdn.com ecf.d41.co www.facebook.com www.google.com www.google.co.uk www.google.de www.google.fr www.google.it www.google.es www.google.nl www.google.be www.google.ch www.google.at www.google.ca www.google.com.au www.google.co.nz www.google.co.in www.google.com.br www.google.com.mx www.google.com.ar www.google.com.tr www.google.pl www.google.cz www.google.gr www.google.co.kr www.google.co.jp www.google.com.hk www.google.com.sg www.google.co.th www.google.com.vn www.google.co.za googleads.g.doubleclick.net; font-src 'self' *.rockwellautomation.com *.rockwellautomation.com.cn fonts.gstatic.com script.hotjar.com use.fontawesome.com dokumfe7mps0i.cloudfront.net library.jobpixel.com data:; style-src 'self' 'unsafe-inline' *.rockwellautomation.com *.rockwellautomation.com.cn fonts.googleapis.com app.gatedcontent.com app.formulayt.com r.bing.com www.bing.com atlas.microsoft.com use.fontawesome.com cdn.datatables.net www.jobpixel.com public-assets.jobpixel.com; script-src 'self' 'unsafe-inline' *.rockwellautomation.com *.rockwellautomation.com.cn rockwellautomation.tt.omtrdc.net *.cookielaw.org assets.adobedtm.com js.driftt.com app.gatedcontent.com blob: www.googletagmanager.com www.google-analytics.com static.hotjar.com script.hotjar.com snippet.maze.co img.en25.com snap.licdn.com rockwellautomation.atlassian.net cdn.auth0.com dokumfe7mps0i.cloudfront.net d25zu39ynyitwy.cloudfront.net public-assets.jobpixel.com www.jobpixel.com acsbapp.com js-cdn.dynatrace.com www.statcounter.com cdn.datatables.net atlas.microsoft.com www.bing.com r.bing.com *.virtualearth.net play.vidyard.com platform-api.sharethis.com buttons-config.sharethis.com s.go-mpulse.net app.formulayt.com cdn-0.d41.co ecf.d41.co api1139.d41.co id.rlcdn.com d34r8q7sht0t9k.cloudfront.net connect.facebook.net googleads.g.doubleclick.net siteintercept.qualtrics.com cdn.jsdelivr.net cdnjs.cloudflare.com *.siteintercept.qualtrics.com unpkg.com cdn.getsmartcontent.com ajax.googleapis.com code.jquery.com 'unsafe-eval'; connect-src 'self' *.rockwellautomation.com *.rockwellautomation.com.cn *.cookielaw.org *.onetrust.com app.gatedcontent.com insights.gatedcontent.com as-external-advisor-centralus-prod-adfs-proxy.azurewebsites.net rockwellautomation.tt.omtrdc.net dayintegrationintern.tt.omtrdc.net google.com www.google.com dpm.demdex.net metrics.hotjar.io content.hotjar.io wss://ws.hotjar.com prompts.maze.co connect.facebook.net rockwellautomation.scene7.com vc.hotjar.io surveystats.hotjar.io in.hotjar.com siteintercept.qualtrics.com cdn.auth0.com s1284661142.t.eloqua.com olivia.paradox.ai wss://ws.paradox.ai dokumfe7mps0i.cloudfront.net api.jobpixel.com public-assets.jobpixel.com acsbapp.com cdn.acsbapp.com analytics.google.com www.google-analytics.com bf35974red.bf.dynatrace.com c.statcounter.com rockwellautomation.atlassian.net assets.adobedtm.com atlas.microsoft.com www.bing.com *.virtualearth.net s7mbrstream.scene7.com play.vidyard.com l.sharethis.com rockwell2023tf.q4web.com data: c.go-mpulse.net 173bf108.akstat.io 173bf111.akstat.io 173bf10a.akstat.io 684d0d4a.akstat.io 173bf106.akstat.io 173bf110.akstat.io cdn-0.d41.co api1139.d41.co ff.d41.co st.fullcircleinsights.com app.formulayt.com insights.formulayt.com px.ads.linkedin.com stats.g.doubleclick.net unpkg.com; frame-src 'self' *.rockwellautomation.com *.rockwellautomation.com.cn as-external-advisor-centralus-prod-adfs-proxy.azurewebsites.net js.driftt.com rockwell.demdex.net rockwellautomation-embedded.partcommunity.com jolly-dune-0aa908510.1.azurestaticapps.net jolly-dune-0aa908510.1.azurestaticapps.net www.googletagmanager.com rockwellxm.az1.qualtrics.com play.vidyard.com open.spotify.com spotify.app.link rockwell2023tf.q4web.com victorious-grass-07ffe0d10.2.azurestaticapps.net td.doubleclick.net app.powerbi.com; frame-ancestors 'self' rockwellautomation.com rockwellautomation.com.cn *.rockwellautomation.com *.rockwellautomation.com.cn *.rockwellautomation.adobecqms.net ra.pisrc.net rabot.pisrc.net localhost localhost:* rockwellautomation.github.io raprmdev.crm.dynamics.com raprmdev2.crm.dynamics.com raprmstage.crm.dynamics.com raprmstage2.crm.dynamics.com raprm.crm.dynamics.com; form-action 'self' *.rockwellautomation.com *.rockwellautomation.com.cn s1284661142.t.eloqua.com rockwellautomation.custhelp.com rockwellxm.az1.qualtrics.com uep-punchout-testing-tool.azurewebsites.net forms.hsforms.com; media-src 'self' *.rockwellautomation.com *.rockwellautomation.com.cn rockwellautomation.scene7.com js.driftt.com library.jobpixel.com s7mbrstream.scene7.com preview1.assetsadobe.com blob:; 3 connect-src 'self' data: wss://* sendpulse.com *.sendpulse.com sendpulse.ua *.sendpulse.ua sendpulse.fr *.sendpulse.fr sendpulse.kz *.sendpulse.kz *.google.com *.doubleclick.net *.facebook.com *.facebook.net *.fbcdn.net *.fbsbx.com *.twitter.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com *.bootstrapcdn.com *.supportsrc.com *.instagram.com *.cdninstagram.com *.cookiebot.com *.clarity.ms *.spcdn.org *.partnersrc.com cdn.jsdelivr.net unpkg.com *.disqus.com *.disquscdn.com *.bing.com *.bing.net *.newrelic.com *.nr-data.net afarkas.github.io *.rawgit.com tiktok.com *.tiktok.com *.capterra.com *.crisp.chat; script-src 'self' 'unsafe-inline' 'unsafe-eval' sendpulse.com *.sendpulse.com sendpulse.ua *.sendpulse.ua sendpulse.fr *.sendpulse.fr sendpulse.kz *.sendpulse.kz *.google.com *.doubleclick.net *.facebook.com *.facebook.net *.fbcdn.net *.fbsbx.com *.cloudflare.com *.twitter.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com *.bootstrapcdn.com *.supportsrc.com *.instagram.com *.cdninstagram.com *.cookiebot.com *.clarity.ms *.spcdn.org *.partnersrc.com cdn.jsdelivr.net unpkg.com *.disqus.com *.disquscdn.com *.jquery.com getk2.org *.tinymce.com *.bing.com *.bing.net *.newrelic.com *.nr-data.net afarkas.github.io *.rawgit.com tiktok.com *.tiktok.com *.capterra.com *.crisp.chat; frame-ancestors 'self' sendpulse.com *.sendpulse.com sendpulse.ua *.sendpulse.ua sendpulse.fr *.sendpulse.fr sendpulse.kz *.sendpulse.kz sendpulse.ua *.sendpulse.ua *.crisp.chat; worker-src 'self' blob:; 3 default-src 'self' *.grubhub.com grubhub.com *.dine.online *.datadog.hq cdn.contentful.com *.forter.com maps.googleapis.com six.cdn-net.com www.cdn-net.com pinpad.paysecure.acculynk.net; frame-src 'self' *.grubhub.com grubhub.com api.braintree.com *.braintreegateway.com *.braintree-api.com braintreegateway.com apay-us.amazon.com analytics.tiktok.com analytics.twitter.com analytics.churnzero.com apps.rokt.com apps.rokt-api.com apps-demo.rokt.com everestjs.net *.doubleclick.net accounts.google.com checkout.paypal.com googletagmanager.com www.googletagmanager.com insight.adsrvr.org match.adsrvr.org na.account.amazon.com prod.accdab.net six.cdn-net.com www.cdn-net.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com *.amazon-adsystem.com *.facebook.com *.kroger.com *.ispot.tv *.w55c.net https://tr.snapchat.com *.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.payments-amazon.com *.tags.tiqcdn.com redditstatic.com js.adsrvr.org *.grubhub.com grubhub.com api.braintree.com *.braintreegateway.com *.braintree-api.com braintreegateway.com apay-us.amazon.com *.forter.com *.rokt.com *.rokt-api.com *.cookielaw.org *.everestjs.net six.cdn-net.com www.cdn-net.com https://cdn.prod.uidapi.com https://*.js.stripe.com https://js.stripe.com https://maps.googleapis.com https://tr.snapchat.com securepubads.g.doubleclick.net; script-src-elem 'self' 'unsafe-inline' *.grubhub.com grubhub.com api.braintree.com *.braintreegateway.com *.braintree-api.com braintreegateway.com apay-us.amazon.com analytics.churnzero.net analytics.tiktok.com analytics.twitter.com tags.tiqcdn.com www.google-analytics.com google-analytics.com *.forter.com *.cookielaw.org *.payments-amazon.com platform.twitter.com static.ads-twitter.com www.googletagmanager.com *.cdn-net.com apps.rokt.com apps.rokt-api.com apps-demo.rokt.com maps.googleapis.com cdn.branch.io www.googleadservices.com *.mountain.com app.link googleads.g.doubleclick.net connect.facebook.net assets.loginwithamazon.com accounts.google.com apis.google.com analytics.tiktok.com c.amazon-adsystem.com google-analytics.com google.com googleads.g.doubleclick.net googleadservices.com googletagmanager.com gstatic.com prod.accdab.net redditstatic.com s.pinimg.com everestjs.net d.impactradius-event.com tag.havasedge.com pixel.mathtag.com www.gstatic.com bat.bing.com px.airpr.com www.redditstatic.com js.adsrvr.org ext.chtbl.com www.google.com collector-21091.us.tvsquared.com innovid.com www.everestjs.net six.cdn-net.com www.cdn-net.com https://*.js.stripe.com https://js.stripe.com https://maps.googleapis.com analytics.tiktok.com bat.bing.com connect.facebook.net js.adsrvr.org sc-static.net www.redditstatic.com c.amazon-adsystem.com googleads.g.doubleclick.net platform.twitter.com https://tr.snapchat.com https://bzrcdn.openai.com securepubads.g.doubleclick.net *.googlesyndication.com; img-src 'self' *.cloudinary.com *.grubhub.com grubhub.com *.cloudfront.net *.instacart.com *.pinterest.com *.cookielaw.org cm.everesttech.net t.co www.google-analytics.com google-analytics.com analytics.twitter.com *.doubleclick.net maps.gstatic.com *.googleapis.com www.google.com data: www.facebook.com trkn.us event.havasedge.com grubhubimages-dev.s3.amazonaws.com tags.w55c.net data.adxcel-ec2.com b.videoamp.com ext.chtbl.com bat.bing.com px.airpr.com redditstatic.com js.adsrvr.org adservice.google.com alb.reddit.com b.videoamp.com www.googletagmanager.com insight.adsrvr.org s3.amazonaws.com collector-21091.us.tvsquared.com innovid.com analytics.tiktok.com pt.ispot.tv https://www.google.co.uk https://staging-pt.ispot.tv https://bat.bing.net *.googlesyndication.com; style-src-elem 'self' 'unsafe-inline' *.grubhub.com grubhub.com fonts.googleapis.com accounts.google.com pixel.mathtag.com; style-src 'self' 'unsafe-inline' *.grubhub.com grubhub.com fonts.googleapis.com six.cdn-net.com www.cdn-net.com; font-src 'self' 'unsafe-inline' *.grubhub.com grubhub.com fonts.gstatic.com static.rakuten.com; connect-src 'self' *.grubhub.com grubhub.com browser-intake-datadoghq.com *.px-cloud.net preview.connectful.com *.braze.com *.google-analytics.com www.google.com google.com google-analytics.com *.rokt.com *.rokt-api.com *.cookielaw.org *.forter.com wss://cdn0.forter.com analytics.tiktok.com geolocation.onetrust.com preview.contentful.com stats.g.doubleclick.net privacyportal.onetrust.com *.googleapis.com sentry.io api2.branch.io *.facebook.com facebook.com bat.bing.com api.braintree.com *.braintreegateway.com *.braintree-api.com braintreegateway.com apay-us.amazon.com www.gstatic.com maps.gstatic.com data: cdn.contentful.com collect.tealiumiq.com b.px-cdn.net 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 prod.accdab.net trkn.us seamless.dcm9zy.net s3.amazonaws.com conversions-config.reddit.com pixel-config.reddit.com www.redditstatic.com web.chtbl.com grubhub.vdcy.net insight.adsrvr.org collector-21091.us.tvsquared.com innovid.com six.cdn-net.com www.cdn-net.com https://*.prod.uidapi.com https://prod.uidapi.com https://api.stripe.com https://maps.googleapis.com *.devcycle.com siteperformancetest.net *.doubleclick.net *.cloudfront.net ad.doubleclick.net https://sourcemaps-wsdk.roktinternal.com https://tr.snapchat.com https://bat.bing.net https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://ext.chtbl.com https://px.airpr.com https://bzrcdn.openai.com https://analytics-ipv6.tiktokw.us https://tr6.snapchat.com https://bzr.openai.com *.googlesyndication.com; 3 connect-src 'self' data: *.azureedge.net *.mkt.dynamics.com *.analytics.google.com distillery.pixlee.co *.clarity.ms *.cloudflare.com *.g.doubleclick.net *.google-analytics.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vu *.google.ws *.googletagmanager.com *.heidelpay.com *.liebherr.com *.liebherr.i *.paypal.com *.siteintercept.qualtrics.com *.usercentrics.eu maps.googleapis.com places.googleapis.com mapsresources-pa.googleapis.com stats.g.doubleclick.net www.google.com www.google.de *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.kameleoon.net bat.bing.com bat.bing.net googleadservices.com https://*.experimentation.dev; default-src 'self' *.azureedge.net *.mkt.dynamics.com; font-src 'self' data: *.bing.com *.clarity.ms *.cloudflare.com *.gstatic.com *.heidelpay.com *.liebherr.com *.liebherr.i *.mkt.dynamics.com *.zencdn.net; frame-src 'self' *.cloudflare.com *.google.com *.heidelpay.com *.hpcgw.net *.kameleoon.com *.liebherr.com *.liebherr.i *.usercentrics.eu *.youtube-nocookie.com *.doubleclick.net www.youtube.com *.googletagmanager.com https://*.experimentation.dev; frame-ancestors *.liebherr.com *.kameleoon.com; img-src 'self' data: blob: *.analytics.google.com *.googleadservices.com *.azurewebsites.net *.cloudflare.com *.doubleclick.net *.google-analytics.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vu *.google.ws *.googleapis.com *.googletagmanager.com *.gstatic.com *.heidelpay.com *.kameleoon.io *.kameleoon.eu *.kameleoon.com *.liebherr.com *.liebherr.i *.mkt.dynamics.com *.paypal.com *.siteintercept.qualtrics.com *.usercentrics.eu *.ytimg.com googleads.g.doubleclick.net siteintercept.qualtrics.com bat.bing.com static.pxlecdn.com https://*.experimentation.dev; media-src 'self' *.cloudflare.com *.liebherr.i *.liebherr.com *.mkt.dynamics.com static.pxlecdn.com static.pixlee.com; object-src 'self' *.cloudflare.com *.liebherr.com; script-src *.azureedge.net 'self' 'unsafe-eval' 'unsafe-inline' *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.heidelpay.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.liebherr.com *.liebherr.i *.paypal.com *.paypalobjects.com *.siteintercept.qualtrics.com *.usercentrics.eu *.youtube-nocookie.com *.youtube.com *.zencdn.net aframe.io bat.bing.com bing.com c.evidon.com cdn.jsdelivr.net googleads.g.doubleclick.net s.ytimg.com siteintercept.qualtrics.com siteseal.quovadisglobal.com *.googleadservices.com googleadservices.com https://*.experimentation.dev; style-src 'self' 'unsafe-inline' *.cloudflare.com *.google.com *.gstatic.com *.kameleoon.com *.liebherr.com *.liebherr.i *.mkt.dynamics.com *.zencdn.net fonts.googleapis.com https://*.experimentation.dev; worker-src blob:; 3 frame-ancestors *.motor1.com 3 default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; img-src 'self' *.usask.ca https: data: blob:; media-src 'self' https: 3 default-src 'self'; connect-src 'self' *.hamburg.de *.contentflow.net www.etracker.de *.dataport.de sgx.geodatenzentrum.de sg.geodatenzentrum.de www.captcha.eu *.stage.bio hamburg.netzwerk-iq.de api.conword.io; script-src 'self' blob: *.stage.bio app.cituro.com www.youtube.com *.hamburg.de www.happymo.re hamburgde.happymo.re eyeable.hamburg.de www.eye-able-cdn.com code.etracker.com www.etracker.de *.contentflow.net iason.hamburg.de *.dataport.de www.captcha.eu hamburg.netzwerk-iq.de 'unsafe-inline'; style-src 'self' *.hamburg.de code.etracker.com www.etracker.de www.happymo.re hamburgde.happymo.re eyeable.hamburg.de www.eye-able-cdn.com *.contentflow.net iason.hamburg.de app.cituro.com hamburg.netzwerk-iq.de 'unsafe-inline'; img-src 'self' code.etracker.com www.etracker.de www.happymo.re hamburgde.happymo.re eyeable.hamburg.de static.hamburg.de www.eye-able-cdn.com *.contentflow.net iason.hamburg.de *.stage.bio hamburg.netzwerk-iq.de www.captcha.eu geodienste.hamburg.de data:; font-src 'self' code.etracker.com www.etracker.de eyeable.hamburg.de www.eye-able-cdn.com *.contentflow.net iason.hamburg.de hamburg.netzwerk-iq.de cdn.cituro.com; frame-src *; frame-ancestors hamburg.de *.hamburg.de; media-src 'self' blob: contentflow: *.stage.bio 3 object-src 'none'; frame-ancestors 'self' https://www.qlik.com https://webapps.qlik.com https://www.facebook.com 3 report-uri https://sentry.eneba.com/api/6/security/?sentry_key=102de17feb49405fadcbb032c33331d1&sentry_release=20260709-083740; report-to csp-endpoint; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://metrics.nsureapi.com https://nsure.eneba.com https://device.maxmind.com https://fpnpmcdn.net https://connect.facebook.net https://*.clarity.ms https://eneba.atlassian.net https://static.eneba.games https://assets.eneba.games https://challenges.cloudflare.com https://mx.eneba.com https://widget.trustpilot.com https://apps.rokt.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://www.paypal.com https://c.paypal.com https://*.cardinalcommerce.com https://*.js.stripe.com https://js.stripe.com https://checkoutshopper-live-us.adyen.com https://checkoutshopper-live.adyen.com https://cdn.safecharge.com https://pay.google.com https://static.dlocal.com https://ebanx-js.ebanx.com https://beacon.riskified.com https://i.k-analytix.com https://checkout-web-components.checkout.com https://applepay.cdn-apple.com https://js.tazapay.com https://service.tazapay.com https://newsletter.ene.ba https://an.gr-wcon.com https://us-an.gr-cdn.com https://ga2.getresponse.com https://m.gr-cdn-e.eu https://*.forter.com https://d1qmrxg9gbf226.cloudfront.net https://d229oaghhl3bjt.cloudfront.net https://d1141abz4ln14s.cloudfront.net https://d1w9sasay4s756.cloudfront.net https://d3bejklh892qn.cloudfront.net https://d2nww8zpyj5pk0.cloudfront.net https://d2w2nqfk3z9hdt.cloudfront.net https://d27623md02evp.cloudfront.net https://*.signifyd.com https://h64.online-metrix.net; 3 frame-ancestors 'self' *.singtel.com *.singtelgroup.net *.singtelshop.com singtel.sharepoint.com; 3 upgrade-insecure-requests; frame-ancestors *.juniper.net *.junipercloud.net https://juniper.highspot.com https://junipernetworks.lookbookhq.com https://mist.talentlms.com https://courses.mist.com 3 frame-ancestors 'self' https://*.cibc.com https://*.cibc.mobi https://*.simplii.com; 3 base-uri none; font-src self https: data:; form-action self; frame-ancestors self; object-src none; upgrade-insecure-requests; frame-src self https://www.googletagmanager.com/ https://gum.criteo.com/ https://dynamic.criteo.com/ https://fledge.criteo.com/ https://fledge.us.criteo.com/ https://api.mapbox.com/ https://api.maptiler.com/ https://www.youtube.com/ https://consent.trustarc.com https://consent-pref.trustarc.com https://cdn.segment.com/ https://web.btncdn.com/ https://analytics.ahrefs.com/ https://www.facebook.com/ https://pay.datatrans.com/ https://pay.sandbox.datatrans.com/; 3 default-src 'self' pttp: https://www.netacad.com data: blob: https://www.netacad.com https://prod.socialgoodplatform.com 'unsafe-inline' 'unsafe-eval' https://code.s4d.io code.s4d.io; img-src 'self' https://caprod.my.salesforce.com https://solutions.brightcove.com players.brightcove.net *.boltdns.net *.akamaihd.net *.brightcove.com *.brightcovecdn.com https://netacad.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data: https://www.netacad.com data: blob: https://prod.socialgoodplatform.com https://www.netacad.com https://cdn.cookielaw.org https://www.google-analytics.com https://www.facebook.com https://metrics.brightcove.com https://cf-images.us-east-1.prod.boltdns.net https://cisco-tags-stg.cisco.com https://bcbolt446c5271-a.akamaihd.net https://www.cisco.com code.s4d.io cdn.cookielaw.org https://code.s4d.io https://cdn.cookielaw.org *.webexcontent.com *.eum-appdynamics.com *.appdynamics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sjrtp5-cdn.marketo.com player.interactivity.brightcove.com players.brightcove.net vjs.zencdn.net https://*.salesforce.com https://*.force.com https://*.my.site.com https://*.salesforce-scrt.com https://*.googleapis.com https://*.gstatic.com *.salesforceliveagent.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: https://www.netacad.com 'unsafe-inline' 'unsafe-eval' blob: https://prod.socialgoodplatform.com https://www.netacad.com https://munchkin.marketo.net https://manifest.prod.boltdns.net https://maps.googleapis.com https://tags.tiqcdn.com https://www.googletagmanager.com https://cdn.appdynamics.com https://www.google-analytics.com https://connect.facebook.net https://cdn.appdynamics.com https://www.cisco.com https://players.brightcove.net https://map.brightcove.com https://vjs.zencdn.net https://assets.map.brightcove.com https://cdn.cookielaw.org https://edge.api.brightcove.com https://api.netacad.com https://geolocation.onetrust.com https://dj5ag5n6bpdxo.cloudfront.net https://code.s4d.io cdn.ckeditor.com; style-src 'self' 'unsafe-inline' https://*.salesforce.com player.interactivity.brightcove.com players.brightcove.net https://*.force.com https://*.my.site.com https://*.salesforce-scrt.com https://fonts.googleapis.com https://www.netacad.com 'unsafe-inline' https://cdnjs.cloudflare.com https://prod.socialgoodplatform.com https://players.brightcove.net https://cdnjs.cloudflare.com https://code.s4d.io; frame-src 'self' pttp: *.google.com https://fast.wistia.net https://*.salesforce.com players.brightcove.net https://fast.wistia.net https://*.force.com https://*.my.site.com https://*.salesforce-scrt.com https://www.netacad.com https://portal.netdevgroup.com https://contenthub.netacad.com https://ole03.yourlearning.ibm.com https://www6.nohold.net https://learningmanagerfr.adobe.com https://ssac-backend.netacad.com https://adapt-backend.netacad.com mailto: data: blob: https://3569326.fls.doubleclick.net https://assessment.netacad.com https://www.googletagmanager.com https://auth.netacad.com https://www.facebook.com; connect-src 'self' https://*.salesforce.com https://*.force.com *.boltdns.net players.brightcove.net edge.api.brightcove.com *.akamaihd.net *.brightcovecdn.com https://edge-auth.api.brightcove.com https://*.my.site.com https://*.salesforce-scrt.com https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://fastly-signed-us-east-1-prod.brightcovecdn.com https://interactivity.viewer.api.brightcove.com https://*.googleapis.com *.google.com https://*.gstatic.com *.salesforceliveagent.com data: blob: https://www.netacad.com https://analytics.google.com https://geolocation.onetrust.com https://auth.netacad.com https://059-vfz-834.mktoresp.com https://www.facebook.com https://privacyportal.cisco.com https://pdx-col.eum-appdynamics.com https://edge.api.brightcove.com https://api.netacad.com https://www.google-analytics.com https://cdn.cookielaw.org https://manifest.prod.boltdns.net https://bcbolt446c5271-a.akamaihd.net 'unsafe-inline' *.wbx2.com *.ciscospark.com *.webex.com *.cisco.com code.s4d.io cdn.cookielaw.org wss://*.wbx2.com https://code.s4d.io https://cdn.cookielaw.org *.webexcontent.com *.eum-appdynamics.com *.appdynamics.com webexapis.com; font-src 'self' https://fonts.gstatic.com https://www.netacad.com code.s4d.io https://code.s4d.io data: blob: https://prod.socialgoodplatform.com https://cdnjs.cloudflare.com code.s4d.io https://code.s4d.io wss://*.wbx2.com data: players.brightcove.net player.interactivity.brightcove.com 'unsafe-inline'; media-src 'self' https://*.salesforce.com https://*.force.com https://*.my.site.com https://*.salesforce-scrt.com https://www.netacad.com data: blob: https://prod.socialgoodplatform.com https://www.netacad.com https://manifest.prod.boltdns.net https://bcbolt446c5271-a.akamaihd.net code.s4d.io https://code.s4d.io https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://fastly-signed-us-east-1-prod.brightcovecdn.com https://interactivity.viewer.api.brightcove.com *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; worker-src https://www.netacad.com blob:; frame-ancestors 'none'; 3 default-src 'self' blob: www.facebook.com facebook.com content.dionglobal.in icicibank.paymetry.com www.twitter.com twitter.com soundhelix.com *.go-mpulse.net www.iciciprulife.com cdn.jsdelivr.net code.jquery.com iciciauto.com icici.skryptech.com wss://ccaiprodws.icicibank.com ccaiprodws.icicibank.com ccaiprod.icicibank.com apibankingone.icicibank.com googletagmanager.com icicibankstt.senseforth.com icicibanksmartsearch.senseforth.com https://hbchat.senseforth.com senseforth.com cdn.ampproject.org cdnjs.cloudflare.com connect.facebook.net facebook.net marketingplatform.google.com google.com www.google.com www.google-analytics.com google-analytics.com *.visualwebsiteoptimizer.com spa.gy t4.rolsoninfotech.com voiceassist.urja.com fonts.googleapis.com cugd1dev.crm8.dynamics.com cugd1sit.crm8.dynamics.com cugd2dev.crm8.dynamics.com cugd2sit.crm8.dynamics.com cugd2qa.crm8.dynamics.com cugd1uat.crm8.dynamics.com cugd2uat.crm8.dynamics.com cugd1qa.crm8.dynamics.com analytics.google.com snap.licdn.com leads.icicibank.com leads.icici.bank.in www.indiatimes.com economictimes.indiatimes.com www.googletagmanager.com ribstgnew.icicibank.com www.icicibank.com icici.nanorep.co nanorep.co nanorep.com;object-src 'none';child-src 'self' data: blob: india-stage.icicibank.adobecqms.net india-preprod.icici.bank.in icicibank-preprod.adobecqms.net country1.icicibank.adobecqms.net www.icicibank.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' apibankingone.icici.bank.in ibotcug.icici.bank.in ibot.icici.bank.in icicibank-preprod.adobecqms.net india-preprod.icici.bank.in icici.bank.in players.brightcove.net vjs.zencdn.net rum.hlx.page smart-search.senseforth.com firebasestorage.googleapis.com fcm.googleapis.com test-securetoken.sandbox.googleapis.com staging-www.sandbox.googleapis.com securetoken.googleapis.com apis.google.com www.googleapis.com securetoken.googleapis.com www.gstatic.com ibot.icicibank.com assets.adobedtm.com *.demdex.net cm.everesttech.net assets.adobedtm.com wss://ccaiprodws.icicibank.com ccaiprodws.icicibank.com ccaiprod.icicibank.com apibankingone.icicibank.com ibotuat.icicibank.com platform.twitter.com platform.linkedin.com static.addtoany.com www.linkedin.com *.go-mpulse.net d1ls4i8l5ki52s.cloudfront.net cugd1uat.crm8.dynamics.com *.fls.doubleclick.net cugd1dev.crm8.dynamics.com cugd1sit.crm8.dynamics.com cugd2dev.crm8.dynamics.com cugd2sit.crm8.dynamics.com snap.licdn.com go-mpulse.net www.iciciprulife.com addtoany.com tagmanager.google.com www.tagmanager.google.com linkedin.com content.dionglobal.in analytics.google.com www.googleadservices.com fonts.googleapis.com icicibank.paymetry.com beta-icicibank.paymetry.com cugd1qa.crm8.dynamics.com cdn.jsdelivr.net cugd2qa.crm8.dynamics.com cugd2uat.crm8.dynamics.com code.jquery.com iciciauto.com icici.skryptech.com buy.icicibank.com buystaging.niveussolutions.com icicicashback.com maps.gstatic.com gstatic.com www.icicibank.com icicibank.com googleadservices.com googleads.g.doubleclick.net twitter.com cdn.ampproject.org ampproject.org icicibankstt.senseforth.com icicibanksmartsearch.senseforth.com adobe.com doubleclick.net marketingplatform.google.com www.google.com google.com www.google-analytics.com ssl.google-analytics.com ssl.google-analytics.com visitor-services.nanorep.com nanorep.com icici.nanorep.co leads.icicibank.com leads.icici.bank.in cdnjs.cloudflare.com cloudfunctions.net senseforth.com amazonaws.com ajax.googleapis.com maps.googleapis.com googleapis.com *.visualwebsiteoptimizer.com spa.gy t4.rolsoninfotech.com voiceassist.urja.com assets.adobedtm.com google-analytics.com adobecqms.net googletagmanager.com www.indiatimes.com economictimes.indiatimes.com ribstgnew.icicibank.com www.googletagmanager.com www.facebook.com facebook.com bing.com connect.facebook.net www.youtube.com demdex.net omtrdc.net data:;connect-src 'self' mpc-prod-23-s6uit34pua-ue.a.run.app www.fscs.org.uk ibot.icici.bank.in ibotcug.icici.bank.in apibankingone.icici.bank.in *.boltdns.net https://fcm.googleapis.com https://firebaseinstallations.googleapis.com players.brightcove.net edge.api.brightcove.com *.akamaihd.net *.brightcovecdn.com manifest.prod.boltdns.net smetric.money2india.icicibank.co.uk smetrics.icici.bank.in https://region1.analytics.google.com https://region1.google-analytics.com smart-search.senseforth.com www.gstatic.com https://www.gstatic.com/firebasejs/10.13.2/firebase-app.js.map firebaseinstallations.googleapis.com fcmregistrations.googleapis.com https://icicibank-mkt-stage1.campaign.adobe.com/acxwp/webregisterAndroid.jssp googleads.g.doubleclick.net https://icicibank-mkt-prod4.campaign.adobe.com/ici/webregisterAndroid.jssp https://icicibank-mkt-prod4-lb.campaign.adobe.com/ici/webregisterAndroid.jssp icicibank-mid-prod4-all-t.adobe-campaign.com smetrics.icicibank.com edge.adobedc.net https://fcm.googleapis.com/fcm/connect/subscribe https://fcm.googleapis.com/fcm/connect/unsubscribe https://icicibank-mkt-stage1.campaign.adobe.com/ici/webregisterAndroid.jssp https://icicibank-mid-stage1-all-t.adobe-campaign.com www.google.co.in *.akstat.io *.demdex.net cm.everesttech.net assets.adobedtm.com *.adobedc.net wss://ccaiprodws.icicibank.com ccaiprodws.icicibank.com ccaiprod.icicibank.com apibankingone.icicibank.com wss://ccaiuatws.icicibank.com ccaiuatws.icicibank.com apibankingonesandbox.icicibank.com ibotuat.icicibank.com *.go-mpulse.net go-mpulse.net snap.licdn.com cugd1uat.crm8.dynamics.com cugd1qa.crm8.dynamics.com cugd1dev.crm8.dynamics.com cugd1sit.crm8.dynamics.com cugd2dev.crm8.dynamics.com cugd2sit.crm8.dynamics.com fonts.googleapis.com cugd2qa.crm8.dynamics.com cugd2uat.crm8.dynamics.com analytics.google.com www.analytics.google.com www.iciciprulife.com addtoany.com icicibank.paymetry.com beta-icicibank.paymetry.com marketingplatform.google.com www.google.com google.com www.google-analytics.com google-analytics.com adobecqms.net cdn.jsdelivr.net code.jquery.com content.dionglobal.in iciciauto.com icici.skryptech.com buy.icicibank.com buystaging.niveussolutions.com icicicashback.com maps.gstatic.com gstatic.com www.icicibank.com icicibank.com linkedin.com twitter.com cdn.ampproject.org ampproject.org icicibankstt.senseforth.com icicibanksmartsearch.senseforth.com g.doubleclick.net doubleclick.net cdnjs.cloudflare.com googleadservices.com visitor-services.nanorep.com nanorep.com connect.facebook.net cloudfunctions.net senseforth.com icici.nanorep.co amazonaws.com ajax.googleapis.com maps.googleapis.com googleapis.com www.indiatimes.com economictimes.indiatimes.com www.googletagmanager.com leads.icicibank.com leads.icici.bank.in *.visualwebsiteoptimizer.com spa.gy t4.rolsoninfotech.com voiceassist.urja.com googletagmanager.com www.facebook.com facebook.com bing.com asia-south1-quantum-flood-755.cloudfunctions.net ribstgnew.icicibank.com stats.g.doubleclick.net assets.adobedtm.com www.youtube.com demdex.net omtrdc.net money2india.icicibank.co.in wss://smart-search.senseforth.com/STT/transcribe;img-src 'self' ibot.icici.bank.in ibotcug.icici.bank.in apibankingone.icici.bank.in icicibank.ae players.brightcove.net *.boltdns.net *.akamaihd.net *.brightcove.com *.brightcovecdn.com https://www.assets.icicibank.com edge.api.brightcove.com metrics.brightcove.com https://smart-search.senseforth.com https://www.google.co.uk ad.doubleclick.net ibot.icicibank.com *.demdex.net cm.everesttech.net wss://ccaiprodws.icicibank.com ccaiprodws.icicibank.com ccaiprod.icicibank.com apibankingone.icicibank.com assets.adobedtm.com storage.googleapis.com ibotuat.icicibank.com www.google-analytics.com syndication.twitter.com fonts.googleapis.com ssl.gstatic.com g.doubleclick.net cugd1uat.crm8.dynamics.com cugd1qa.crm8.dynamics.com cugd1dev.crm8.dynamics.com cugd1sit.crm8.dynamics.com cugd2dev.crm8.dynamics.com cugd2sit.crm8.dynamics.com snap.licdn.com analytics.google.com www.analytics.google.com google-analytics.com *.go-mpulse.net go-mpulse.net icicibank.paymetry.com beta-icicibank.paymetry.com cdn.jsdelivr.net cugd2qa.crm8.dynamics.com cugd2uat.crm8.dynamics.com code.jquery.com content.dionglobal.in iciciauto.com icici.skryptech.com beta-icicibank.paymetry.com addtoany.com buy.icicibank.com buystaging.niveussolutions.com cdnjs.cloudflare.com rukminim1.flixcart.com m.media-amazon.com icicicashback.com maps.gstatic.com www.gstatic.com gstatic.com www.icicibank.com icicibank.com www.iciciprulife.com linkedin.com twitter.com doubleclick.net cdn.ampproject.org ampproject.org spa.gy t4.rolsoninfotech.com voiceassist.urja.com icicibankstt.senseforth.com icicibanksmartsearch.senseforth.com www.google.co.in icici.nanorep.co visitor-services.nanorep.com nanorep.com cloudfunctions.net leads.icicibank.com leads.icici.bank.in senseforth.com ajax.googleapis.com maps.googleapis.com googleapis.com amazonaws.com google.co.in *.visualwebsiteoptimizer.com marketingplatform.google.com www.google.com ribstgnew.icicibank.com google.com googleads.g.doubleclick.net adobecqms.net www.indiatimes.com economictimes.indiatimes.com googleadservices.com googletagmanager.com www.googletagmanager.com www.facebook.com facebook.com bing.com connect.facebook.net assets.adobedtm.com www.youtube.com everesttech.net demdex.net omtrdc.net data:;style-src 'self' 'unsafe-inline' players.brightcove.net player.interactivity.brightcove.com https://smart-search.senseforth.com fonts.googleapis.com cugd1uat.crm8.dynamics.com cugd1qa.crm8.dynamics.com cugd1dev.crm8.dynamics.com cugd1sit.crm8.dynamics.com snap.licdn.com cugd2dev.crm8.dynamics.com cugd2sit.crm8.dynamics.com *.go-mpulse.net analytics.google.com cugd2uat.crm8.dynamics.com wss://ccaiprodws.icicibank.com ccaiprodws.icicibank.com ccaiprod.icicibank.com apibankingone.icicibank.com icicibank.paymetry.com beta-icicibank.paymetry.com go-mpulse.net addtoany.com cdn.jsdelivr.net code.jquery.com cugd2qa.crm8.dynamics.com content.dionglobal.in iciciauto.com icici.skryptech.com buy.icicibank.com buystaging.niveussolutions.com icicicashback.com maps.gstatic.com gstatic.com linkedin.com googletagmanager.com www.googletagmanager.com cdnjs.cloudflare.com www.icicibank.com icicibank.com www.iciciprulife.com twitter.com doubleclick.net cdn.ampproject.org ampproject.org spa.gy t4.rolsoninfotech.com voiceassist.urja.com v icicibankstt.senseforth.com icicibanksmartsearch.senseforth.com ajax.googleapis.com maps.googleapis.com googleapis.com marketingplatform.google.com www.google.com google.com adobecqms.net www.indiatimes.com economictimes.indiatimes.com icici.nanorep.co visitor-services.nanorep.com nanorep.com cloudfunctions.net leads.icicibank.com leads.icici.bank.in senseforth.com amazonaws.com tagmanager.google.com www.tagmanager.google.com *.visualwebsiteoptimizer.com googleadservices.com bootstrapcdn.com ribstgnew.icicibank.com;font-src 'self' data: maps.gstatic.com gstatic.com fonts.gstatic.com players.brightcove.net 'unsafe-inline';frame-src 'self' td.doubleclick.net *.demdex.net players.brightcove.net ibotuat.icicibank.com www.iciciprulife.com web.facebook.com platform.twitter.com www.linkedin.com infinity.icicibank.com infinity.icicibank.co.in iciciprulife.com au.personalcard.net *.fls.doubleclick.net nli.icicibank.com nli.icici.bank.in cugd1uat.crm8.dynamics.com cugd1qa.crm8.dynamics.com cugd1dev.crm8.dynamics.com cugd1sit.crm8.dynamics.com snap.licdn.com cugd2dev.crm8.dynamics.com cugd2sit.crm8.dynamics.com analytics.google.com cugd2qa.crm8.dynamics.com cugd2uat.crm8.dynamics.com fonts.googleapis.com ribstgnew.icicibank.com icicibank.paymetry.com cdn.jsdelivr.net code.jquery.com content.dionglobal.in iciciauto.com icici.skryptech.com icicibank.paymetry.com beta-icicibank.paymetry.com ajax.googleapis.com maps.googleapis.com googleapis.com addtoany.com buy.icicibank.com buystaging.niveussolutions.com bid.g.doubleclick.net cdnjs.cloudflare.com spa.gy t4.rolsoninfotech.com voiceassist.urja.com icicicashback.com maps.gstatic.com gstatic.com icicibank.com linkedin.com twitter.com cdn.ampproject.org www.indiatimes.com economictimes.indiatimes.com ampproject.org icicibankstt.senseforth.com icicibanksmartsearch.senseforth.com senseforth.com googletagmanager.com www.googletagmanager.com www.facebook.com facebook.com visitor-services.nanorep.com nanorep.com marketingplatform.google.com www.google.com google.com adobecqms.net www.youtube.com www.icicibank.com leads.icicibank.com leads.icici.bank.in icicibank.adobecqms.net smart-search.senseforth.com;frame-ancestors 'self' instakioskcug.icicibankltd.com instakiosk.icicibankltd.com instakioskuat.icicibankltd.com www.india-uat.icici.bank.in india-stage.icicibank.adobecqms.net www.india-preprod.icici.bank.in www.icici.bank.in retailnetbanking.icici.bank.in retailnetbankinguat.icici.bank.in; media-src 'self' blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; worker-src 'self' blob:; 3 default-src https: data:; script-src https: *.amplitude.com 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; connect-src *; 3 object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: p11.techlab-cdn.com; base-uri 'none'; worker-src blob: www.cathaypacific.com flights.cathaypacific.com api.cathaypacific.com book.cathaypacific.com 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://images.101datacenter.net https://*.101domain.com https://chat.livecustomer.com https://my.101domain.com https://*.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://www.youtube.com https://secure.campaigner.com https://connect.facebook.net https://*.googleapis.com https://*.facebook.com https://*.llnwd.net https://*.doubleclick.net https://*.infusionsoft.com https://*.google.bg https://d3pkntwtp2ukl5.cloudfront.net https://*.livechatinc.com https://*.googleusercontent.com https://*.gstatic.com https://*.linkedin.com https://*.bing.com https://*.infusionsoft.app https://*.adsymptotic.com https://*.truste.com https://*.comodo.com https://*.trust-provider.com https://*.101d.dev https://*.101s.dev https://*.ytimg.com https://*.clarity.ms https://*.videodelivery.net https://cdn.livechat-files.com https://cdn.linkedin.oribi.io https://*.licdn.com https://*.cloudflareinsights.com https://api.rss2json.com https://*.pingdom.net https://*.ahrefs.com https://*.hubspot.com data: 3 default-src 'self' consentcdn.cookiebot.com dx.mountain.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.mountain.com capi-automation.s3.us-east-2.amazonaws.com/ assets.qualified.com www.redditstatic.com match.adsrvr.org www.gstatic.com *.storylane.io js.qualified.com bat.bing-int.com www.googleadservices.com analytics.ahrefs.com obs.forroundprince.com ob.forroundprince.com *.stackadapt.com app.vwo.com munchkin.marketo.net *.mktoweb.com challenges.cloudflare.com bluebeam2--shareddev.sandbox.my.salesforce-sites.com bluebeam2--staging.sandbox.my.salesforce-sites.com bluebeam2--shareddev.sandbox.my.site.com *.vidyard.com *.bluebeam.com *.wpengine.com *.pardot.com www.google-analytics.com fonts.gstatic.com *.cookiebot.com www.googletagmanager.com *.visualwebsiteoptimizer.com connect.facebook.net googleads.g.doubleclick.net *.hotjar.net *.hotjar.com snap.licdn.com bat.bing.com s.yimg.com snap.licdn.com *.google.com bat.bing.com sp.analytics.yahoo.com px.ads.linkedin.com stats.g.doubleclick.net www.facebook.com p.adsymptotic.com cdn.linkedin.oribi.io www.youtube.com; connect-src 'self' tsvc.bluebeam.ca www.googleadservices.com voice-calls.qualified.com wss://voice-calls.qualified.com o77906.ingest.sentry.io pixel-config.reddit.com *.visualwebsiteoptimizer.com play.vidyard.com wss://ws6.qualified.com app.vwo.com app.qualified.com google.com tsvc.bluebeam.com tsvc.bluebeam.com.au tsvc.bluebeam.se tsvc.bluebeam.co.uk tsvc.bluebeam-dev.com refer.bluebeam.com *.sheerid.net *.sheerid.com analytics.ahrefs.com obs.forroundprince.com tsvc.bluebeam.de *.stackadapt.com *.mktoresp.com *.execute-api.us-east-1.amazonaws.com *.execute-api.eu-west-2.amazonaws.com *.execute-api.ap-southeast-2.amazonaws.com *.execute-api.eu-central-1.amazonaws.com *.execute-api.eu-north-1.amazonaws.com region1.analytics.google.com *.analytics.google.com bluebeam2--shareddev.sandbox.my.salesforce-sites.com bluebeam2--staging.sandbox.my.salesforce-sites.com bluebeam2--shareddev.sandbox.my.site.com content.hotjar.io wss://ws.hotjar.com px.ads.linkedin.com pagead2.googlesyndication.com www.google-analytics.com stats.g.doubleclick.net vc.hotjar.io s.yimg.com *.hotjar.com *.cookiebot.com analytics.google.com *.visualwebsiteoptimizer.com yoast.com www.google.com cdn.linkedin.oribi.io googleads.g.doubleclick.net gw.linkedin.oribi.io ad.doubleclick.net www.facebook.com bat.bing.com www.googleapis.com; img-src 'self' messenger-assets.qualified.com data: googleads.g.doubleclick.net customer-assets.qualified.com alb.reddit.com match.adsrvr.org *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io attr.ml-api.io secure.adnxs.com s.ml-attr.com www.googleadservices.com obs.forroundprince.com ade.googlesyndication.com arttrk.com imgsct.cookiebot.com www.google.co.uk www.google.nl www.google.no www.google.fr www.google.es www.google.dk www.google.se www.google.co.jp www.google.co.kr www.google.it www.google.fi www.google.be www.google.com.au *.vidyard.com *.visualwebsiteoptimizer.com sp.analytics.yahoo.com *.bing.com www.facebook.com px.ads.linkedin.com www.google.com p.adsymptotic.com secure.gravatar.com www.linkedin.com www.google-analytics.com gw.linkedin.oribi.io www.googletagmanager.com ad.doubleclick.net ps.w.org; style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com p.typekit.net use.typekit.net *.stackadapt.com bluebeam2--shareddev.sandbox.my.salesforce-sites.com bluebeam2--staging.sandbox.my.salesforce-sites.com bluebeam2--shareddev.sandbox.my.site.com *.bluebeam.com *.wpengine.com fonts.googleapis.com; base-uri 'self'; form-action 'self' *.bluebeam.com www.facebook.com *.my.salesforce.com *.salesforce.com; object-src data: 'unsafe-eval'; font-src 'self' js.qualified.com use.typekit.net p.typekit.net *.bluebeam.com *.wpengine.com fonts.googleapis.com fonts.gstatic.com data: 'unsafe-eval'; media-src 'self' messenger-assets.qualified.com js.qualified.com assets.qualified.com app.qualified.com *.bluebeam.com *.wpengine.com *.cookiebot.com; frame-src 'self' www.google.com *.storylane.io *.visualwebsiteoptimizer.com app.vwo.com blob: app.qualified.com www.googletagmanager.com challenges.cloudflare.com *.vidyard.com *.bluebeam.com *.cookiebot.com *.hotjar.com www.facebook.com www.youtube.com td.doubleclick.net 9747788.fls.doubleclick.net roicalbucket.s3-website-us-east-1.amazonaws.com roical.bluebeam-dev.com roical.bluebeam.com go.pardot.com; worker-src 'self' blob: ; 3 frame-ancestors 'self' https://webvisor.com https://awards.ratingruneta.ru 3 frame-ancestors https://www.renault-group.com.cn 3 default-src 'self' 'unsafe-inline' data: keyweb.de *.keyweb.de keyweb.3cx.eu:5001 sales.keyaccount.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' keyweb.de *.keyweb.de downloads-global.3cx.com *.youtube.com *.google.com *.gstatic.com sales.keyaccount.de; img-src 'self' 'unsafe-inline' data:; frame-src 'self' keyweb.3cx.eu:5001 *.youtube.com chat.keyweb.de *.pipedriveassets.com.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.6sc.co *.a.net *.ads-twitter.com *.bing.com *.bizible.com *.cloudflare.com *.doubleclick.net *.facebook.net *.google-analytics.com *.google.com *.googletagmanager.com *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.hsappstatic.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hsleadflows.net *.hs-scripts.com *.hubspot.com *.hubspot.net *.hubspotfeedback.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.jquery.com *.ktxlytics.io *.linkedin.com *.licdn.com *.redditstatic.com *.salesloft.com *.sentry-cdn.com *.stackadapt.com *.twitter.com *.usemessages.com *.varonis.com *.wistia.com *.wistia.net *.zi-scripts.com cdn.boomtrain.com dreamdata.min.js feedback-eu1.hubapi.com feedback.hubapi.com js-eu1.hscta.net js.hscta.net live.rezync.com plausible.io qvdt3feo.com static.hsappstatic.net tracking-api.g2.com unpkg.com; style-src 'self' 'unsafe-inline' *.cloudflare.com *.google.com *.googleapis.com *.hsappstatic.net *.hubspot.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.stackadapt.com *.varonis.com cdn2.hubspot.net; img-src 'self' data: blob: *.6sc.co *.adnxs.com *.adsrvr.org *.bing.com *.bizible.com *.bizibly.com *.doubleclick.net *.facebook.com *.g2.com *.g2crowd.com *.google-analytics.com *.google.com *.googletagmanager.com *.hsforms.com *.hsforms.net *.hubspot.com *.hubspot.net *.hubspotusercontent-na1.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.ktxlytics.io *.linkedin.com *.reddit.com *.twitter.com *.varonis.com *.wistia.com *.wistia.net *.youtube.com *.ytimg.com js-eu1.hscta.net js.hscta.net no-cache.hubspot.com static.hsappstatic.net i.liadm.com live.rezync.com t.co; font-src 'self' data: *.gstatic.com *.googleapis.com *.hubspotusercontent-na1.net *.hsappstatic.net *.varonis.com *.wistia.com *.wistia.net; connect-src 'self' *.6sc.co *.boomtrain.com *.cloudflare.com *.doubleclick.net *.g2.com *.google-analytics.com *.google.com *.hs-banner.com *.hsappstatic.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hubapi.com *.hubspot.com *.hubspotusercontent-na1.net *.zi-scripts.com *.ktxlytics.io *.linkedin.com *.litix.io *.reddit.com *.redditstatic.com *.salesloft.com *.stackadapt.com *.varonis.com *.wistia.com *.wistia.net *.zoominfo.com js-eu1.hscta.net js.hscta.net unpkg.com epsilon.6sense.com plausible.io; media-src 'self' blob: *.varonis.com *.wistia.com *.wistia.net *.youtube.com *.ytimg.com; object-src 'none'; frame-src 'self' *.facebook.com *.googletagmanager.com *.hs-sites-eu1.com *.hs-sites.com *.hsforms.com *.hsforms.net *.hubspot.com *.hubspot.net *.podcasts.apple.com *.rfihub.com *.twitter.com *.varonis.com *.vimeo.com *.wistia.com *.wistia.net *.youtube.com *.yt.com play-eu1.hubspotvideo.com play.hubspotvideo.com www.youtube-nocookie.com; worker-src 'self' *.hsforms.com; base-uri 'self'; form-action 'self' *.hsforms.com *.hsforms.net; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; 3 frame-ancestors 'self' amadeus.com outpayce.com www.amadeus.com www.outpayce.com amadeus.seismic.com seismic.com liveshareeu1.seismic.com jobs.amadeus.com corporate.amadeus.com startups.amadeus.com hotels.amadeus.com opportunities.jobs.amadeus.com brand-marketing-center.internal.amadeus.com brandcenter.amadeus.com contentsourcing.amadeus.com partners.amadeus.com vdp.amadeus.com brand-guidelines.internal.amadeus.com cytric.amadeus.com amadeusitgroup.demdex.net cdn.cookielaw.org unpkg.com cdn.decibelinsight.net collection.decibelinsight.net www.googletagmanager.com ipapi.co tools.eurolandir.com flo.uri.sh www.buzzsprout.com resources.digital-cloud.medallia.eu www.google.com amadeusworkplace.sharepoint.com; frame-src https://corporate.amadeus.com https://www.youtube.com https://www.googletagmanager.com https://amadeusitgroup.demdex.net https://cdn.cookielaw.org https://unpkg.com https://cdn.decibelinsight.net https://collection.decibelinsight.net https://ipapi.co https://tools.eurolandir.com https://flo.uri.sh https://www.buzzsprout.com https://resources.digital-cloud.medallia.eu https://amadeus.com https://www.amadeus.com https://www.google.com/ https://amadeusworkplace.sharepoint.com/ https://newassets.hcaptcha.com; 3 default-src *;script-src * 'unsafe-inline' 'unsafe-eval';script-src-attr 'unsafe-inline' 'unsafe-hashes';img-src * data:;media-src *;font-src 'self' https://fonts.gstatic.com https://x.klarnacdn.net data:;frame-ancestors 'self';object-src 'none';base-uri 'self';form-action 'self' https://cdn-net.com https://*.cdn-net.com https://*.qualtrics.com;style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests;worker-src 'self' blob:; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; base-uri 'self'; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.rtx.com https://*.raytheon.com https://*.rtxapps.com https://*.prattwhitney.com blob: https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://*.crazyegg.com https://ipmeta.io https://*.licdn.com https://*.linkedin.com https://static.ads-twitter.com https://connect.facebook.net https://www.youtube.com https://www.googleadservices.com https://*.twimg.com https://*.twitter.com https://static.ctctcdn.com https://listgrowth.ctctcdn.com https://visitor2.constantcontact.com/api/v1/signup_forms/209bf8ea-ae37-4c00-b293-172a892f887b https://siteimproveanalytics.com https://rockwellcollinsaerospace.us-7.evergage.com https://googleads.g.doubleclick.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: data: https://cdn.evgnet.com/beacon/rockwellcollinsaerospace/development/scripts/evergage.min.js https://cdn.evgnet.com/beacon/rockwellcollinsaerospace/production/scripts/evergage.min.js; img-src 'self' https://*.rtx.com data: www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.linkedin.com https://p.adsymptotic.com https://*.licdn.com https://t.co https://www.facebook.com https://*.twimg.com https://*.twitter.com https://static.ctctcdn.com https://*.siteimproveanalytics.io https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://*.ggpht.com data:; style-src 'self' 'unsafe-inline' https://*.rtx.com https://*.raytheon.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://*.licdn.com https://*.twitter.com https://*.twimg.com https://static.ctctcdn.com; font-src 'self' https://*.rtx.com https://cdnjs.cloudflare.com https://fonts.gstatic.com; frame-src 'self' https://app.prattwhitney.com https://*.twitter.com https://*.fls.doubleclick.net https://*.rtx.com https://*.youtube.com/ https://*.raytheon.com https://www.rockwellcollins.com https://*.salesforce.com *.google.com; upgrade-insecure-requests; block-all-mixed-content; worker-src blob: ; 3 frame-ancestors 'self' *.wsgc.com carectruiprd.wsgc.com oms.wsgc.com carectruiprd-dr.wsgc.com oms-dr.wsgc.com trn1-wcc.wsgc.com trn1-sterling.wsgc.com trn1-ccui.wsgc.com 3 frame-ancestors 'self' www.hrc.org hrc.org www.thehrcfoundation.org thehrcfoundation.org hrcvirtualevent.org www.hrcvirtualevent.org timetothrive.org www.timetothrive.org reports.hrc.org chefsforequality.org www.chefsforequality.org thelei.org www.thelei.org welcomingschools.org www.welcomingschools.org mybodymyhealth.org www.mybodymyhealth.org transvisibility.day www.transvisibility.day removewalters.com www.removewalters.com comingout.day nonbinary.day pride.day pronouns.day atlanta.hrc.org austin.hrc.org chicago.hrc.org cincinnati.hrc.org cleveland.hrc.org colorado.hrc.org columbus.hrc.org dc.hrc.org dfw.hrc.org greaterny.hrc.org houston.hrc.org jackson.hrc.org kansascity.hrc.org la.hrc.org lasvegas.hrc.org minnesota.hrc.org nashville.hrc.org newengland.hrc.org nola.hrc.org northcarolina.hrc.org oclb.hrc.org orlando.hrc.org philadelphia.hrc.org phoenix.hrc.org portland.hrc.org palmspringscv.hrc.org sanantonio.hrc.org sandiego.hrc.org seattle.hrc.org sfbayarea.hrc.org southflorida.hrc.org stlouis.hrc.org utah.hrc.org wcny.hrc.org hrcnationaldinner.org www.hrcnationaldinner.org hrcnationaldinner.com www.hrcnationaldinner.com 3 frame-ancestors www.red-gate.com; object-src 'none'; 3 default-src 'self'; form-action 'self' https://*.hsforms.com; object-src 'self'; connect-src 'self' https://api.github.com https://*.hsforms.com https://element.io https://*.hs-banner.com https://forms-eu1.hscollectedforms.net https://api-eu1.hubapi.com; media-src 'self' https://element.io; style-src 'self' 'unsafe-inline' https://element.io https://*.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://element.io data: https://fonts.gstatic.com; img-src 'self' https://element.io data: https://matomo.riot.im/matomo.php https://*.hsforms.com https://*.hubspot.com https://px.ads.linkedin.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://element.io https://cdnjs.cloudflare.com https://*.cloudfront.net https://ajax.googleapis.com https://matomo.riot.im/matomo.js https://*.hsforms.net https://*.hsforms.com https://js-eu1.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://js-eu1.hsadspixel.net/fb.js https://js-eu1.hscollectedforms.net/collectedforms.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js; child-src 'self' https://*.hsforms.com; frame-src youtube.com www.youtube-nocookie.com https://*.hsforms.com https://js-eu1.hsforms.net; 3 base-uri 'none'; font-src 'self' https: data:; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; img-src 'self' https: data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://stablechat.mysecurecloudhost.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net; upgrade-insecure-requests; worker-src blob:; 3 frame-ancestors 'self' https://app.vwo.com 3 frame-ancestors https://blog.sherwin-williams.com https://www.sherwin-williams.com https://*.sherwin-williams.com 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.kununu.com *.googlesyndication.com connect.facebook.net bat.bing.com *.linkedin.com *.licdn.com app.slidepresenter.com *.kfw.de *.e-d-w.de *.kfw-capital.de *.kfw-ipex-bank.de *.kfw-entwicklungsbank.de www.energie-effizienz-experten.de *.deginvest.de *.youborafds01.com *.edge-cdn.net *.akamaized.net *.youboranqs01.com android-webview-video-poster *.mapbox.com *.bitmovin.com *.wt-safetag.com *.analytics.edgekey.net a-fds.youborafds01.com kfw-chatapp-live.x21wxzihtdv.eu-de.codeengine.appdomain.cloud fbc.wcfbc.net *.keyingress.de *.usercentrics.eu *.video-cdn.net responder.wt-safetag.com js.api.here.com *.hereapi.com *.mateti.net ajax.googleapis.com *.googleadservices.com *.googletagmanager.com *.google.com *.google.de www.facebook.com *.analytics.yahoo.com *.doubleclick.net *.yimg.com *.adform.net *.adsrvr.org tel: mailto: data: blob:; 3 default-src 'self' https://splc-git.github.io; connect-src 'self' https://api.givechariot.com https://*.analytics.google.com https://*.cloudinary.com https://*.conversionsapigateway.com https://*.documentcloud.adobe.com https://*.facebook.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.ad https://*.google.ae https://*.google.al https://*.google.am https://*.google.as https://*.google.at https://*.google.az https://*.google.ba https://*.google.be https://*.google.bf https://*.google.bg https://*.google.bi https://*.google.bj https://*.google.bs https://*.google.bt https://*.google.by https://*.google.ca https://*.google.cat https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.co.ao https://*.google.co.bw https://*.google.co.ck https://*.google.co.cr https://*.google.co.id https://*.google.co.il https://*.google.co.in https://*.google.co.jp https://*.google.co.ke https://*.google.co.kr https://*.google.co.ls https://*.google.co.ma https://*.google.co.mz https://*.google.co.nz https://*.google.co.th https://*.google.co.tz https://*.google.co.ug https://*.google.co.uk https://*.google.co.uz https://*.google.co.ve https://*.google.co.vi https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.com https://*.google.com.af https://*.google.com.ag https://*.google.com.ar https://*.google.com.au https://*.google.com.bd https://*.google.com.bh https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.com.bz https://*.google.com.co https://*.google.com.cu https://*.google.com.cy https://*.google.com.do https://*.google.com.ec https://*.google.com.eg https://*.google.com.et https://*.google.com.fj https://*.google.com.gh https://*.google.com.gi https://*.google.com.gt https://*.google.com.hk https://*.google.com.jm https://*.google.com.kh https://*.google.com.kw https://*.google.com.lb https://*.google.com.ly https://*.google.com.mm https://*.google.com.mt https://*.google.com.mx https://*.google.com.my https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.com.np https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.com.pr https://*.google.com.py https://*.google.com.qa https://*.google.com.sa https://*.google.com.sb https://*.google.com.sg https://*.google.com.sl https://*.google.com.sv https://*.google.com.tj https://*.google.com.tr https://*.google.com.tw https://*.google.com.ua https://*.google.com.uy https://*.google.com.vc https://*.google.com.vn https://*.google.cv https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.dz https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.gy https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.ie https://*.google.im https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.jo https://*.google.kg https://*.google.ki https://*.google.kz https://*.google.la https://*.google.li https://*.google.lk https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.mn https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.ne https://*.google.nl https://*.google.no https://*.google.nr https://*.google.nu https://*.google.pl https://*.google.pn https://*.google.ps https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.ru https://*.google.rw https://*.google.sc https://*.google.se https://*.google.sh https://*.google.si https://*.google.sk https://*.google.sm https://*.google.sn https://*.google.so https://*.google.sr https://*.google.st https://*.google.td https://*.google.tg https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.tt https://*.google.vu https://*.google.ws https://*.googletagmanager.com https://*.run.app https://acrobatservices.adobe.com https://api.marker.io https://documentcloud.adobe.com https://events.attentivemobile.com https://fastaction.ngpvan.com https://insight.adsrvr.org https://s3.eu-west-1.amazonaws.com https://secure.everyaction.com https://splcenter-us.attn.tv https://splcenter.attn.tv https://ssr.marker.io https://test-drive-7-s6uit34pua-uc.a.run.app https://viewlicense.adobe.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.adobe.com https://*.cloudinary.com https://*.dafdirect.org https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.greenhouse.io https://*.gstatic.com https://*.vbotickets.com https://cdn.attn.tv https://cdn.givechariot.com https://connect.facebook.net https://d3rse9xjbp8270.cloudfront.net https://edge.marker.io https://extend.vimeocdn.com https://js.adsrvr.org https://js.verygoodvault.com https://player.vimeo.com https://pym.nprapps.org https://static.everyaction.com https://www.youtube.com https://youtube.com https://actionnetwork.org; img-src 'self' https://cdn.givechariot.com https://www.paypalobjects.com https://res.cloudinary.com https://secure.everyaction.com https://secure.gravatar.com https://splc-git.github.io https://static.everyaction.com https://www.dafdirect.org https://www.facebook.com data: https://*.cloudinary.com https://*.google-analytics.com https://*.google.ad https://*.google.ae https://*.google.al https://*.google.am https://*.google.as https://*.google.at https://*.google.az https://*.google.ba https://*.google.be https://*.google.bf https://*.google.bg https://*.google.bi https://*.google.bj https://*.google.bs https://*.google.bt https://*.google.by https://*.google.ca https://*.google.cat https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.co.ao https://*.google.co.bw https://*.google.co.ck https://*.google.co.cr https://*.google.co.id https://*.google.co.il https://*.google.co.in https://*.google.co.jp https://*.google.co.ke https://*.google.co.kr https://*.google.co.ls https://*.google.co.ma https://*.google.co.mz https://*.google.co.nz https://*.google.co.th https://*.google.co.tz https://*.google.co.ug https://*.google.co.uk https://*.google.co.uz https://*.google.co.ve https://*.google.co.vi https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.com https://*.google.com.af https://*.google.com.ag https://*.google.com.ar https://*.google.com.au https://*.google.com.bd https://*.google.com.bh https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.com.bz https://*.google.com.co https://*.google.com.cu https://*.google.com.cy https://*.google.com.do https://*.google.com.ec https://*.google.com.eg https://*.google.com.et https://*.google.com.fj https://*.google.com.gh https://*.google.com.gi https://*.google.com.gt https://*.google.com.hk https://*.google.com.jm https://*.google.com.kh https://*.google.com.kw https://*.google.com.lb https://*.google.com.ly https://*.google.com.mm https://*.google.com.mt https://*.google.com.mx https://*.google.com.my https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.com.np https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.com.pr https://*.google.com.py https://*.google.com.qa https://*.google.com.sa https://*.google.com.sb https://*.google.com.sg https://*.google.com.sl https://*.google.com.sv https://*.google.com.tj https://*.google.com.tr https://*.google.com.tw https://*.google.com.ua https://*.google.com.uy https://*.google.com.vc https://*.google.com.vn https://*.google.cv https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.dz https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.gy https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.ie https://*.google.im https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.jo https://*.google.kg https://*.google.ki https://*.google.kz https://*.google.la https://*.google.li https://*.google.lk https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.mn https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.ne https://*.google.nl https://*.google.no https://*.google.nr https://*.google.nu https://*.google.pl https://*.google.pn https://*.google.ps https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.ru https://*.google.rw https://*.google.sc https://*.google.se https://*.google.sh https://*.google.si https://*.google.sk https://*.google.sm https://*.google.sn https://*.google.so https://*.google.sr https://*.google.st https://*.google.td https://*.google.tg https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.tt https://*.google.vu https://*.google.ws https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://splcenter.org https://www.facebook.com https://www.splcactionfund.org https://actionnetwork.org; style-src 'self' 'unsafe-inline' https://*.vbotickets.com https://d3rse9xjbp8270.cloudfront.net https://flo.uri.sh https://fonts.googleapis.com https://platform.twitter.com https://static.everyaction.com https://tagmanager.google.com https://ton.twimg.com/tfw/css https://www.dafdirect.org https://www.gstatic.com https://actionnetwork.org; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://*.splcenter.org https://cdn.givechariot.com https://d3rse9xjbp8270.cloudfront.net https://www.splcactionfund.org; frame-src 'self' https://*.adsrvr.org https://*.g.doubleclick.net https://*.greenhouse.io https://*.libsyn.com https://*.vbotickets.com https://*.vote.org https://acrobatservices.adobe.com https://action.splcenter.org https://app.marker.io https://cdn.givechariot.com https://cdn.knightlab.com https://connect.facebook.net https://datawrapper.dwcdn.net https://documentcloud.adobe.com https://documentservices.adobe.com https://doublethedonation.com https://flo.uri.sh https://googletagmanager https://platform.twitter.com https://play.prx.org https://player.captivate.fm https://player.vimeo.com https://s-static.ak.facebook.com https://secure.dafpay.com https://secure.splcenter.org https://splc-git.github.io https://splcenter.cartodb.com https://ssl.google-analytics.com https://vimeo.com https://www.arcgis.com https://www.dafdirect.org https://www.facebook.com https://www.google.com https://www.youtube.com https://youtu.be blob: https://*.wpengine.com https://www.splcenter.org https://www.splcactionfund.org; media-src 'self' https://*.cloudinary.com https://splc-git.github.io; worker-src 'self' blob: https://*.wpengine.com https://www.splcenter.org https://www.splcactionfund.org; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' analytics.twitter.com assets.juicer.io cdns.eu1.gigya.com cdn.cookielaw.org cdn.knightlab.com code.jquery.com connect.facebook.net geolocation.onetrust.com munchkin.marketo.net optanon.blob.core.windows.net snap.licdn.com static.ads-twitter.com www.buzzsprout.com *.googletagmanager.com www.google.com *.googleadservices.com www.gstatic.com www.youtube.com *.analytics.google.com *.google-analytics.com *.googleapis.com 505-xng-882.mktoweb.com 636-tke-312.mktoweb.com webapp-qa.np.six-group.com webapp-nonprod.np.six-group.com *.googlesyndication.com *.linkedin.com *.clarity.ms c.bing.com unpkg.com *.jsdelivr.com *.promptwatch.com cdnjs.cloudflare.com six-securities.enterprisebot.co *.readspeaker.com fonts.googleapis.com info.six-group.com info.finanzmuseum.ch info.ebill.ch accounts.eu1.gigya.com adservice.google.com ad.doubleclick.net cookies-data.onetrust.io graph.facebook.com info-sandbox.six-group.com privacyportal-ch.onetrust.com *.g.doubleclick.net www.juicer.io 505-xng-882.mktoresp.com 636-tke-312.mktoresp.com 505-xng-882.mktoutil.com 636-tke-312.mktoutil.com www.six-structured-products.com *.google.com *.google.ad *.google.at *.google.com.au *.google.be *.google.ca *.google.ch *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.gr *.google.com.hk *.google.ie *.google.im *.google.is *.google.it *.google.co.jp *.google.li *.google.lu *.google.nl *.google.no *.google.pt *.google.se *.google.com.sg *.google.sm *.google.co.uk www.schweizeraktien.net webapp-preprod.np.six-group.com webapp.api.six-group.com pagead2.googlesyndication.com www.googleadservices.com https://api-preprod.np.six-group.com https://api.six-group.com *.bing.com sites.six-group.com fonts.gstatic.com data: cdnapisec.kaltura.com googleads.g.doubleclick.net player.vimeo.com *.transistor.fm www.facebook.com www.federli.ch *.google.com www.youtube-nocookie.com *.fls.doubleclick.net anchor.fm podcasters.spotify.com tpc.googlesyndication.com; img-src https: data: ad.doubleclick.net ade.googlesyndication.com adservice.google.com www.googletagmanager.com *.clarity.ms *.bing.com blob: *.promptwatch.com; 3 frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://blueimp.github.io *.youtube.com *.jquery.com *.toast.com *.jsdelivr.net *.datatables.net *.cloudflare.com https://unpkg.com https://snap.licdn.com *.linkedin.com *.lh.pl *.googletagmanager.com *.facebook.net *.google-analytics.com *.doubleclick.net *.google.com *.gstatic.com www.googleadservices.com; object-src 'none'; style-src 'self' 'unsafe-inline' *.toast.com *.linkedin.com *.googleapis.com *.jsdelivr.net *.datatables.net *.cloudflare.com https://unpkg.com; img-src 'self' *.linkedin.com *.jsdelivr.net *.datatables.net *.cloudflare.com https://unpkg.com *.lh.pl *.ytimg.com *.googletagmanager.com *.facebook.net *.google-analytics.com *.doubleclick.net *.google.com *.gstatic.com www.googleadservices.com data: *.google.pl *.google.com *.google-analytics.com *.facebook.com; font-src 'self' *.gstatic.com; 3 frame-ancestors 'self' https://sketch.com https://*.sketch.com https://*.netlify.app 3 default-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' blob: https://localhost:58456 *.ads.linkedin.com *.bazaarvoice.com *.datev.com *.datev.de *.grafana.net *.scene7.com *.onetrust.com adobedc.demdex.net api.ipify.org apps.bazaarvoice.com assets.adobedtm.com connect.facebook.net dtveg.sc.omtrdc.net edge.adobedc.net eu-api.friendlycaptcha.eu faro-collector-prod-eu-west-2.grafana.net googleads.g.doubleclick.net px.ads.linkedin.com www.redditstatic.com pixel-config.reddit.com alb.reddit.com salesviewer.org snap.licdn.com www.datev-magazin.de www.facebook.com www.google.com www.google.de www.googletagmanager.com ldgnrtn.com ; media-src 'self' blob: *.scene7.com ; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.geotab.com *.google.com *.google.ca *.googleapis.com *.recaptcha.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.incontact.com *.salesforce.com *.buzzsprout.com *.visualwebsiteoptimizer.com *.vidyard.com *.twitter.com *.ads-twitter.com https://www.youtube.com https://script.crazyegg.com https://googleads.g.doubleclick.net https://514004470.collect.igodigital.com/collect.js https://connect.facebook.net https://snap.licdn.com https://cmp.osano.com https://bugcrowd.com https://*.bugcrowdusercontent.com *.linkedin.com blob: https://s.saleswingsapp.com/ https://cdn.c212.net/ https://c212.net https://pixel.mathtag.com/ *.zoominfo.com *.clickagy.com *.6sc.co https://client-registry.mutinycdn.com/ https://js.zi-scripts.com https://bat.bing.com *.clarity.ms https://js.adsrvr.org *.niceincontact.com *.marketo.net https://*.qualified.com https://www.redditstatic.com https://cdnjs.cloudflare.com; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.typekit.net *.zoominfo.com data: *.niceincontact.com https://js.qualified.com; style-src 'self' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.typekit.net *.niceincontact.com *.stackadapt.com https://*.qualified.com; img-src * data: blob:; connect-src *; object-src *; frame-src 'self' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.youtube.com *.facebook.com *.salesforce.com https://home-c19.incontact.com *.doubleclick.net https://www.buzzsprout.com https://attendee.gotowebinar.com https://register.gotowebinar.com *.vidyard.com https://www.youtube.com https://cmp.osano.com https://www.recaptcha.net https://bugcrowd.com *.linkedin.com https://calendly.com/ https://www.youtube-nocookie.com https://pixel.mathtag.com/ https://insight.adsrvr.org/ *.niceincontact.com *.arcade.software https://*.qualified.com https://my.datasubject.com; media-src 'self' *.googleapis.com webtest2.geotab.com webtest3.geotab.com *.niceincontact.com mediastream: https://*.qualified.com; frame-ancestors 'self' *.geotab.com https://geotab.my.salesforce.com; 3 frame-ancestors https://*.upwave.com 3 base-uri 'self'; connect-src 'self' d3hb14vkzrxvla.cloudfront.net *.cookiebot.com *.doubleclick.net *.google.com *.google.se *.google-analytics.com *.googlesyndication.com *.helpscout.net *.hyvor.com wss://soketi.hyvor.com *.ads.linkedin.com *.pipedriveassets.com webforms.pipedrive.com plausible.io unpkg.com player.vimeo.com; default-src 'none'; font-src 'self' fonts.gstatic.com; form-action 'self' https://cloudamqp.createsend.com https://customer.cloudamqp.com; frame-ancestors *; frame-src *.cookiebot.com *.google.com *.googletagmanager.com webforms.pipedrive.com platform.twitter.com player.vimeo.com www.youtube.com www.youtube-nocookie.com; img-src 'self' data: *.cookiebot.com *.doubleclick.net *.google.com *.google.se *.googleadservices.com *.googlesyndication.com googletagmanager.com *.ads.linkedin.com t.co *.twitter.com i.vimeocdn.com; media-src player.vimeo.com *.vimeocdn.com; object-src 'none'; script-src 'self' 'wasm-unsafe-eval' 'sha256-k9i5+gCsm+IZyKv2BRKirkS/QT/xLDCmZlYIpZkXDw8=' 'sha256-kklWc/t2/WH5gPZrA2NiJCjW5LCzd3lxXXD9nW2wWkM=' *.cookiebot.com js.createsend1.com *.google.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.helpscout.net talk.hyvor.com cdn.jsdelivr.net snap.licdn.com *.pipedriveassets.com webforms.pipedrive.com plausible.io static.ads-twitter.com platform.twitter.com unpkg.com f.vimeocdn.com player.vimeo.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com *.pipedriveassets.com f.vimeocdn.com; upgrade-insecure-requests; 3 frame-ancestors 'self' https://*.timesinternet.in https://*.sli.ke https://economictimes.indiatimes.com https://navbharattimes.indiatimes.com https://m.timesofindia.com https://m.economictimes.com https://gadgetsnow.com https://www.gadgetsnow.com https://gadgetsnow.indiatimes.com https://www.google.com https://google.com https://static-toiimg-com.cdn.ampproject.org https://m-timesofindia-com.cdn.ampproject.org https://www.newspointapp.com https://timesofindia.indiatimes.com https://auto.timesofindia.com https://timesofindia-indiatimes-com.cdn.ampproject.org https://vijaykarnataka.com https://*.samayam.com https://*.iamgujarat.com https://*.indiatimes.com https://toireviews.com https://*.toireviews.com ; upgrade-insecure-requests; 3 script-src 'unsafe-eval' blob: 'self' meta.wikimedia.org *.wikimedia.org *.wikipedia.org *.wikinews.org *.wiktionary.org *.wikibooks.org *.wikiversity.org *.wikisource.org wikisource.org *.wikiquote.org *.wikidata.org *.wikifunctions.org *.wikivoyage.org *.mediawiki.org mediawiki.org wikimedia.org *.wmflabs.org *.wmcloud.org *.toolforge.org wss://*.toolforge.org *.jsdelivr.net unpkg.com cdnjs.cloudflare.com raw.githubusercontent.com *.github.com code.jquery.com cdn.mathjax.org use.typekit.net fonts.cdnfonts.com use.fontawesome.com i.ytimg.com rsms.me doi.org localhost https://localhost:* http://localhost:* wss://localhost:* ws://localhost:* *.google.com *.gstatic.com *.googleapis.com *.translate.yandex.net yastatic.net ya.ru radically.github.io cdn.sammdot.ca cdn.fontshare.com viaf.org publicai-proxy.alaexis.workers.dev iiif.archive.org api.flickr.com live.staticflickr.com api.anthropic.com api.openai.com api.publicai.co catalogo.pusc.it parsifal.urbe.it opac.sbn.it overpass-api.de api.openrouteservice.org archive.org *.openstreetmap.org *.waymarkedtrails.org *.thunderforest.com registry.ipe.wiki analytics.ipe.wiki qlever.dev app.goacoustic.com wikipedia-archive.ourworldindata.org api.inaturalist.org inaturalist-open-data.s3.amazonaws.com validator.w3.org db.onlinewebfonts.com fontlibrary.org 'unsafe-inline' auth.wikimedia.org; default-src 'self' data: blob: upload.wikimedia.org https://commons.wikimedia.org meta.wikimedia.org *.wikimedia.org *.wikipedia.org *.wikinews.org *.wiktionary.org *.wikibooks.org *.wikiversity.org *.wikisource.org wikisource.org *.wikiquote.org *.wikidata.org *.wikifunctions.org *.wikivoyage.org *.mediawiki.org mediawiki.org wikimedia.org *.wmflabs.org *.wmcloud.org *.toolforge.org wss://*.toolforge.org *.jsdelivr.net unpkg.com cdnjs.cloudflare.com raw.githubusercontent.com *.github.com code.jquery.com cdn.mathjax.org use.typekit.net fonts.cdnfonts.com use.fontawesome.com i.ytimg.com rsms.me doi.org localhost https://localhost:* http://localhost:* wss://localhost:* ws://localhost:* *.google.com *.gstatic.com *.googleapis.com *.translate.yandex.net yastatic.net ya.ru radically.github.io cdn.sammdot.ca cdn.fontshare.com viaf.org publicai-proxy.alaexis.workers.dev iiif.archive.org api.flickr.com live.staticflickr.com api.anthropic.com api.openai.com api.publicai.co catalogo.pusc.it parsifal.urbe.it opac.sbn.it overpass-api.de api.openrouteservice.org archive.org *.openstreetmap.org *.waymarkedtrails.org *.thunderforest.com registry.ipe.wiki analytics.ipe.wiki qlever.dev app.goacoustic.com wikipedia-archive.ourworldindata.org api.inaturalist.org inaturalist-open-data.s3.amazonaws.com validator.w3.org db.onlinewebfonts.com fontlibrary.org en.wikipedia.org en.wikibooks.org en.wikinews.org en.wikiquote.org en.wikisource.org en.wikiversity.org en.wikivoyage.org en.wiktionary.org www.mediawiki.org commons.wikimedia.org foundation.wikimedia.org incubator.wikimedia.org species.wikimedia.org wikimania.wikimedia.org www.wikidata.org www.wikifunctions.org auth.wikimedia.org; style-src 'self' data: blob: upload.wikimedia.org https://commons.wikimedia.org meta.wikimedia.org *.wikimedia.org *.wikipedia.org *.wikinews.org *.wiktionary.org *.wikibooks.org *.wikiversity.org *.wikisource.org wikisource.org *.wikiquote.org *.wikidata.org *.wikifunctions.org *.wikivoyage.org *.mediawiki.org mediawiki.org wikimedia.org *.wmflabs.org *.wmcloud.org *.toolforge.org wss://*.toolforge.org *.jsdelivr.net unpkg.com cdnjs.cloudflare.com raw.githubusercontent.com *.github.com code.jquery.com cdn.mathjax.org use.typekit.net fonts.cdnfonts.com use.fontawesome.com i.ytimg.com rsms.me doi.org localhost https://localhost:* http://localhost:* wss://localhost:* ws://localhost:* *.google.com *.gstatic.com *.googleapis.com *.translate.yandex.net yastatic.net ya.ru radically.github.io cdn.sammdot.ca cdn.fontshare.com viaf.org publicai-proxy.alaexis.workers.dev iiif.archive.org api.flickr.com live.staticflickr.com api.anthropic.com api.openai.com api.publicai.co catalogo.pusc.it parsifal.urbe.it opac.sbn.it overpass-api.de api.openrouteservice.org archive.org *.openstreetmap.org *.waymarkedtrails.org *.thunderforest.com registry.ipe.wiki analytics.ipe.wiki qlever.dev app.goacoustic.com wikipedia-archive.ourworldindata.org api.inaturalist.org inaturalist-open-data.s3.amazonaws.com validator.w3.org db.onlinewebfonts.com fontlibrary.org 'unsafe-inline'; object-src 'none'; report-uri /w/api.php?action=cspreport&format=json; report-to csp-report-to-endpoint 3 default-src 'self' *.wartsila.com *.wistia.com https://t.wartsila.tiedosto.com https://app.powerbi.com https://curatorio.s3.amazonaws.com login.microsoftonline.com x.com https://go.pardot.com https://wartsila-static-content.s3-eu-west-1.amazonaws.com https://cdn.flipsnack.com tools.eurolandir.com asia.tools.euroland.com www.facebook.com https://innovatics.fi https://*.innovatics.fi cdn.cookielaw.org *.leadoo.com; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://s.ytimg.com *.twimg.com platform.linkedin.com cdnjs.cloudflare.com *.curator.io https://www.youtube.com/iframe_api https://www.youtube.com/s/ *.twitter.com twitter.com https://static.ads-twitter.com https://dec.azureedge.net/ www.googletagmanager.com https://snap.licdn.com www.googleadservices.com https://code.jquery.com https://ajax.microsoft.com cdn.pardot.com https://serve.nrich.ai pi.pardot.com https://cdnjs.cloudflare.com https://tag.nrich.ai https://audience.nrich.ai https://j.nrich.ai *.doubleclick.net doubleclick.net https://app.interactiveads.ai *.wistia.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input kendo.cdn.telerik.com https://unpkg.com tools.euroland.com https://t.wartsila.tiedosto.com t.co https://app.powerbi.com https://curatorio.s3.amazonaws.com login.microsoftonline.com https://go.pardot.com *.wartsila.com https://stackpath.bootstrapcdn.com https://sentiment.inderes.fi https://*.hotjar.com wss://*.hotjar.com tools.eurolandir.com asia.tools.euroland.com *.imp.stackadapt.com *.srv.stackadapt.com srv.stackadapt.com cdn.cookielaw.org *.leadoo.com https://code.createjs.com/1.0.0/createjs.min.js https://*.linkedin.com https://*.cdn.bcebos.com js.sentry-cdn.com https://*.bc0a.com https://rum-static.pingdom.net fast.wistia.net *.raffle.ai 'self' cdn.ampproject.org web-chat.nativechat.com js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net *.eloqua.com *.en25.com https://cdn.insight.sitefinity.com https://dec.azureedge.net https://player.vimeo.com/api/player.js https://bat.bing.com https://bat.bing.net 'unsafe-inline'; style-src *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com *.twimg.com *.curator.io *.twitter.com twitter.com https://d35islomi5rx1v.cloudfront.net https://d20rdry57v9fzf.cloudfront.net docs.google.com *.wistia.com https://cdnjs.cloudflare.com t.co https://app.powerbi.com https://curatorio.s3.amazonaws.com login.microsoftonline.com https://safety-day-bingo-prod.s3.eu-west-1.amazonaws.com https://go.pardot.com pages.wartsila.digital fast.fonts.net *.wartsila.com https://wartsila-static-content.s3-eu-west-1.amazonaws.com https://stackpath.bootstrapcdn.com https://sentiment.inderes.fi tools.eurolandir.com asia.tools.euroland.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input https://code.jquery.com https://res.leadoo.com *.srv.stackadapt.com srv.stackadapt.com cdn.cookielaw.org *.leadoo.com https://*.baidu.com 'self' web-chat.nativechat.com https://cdn.insight.sitefinity.com https://dec.azureedge.net 'unsafe-inline'; img-src www.linkedin.com data: blob: android-webview-video-poster: https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input fast.wistia.net *.wistia.com *.stackadapt.com sitefinity-videos-stage.s3.eu-west-1.amazonaws.com *.google-analytics.com google-analytics.com *.analytics.google.com analytics.google.com https://*.linkedin.com https://mb.cision.com https://cdn.cookielaw.org https://tag.nrich.ai 'self' web-chat.nativechat.com track.hubspot.com js.hsleadflows.net forms.hsforms.com *.eloqua.com https://cdn.insight.sitefinity.com https://dec.azureedge.net https://bat.bing.net https://bat.bing.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: themes.googleusercontent.com/static/fonts/inconsolata/v5/BjAYBlHtW3CJxDcjzrnZCIbN6UDyHWBl620a-IRfuBk.woff https://cdnjs.cloudflare.com https://app.powerbi.com https://curatorio.s3.amazonaws.com https://github.com login.microsoftonline.com https://safety-day-bingo-prod.s3.eu-west-1.amazonaws.com https://go.pardot.com fast.fonts.net *.wartsila.com https://wartsila-static-content.s3-eu-west-1.amazonaws.com *.curator.io https://*.hotjar.com wss://*.hotjar.com tools.eurolandir.com asia.tools.euroland.com *.wistia.com https://res.leadoo.com *.stackadapt.com; frame-src 'self' https://fast.wistia.net https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.wartsila.com https://go.pardot.com https://wartsila-static-content.s3-eu-west-1.amazonaws.com tools.euroland.com tools.eurolandir.com asia.tools.euroland.com https://innovatics.fi https://*.innovatics.fi https://www.youtube.com https://*.google.com pages.wartsila.digital meltwater.fi https://s.company-target.com/ https://app.powerbi.com *.leadoo.com *.doubleclick.net doubleclick.net www.googletagmanager.com *.raffle.ai web-chat.nativechat.com forms.hsforms.com; connect-src data: accounts.google.com *.google-analytics.com *.curator.io https://serve.nrich.ai https://j.nrich.ai https://api.company-target.com google-analytics.com *.analytics.google.com analytics.google.com *.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://embedwistia-a.akamaihd.net fast.wistia.net https://d20rdry57v9fzf.cloudfront.net https://t.wartsila.tiedosto.com t.co https://app.powerbi.com https://curatorio.s3.amazonaws.com login.microsoftonline.com https://tag.nrich.ai https://match.prod.bidr.io *.twitter.com https://go.pardot.com pages.wartsila.digital https://*.hotjar.io *.wartsila.com https://wartsila-static-content.s3-eu-west-1.amazonaws.com https://crmsrv.azurewebsites.net https://sentiment.inderes.fi https://*.hotjar.com wss://*.hotjar.com https://cdn.flipsnack.com tools.eurolandir.com asia.tools.euroland.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input www.facebook.com https://www.quandl.com *.pingdom.net wartsila.avaus.fi https://maps.googleapis.com https://sitefunc1.azurewebsites.net https://bot.leadoo.com https://iapi.leadoo.com https://anl.leadoo.com *.stackadapt.com https://innovatics.fi https://*.innovatics.fi risk.ipmeta.io segments.company-target.com cdn.cookielaw.org *.onetrust.com cdn.linkedin.oribi.io *.leadoo.com application/wasm googlesyndication.com *.googlesyndication.com *.doubleclick.net doubleclick.net https://*.google.com https://*.linkedin.com https://*.baidu.com https://*.safe.baidu.com https://*.bc0a.com *.raffle.ai 'self' forms.hubspot.com *.hsforms.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com https://*.sentry-cdn.com https://bat.bing.net https://bat.bing.com; media-src 'self' data: blob: *.wartsila.com https://wartsila-static-content.s3-eu-west-1.amazonaws.com https://video-frt3-2.cdninstagram.com https://www.youtube.com https://embedwistia-a.akamaihd.net https://*.hotjar.com wss://*.hotjar.com tools.eurolandir.com asia.tools.euroland.com *.wistia.com fast.wistia.net sitefinity-videos-stage.s3.eu-west-1.amazonaws.com https://*.baidu.com; child-src *.twitter.com twitter.com https://wartsila-static-content.s3-eu-west-1.amazonaws.com https://www.google.com pages.wartsila.digital https://snapwidget.com https://innovatics.fi https://*.innovatics.fi tools.euroland.com *.doubleclick.net doubleclick.net https://app.interactiveads.ai meltwater.fi www.linkedin.com *.wistia.com https://d20rdry57v9fzf.cloudfront.net https://t.wartsila.tiedosto.com t.co https://api.curator.io https://app.powerbi.com https://curatorio.s3.amazonaws.com login.microsoftonline.com https://go.pardot.com *.wartsila.com https://*.hotjar.com wss://*.hotjar.com https://cdn.flipsnack.com tools.eurolandir.com asia.tools.euroland.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input https://www.quandl.com https://bot.leadoo.com cdn.linkedin.oribi.io cdn.cookielaw.org *.leadoo.com 'self' web-chat.nativechat.com; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=puba7d8aaaa51b67194b3f1ee591694ee11&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aprod%2Cservice%3Awartsila.com 3 frame-ancestors https://*.1stdibs.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline' https://api.fontshare.com; font-src 'self' https://cdn.fontshare.com; img-src 'self' data: https://ui-avatars.com https://pbs.twimg.com https://www.google.com; connect-src 'self' https://vitals.vercel-analytics.com; frame-ancestors 'none'; form-action 'self' https://buttondown.com; base-uri 'self' 3 script-src 'unsafe-inline' 'unsafe-eval' http: https: blob: 3 frame-ancestors 'self' https://*.emerson.com https://*.emerson.cn https://*.emerson.co.jp https://*.emerson.kr https://*.ariba.com https://*.tradecentric.com https://mypunchoutsite.com https://*.coupahost.com https://*.determine.com https://*.gep.com https://emerson.pathfactory.com https://*.jaggaer.com https://*.sciquest.com https://*sp24.phitr.com https://*sp15.phibred.com; 3 default-src 'self' https://*.pixelcut.app https://*.pixelcut.ai https://*.pixa.com https://auth.prod.pixelcut.ai https://accounts.google.com/gsi/; img-src 'self' https: data: blob: gs: https://d33v4339jhl8k0.cloudfront.net https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com/gsi/style https://*.iubenda.com https://assets.churnkey.co; font-src 'self' 'unsafe-inline' https://*.pixelcut.app https://fonts.gstatic.com https://assets.churnkey.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://beacon-v2.helpscout.net https://accounts.google.com/gsi/client https://*.googleapis.com https://googleads.g.doubleclick.net https://apis.google.com https://challenges.cloudflare.com/turnstile/v0/api.js https://www.dropbox.com/static/api/2/dropins.js https://connect.facebook.net https://www.googleadservices.com https://www.google.com https://www.google-analytics.com https://*.googletagmanager.com https://js.stripe.com/v3 https://js.stripe.com/v3/ https://js.stripe.com https://checkout.stripe.com https://assets.churnkey.co https://*.iubenda.com https://www.dubcdn.com https://bzrcdn.openai.com; object-src 'self' blob:; media-src 'self' blob: https://beacon-v2.helpscout.net https://cdn3.pixelcut.app https://storage.googleapis.com/ https://*.pixelcut.app https://*.pixelcut.ai https://*.pixa.com; frame-src 'self' https://accounts.google.com/gsi/ https://auth.prod.pixelcut.ai https://challenges.cloudflare.com/ https://content.googleapis.com/ https://docs.google.com/ https://accounts.google.com/ https://td.doubleclick.net/ https://www.googletagmanager.com https://www.facebook.com https://js.stripe.com/ https://*.stripe.com https://www.youtube.com https://pixelcut.ai https://www.pixelcut.ai; connect-src 'self' file: data: blob: filesystem: ws: https://images.unsplash.com https://images.pexels.com https://*.pixelcut.app https://*.pixelcut.ai https://d3hb14vkzrxvla.cloudfront.net https://*.pixelcut.app https://accounts.google.com/gsi/ https://*.googleapis.com https://www.googleadservices.com https://*.sentry.io https://*.mixpanel.com https://beaconapi.helpscout.net https://chatapi.helpscout.net https://d33v4339jhl8k0.cloudfront.net https://endpoint1.collection.us2.sumologic.com https://dl.dropboxusercontent.com/1/ https://apis.google.com/ https://connect.facebook.net https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://ad.doubleclick.net https://google.com https://*.google.com https://stripe.com https://*.stripe.com https://api.churnkey.co https://fal.media https://*.fal.media https://content.pixelcut.ai https://content-staging.pixelcut.ai https://assets.pixelcut.ai https://assets.staging.pixelcut.app https://assets.pixa.com https://assets.staging.pixa.com https://*.pixa.com https://api.statsig.com https://featuregates.org https://statsigapi.net https://events.statsigapi.net https://api.statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cloudflare-dns.com https://beyondwickedmapping.org https://api.dub.co https://bzr.openai.com; worker-src 'self' blob:; child-src 'self' blob:; frame-ancestors 'none' 3 object-src 'none'; frame-ancestors https://*.ncrvoyix.com; upgrade-insecure-requests; block-all-mixed-content; base-uri 'none'; 3 frame-ancestors 'self' commander.weatherops.com 3 frame-ancestors 'self' aemauthor.barclaycardus.com www.aviatormastercard.com www.emiratesskywardscards.com www.hawaiianbohcard.com www.myluxurycard.com www.hawaiiancreditcard.com www.jetbluemastercard.com www.pricelinerewardsvisa.com www.breezeairwaysvisa.com www.barclaycardus.com gap.barclaysus.com oldnavy.barclaysus.com athleta.barclaysus.com bananarepublic.barclaysus.com staging-www.barclaycardus.com prod-test-www.barclaycardus.com prod-pi-www.barclaycardus.com prod-cn-www.barclaycardus.com barclaysuscbfeedback.qualtrics.com; 3 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: https://*.optimizely.com https://cdn.optimizely.com https://taboola.com https://*.taboola.com; style-src 'self' 'unsafe-inline' https: https://*.optimizely.com; img-src 'self' data: blob: https: https://cdn.optimizely.com https://*.optimizely.com https://taboola.com https://*.taboola.com; font-src 'self' data: https: https://*.optimizely.com; connect-src 'self' https: wss: https://*.optimizely.com wss://*.optimizely.com https://taboola.com https://*.taboola.com; frame-src 'self' https: https://*.optimizely.com https://taboola.com https://*.taboola.com; frame-ancestors 'self' https://int-cms.webroot.com https://app.optimizely.com https://*.optimizely.com; object-src 'none'; base-uri 'self'; form-action 'self' https: 3 frame-ancestors 'self' https://lucid.app 3 default-src 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.vimeo.com https://www.youtube.com https://cdnjs.cloudflare.com https://*.cdnfonts.com https://*.jsdelivr.net https://vlibras.gov.br https://*.vlibras.gov.br https://*.rybena.com.br https://*.adobeioruntime.net https://*.adobeaemcloud.com https://*.onetrust.com https://*.cookielaw.org https://*.clarity.ms https://*.google.com https://s1.kwai.net 'unsafe-inline'; script-src-elem 'self' blob: 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://assets.adobedtm.com https://*.sebrae.com.br https://*.vimeo.com https://www.youtube.com https://cdnjs.cloudflare.com https://*.cdnfonts.com https://vlibras.gov.br https://*.vlibras.gov.br https://fonts.googleapis.com https://*.jsdelivr.net https://*.rybena.com.br https://*.adobeioruntime.net https://*.jquery.com https://*.onetrust.com https://*.cookielaw.org https://*.adobeaemcloud.com https://code.jquery.com https://*.google.com https://app.formbricks.com https://*.clarity.ms https://*.facebook.net https://*.facebook.com https://*.tiktok.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://snap.licdn.com https://px.ads.linkedin.com https://*.clarity.ms https://s1.kwai.net https://s.pinimg.com https://ct.pinterest.com 'unsafe-inline'; frame-src 'self' https://*.sebrae.com.br https://player.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com https://*.rybena.com.br https://*.adobeioruntime.net https://*.onetrust.com https://*.cookielaw.org https://*.google.com https://repository.rybena.com.br:9000 https://*.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://ct.pinterest.com https://*.sebraemg.com.br 'unsafe-inline' 'unsafe-hashes'; worker-src 'self' blob:; connect-src 'self' https://edge.adobedc.net https://adobedc.demdex.net https://*.sebrae.com.br https://vlibras.gov.br https://*.vlibras.gov.br https://*.jsdelivr.net https://vimeo.com https://*.vimeo.com https://*.adobeioruntime.net https://*.onetrust.com https://*.cookielaw.org https://*.adobeaemcloud.com https://*.clarity.ms https://*.rybena.com.br https://*.google.com https://app.formbricks.com https://www.facebook.com https://connect.facebook.net https://analytics.tiktok.com https://business-api.tiktok.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://*.doubleclick.net https://*.clarity.ms https://*.tiktokw.us https://*.run.app https://*.kwai.net https://*.pinterest.com https://*.conversionsapigateway.com https://*.pinimg.com https://px.ads.linkedin.com; style-src 'self' https://cdnjs.cloudflare.com https://*.cdnfonts.com https://*.rybena.com.br https://*.jsdelivr.net https://*.adobeioruntime.net https://*.adobeaemcloud.com https://*.google.com 'unsafe-inline' 'unsafe-hashes'; style-src-elem 'self' https://*.sebrae.com.br https://fonts.googleapis.com https://*.cdnfonts.com https://cdnjs.cloudflare.com https://*.rybena.com.br https://*.jsdelivr.net https://*.adobeioruntime.net https://*.octagora.com https://cdn.cookielaw.org https://*.onetrust.com https://*.cookielaw.org https://*.adobeaemcloud.com https://*.octagora.com https://*.google.com 'unsafe-inline'; img-src 'self' data: https://*.vimeocdn.com https://*.ytimg.com https://*.scene7.com https://*.jsdelivr.net https://vlibras.gov.br https://*.vlibras.gov.br https://*.sebrae.com.br https://i.pravatar.cc https://storage.googleapis.com https://*.sebrae.com.br https://dev.day.com https://*.rybena.com.br https://fastly.picsum.photos https://*.adobeioruntime.net https://*.onetrust.com https://*.cookielaw.org https://*.adobeaemcloud.com https://*.clarity.ms https://*.bing.com https://*.google.com https://*.google.com.br https://www.facebook.com https://*.ads.linkedin.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.google-analytics.com https://*.doubleclick.net https://www.linkedin.com https://*.clarity.ms https://*.pinterest.com https://*.kwai.net 'unsafe-inline'; font-src 'self' https://*.sebrae.com.br https://*.jsdelivr.net https://*.gstatic.com https://*.cdnfonts.com https://cdnjs.cloudflare.com https://vlibras.gov.br https://*.rybena.com.br https://*.adobeioruntime.net https://*.onetrust.com https://*.cookielaw.org https://*.adobeaemcloud.com https://*.google.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; form-action 'self'; 3 child-src 'self'; frame-src * mailto:; img-src * blob: data:; object-src 'self' data: https://gase-uat.azurewebsites.net https://gase.azurewebsites.net; script-src * 'unsafe-inline' 'unsafe-eval' blob:; script-src-attr 'self' 'unsafe-inline'; script-src-elem * 'unsafe-inline'; style-src * 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors * 3 frame-ancestors 'self' *.kaskus.co.id *.kaskus.id 3 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-video-poster:; font-src data: https:; connect-src data: https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob: https://mpr.tfaforms.net/api_v2/workflow/processor https://mpr.tfaforms.net/responses/processor; frame-ancestors 'self' https://*.scpr.org https://*.scpr.production.k3.m1.brightspot.cloud https://*.scpr.psdops.com https://*.scpr.lower.k3.m1.brightspot.cloud; 3 object-src 'none'; base-uri 'none'; frame-ancestors 'self'; 3 default-src 'self' 'unsafe-inline' *; img-src data: * ; 3 upgrade-insecure-requests;block-all-mixed-content 3 default-src 'self'; script-src 'self' 'unsafe-inline' translate.googleapis.com certificates.webtests.com blob:; style-src 'self' 'unsafe-inline' certificates.webtests.com fonts.googleapis.com translate.googleapis.com; font-src 'self' fonts.gstatic.com data:; img-src 'self' certificates.webtests.com data:; object-src 'none'; report-uri https://hpage-report.uriports.com/reports/enforce 3 default-src 'none';connect-src 'self' https://cdn77.com https://*.cdn77.com https://*.google-analytics.com https://google-analytics.com https://*.analytics.google.com https://*.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.doubleclick.net https://*.cdn77.eu https://*.intercom.io wss://*.intercom.io wss://*.intercom-messenger.com https://*.intercomcdn.com https://*.pingdom.net https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://bat.bing.net https://*.ads.linkedin.com https://www.facebook.com https://*.prismic.io https://*.cdn.prismic.io;script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' 'unsafe-eval' https://*.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://*.intercom.io https://*.intercomcdn.com https://*.pingdom.net https://static.hotjar.com https://*.hotjar.com https://bat.bing.com https://*.ads-twitter.com https://*.licdn.com https://*.facebook.net https://*.hcaptcha.com https://static.cdn.prismic.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.typekit.net;font-src 'self' https://*.gstatic.com https://*.typekit.net https://*.intercomcdn.com;img-src * data: blob:;frame-src 'self' https://www.facebook.com https://*.hcaptcha.com https://*.prismic.io;media-src 'self' https://*.intercomcdn.com;form-action 'self';manifest-src 'self';worker-src 'self' blob:;child-src 'self' blob:;base-uri 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests 3 frame-ancestors 'self' https://smart-insights.flix360.com https://internal-insights.flix360.com 3 default-src 'none'; 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.youtube.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.analytics.google.com https://kit.fontawesome.com https://www.google.com https://www.gstatic.com https://*.fontawesome.com https://pi.pardot.com https://*.pardot.com https://hello.nttdata.com https://tag.demandbase.com https://*.demandbase.com https://*.company-target.com https://snap.licdn.com https://*.licdn.com https://cmp.secureprivacy.ai https://app.secureprivacy.ai https://*.secureprivacy.ai; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.fontawesome.com https://www.googletagmanager.com https://app.secureprivacy.ai https://*.googletagmanager.com; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com https://kit.fontawesome.com https://*.gstatic.com https://*.fontawesome.com data:; connect-src 'self' https://www.youtube.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.sitecorecloud.io https://*.sitecoresearch.com https://*.discover.sitecorecloud.io https://ka-p.fontawesome.com https://*.fontawesome.com https://pi.pardot.com https://*.pardot.com https://hello.nttdata.com https://tag.demandbase.com https://*.demandbase.com https://*.company-target.com https://ingesteer.services-prod.nsvcs.net https://*.nsvcs.net https://px.ads.linkedin.com https://*.linkedin.com https://api-prod.secureprivacy.ai https://*.secureprivacy.ai; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://*.pardot.com https://*.company-target.com https://*.jobdiva.com; media-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 3 default-src * blob: ws: wss: gap://ready 'unsafe-inline' 'unsafe-eval'; worker-src blob: 'unsafe-inline'; script-src * 'self' 'unsafe-inline' 'unsafe-eval' blob:; connect-src * 'unsafe-inline'; img-src * 'self' data: blob: 'unsafe-inline'; frame-src * blob: intent:; child-src * blob: gap:; frame-ancestors *; style-src * 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; worker-src * blob: 'unsafe-inline'; 3 default-src *.pendo.saashr.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' * data: *.pendo.saashr.com app.eu.pendo.io pendo-eu-static.storage.googleapis.com pendo-eu-static-d276745b-378e-428a-493e-755dc699451d.storage.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googleapis.com *.twitter.com *.instagram.com *.facebook.net *.twimg.com *.pendo.saashr.com app.eu.pendo.io pendo-eu-static.storage.googleapis.com pendo-eu-static-d276745b-378e-428a-493e-755dc699451d.storage.googleapis.com; img-src * data: blob: *.pendo.saashr.com app.eu.pendo.io pendo-eu-static-d276745b-378e-428a-493e-755dc699451d.storage.googleapis.com; media-src *; frame-ancestors file: cdvfile: 'self'; frame-src * gap://ready data: app.eu.pendo.io; font-src 'self' fonts.gstatic.com; connect-src 'self' data: *.google.com *.googleapis.com *.pendo.saashr.com app.eu.pendo.io pendo-eu-static-d276745b-378e-428a-493e-755dc699451d.storage.googleapis.com 3 frame-ancestors 'self' *.cloudera.com 3 frame-src https://portal.exoscale.com/ https://push.getbeamer.com/ https://app.getbeamer.com/ https://changelog.exoscale.com/ 3 frame-ancestors 'self' https://www.oderland.com/ https://www.oderland.dk/ https://www.oderland.no/ https://www.oderland.se/ https://wp-stage.oderland.net/; 3 default-src blob: 'self' https: data: 'unsafe-inline' 'unsafe-eval' 'self' https://challenges.cloudflare.com https://*.iovox.com/ http://vimeo.com https://*.eqads.com https://*.msecnd.net https://*.cookielaw.org https://*.cloudflare.com https://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.crazyegg.com https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.vimeo.com https://*.secure.payconex.net; worker-src * blob:; img-src * blob: data:; 3 frame-ancestors *.jjwxc.net *.jjwxc.com 3 default-src https: wss:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wfolio.ru https://wfolio.com https://*.wfolio.ru https://*.wfolio.com https://*.wfolio.pro https://*.fontawesome.com https://vk.com https://vk.ru https://*.facebook.net https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.yandex.ru https://*.yandex.com https://yastatic.net https://*.mail.ru https://*.carrotquest.io https://*.carrotquest.app https://*.carrottrack.io https://*.ddos-guard.net https://*.youtube.com https://*.vimeo.com https://*.jsdelivr.net https://telegram.org; style-src 'self' 'unsafe-inline' https:; img-src https: data:; font-src https: data:; media-src https:; object-src https:; child-src *; frame-ancestors 'self' https://*.yandex.ru https://yastatic.net; 3 default-src 'self'; frame-src 'none'; connect-src 'self'; font-src 'self' data:; img-src 'self' data:; media-src data:; script-src 'self' 'unsafe-eval' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=' 'sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=' 'sha256-VA8O2hAdooB288EpSTrGLl7z3QikbWU9wwoebO/QaYk=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc='; style-src 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'none'; block-all-mixed-content; form-action 'none'; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://view.ceros.com https://www.googletagmanager.com https://code.jquery.com https://cdn.jsdelivr.net https://app-abk.marketo.com https://*.marketo.com https://*.ivans.com https://munchkin.marketo.net https://js.driftt.com https://*.driftt.com https://players.brightcove.net https://*.brightcove.com https://*.brightcove.net https://form.jotform.com https://*.jotform.com https://*.buzzsprout.com https://vwo.com https://*.vwo.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://cdn-cookieyes.com https://*.cookieyes.com https://vjs.zencdn.net https://*.zencdn.net https://*.boltdns.net https://snap.licdn.com https://*.licdn.com https://px.ads.linkedin.com https://bat.bing.com https://*.bing.com https://static.oktopost.com https://*.oktopost.com https://tracking.g2crowd.com https://*.g2crowd.com https://js.idio.co https://*.idio.co https://cdn.bizible.com https://*.bizible.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://edge.api.brightcove.com https://cms.api.brightcove.com https://playback.api.brightcove.com https://analytics.api.brightcove.com https://sadmin.brightcove.com https://gallery.api.brightcove.com https://social.api.brightcove.com https://gallery-metrics.api.brightcove.com https://*.brightcovecdn.com https://manifest.prod.boltdns.net https://app.ezlynx.com https://*.ezlynx.com https://tracking-api.g2.com https://*.g2.com https://d1igp3oop3iho5.cloudfront.net https://connect.facebook.net https://js.zi-scripts.com https://*.zi-scripts.com https://ws-assets.zoominfo.com https://*.zoominfo.com https://www.google-analytics.com https://use.typekit.net https://p.typekit.net https://okt.to https://static.cloudflareinsights.com https://*.facebook.com https://*.fbcdn.net https://ajax.googleapis.com https://*.googleapis.com https://assets.ceros.com https://*.ceros.com https://cdn.rollbar.com https://cdn.intake-lr.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://*.googleadservices.com https://web-sdk.smartlook.com https://www.clickcease.com https://insight.appliedsystems.com https://templates.marketo.net https://creative-services.ceros.com https://s.adroll.com https://reg.eventmobi.com https://www.gstatic.com https://dyv6f9ner1ir9.cloudfront.net https://cdnjs.cloudflare.com https://*.marchex.io https://rw1.marchex.io https://www.appliednet.com https://az416426.vo.msecnd.net https://js.monitor.azure.com https://scdn.snapapp.com https://dyv6f9ner1ir9.cloudfront.net https://platform.twitter.com https://scripts.poll-maker.com https://cdn.cookielaw.org https://resources.ezlynx.com https://web-sdk-eu.aptrinsic.com https://cdn.siteimprove.net https://*.clarity.ms https://mountain.com https://*.mountain.com https://static.airtable.com https://*.airtable.com https://assets.adoberesources.net; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google.com https://*.google.com https://view.ceros.com https://www.googletagmanager.com https://code.jquery.com https://cdn.jsdelivr.net https://app-abk.marketo.com https://*.marketo.com https://*.ivans.com https://munchkin.marketo.net https://js.driftt.com https://*.driftt.com https://players.brightcove.net https://*.brightcove.com https://*.brightcove.net https://form.jotform.com https://*.jotform.com https://*.buzzsprout.com https://vwo.com https://*.vwo.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://cdn-cookieyes.com https://*.cookieyes.com https://vjs.zencdn.net https://*.zencdn.net https://*.boltdns.net https://snap.licdn.com https://*.licdn.com https://px.ads.linkedin.com https://bat.bing.com https://*.bing.com https://static.oktopost.com https://*.oktopost.com https://tracking.g2crowd.com https://*.g2crowd.com https://js.idio.co https://*.idio.co https://cdn.bizible.com https://*.bizible.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://edge.api.brightcove.com https://cms.api.brightcove.com https://playback.api.brightcove.com https://analytics.api.brightcove.com https://sadmin.brightcove.com https://gallery.api.brightcove.com https://social.api.brightcove.com https://gallery-metrics.api.brightcove.com https://*.brightcovecdn.com https://manifest.prod.boltdns.net https://app.ezlynx.com https://*.ezlynx.com https://tracking-api.g2.com https://*.g2.com https://d1igp3oop3iho5.cloudfront.net https://connect.facebook.net https://js.zi-scripts.com https://*.zi-scripts.com https://ws-assets.zoominfo.com https://*.zoominfo.com https://www.google-analytics.com https://use.typekit.net https://p.typekit.net https://okt.to https://static.cloudflareinsights.com https://*.facebook.com https://*.fbcdn.net https://ajax.googleapis.com https://*.googleapis.com https://assets.ceros.com https://*.ceros.com https://cdn.rollbar.com https://cdn.intake-lr.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://*.googleadservices.com https://web-sdk.smartlook.com https://www.clickcease.com https://insight.appliedsystems.com https://templates.marketo.net https://creative-services.ceros.com https://s.adroll.com https://reg.eventmobi.com https://www.gstatic.com https://dyv6f9ner1ir9.cloudfront.net https://cdnjs.cloudflare.com https://*.marchex.io https://rw1.marchex.io https://www.appliednet.com https://az416426.vo.msecnd.net https://js.monitor.azure.com https://scdn.snapapp.com https://dyv6f9ner1ir9.cloudfront.net https://platform.twitter.com https://scripts.poll-maker.com https://cdn.cookielaw.org https://resources.ezlynx.com https://web-sdk-eu.aptrinsic.com https://cdn.siteimprove.net https://*.clarity.ms https://mountain.com https://*.mountain.com https://static.airtable.com https://*.airtable.com https://assets.adoberesources.net; style-src 'self' 'unsafe-inline' https://view.ceros.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://app-abk.marketo.com https://*.marketo.com https://*.ivans.com https://form.jotform.com https://*.jotform.com https://*.buzzsprout.com https://vwo.com https://*.vwo.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://js.driftt.com https://*.driftt.com https://cdn-cookieyes.com https://*.cookieyes.com https://vjs.zencdn.net https://*.zencdn.net https://*.boltdns.net https://snap.licdn.com https://*.licdn.com https://static.oktopost.com https://*.oktopost.com https://js.idio.co https://*.idio.co https://cdn.bizible.com https://*.bizible.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.brightcove.com https://*.brightcove.net https://*.brightcovecdn.com https://use.typekit.net https://p.typekit.net https://assets.ceros.com https://*.ceros.com https://d2yeu2mwujl2s5.cloudfront.net https://insight.appliedsystems.com https://templates.marketo.net https://www.appliednet.com https://resources.ezlynx.com https://web-sdk-eu.aptrinsic.com; font-src 'self' data: https://view.ceros.com https://fonts.gstatic.com https://cdn.jsdelivr.net https://app-abk.marketo.com https://*.marketo.com https://*.ivans.com https://form.jotform.com https://*.jotform.com https://vwo.com https://*.vwo.com https://js.driftt.com https://*.driftt.com https://cdn-cookieyes.com https://*.cookieyes.com https://vjs.zencdn.net https://*.zencdn.net https://static.oktopost.com https://*.oktopost.com https://js.idio.co https://*.idio.co https://cdn.bizible.com https://*.bizible.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.brightcove.com https://*.brightcove.net https://*.brightcovecdn.com https://use.typekit.net https://p.typekit.net https://media-s3-us-east-1.ceros.com https://*.appliedsystems.com https://www.appliednet.com https://resources.ezlynx.com https://dhm5hy2vn8l0l.cloudfront.net; img-src 'self' data: https: https://view.ceros.com https://www.googletagmanager.com https://app-abk.marketo.com https://*.marketo.com https://*.ivans.com https://players.brightcove.net https://*.brightcove.com https://*.brightcove.net https://form.jotform.com https://*.jotform.com https://*.buzzsprout.com https://vwo.com https://*.vwo.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://js.driftt.com https://*.driftt.com https://cdn-cookieyes.com https://*.cookieyes.com https://vjs.zencdn.net https://*.zencdn.net https://*.boltdns.net https://snap.licdn.com https://*.licdn.com https://px.ads.linkedin.com https://bat.bing.com https://*.bing.com https://static.oktopost.com https://*.oktopost.com https://tracking.g2crowd.com https://*.g2crowd.com https://js.idio.co https://*.idio.co https://cdn.bizible.com https://*.bizible.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.brightcovecdn.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://okt.to https://www.appliednet.com https://resources.ezlynx.com https://mountain.com https://*.mountain.com; frame-src 'self' https://*.outgrow.us https://view.ceros.com https://www.googletagmanager.com https://www.google.com https://maps.google.com https://*.google.com https://form.asana.com https://*.asana.com https://airtable.com https://*.airtable.com https://td.doubleclick.net https://app-abk.marketo.com https://*.marketo.com https://*.ivans.com https://players.brightcove.net https://*.brightcove.com https://*.g2.com https://*.brightcove.net https://form.jotform.com https://*.jotform.com https://*.buzzsprout.com https://vwo.com https://*.vwo.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://js.driftt.com https://*.driftt.com https://cdn-cookieyes.com https://*.cookieyes.com https://static.oktopost.com https://*.oktopost.com https://js.idio.co https://*.idio.co https://*.brightcovecdn.com https://forms2.itswebs.com https://resources.ezlynx.com https://mountain.com https://*.mountain.com https://forms.office.com https://insight.appliedsystems.com https://*.appliedsystems.com https://www.facebook.com https://*.facebook.com; connect-src 'self' https://www.googletagmanager.com https://app-abk.marketo.com https://*.marketo.com https://*.mktoutil.com https://*.ivans.com https://www.google.com https://google.com https://analytics.google.com https://dev.visualwebsiteoptimizer.com https://stats.g.doubleclick.net https://players.brightcove.net https://*.brightcove.com https://*.brightcove.net https://form.jotform.com https://*.jotform.com https://*.buzzsprout.com https://vwo.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://js.driftt.com https://*.driftt.com https://metrics.api.drift.com https://cdn-cookieyes.com https://*.cookieyes.com https://vjs.zencdn.net https://*.zencdn.net https://*.boltdns.net http://*.boltdns.net https://snap.licdn.com https://*.licdn.com https://px.ads.linkedin.com https://bat.bing.com https://*.bing.com https://static.oktopost.com https://*.oktopost.com https://tracking.g2crowd.com https://*.g2crowd.com https://js.idio.co https://*.idio.co https://cdn.bizible.com https://*.bizible.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://web-sdk.smartlook.com https://*.smartlook.com https://*.smartlook.cloud https://manager.eu.smartlook.cloud https://edge.api.brightcove.com https://cms.api.brightcove.com https://playbook.api.brightcove.com https://analytics.api.brightcove.com https://sadmin.brightcove.com https://gallery.api.brightcove.com https://social.api.brightcove.com https://gallery-metrics.api.brightcove.com https://*.brightcovecdn.com https://manifest.prod.boltdns.net https://app.ezlynx.com https://*.ezlynx.com https://tracking-api.g2.com https://*.g2.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://okt.to https://www.facebook.com https://*.facebook.com https://js.zi-scripts.com https://*.zi-scripts.com https://ws-assets.zoominfo.com https://*.zoominfo.com https://373-dbf-030.mktoresp.com https://api.ceros.com https://media.ceros.com https://d1igp3oop3iho5.cloudfront.net https://*.marchex.io https://rw1.marchex.io https://www.appliednet.com https://www.google.ca https://*.google.ca https://resources.ezlynx.com https://esp-eu.aptrinsic.com https://my2.siteimprove.com https://*.clarity.ms https://*.compute.amazonaws.com https://mountain.com https://*.mountain.com https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 https://*.cloud.adobe.io wss://*.cloud.adobe.io https://dc.services.visualstudio.com https://js.monitor.azure.com https://assets.adoberesources.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://*.googleadservices.com; media-src 'self' blob: data: https://*.brightcove.com https://*.brightcove.net https://*.brightcovecdn.com https://*.boltdns.net https://players.brightcove.net https://manifest.prod.boltdns.net https://media.ceros.com https://*.ceros.com https://media-s3-us-east-1.ceros.com; upgrade-insecure-requests; 3 default-src 'self' *.icons8.com *.hotjar.com data: *.doubleclick.net *.wistia.net *.euronext.com *.youtube.com *.google.com *.onetrust.com *.cookielaw.org *.google.fr; child-src 'self' *.youtube.com *.youtu.be *.hotjar.com *.twitter.com *.piktochart.com *.euronext.com *.docs.google.com *.googletagmanager.com *.wistia.com *.wistia.net blob:; connect-src 'self' *.cookielaw.org *.google-analytics.com *.freshworks.com *.mapbox.com *.euronext.com *.hotjar.com *.hotjar.io ws.hotjar.com ws: *.onetrust.com *.wistia.net *.wistia.com *.doubleclick.net www.googleadservices.com *.googleapis.com *.g.doubleclick.net *.google.com *.google.fr *.freshdesk.com *.linkedin.com *.companywebcast.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' *.euronext.com maxcdn.icons8.com *.doubleclick.net *.google.com fonts.gstatic.com embed.tawk.to data: *.hotjar.com *.wistia.net; frame-src 'self' *.youtube.com *.youtu.be *.hotjar.com *.twitter.com *.piktochart.com *.euronext.com *.google.com *.wistia.com *.wistia.net *.companywebcast.com *.googletagmanager.com; img-src 'self' *.cookielaw.org *.ytimg.com *.w3.org data: *.euronext.com *.googletagmanager.com blob: *.globenewswire.com *.wistia.net *.wistia.com *.google-analytics.com www.googleadservices.com *.google.com *.google.fr *.linkedin.com *.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self' blob: *.wistia.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.cookielaw.org *.google-analytics.com *.euronext.com *.mapbox.com *.datatables.net *.jsdelivr.net *.cloudflare.com *.jquery.com *.knightlab.com *.twitter.com *.polyfill.io *.unpkg.com *.mdbootstrap.com *.rawgit.com *.bootstrapcdn.com *.google.com *.freshworks.com *.youtu.be *.doubleclick.net *.gstatic.com *.schema.org *.hotjar.com *.drupal.org *.wistia.com *.youtube.com *.wistia.net *.licdn.com *.companywebcast.com api.mapbox.com cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com https://cdn.jsdelivr.net https://cdn.knightlab.com https://cdnjs.cloudflare.com https://platform.twitter.com https://polyfill-fastly.io mdbootstrap.com platform.twitter.com stackpath.bootstrapcdn.com; style-src 'self' 'unsafe-inline' *.icons8.com *.freshworks.com *.gstatic.com *.ytimg.com *.ggpht.com *.wistia.com *.euronext.com *.cookielaw.org *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.knightlab.com https://cdnjs.cloudflare.com maxcdn.icons8.com mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes'; frame-ancestors 'self' *.euronext.com 3 default-src 'self' data: blob: ws: *.gstatic.com *.google.com *.google-analytics.com *.nr-data.net *.sentry.io *.facebook.com *.facebook.net *.everesttech.net *.hotjar.com *.cloudflare.com *.bing.com *.arcot.com *.pinimg.com *.pinterest.com *.ondemand.com *.fontawesome.com *.auth0.com *.creditmutuel.fr *.bioz.com *.vwr.com *.lfeeder.com *.leadfeeder.com *.doubleclick.net *.avantorsciences.com *.avantorsciences.cn *.nusil.com *.googletagmanager.com *.linkedin.com *.twitter.com *.vwrsurveys.com *.adsymptotic.com *.paymetric.com *.worldpay.com *.mktoresp.com *.wardsci.com *.sargentwelch.com *.boreal.com *.sargentwelch.ca *.twimg.com *.vwr-cmd.com *.mt.com *.moji-moji.com *.youtube.com youtube.com *.gotowebinar.com *.vwr-cmd2.com *.surveymonkey.com *.instantservice.com *.zencdn.net *.cdntwrk.com www.google.co.in *.hotjar.com *.hotjar.io ahpp.adflex.co.uk ahpp2.adflex.co.uk authentication.cardinalcommerce.com *.kickfire.com *.rumiview.com *.vimeo.com *.chatlayer.ai *.sinch.com *.ably-realtime.com *.ably.io *.salesforce.com *.prnewswire.com nebnextvwr.neb.com projects.spielcreative.com projects.ivorystudio.net *.marketo.com *.zoovu.com *.azureedge.net *.amazonaws.com *.smartassistant.com serviceapi.nmv.naver.com *.uberflip.com *.zscalerthree.net *.cdntwrk.com *.brightcove.net *.oribi.io *.ariba.com *.clarity.ms *.adobedtm.com *.demdex.net *.tt.omtrdc.net edge.adobedc.net *.cookielaw.org *.onetrust.com *.googlesyndication.com *.pantheonsite.io; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.facebook.com *.facebook.net *.everesttech.net *.cloudflare.com *.bing.com *.avantorsciences.com *.avantorsciences.cn *.arcot.com *.pinimg.com *.pinterest.com *.auth0.com *.ondemand.com *.fontawesome.com *.creditmutuel.fr *.bioz.com *.vwr.com *.lfeeder.com *.leadfeeder.com *.googleapis.com *.mktoresp.com *.twitter.com *.twimg.com *.zencdn.net *.marketo.com *.zoovu.com *.azureedge.net *.amazonaws.com *.smartassistant.com serviceapi.nmv.naver.com *.uberflip.com *.zscalerthree.net *.cdntwrk.com *.brightcove.net *.oribi.io *.ariba.com *.clarity.ms *.adobedtm.com *.demdex.net *.tt.omtrdc.net edge.adobedc.net *.cookielaw.org *.onetrust.com *.googlesyndication.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.auth0.com *.google-analytics.com *.facebook.com *.facebook.net *.everesttech.net *.cloudflare.com *.bing.com *.arcot.com *.pinimg.com *.pinterest.com *.auth0.com *.ondemand.com *.fontawesome.com *.creditmutuel.fr *.bioz.com *.sinch.com *.ably-realtime.com *.ably.io *.chatlayer.ai *.sentry.io *.salesforceliveagent.com *.googletagmanager.com *.newrelic.com *.nr-data.net *.vwr.com *.lfeeder.com *.leadfeeder.com *.licdn.com *.cloudflareinsights.com *.vwrsurveys.com *.marinsm.com *.paymetric.com *.worldpay.com *.google.com *.cloudflare.com *.pardot.com *.doubleclick.net *.googleadservices.com *.facebook.net *.everesttech.net *.wardsci.com *.verisign.com *.linkedin.com *.twitter.com *.googleapis.com *.sargentwelch.com *.sargentwelch.ca *.marketo.net *.twimg.com *.vwr-cmd.com *.mt.com *.moji-moji.com *.youtube.com youtube.com *.gotowebinar.com *.vwr-cmd2.com *.surveymonkey.com *.instantservice.com *.zencdn.net *.cdntwrk.com www.google.co.in *.hotjar.com *.hotjar.io *.avantorsciences.com *.avantorsciences.cn *.kickfire.com *.rumiview.com *.jquery.com *.prnewswire.com *.marketo.com *.zoovu.com *.azureedge.net *.amazonaws.com *.smartassistant.com serviceapi.nmv.naver.com *.uberflip.com *.zscalerthree.net *.cdntwrk.com *.brightcove.net *.oribi.io *.ariba.com *.clarity.ms *.adobedtm.com *.demdex.net *.tt.omtrdc.net edge.adobedc.net *.cookielaw.org *.onetrust.com *.googlesyndication.com; 3 default-src https: http: 'unsafe-inline' 'unsafe-eval' 'self' data: wss: blob: 3 default-src 'none'; connect-src *; font-src * data: about:; frame-src *; img-src * data: about:; media-src 'self' www.l3harris.com; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com 'strict-dynamic' 'nonce-0CM_EXsCJWQIf-PdMyQP2w'; script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com 'strict-dynamic' 'nonce-0CM_EXsCJWQIf-PdMyQP2w'; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.wescam.info www.googletagmanager.com cdn.userway.org https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; base-uri 'self'; form-action 'self' www.facebook.com; frame-ancestors 'self'; report-uri https://www.l3harris.com/system/reporting/csp; report-to csp; trusted-types * 'allow-duplicates'; require-trusted-types-for 'script' 3 <<<<<<< HEAD default-src 'self' tags.creativecdn.com *.bing.net *.clarity.ms *.frizbit.com *.googleadservices.com *.securitytrfx.com *.sojern.com *.smartvel.com *.firebaseapp.com *.amazoncognito.com *.adobeaemcloud.com *.airtrfx.com *.everymundo.net; connect-src 'self' tags.creativecdn.com *.bing.net *.clarity.ms *.frizbit.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.securitytrfx.com *.sojern.com *.visualwebsiteoptimizer.com *.everymundo.net *.smartvel.com *.bing.com *.facebook.com *.facebook.net *.adobelogin.com booking.flytap.com *.experience.adobe.net *.doubleclick.net *.inside-graph.com *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.onetrust.com *.cloudflare.com *.google-analytics.com *.adobeaemcloud.com *.adobe.com cdn.cookielaw.org *.experiencecloud.live *.googleapis.com *.google.com *.coremedia.cloud *.byside.com wss://wsa1.byside.com wss://eu-live.inside-graph.com *.firebaseapp.com *.airtrfx.com *.amazonaws.com *.adobedtm.com *.demdex.net *.omtrdc.net tags.creativecdn.com *.bing.net *.clarity.ms *.adobedc.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' tags.creativecdn.com *.bing.net *.clarity.ms *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.everymundo.net *.smartvel.com *.bing.com *.youtube.com *.visualwebsiteoptimizer.com *.facebook.net *.adobe.io *.experience.adobe.net *.doubleclick.net *.inside-graph.com *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.cloudflare.com booking.flytap.com *.onetrust.com cdn.cookielaw.org universal-editor-service.experiencecloud.live *.googleapis.com *.google.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.cloudflareinsights.com *.googletagmanager.com *.airtrfx.com *.amazonaws.com *.adobedtm.com *.demdex.net *.omtrdc.net tags.creativecdn.com *.bing.net *.clarity.m; style-src 'self' 'unsafe-inline' tags.creativecdn.com *.bing.net *.clarity.ms *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.affilitizer.com *.everymundo.net *.smartvel.com universal-editor-service.adobe.io *.visualwebsiteoptimizer.com *.facebook.com *.facebook.net fonts.googleapis.com *.experience.adobe.net *.inside-graph.com *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.cloudflare.com *.googleapis.com *.google.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.airtrfx.com; img-src 'self' blob: data: tags.creativecdn.com *.bing.net *.clarity.ms *.flytap.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.affilitizer.com *.everymundo.net *.smartvel.com *.bing.com *.doubleclick.net *.ytimg.com *.visualwebsiteoptimizer.com *.facebook.com *.facebook.net *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.experience.adobe.net *.inside-graph.com *.onetrust.com cdn.cookielaw.org *.cloudflare.com *.googletagmanager.com *.adobeaemcloud.com *.adobe.com *.experiencecloud.live *.googleapis.com *.google.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.airtrfx.com; font-src 'self' *.clarity.ms *.bing.net tags.creativecdn.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.affilitizer.com fonts.gstatic.com *.sojern.com *.smartvel.com *.everymundo.net *.experience.adobe.net *.inside-graph.com *.cloudflare.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.airtrfx.com data:; frame-src 'self' *.clarity.ms *.bing.net tags.creativecdn.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.doubleclick.net *.everymundo.net *.experience.adobe.net *.inside-graph.com *.firebaseapp.com *.cloudflare.com *.youtube.com *.adobeaemcloud.com *.adobe.com *.experiencecloud.live;======= default-src 'self' tags.creativecdn.com *.bing.net *.clarity.ms *.frizbit.com *.googleadservices.com *.securitytrfx.com *.sojern.com *.smartvel.com *.firebaseapp.com *.amazoncognito.com *.adobeaemcloud.com *.airtrfx.com *.everymundo.net *.wingify.net *.wingify.io *.wingify.ai *.wingify.com *.vwo.com *.vwo.io *.useruploads.vwo.io *.player.wingify.io ; connect-src 'self' tags.creativecdn.com *.bing.net *.clarity.ms *.frizbit.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.securitytrfx.com *.sojern.com *.visualwebsiteoptimizer.com *.everymundo.net *.wingify.net *.wingify.io *.wingify.ai *.wingify.com *.vwo.com *.vwo.io *.useruploads.vwo.io *.player.wingify.io *.smartvel.com *.bing.com *.facebook.com *.facebook.net *.adobelogin.com booking.flytap.com *.experience.adobe.net *.doubleclick.net *.inside-graph.com *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.onetrust.com *.cloudflare.com *.google-analytics.com *.adobeaemcloud.com *.adobe.com cdn.cookielaw.org *.experiencecloud.live *.googleapis.com *.google.com *.coremedia.cloud *.byside.com wss://wsa1.byside.com wss://eu-live.inside-graph.com *.firebaseapp.com *.airtrfx.com *.amazonaws.com *.adobedtm.com *.demdex.net *.omtrdc.net tags.creativecdn.com *.bing.net *.clarity.ms *.adobedc.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' tags.creativecdn.com *.bing.net *.clarity.ms *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.everymundo.net *.wingify.net *.wingify.io *.wingify.ai *.wingify.com *.vwo.com *.vwo.io *.useruploads.vwo.io *.player.wingify.io *.smartvel.com *.bing.com *.youtube.com *.visualwebsiteoptimizer.com *.facebook.net *.adobe.io *.experience.adobe.net *.doubleclick.net *.inside-graph.com *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.cloudflare.com booking.flytap.com *.onetrust.com cdn.cookielaw.org universal-editor-service.experiencecloud.live *.googleapis.com *.google.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.cloudflareinsights.com *.googletagmanager.com *.airtrfx.com *.amazonaws.com *.adobedtm.com *.demdex.net *.omtrdc.net tags.creativecdn.com *.bing.net *.clarity.m; style-src 'self' 'unsafe-inline' tags.creativecdn.com *.bing.net *.clarity.ms *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.affilitizer.com *.everymundo.net *.wingify.net *.wingify.io *.wingify.ai *.wingify.com *.vwo.com *.vwo.io *.useruploads.vwo.io *.player.wingify.io *.smartvel.com universal-editor-service.adobe.io *.visualwebsiteoptimizer.com *.facebook.com *.facebook.net fonts.googleapis.com *.experience.adobe.net *.inside-graph.com *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.cloudflare.com *.googleapis.com *.google.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.airtrfx.com; img-src 'self' blob: data: tags.creativecdn.com *.bing.net *.clarity.ms *.flytap.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.affilitizer.com *.everymundo.net *.wingify.net *.wingify.io *.wingify.ai *.wingify.com *.vwo.com *.vwo.io *.useruploads.vwo.io *.player.wingify.io *.smartvel.com *.bing.com *.doubleclick.net *.ytimg.com *.visualwebsiteoptimizer.com *.facebook.com *.facebook.net *.google.com.br *.google.it *.google.pl *.google.fr *.google.de *.google.pt *.google.es *.experience.adobe.net *.inside-graph.com *.onetrust.com cdn.cookielaw.org *.cloudflare.com *.googletagmanager.com *.adobeaemcloud.com *.adobe.com *.experiencecloud.live *.googleapis.com *.google.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.airtrfx.com; font-src 'self' *.clarity.ms *.bing.net tags.creativecdn.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.affilitizer.com fonts.gstatic.com *.sojern.com *.smartvel.com *.everymundo.net *.wingify.net *.wingify.io *.wingify.ai *.wingify.com *.vwo.com *.vwo.io *.useruploads.vwo.io *.player.wingify.io *.experience.adobe.net *.inside-graph.com *.cloudflare.com *.coremedia.cloud *.byside.com *.firebaseapp.com *.airtrfx.com data:; frame-src 'self' *.clarity.ms *.bing.net tags.creativecdn.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com *.frizbit.com *.securitytrfx.com *.sojern.com *.doubleclick.net *.everymundo.net *.wingify.net *.wingify.io *.wingify.ai *.wingify.com *.vwo.com *.vwo.io *.useruploads.vwo.io *.player.wingify.io *.experience.adobe.net *.inside-graph.com *.firebaseapp.com *.cloudflare.com *.youtube.com *.adobeaemcloud.com *.adobe.com *.experiencecloud.live;>>>>>>> qa object-src 'none'; worker-src * data: 'unsafe-eval' 'unsafe-inline' blob:; base-uri 'self' tags.creativecdn.com *.bing.net *.clarity.ms *.googleadservices.com *.frizbit.com *.securitytrfx.com *.sojern.com *.smartvel.com *.airtrfx.com; form-action 'self'; frame-ancestors 'self' tags.creativecdn.com *.bing.net *.clarity.ms *.adobeaemcloud.com *.adobe.com *.adobe.net *.experiencecloud.live *.amazoncognito.com; upgrade-insecure-requests; 3 default-src 'self' https://delfosn8n-datalab.nequi.io/ https://captcha-pdn.bancadigital.com.co/ https://b2b-experiences.nequi.com.co/ https://cdnjs.cloudflare.com/ https://b2b-experiences-dev.bancadigital.com.co/ https://b2b-experiences-qa.bancadigital.com.co/ https://captcha-qa.bancadigital.com.co/ https://www.googletagmanager.com/ https://*.dy-api.com https://cdnjs.cloudflare.com/ajax/libs/Swiper/4.4.6/* https://fonts.googleapis.com https://fonts.gstatic.com https://zendesk-eu.my.sentry.io https://web-components-dev.bancadigital.com.co/ https://sdk.twilio.com https://eventgw.twilio.com wss://nequi.zendesk.com wss://voice-js.roaming.twilio.com https://ajax.googleapis.com wss://api.smooch.io https://sdk.twilio.com https://zendesk-eu.my.sentry.io https://media.smooch.io https://api.smooch.io https://nequi.zendesk.com/ https://ekr.zendesk.com https://ekr.zdassets.com https://static.zdassets.com 'unsafe-inline' *.website-files.com cdn.jsdelivr.net https://ajax.googleapis.com fonts.googleapis.com 'unsafe-eval' blob:; script-src-elem 'self' https://captcha-pdn.bancadigital.com.co/ https://challenges.cloudflare.com https://b2b-experiences.nequi.com.co/ https://cdnjs.cloudflare.com/ https://b2b-experiences-dev.bancadigital.com.co/ https://captcha-qa.bancadigital.com.co/ https://b2b-experiences-qa.bancadigital.com.co/ https://tracker.metricool.com/ wss://nequibotwebsocket.bancadigital.com.co/ https://cdn.prod.website-files.com cdn.prod.website-files.com https://d3e54v103j8qbb.cloudfront.net https://ekr.zdassets.com https://nequi.zendesk.com https://static.zdassets.com https://web-components-qa.bancadigital.com.co/ https://js-cdn.dynatrace.com/ https://apps.usw2.pure.cloud/ https://web-components.nequi.com.co/ 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/Swiper/4.4.6/* https://cdnjs.cloudflare.com/ajax/libs/clipboard.js/* https://web-components-dev.bancadigital.com.co/ https://analytics.tiktok.com/ https://ajax.googleapis.com https://www.googletagservices.com/ https://securepubads.g.doubleclick.net/ https://us1.clevertap-prod.com/ https://static.elfsight.com/platform/platform.js https://cdn.jsdelivr.net/ https://static.ads-twitter.com https://tpc.googlesyndication.com https://www.google-analytics.com/ https://googleads.g.doubleclick.net https://www.googleadservices.com https://snap.licdn.com https://connect.facebook.net https://s.yimg.com https://www.google.com https://www.gstatic.com/ https://*.cloudfront.net/ https://*.website-files.com/ https://*.zdassets.com/ https://www.googletagmanager.com/; connect-src https://delfosn8n-webhook.nequi.io/ https://delfosn8n-webhook-datalab.nequi.io/ https://delfosn8n-datalab.nequi.io/ https://t.co/ https://analytics.twitter.com/ https://captcha-pdn.bancadigital.com.co/ https://pagead2.googlesyndication.com/ https://www.facebook.com/ https://*.doubleclick.net https://*.google-analytics.com https://googleads.g.doubleclick.net/ https://www.google.com.co/ https://challenges.cloudflare.com https://z.clarity.ms/ https://captcha-qa.bancadigital.com.co/ https://b2b-experiences-qa.bancadigital.com.co/ https://mobile-app-assets.nequi.com/ https://static.zdassets.com/ https://o.clarity.ms/collect https://www.googleadservices.com/ https://www.googletagmanager.com/ https://l.clarity.ms/ https://n.clarity.ms/ https://rhaoyl43mj.execute-api.us-east-1.amazonaws.com/ https://rhaoyl43mj.execute-api.us-east-1.amazonaws.com/ https://analytics-ipv6.tiktokw.us/ https://tracker.metricool.com/ wss://nequibotwebsocket.bancadigital.com.co/ https://adservice.google.com/ https://us1.api.clevertap.com/1/counts/profiles.json https://iyl01250.live.dynatrace.com/ wss://websocketchatbot.bancadigital.com.co/ https://bf48591pze.bf.dynatrace.com/ wss://websocketchatbot-qa.bancadigital.com.co/ https://customer-engagement-chatbot-qa.bancadigital.com.co/ https://fonts.googleapis.com/ https://cdn.jsdelivr.net/ https://bf64848bdm.bf.dynatrace.com/ https://fileupload.usw2.pure.cloud/ wss://webmessaging.usw2.pure.cloud/ https://api.usw2.pure.cloud/ https://www.google.com/ https://api-cdn.usw2.pure.cloud/ https://customer-engagement-chatbot.bancadigital.com.co https://*.dynamicyield.com https://*.dy-api.com https://analytics.tiktok.com/ https://web-components-dev.bancadigital.com.co/ https://cdn.prod.website-files.com cdn.prod.website-files.com/ https://px.ads.linkedin.com 'self' https://widget-mediator.zopim.com https://zendesk-eu.my.sentry.io wss://voice-js.roaming.twilio.com wss://api.smooch.io https://sdk.twilio.com https://media.smooch.io https://api.smooch.io https://ekr.zendesk.com https://securepubads.g.doubleclick.net/ https://nequi-colombia.webflow.io/ https://raw.githubusercontent.com https://ad.doubleclick.net/ https://cdn.linkedin.oribi.io/ https://analytics.google.com https://*.nequi.com.co https://webflow-user-file-uploads-tmp-production.s3.amazonaws.com/ https://webflow.com/ https://s.yimg.com https://stats.g.doubleclick.net https://ekr.zdassets.com/ https://www.google-analytics.com https://nequi.zendesk.com/ wss://widget-mediator.zopim.com; media-src https://mobile-app-assets.nequi.com/ https://cdnjs.cloudflare.com/ https://b2b-experiences-qa.bancadigital.com.co/ https://cdn.jsdelivr.net/ https://static.zdassets.com https://cdn.prod.website-files.com cdn.prod.website-files.com/ https://cdn.prod.website-files.com cdn.prod.website-files.com assets-global.website-files.com/ https://static.zdassets.com; font-src https://cdn.prod.website-files.com cdn.prod.website-files.com https://assets.website-files.com https://fonts.gstatic.com data:; frame-src https://nequiprod.nequi.trustx.com/ https://challenges.cloudflare.com https://cdnjs.cloudflare.com/ https://v2assets.zopim.io https://nequitest.nequi.trustx.com https://apps.usw2.pure.cloud/ https://www.facebook.com/ https://www.googletagmanager.com https://heyzine.com/ https://geo-nequi.puntored.co/ https://public.transacciones.com.co/ https://cdn.embedly.com/ https://w.soundcloud.com/ https://accounts.google.com/ https://drive.google.com/ https://www.youtube.com/ https://www.instagram.com/ https://status.nequi.com.co/ https://www.google.com/ https://tpc.googlesyndication.com/ https://*.doubleclick.net/; img-src https://flagcdn.com/ https://analytics-ipv6.tiktokw.us/ https://analytics.tiktok.com/ https://cdnjs.cloudflare.com/ https://b2b-experiences-qa.bancadigital.com.co/ https://cdn.jsdelivr.net/ https://fonts.gstatic.com/ https://tracker.metricool.com/ https://cdn.prod.website-files.com cdn.prod.website-files.com https://v2assets.zopim.io https://nequi.zendesk.com https://static.zdassets.com https://adservice.google.com/ https://d3e54v103j8qbb.cloudfront.net/ https://cdn.prod.website-files.com cdn.prod.website-files.com/ https://ad.doubleclick.net 'self' https://www.nequi.com.co https://widget-mediator.zopim.com https://v2assets.zopim.io https://nequi.zendesk.com https://static.zdassets.com https://*.zdusercontent.com https://media.smooch.io https://accounts.zendesk.com chart.googleapis.com wingify-assets.s3.amazonaws.com https://pagead2.googlesyndication.com/ https://tpc.googlesyndication.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://www.facebook.com https://sp.analytics.yahoo.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://www.google-analytics.com https://cdn.prod.website-files.com cdn.prod.website-files.com assets-global.website-files.com https://www.google.com https://analytics.twitter.com https://t.co https://www.google.com.co data:; frame-ancestors 'self'; 3 default-src 'self' style-src 'unsafe-inline' 3 default-src 'none'; connect-src 'self' 'unsafe-inline' https://cdn.cookielaw.org/ https://cdn-cookieyes.com/ https://directory.cookieyes.com/ https://www.google-analytics.com/ https://*.facebook.com/ https://geolocation.onetrust.com/ https://fpf.org/ https://www.cloudflare.com/ https://vimeo.com/ https://log.cookieyes.com/ https://live-future-of-privacy-forum.pantheonsite.io/wp-json/matomo/v1/hit/*; font-src 'self' data: https://cdnjs.cloudflare.com/ https://*.google.com/ https://*.typekit.net/ https://fonts.gstatic.com/; img-src 'self' data: https://*.gravatar.com/ https://*.ytimg.com/ https://*.gstatic.com/ https://*.google.com/ https://www.google-analytics.com/ https://fpf.org/ https://img.youtube.com/ https://i.vimeocdn.com/ https://cdn-cookieyes.com/; frame-src 'self' https://www.youtube-nocookie.com/ https://*.twitter.com/ https://*.google.com/ https://*.facebook.com https://*.youtube.com https://*.eventbrite.com/ https://player.vimeo.com/ https://challenges.cloudflare.com/; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/ https://cdnjs.cloudflare.com/ https://*.gstatic.com/ https://*.google.com/ https://*.typekit.net/ https://fonts.googleapis.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/ https://ajax.googleapis.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://*.twitter.com/ https://*.gstatic.com/ https://*.google.com/ https://*.eventbrite.com/ https://*.youtube.com/ https://fpf.org/ https://player.vimeo.com/ https://*.vimeocdn.com/ https://cdn-cookieyes.com/ https://*.cookieyes.com/ https://challenges.cloudflare.com/turnstile/v0/api.js https://live-future-of-privacy-forum.pantheonsite.io/wp-content/uploads/matomo/matomo.js; worker-src 'self' https://*.youtube.com/ https://*.vimeo.com/ blob:; block-all-mixed-content; 3 frame-ancestors https://*.phoenixcontact.com http://*.phoenixcontact.com https://*.phoenixcontact.com.cn http://*.phoenixcontact.com.cn https://phoenixcontact.custhelp.com https://*.jobcloud.ch https://*.jobs.ch https://*.jobup.ch https://ictcareer.ch https://jobs4sales.ch https://financejobs.ch https://medtalents.ch https://jobwinner.ch https://alpha.ch/de https://topjobs.ch https://phoenix.enterprise.punchcommerce.de https://dev-phoenixcontact.one.punchcommerce.de https://*.phoenixcontact.coremedia.cloud https://*.wiredminds.de https://tongji.baidu.com 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.inspectlet.com cdn.vercel-insights.com va.vercel-scripts.com aditude.io static.cloudflareinsights.com cmp.inmobi.com cdn.jsdelivr.net imasdk.googleapis.com dn0qt3r0xannq.cloudfront.net www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: fonts.gstatic.com; frame-src https://login.microsoftonline.com https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://cmp.inmobi.com; worker-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 3 default-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://csp.d47wgg8.com 3 frame-ancestors 'self' https://strapi-cms.vgl.services https://cms.vgl.org https://staging-cms.vgl.org https://*.cms.vgl.org http://localhost:* 3 frame-ancestors 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: 3 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 3 frame-ancestors 'self' https://www.care2.com https://www.thepetitionsite.com https://earthworm.care2.com/ 3 default-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.nexaexperience.com https://*.marutisuzuki.com https://*.marutisuzukitruevalue.com https://*.marutisuzukidrivingschool.com https://*.onlineautoauctionplatform.com https://edge.adobedc.net https://8779094.fls.doubleclick.net https://centralindia.api.cognitive.microsoft.com https://centralindia.tts.speech.microsoft.com https://directline.botframework.com wss://directline.botframework.com https://*.mappls.com https://*.mapmyindia.com https://az-si-cdn-carconfig-prd-01.azureedge.net https://7460ad82845941c68bf6544a02108890.centralindia.azure.elastic-cloud.com:9243/prod-nexa-main-index/_search https://*.marutisuzukisubscribe.com https://cognito-idp.ap-south-1.amazonaws.com https://www.cf.msilcrm.co.in https://jn0nyy4gc1.execute-api.ap-south-1.amazonaws.com https://*.scene7.com https://rum.hlx.page https://documentcloud.adobe.com https://viewlicense.adobe.io https://unpkg.com/detect-gpu@2.0.3/dist/benchmarks/d-intel.json https://*.everesttech.net https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://google.com https://fonts.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.gstatic.com https://zykrr.io https://survey.zykrr.com https://*.doubleclick.net https://*.adobedtm.com https://connect.facebook.net https://ajax.googleapis.com https://analytics.google.com https://www.facebook.com https://*.s3.ap-south-1.amazonaws.com https://d3hk6lmoy65u9q.cloudfront.net https://d2wd13clxgj2xi.cloudfront.net https://dpy2n2krbua8l.cloudfront.net https://d2axjpyjxgu5q2.cloudfront.net https://signals.comolho.com https://drlg09b7vz6be.cloudfront.net https://msil-finance.iamdave.ai https://consentium.s3.us-east-1.amazonaws.com https://*.youtube.com https://youtube.com https://*.contentsquare.net *.contentsquare.com wss://centralindia.stt.speech.microsoft.com https://az-ci-afdep-askai-01-fuhrd3h4a6dmbuep.a01.azurefd.net https://api.marutisuzukidataverse.com https://*.demdex.net https://experience.adobe.net https://d3mey6isb8np59.cloudfront.net https://www.nexadealershipapp.com https://ipapi.co data: blob: 3 connect-src 'self' *.zohopublic.eu *.googleadservices.com google.com *.google.com *.analytics.google.com *.google-analytics.com *.cookiebot.com *.doubleclick.net *.omappapi.com pagesense-collect.zoho.eu www.google-analytics.com fonts.googleapis.com https://*.googletagmanager.com *.limesurvey.org wss://vts.zohopublic.eu; default-src 'self' fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.limesurvey.org www.youtube.com frontend.pay1.de www.google.com kiwiirc.com limesurvey.org; font-src 'self' *.zohocdn.com *.typekit.net https://tagmanager.google.com data: fonts.gstatic.com maxcdn.bootstrapcdn.com projectfiles.limesurvey.org github.com; style-src 'unsafe-inline' *.zohocdn.com *.zohopublic.eu heapanalytics.com https://tagmanager.google.com fonts.googleapis.com https://www.googletagmanager.com 'self' maxcdn.bootstrapcdn.com projectfiles.limesurvey.org ajax.googleapis.com www.google.com; form-action 'self' https://authentication.cardinalcommerce.com https://*.six-payment-services.com https://*.securesuite.co.uk https://*.cic.fr https://*.arcot.com www.paypal.com survey.limesurvey.org account.limesurvey.org; frame-ancestors 'self' *.limesurvey.org; img-src 'self' https://*.google-analytics.com www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com data: *; manifest-src 'self'; media-src 'self' *.zohocdn.com; script-src 'self' *.zohopublic.eu https://privacy.cortina-consult.com https://maillist-manage.eu https://*.zoho.eu https://*.zohocdn.com https://*.limesurvey.org googleads.g.doubleclick.net https://googleads.g.doubleclick.net data: https://tagmanager.google.com https://heapanalytics.com https://*.pagesense.io https://*.omappapi.com https://*.hotjar.com https://*.heapanalytics.com https://*.cookiebot.com 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com secure.pay1.de projectfiles.limesurvey.org www.google.com www.google-analytics.com appscdn.joomla.org; frame-src www.googletagmanager.com *.zohopublic.eu https://*.hotjar.com https://*.cookiebot.com https://*.visa.com https://authentication.cardinalcommerce.com 3dsecure.icscards.nl https://*.pay1.de docs.google.com https://td.doubleclick.net 'self' *.limesurvey.org kiwiirc.com www.youtube.com limesurvey.org secure.pay1.de; object-src 'self'; report-uri https://www.limesurvey.org/violation.php; 3 default-src 'self' https://code.highcharts.com/highcharts.js https://serviceonline.gov.in/digitalsig/certificate https://serviceonline.gov.in/digitalsig/* *.googleapis.com *.google.com http://localhost:* https://localhost:* https://dhruva-api.bhashini.gov.in/services/inference/pipeline;style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com; img-src data: 'self' *.google.com *.googleapis.com; script-src https://code.highcharts.com/highcharts.js 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com; object-src 'self'; font-src 'self' *.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com; 3 frame-ancestors 'self' https://flock.com/; upgrade-insecure-requests 3 frame-ancestors 'self' https://dealerexperience.cadillac.com 3 default-src * data: 'unsafe-eval' 'unsafe-inline';frame-ancestors 'self'; 3 default-src 'self' https://horizon-api.www.myprotein.com https://*.rlcdn.com/; child-src 'self' https://pagead2.googlesyndication.com/* https://g.ezoic.net/ https://sgtm.myprotein.com/ https://ams.creativecdn.com https://*.ringcentral.com https://*.cloudfront.net https://*.smct.io/ https://*.rlcdn.com/ https://ct.pinterest.com/ https://*.listrakbi.com/ https://www.googletagmanager.com https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://*.criteo.com https://static.criteo.net https://www.youtube.com https://youtu.be/ https://www.zenaps.com https://www.instagram.com https://ln-rules.rewardstyle.com https://www.shoplooks.com https://vars.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://player.vimeo.com https://*.recaptcha.net https://tr.snapchat.com blob: https://*.awin1.com https://*.zenaps.com https://lantern.roeye.com; connect-src 'self' https://insights.thgaltitude.com https://assets.thg.dev data: https://api-nonprod.thg.dev/ https://api.thg.dev https://t.lt02.net https://*.dynamicyield.eu/ https://www.googleadservices.com https://*.dynamicyield.com/ *.ezodn.com *.id-mx.com *.yahoo.com *.ad.gt id-sync.com *.crwdcntrl.net *.adsrvr.org *.rubiconproject.org *.adnxs.com onetag-sys.com *.googlesyndication.com *.adtrafficquality.google https://g.ezoic.net/ https://*.seroundprince.com/ https://ams.creativecdn.com wss://*.ringcentral.com https://*.ringcentral.com https://*.amazonaws.com/ https://*.smct.io https://*.snapchat.com/ https://*.rlcdn.com/ https://*.contentsquare.net https://click.prod.mplat-ppcprotect.com https://*.listrakbi.com/ https://*.listrak.com https://www.wepowerconnections.com/ https://analytics.tiktok.com/ https://s.pinimg.com/ https://horizon-api.www.myprotein.com https://*.clarity.ms/ https://static.criteo.net/ https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://privacyportal-eu.onetrust.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://vc.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://*.baidu.com https://connect.facebook.net https://*.parcellab.com https://www.shoplooks.com https://www.google.co.uk https://tr.snapchat.com https://*.contentsquare.net https://*.criteo.com https://sgtm.myprotein.com https://the.sciencebehindecommerce.com https://*.wepowerconnections.com; font-src 'self' data: font-src https://cdn.listrakbi.com https://*.dynamicyield.com/ https://*.smct.io/ https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.myprotein.com https://m.myprotein.com https://checkout.myprotein.com https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: blob: https://*.thgaltitude.com https://*.thgingenuity.com https://*.dynamicyield.com/ https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https: https://*.awin1.com https://*.zenaps.com; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com https://youtu.be/; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' https://insights.thgaltitude.com https://assets.thg.dev 'unsafe-eval' 'unsafe-inline' data: https://*.dynamicyield.com/ *.id5-sync.com id-sync.com https://www.ezojs.com/ https://go.ezodn.com/ https://g.ezoic.net/ https://*.seroundprince.com/ https://tags.creativecdn.com/ https://*.ringcentral.com/ https://*.smct.io https://smct.co/ https://*.smct.co/ https://ct.pinterest.com/ https://static.ads-twitter.com/ https://analytics.tiktok.com/ https://*.contentsquare.net https://app.contentsquare.com https://*.listrak.com https://*.listrakbi.com/ https://s.pinimg.com/ https://*.thcdn.com https://lantern.roeyecdn.com/ https://www.hlserve.com/ https://static.criteo.net/ https://www.clarity.ms/ https://*.parcellab.com https://*.thehut.net https://rum-static.pingdom.net https://*.lpsnmedia.net https://*.doubleclick.net https://static.cdn-apple.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://youtu.be/ https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://remote.captcha.com https://ssl.bing.com https://script.hotjar.com https://ssl.google-analytics.com https://ln-rules.rewardstyle.com https://*.recaptcha.net https://tr.snapchat.com https://*.sciencebehindecommerce.com https://static.shoplooks.com https://static.hotjar.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.contentsquare.net https://app.contentsquare.com https://sgtm.myprotein.com https://*.awin1.com https://*.zenaps.com https://the.sciencebehindecommerce.com; frame-ancestors 'self' https://www.instagram.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.smct.io/ https://cdn.listrakbi.com/ https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.shoplooks.com https://static.shoplooks.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint; 3 default-src 'self' easy.gr *.easy.gr *.cookiebot.com *.tawk.to *.paypal.com googleads.g.doubleclick.net stats.g.doubleclick.net *.google.com *.youtube.com;script-src 'self' *.paypal.com *.paypalobjects.com *.braintreegateway.com easy.gr *.easy.gr *.youtube.com 'unsafe-inline' https://pagead2.googlesyndication.com 'unsafe-eval' *.googleusercontent.com *.gstatic.com tippedjs.com fancyapps.com ajax.googleapis.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com googleadservices.com *.tawk.to cdn.jsdelivr.net *.facebook.com *.facebook.net *.cookiebot.com *.doubleclick.net *.google.com googleads.g.doubleclick.net stats.g.doubleclick.net *.googlesyndication.com *.google.com *.google.gr *.youtube.com *.unpkg.com ;style-src 'self' easy.gr *.easy.gr 'unsafe-inline' ajax.googleapis.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com googleadservices.com *.tawk.to fonts.googleapis.com cdn.jsdelivr.net *.facebook.com *.facebook.net *.cookiebot.com *.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net;img-src 'self' blob: data: easy.gr *.easy.gr 'unsafe-inline' https://quickchart.io ajax.googleapis.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com googleadservices.com *.tawk.to cdn.jsdelivr.net tawk.link s3.amazonaws.com *.facebook.com *.facebook.net *.cookiebot.com *.doubleclick.net *.google.com cdn.jsdelivr.net *.google.gr *.google.nl *.paypalobjects.com *.paypal.com googleads.g.doubleclick.net stats.g.doubleclick.net *.googlesyndication.com ;font-src 'self' easy.gr *.easy.gr 'unsafe-inline' ajax.googleapis.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com googleadservices.com *.tawk.to fonts.gstatic.com *.facebook.com *.facebook.net *.cookiebot.com *.paypalobjects.com stats.g.doubleclick.net ;connect-src 'self' easy.gr *.easy.gr 'unsafe-inline' *.tawk.to wss://*.tawk.to *.lottiefiles.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com googleadservices.com *.tawk.to *.facebook.com *.facebook.net *.cookiebot.com *.doubleclick.net *.google.com *.paypal.com googleads.g.doubleclick.net stats.g.doubleclick.net google.com *.youtube.com *.googlesyndication.com ; frame-src 'self' easy.gr *.easy.gr 'unsafe-inline' *.paypal.com *.paypalobjects.com *.googletagmanager.com *.doubleclick.net *.cookiebot.com *.tawk.to ; 3 frame-ancestors https://www.cedars-sinai.org/ https://www-dev.cedars-sinai.org/ https://www-stage.cedars-sinai.org/ https://aodlipsx002188.aws.csmc.edu/ https://mycslink.cedars-sinai.org/ https://mycslink-test.cedars-sinai.org/ https://mycslink-stage.cedars-sinai.org/ https://mycslink-dev.cedars-sinai.org/ https://webflow-staging.cedars-sinai.org/ https://telehealth.epic.com/ https://webflow-prod.cedars-sinai.org/ https://cedars-sinai.webflow.io/ 3 default-src 'self' https://geolocation.onetrust.com/ https://8347051.fls.doubleclick.net/ https://www.media.barclays.co.uk/ https://fonts.googleapis.com/css https://fonts.gstatic.com; connect-src 'self' data: https://zn8nxycoiqhzqpd3p-barclaysibcx.siteintercept.qualtrics.com/ https://zn24nkllbilbx5g4i-barclaysib.siteintercept.qualtrics.com/ https://mapsresources-pa.googleapis.com/ https://cdn-ukwest.onetrust.com https://tag-logger.demandbase.com/ https://pagead2.googlesyndication.com/pagead/ https://www.gstatic.com/maps/ https://siteintercept.qualtrics.com/ https://privacyportal-uk.onetrust.com/request/ https://privacyportaluatde.onetrust.com/request/ https://segments.company-target.com/ https://cdn.cookielaw.org/ https://geolocation.onetrust.com/ https://api.company-target.com/api/ https://maps.googleapis.com/ https://dpm.demdex.net/id https://barclaysinternational.sc.omtrdc.net/b/ss/ https://barclaysbankplc.tt.omtrdc.net/m2/barclaysbankplc/mbox/ https://cdn.linkedin.oribi.io/partner/ https://www.media.barclays.co.uk/ https://segments.company-target.com/ https://px.ads.linkedin.com/ https://uat-de.onetrust.com/api/ https://app-uk.onetrust.com/api/ https://flourish-api.com/ https://public.flourish.studio/ https://www.google.com/; img-src 'self' data: https://www.googletagmanager.com https://adservice.google.co.uk/ https://adservice.google.com/ https://adservice.google.co.in/ https://maps.googleapis.com/ https://adservice.google.com/ https://ad.doubleclick.net/ https://id.rlcdn.com/ https://cdn.cookielaw.org/ https://dev.day.com/ https://www.media.barclays.co.uk/assets/ https://px.ads.linkedin.com/ https://cm.everesttech.net/cm/ https://barclaysinternational.sc.omtrdc.net/b/ss/ https://maps.gstatic.com/ https://www.linkedin.com/ https://www.google.com.au https://www.google.co.bw https://www.google.com.br https://www.google.be https://www.google.ca https://www.google.cn https://www.google.com.cy https://www.google.dk https://www.google.com.eg https://www.google.fr https://www.google.de https://www.google.com.gh https://www.google.com.gi https://www.google.gr https://www.google.gg https://www.google.com.hk https://www.google.co.in https://www.google.co.id https://www.google.ie https://www.google.im https://www.google.co.il https://www.google.it https://www.google.co.jp https://www.google.je https://www.google.co.ke https://www.google.lt https://www.google.lu https://www.google.com.my https://www.google.mu https://www.google.com.mx https://www.google.co.mz https://www.google.nl https://www.google.com.ng https://www.google.no https://www.google.com.pk https://www.google.com.ph https://www.google.pt https://www.google.com.pr https://www.google.com.qa https://www.google.ru https://www.google.com.sa https://www.google.sc https://www.google.com.sg https://www.google.co.za https://www.google.co.kr https://www.google.es https://www.google.se https://www.google.ch https://www.google.com.tw https://www.google.co.tz https://www.google.com.tr https://www.google.co.th https://www.google.ae https://www.google.co.ug https://www.google.co.uk https://www.google.com https://www.google.co.zm https://www.google.co.zw https://t.co/ https://analytics.twitter.com/ https://cdn-ukwest.onetrust.com https://ad.doubleclick.net/ https://www.ib.barclays/ https://public.flourish.studio/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://siteintercept.qualtrics.com/ https://zn8nxycoiqhzqpd3p-barclaysibcx.siteintercept.qualtrics.com/ https://zn24nkllbilbx5g4i-barclaysib.siteintercept.qualtrics.com/ https://cdn-ukwest.onetrust.com https://snap.licdn.com/li.lms-analytics/ https://code.highcharts.com/ https://www.highcharts.com https://platform.twitter.com/widgets.js https://assets.adobedtm.com/ https://www.googletagmanager.com/gtag/ https://maps.googleapis.com/ https://cdn.cookielaw.org/ https://static.ads-twitter.com/ https://tag.demandbase.com/ https://www.media.barclays.co.uk/ https://googleads.g.doubleclick.net/ https://public.flourish.studio/ https://cdn.flourish.rocks/ https://d3js.org/ blob:; frame-src 'self' https://barclaysibcx.qualtrics.com/ https://barclaysib.qualtrics.com/ https://platform.twitter.com/ https://www.investmentbank.barclays.com https://8347051.fls.doubleclick.net/ https://www.media.barclays.co.uk/ https://s.company-target.com/ https://barclaysbankplc.demdex.net/ https://td.doubleclick.net/ https://flo.uri.sh/ https://flourish-api.com/ https://www.googletagmanager.com/; style-src 'self' https://geolocation.onetrust.com/ https://8347051.fls.doubleclick.net/ https://www.media.barclays.co.uk/ https://fonts.googleapis.com/css https://fonts.gstatic.com 'unsafe-inline' 3 frame-ancestors 'self' zesty.io *.zesty.io salvationarmy.mobile.zesty.io 3 frame-ancestors 'self' https://adventhealth.com https://*.adventhealth.com; object-src 'none'; base-uri 'none' 3 default-src 'self' atos.net www.googleadservices.com www.google.com *.atos.net *.googletagmanager.com *.doubleclick.net eviden.com *.atos-consulting.net cdn.jsdelivr.net *.cloudflare.com *.cloudfront.net *.vimeo.com *.vimeocdn.com *.akamaized.net *.tiny.cloud *.tinymce.com *.bootstrapcdn.com yoast.com *.yoast.com data: 'unsafe-inline' 'unsafe-eval' blob: code.jquery.com *.gravatar.com ps.w.org ams.wpml.org *.marketo.net *.mktoresp.com *.mktoweb.com tools.eurolandir.com *.youtube-nocookie.com *.youtube.com *.ytimg.com *.gstatic.com *.googleapis.com *.linkedin.com *.google.com *.accountinsight.cloud *.licdn.com w.soundcloud.com *.aio-events.com *.appspot.com *.microsoft.com *.azureedge.net *.botframework.com *.bizzabo.com updates.themepunch-ext-c.tools updates.themepunch-ext-b.tools updates.themepunch-ext-a.tools updates.themepunch.tools optanon.blob.core.windows.net *.glassdoor.com indd.adobe.com smartslider3.com *.googleusercontent.com yt3.ggpht.com *.cdninstagram.com *.matomo.cloud cdn.linkedin.oribi.io; frame-ancestors 'self' atos.net *.atos.net atos365.sharepoint.com; 3 block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.jp flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.cn flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.eu flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.kr flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw flightbookings.grabaseat.co.nz govtbookings.airnewzealand.co.nz txn.apac.paywithpoli.com online.asb.co.nz bank.westpac.co.nz checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com au-connect.authsignal.com auth.identity.airnewzealand.com auth.identity.qual.airnewzealand.com; script-src 'self' p-airnz.com 'unsafe-inline' 'unsafe-eval' *.airnewzealand.co.nz musculahq.appspot.com dnn506yrbagrg.cloudfront.net xsell.expedia.com ddc.optimahub.com www.newzealand.com *.demdex.net www.everestjs.net oc-cdn-public-oce.azureedge.net https://unpkg.com/acs_webchat-chat-adapter@0.0.35-beta.20/dist/chat-adapter.js www.googleadservices.com www.google.com www.googletagmanager.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com www.google-analytics.com analytics.google.com tagmanager.google.com *.doubleclick.net static.hotjar.com script.hotjar.com https://widget.timatic.iata.org/scripts/iata-timatic-widget-live.js md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au connect.facebook.net cdn-au.onetrust.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com upgrade.plusgrade.com s.swiftypecdn.com s.wayin.com eu-s.wayin.com xd.wayin.com x.wayin.com eu-x.wayin.com s.engagesciences.com display.engagesciences.com display.wayin.com yourir.info www.youtube.com s.ytimg.com; style-src 'unsafe-inline' p-airnz.com 'self' oc-cdn-public-oce.azureedge.net fonts.googleapis.com tagmanager.google.com static.hotjar.com script.hotjar.com upgrade-cdn-prd.plusgrade.com upgrade-prod-cdn.plusgrade.com s.swiftypecdn.com yourir.info; img-src https: data: blob: ad.doubleclick.net ade.googlesyndication.com adservice.google.com www.googletagmanager.com www.google.com static.hotjar.com script.hotjar.com *.kampyle.com i.ytimg.com; font-src p-airnz.com 'self' *.cdn.office.net fonts.googleapis.com fonts.gstatic.com script.hotjar.com data: dhm5hy2vn8l0l.cloudfront.net; media-src 'self' p-airnz.com data:; frame-src 'self' txn.apac.paywithpoli.com online.asb.co.nz bank.westpac.co.nz sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com airnz-cargo.chooose.today airnz-corporate.chooose.today emissions-platform.airnewzealand.co.nz airpointscalculator.co.nz *.airnewzealand.co.nz hotels.airnewzealand.co.nz *.demdex.net www.everestjs.net pixel.everesttech.net au-connect.authsignal.com auth.identity.airnewzealand.com identity.airnewzealand.com oc-cdn-public-oce.azureedge.net blob: comms.omnichannelengagementhub.com customervoice.microsoft.com www.googletagmanager.com td.doubleclick.net *.google.com *.doubleclick.net vars.hotjar.com nebula-cdn.kampyle.com *.cdn-pci.optimizely.com nz.fltmaps.com xd.wayin.com x.wayin.com eu-x.wayin.com display.engagesciences.com airnz.wufoo.com www.youtube.com; worker-src blob:; connect-src 'self' api.airnz.io api.airnz.ai p-airnz.com sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com muscula.herokuapp.com tourismnz.sc.omtrdc.net *.demdex.net *.tt.omtrdc.net identity.airnewzealand.com unq0355446423e84eb397bc71189d78d-crm6.omnichannelengagementhub.com browser.pipe.aria.microsoft.com *.omnichannelengagementhub.com *.au.omnichannelengagementhub.com https://*.trouter.skype.com wss://*.trouter.skype.com edge.skype.com *.communication.azure.com ocsdk-prod.azureedge.net blob: pagead2.googlesyndication.com www.googleadservices.com www.google.com google.com ad.doubleclick.net *.googleapis.com *.google.com *.gstatic.com www.google-analytics.com region1.google-analytics.com region1.analytics.google.com analytics.google.com stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://widget.timatic.iata.org/api/ md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au *.facebook.com connect.facebook.net cdn-au.onetrust.com geolocation.onetrust.com privacyportal-au.onetrust.com *.optimizely.com https://*.sentry.io s.swiftypecdn.com search-api.swiftype.com yourir.info; object-src 'none'; frame-ancestors 'self' www.airnewzealand.com.au www.airnewzealand.com www.airnewzealand.ca www.airnewzealand.co.uk www.airnewzealand.eu www.airnewzealand.co.jp www.airnewzealand.jp www.airnewzealand.com.sg www.airnewzealand.pf www.airnewzealand.cn www.airnewzealand.com.cn www.airnewzealand.hk www.airnewzealand.com.hk www.airnewzealand.tw www.airnewzealand.com.tw www.airnewzealand.co.kr www.airnewzealand.kr www.grabaseat.co.nz flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.jp flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.co.nz govtbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com flightbookings.airnewzealand.com.cn flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.eu flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.kr flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw flightbookings.grabaseat.co.nz; report-uri /csp-report 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://pub-storage.s3.us-east-1.amazonaws.com/ *.system1.com *.typekit.net *.formstack.com *.googletagmanager.com *.google.com *.gstatic.com *.google-analytics.com s.flocdn.com mapquest.com *.mapquest.ca *.youtube.com s3.amazonaws.com stats.g.doubleclick.net cdn.cookielaw.org *.onetrust.com jobs.lever.co *.soflopxl.com data:; img-src *; 3 img-src 'self' *.1rx.io *.360yield.com *.3lift.com *.adnxs.com *.adsafety.net *.adsystem.com *.adxcel-ec2.com *.adyen.com *.afterpay.com *.agkn.com *.alchemer.eu *.amazon-adsystem.com *.awin1.com *.awinblackfriday.com *.bazaarvoice.com *.bidswitch.net *.bing.com *.bing.net *.bounceexchange.com *.braunhousehold.com *.casalemedia.com *.cash.app *.cdnwidget.com *.clarity.ms *.collect.igodigital.com *.commercecloud.salesforce.com *.contentsquare.net *.criteo.com *.delonghi.com *.delonghigroup.com *.demdex.net *.dmxleo.com *.doubleclick.net *.evergage.com *.evgnet.com *.facebook.com *.facebook.net *.feefo.com *.gigya.com *.google-analytics.com *.google.ae *.google.at *.google.be *.google.bg *.google.ca *.google.ch *.google.cl *.google.cn *.google.co.id *.google.co.in *.google.co.jp *.google.co.kr *.google.co.nz *.google.co.th *.google.co.uk *.google.co.za *.google.com *.google.com.ar *.google.com.au *.google.com.br *.google.com.co *.google.com.hk *.google.com.mx *.google.com.sa *.google.com.sg *.google.com.tr *.google.com.tw *.google.cz *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.gr *.google.hr *.google.hu *.google.ie *.google.it *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.googleadservices.com *.googlesyndacation.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.gumgum.com *.heureka.cz *.hotjar.com *.imgstatic.eu *.jsdelivr.net *.kenwoodworld.com *.kform.it *.knowledgebase.co *.lightboxcdn.com *.line.me *.mavenoid.com *.mavenoidfiles.com *.media-amazon.com *.media.net *.mediavine.com *.metaffiliation.com *.mgln.ai *.nutribullet.com *.onlive.site *.outbrain.com *.payments-amazon.com *.paypal.com *.postrelease.com *.profity.ch *.pubmatic.com *.quantserve.com *.roeye.com *.rubiconproject.com *.seadform.net *.seedtag.com *.seznam.cz *.smartadserver.com *.snapengage.com *.solocpm.com *.sovendus.com *.taboola.com *.tangoo.it *.tangooserver.com *.pixel.tapad.com *.targeting.unrulymedia.com *.teads.tv *.threekit.com *.tkrconnector.com *.tradedoubler.com *.tremorhub.com *.trustarc.com *.try-snowplow.com *.veritone-ce.com *.wepowerconnections.com *.yahoo.co.jp *.yieldlab.net *.youtube.com *.zbozi.cz action.metaffiliation.com ad.doubleclick.net adnxs.com adsystem.com adxcel-ec2.com afterpay.com amazon-adsystem.com analytics.twitter.com assetbank-delonghigroup.s3.eu-west-1.amazonaws.com awinblackfriday.com bing.com bing.net blob: bounceexchange.com clarity.ms dam.braunhousehold.com dam.delonghi.com dam.kenwoodworld.com dam.nutribullet.com dmxleo.com doc-14-1k-sheets.googleusercontent.com doubleclick.net eu-images.contentstack.com facebook.net googleadservices.com googlesyndacation.com googlesyndication.com googletagmanager.com gumgum.com heureka.cz id5-sync.com imgstatic.eu jsdelivr.net lh3.ggpht.com line.me maps.googleapis.com mavenoidfiles.com metaffiliation.com mgln.ai cdn.mgln.ai us.mgln.ai outbrain.com pm-delonghi-assets.com pixel.tapad.com quantserve.com seznam.cz sgtm.delonghi.com sgtm.kenwoodworld.com sgtm.nutribullet.com solocpm.com static.hotjar.com stgt.braunhousehold.com sync.outbrain.com t.co tangoo.it tkrconnector.com trc.taboola.com try-snowplow.com veritone-ce.com widgets.reevoo.com www.facebook.com www.paypalobjects.com www.snapengage.com yahoo.co.jp zbozi.cz data:;script-src 'self' 'unsafe-inline' *.2trk.info *.abtasty.com *.ad-stir.com *.adform.net *.adition.com *.adnxs.com *.ads-twitter.com *.adsrvr.org *.adsystem.com *.adyen.com *.afterpay.com *.alchemer.eu *.alevco.de *.amazon-adsystem.com *.awin1.com *.bannercrowd.net *.bazaarvoice.com *.bestofluck.io *.bing.com *.bounceexchange.com *.bouncex.net *.braunhousehold.com *.casalemedia.com *.cash.app *.cdnbasket.net *.cdnwidget.com *.cfjump.com *.checkout.visa.com *.ciblelink.com *.clarity.ms *.cloud.news.delonghi.com *.cloudflare.com *.cloudfront.net *.cobrowse.io *.collect.igodigital.com *.contentsquare.com *.contentsquare.net *.cookieless-data.com *.creativecdn.com *.criteo.com *.ctnsnet.com *.curalate.com *.delonghi.com *.delonghigroup.com *.doubleclick.net *.dwin1.com *.easydmp.net *.evergage.com *.evgnet.com *.facebook.com *.facebook.net *.flashtalking.com *.funnelytics.io *.getback.ch *.gigya.com *.go2sdk.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.googleusercontent.com *.grmtech.net *.gstatic.com *.heureka.cz *.heureka.group *.heureka.sk *.hotjar.com *.im9.cz *.imedia.cz *.img-statics.com *.jsdelivr.net *.kenwoodworld.com *.klarna.com *.klarnaservices.com *.ladsp.com *.lightboxcdn.com *.line-scdn.net *.logico3c.com *.marvellousmachine.net *.mastercard.com *.mavenoid.com *.mention-me.com *.metaffiliation.com *.mgln.ai *.mndtrk.com *.noibu.com *.nutribullet.com *.onlive.site *.optimalpeople.fr *.outbrain.com *.ownid.com *.payments-amazon.com *.paypal.com *.pinimg.com *.pinterest.com *.pixeltracker.co *.preciso.net *.profity.ch *.quantcount.com *.quantserve.com *.ratepay.com *.recaptcha.net *.retargeted.co *.roeyecdn.com *.sciencebehindecommerce.com *.seznam.cz *.snapengage.com *.sovendus.com *.sovopt.com *.taboola.com *.tangoo.it *.tangooserver.com *.teads.tv *.the.sciencebehindecommerce.com *.threekit.com *.tiktok.com *.tkrconnector.com *.tradedoubler.com *.trkconnector.com *.trustarc.com *.trustpilot.com *.try-snowplow.com *.twitter.com *.veoxa.com *.wknd.ai *.yahoo.co.jp *.yimg.jp *.youtube.com *.zbozi.cz *.zemanta.com *.zenaps.com 2trk.info ad-stir.com ads-twitter.com adsystem.com afterpay.com alevco.de api.feefo.com bestofluck.io blob: cdn.taboola.com cfjump.com ciblelink.com clarity.ms cloud.news.delonghi.com cloudfront.net cobrowse.io contentsquare.com cookieless-data.com creativecdn.com ctnsnet.com curalate.com doc-14-1k-sheets.googleusercontent.com doubleclick.net go2sdk.com google.com googleadservices.com googletagmanager.com grmtech.net heureka.group heureka.sk im9.cz img-statics.com kenwoodworld.com ladsp.com line-scdn.net maps.googleapis.com marvellousmachine.net metaffiliation.com mgln.ai cdn.mgln.ai us.mgln.ai mndtrk.com optimalpeople.fr outbrain.com pay.google.com pixeltracker.co pm-delonghi-assets.com preciso.net quantserve.com retargeted.co s.retargeted.co sandbox-assets.secure.checkout.visa.com sandbox.src.mastercard.com sgtm.delonghi.com sgtm.kenwoodworld.com sgtm.nutribullet.com static-eu.payments-amazon.com static.hotjar.com stgt.braunhousehold.com storage.googleapis.com tangoo.it tkrconnector.com trustpilot.com try-snowplow.com twitter.com veoxa.com view.ceros.com widgets.reevoo.com www.dwin1.com www.facebook.com www.sovopt.com x.klarnacdn.net yahoo.co.jp yimg.jp zemanta.com 'unsafe-eval' localhost:* *.site.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https: http:;connect-src 'self' *.3kit.com *.abtasty.com *.adnxs.com *.adsrvr.org *.adsystem.com *.adyen.com *.alchemer.eu *.amazon-adsystem.com *.amazon.com *.awinblackfriday.com *.bannercrowd.net *.bazaarvoice.com *.bestofluck.io *.bing.com *.bing.net *.braunhousehold.com *.cdnbasket.net *.clarity.ms *.collect.igodigital.com *.contentsquare.net *.contentstack.com *.conversionsapigateway.com *.creativecdn.com *.criteo.com *.delonghi.com *.delonghigroup.com *.doubleclick.net *.evergage.com *.evgnet.com *.facebook.com *.funnelytics.io *.funnelytics.workers.dev *.getback.ch *.gigya.com *.go2sdk.com *.google-analytics.com *.google.ae *.google.at *.google.be *.google.bg *.google.ca *.google.ch *.google.cl *.google.cn *.google.co.id *.google.co.in *.google.co.jp *.google.co.kr *.google.co.nz *.google.co.th *.google.co.uk *.google.co.za *.google.com *.google.com.ar *.google.com.au *.google.com.br *.google.com.co *.google.com.hk *.google.com.mx *.google.com.sa *.google.com.sg *.google.com.tr *.google.com.tw *.google.cz *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.gr *.google.hr *.google.hu *.google.ie *.google.it *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.googleadservices.com *.googleapis.com *.googletagmanager.com *.heureka.group *.hotjar.com *.kenwoodworld.com *.klarna.com *.klarnaevt.com *.klarnaservices.com *.ladsp.com *.lightboxcdn.com *.mavenoid.com *.mavenoidfiles.com *.mention-me.com *.mgln.ai *.noibu.com *.nutribullet.com *.onlive.site *.optimalpeople.fr *.optimy.ai *.optimy.app *.outbrain.com *.ownid.com *.paa-reporting-advertising.amazon *.pinimg.com *.pinterest.com *.pixeltracker.co *.quantcount.com *.quantserve.com *.reevoo.com *.run.app *.sandbox.paypal.com *.sciencebehindecommerce.com *.sentry.io *.seznam.cz *.snapengage.com *.sovendus.com *.taboola.com *.pixel.tapad.com *.teads.tv *.threekit.com *.tiktok.com *.tkrconnector.com *.trustarc.com *.trustpilot.com *.wepowerconnections.com *.yahoo.co.jp *.youtube.com *.zemanta.com adnxs.com adsrvr.org adsystem.com api.cquotient.com awinblackfriday.com bannercrowd.net bestofluck.io clarity.ms cloud.news.delonghi.com cloud.news.nutribullet.com conversionsapigateway.com creativecdn.com demo-3.conversionsapigateway.com doc-14-1k-sheets.googleusercontent.com doubleclick.net fb-conv-api-tracking.braunhousehold.com fb-conv-api-tracking.nutribullet.com go2sdk.com google-analytics.com google.ae google.at google.be google.bg google.ca google.ch google.cl google.cn google.co.id google.co.in google.co.jp google.co.kr google.co.nz google.co.th google.co.uk google.co.za google.com google.com.ar google.com.au google.com.br google.com.co google.com.hk google.com.mx google.com.sa google.com.sg google.com.tr google.com.tw google.cz google.de google.dk google.es google.fi google.fr google.gr google.hr google.hu google.ie google.it google.nl google.no google.pl google.pt google.ro google.rs google.ru google.se google.si google.sk googleadservices.com googletagmanager.com heureka.group ladsp.com mavenoidfiles.com mention-me.com mgln.ai optimy.ai optimy.app outbrain.com pagead2.googlesyndication.com pinimg.com pixeltracker.co pixel.tapad.com quantserve.com run.app sentry.io services.postcodeanywhere.co.uk seznam.cz sgtm.braunhousehold.com sgtm.delonghi.com sgtm.kenwoodworld.com sgtm.nutribullet.com static.hotjar.com stg.api.bazaarvoice.com stgt.braunhousehold.com teads.tv tiktok.com tkrconnector.com trc.taboola.com trustarc.com trustpilot.com widgets.reevoo.com wss://*.mavenoid.com wss://*.twilio.com wss://optimy.app wss://twilio.com www.facebook.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com www.wepowerconnections.com yahoo.co.jp zemanta.com localhost:* *.salesforce-scrt.com;frame-src * mailto: *.site.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self' localhost:*;object-src 'none' 3 default-src *.licdn.com *.linkedin.com bf11981lkb.bf.dynatrace.com *.contentsquare.net *.groupepdi.com *.net-fs.com *.onetrust.com *.cookielaw.org *.wufoo.com unpkg.com *.yandex.ru my.matterport.com airtable.com ds-aksb-a.akamaihd.net brp.my.site.com brp.my.salesforce-scrt.com monkeys-fist-for-brp.com *.myfeelback.com mfb.li mailchi.mp *.cdninstagram.com *.stackla.com fareharbor.com *.peek.com *.salecycle.com story.brplynx.com *.cloudfront.net mpembed.com *.googleadservices.com *.attribution.adswizz.com *.slideshare.net *.hotjar.com *.typekit.net *.bootstrapcdn.com *.salesforce.com *.omtrdc.net service.force.com *.adobedtm.com *.google.ca *.gstatic.com *.azurewebsites.net *.lightboxcdn.com *.salesforceliveagent.com *.force.com *.moatads.com *.youtube.com *.addthisedge.com *.addthis.com *.cloudflare.com *.doubleclick.net *.brp.com *.facebook.net *.azureedge.net *.google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com *.demdex.net *.day.com *.everesttech.net *.scene7.com *.amazon-adsystem.com *.facebook.com *.googleusercontent.com *.lightboxapi.com *.womenofonroadgroups.com *.canamonroadcommunity.com canamonroadcommunity.com *.learntoride3wheel.com *.limelightplatformevents.com *.valuemytradein.com *.zencdn.net *.zlthunder.net cdn.knightlab.com *.mdex.net *.sea-doo.com *.brpdigital.net tags.tiqcdn.com brp--c.documentforce.com collect.tealiumiq.com *.teads.tv brp.my.salesforce-sites.com cdn.jsdelivr.net stconsumercaseapip01.blob.core.windows.net stconsumercaseapiq01.blob.core.windows.net arttrk.com *.yimg.com www.filepicker.io *.unchartedsociety.com *.qualtrics.com brp--qacopy.sandbox.my.salesforce-sites.com brp--qauat2.sandbox.my.site.com brp--qacopy.sandbox.my.site.com brp.my.salesforce.com brp--qacopy.sandbox.my.salesforce-scrt.com sp.analytics.yahoo.com *.ski-doo.com *.adsrvr.org alb.reddit.com *.googlesyndication.com data.adxcel-ec2.com s.pinimg.com yulvr.ca www.redditstatic.com ct.pinterest.com brp--digitaldev.sandbox.my.site.com brp--digitaldev.sandbox.my.salesforce-scrt.com *.axept.io *.axeptio.eu axeptio.imgix.net conversions-config.reddit.com pixel-config.reddit.com bat.bing.com *.adobeaemcloud.com analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com axeptio-videos.imgix.net https://*.brp.com https://experiences.brp.com 'unsafe-inline' 'unsafe-eval' blob: data: 'self'; frame-ancestors 'self' 3 frame-ancestors 'self' *.virginmoney.com; 3 frame-ancestors 'self' https://*.abtasty.com; 3 frame-ancestors 'self' https://mqalicensurecert.azurewebsites.net https://mqalicensurecertdev.azurewebsites.net https://mqalicensurecerttst.azurewebsites.net http://localhost https://localhost https://flhealthsource.gov 3 frame-ancestors 'self' https://app.optimizely.com https://*.optimizely.com; 3 frame-ancestors https://events.martech.org https://martech.org 3 frame-ancestors 'self' https://cms.sikt.no https://stage.cms.sikt.no https://cms.sikt.no; 3 default-src 'none'; script-src 'self' acdn.adnxs.com cdn.admo.tv cstatic.weborama.fr dc.ads.linkedin.com developers.atinternet-solutions.com *.dom101.mapres *.dom101.intres *.dom101.prdres *.doubleclick.net d.turn.com *.evermaps.net *.facebook.net facebook.com *.gbpce.net *.googletagmanager.com *.google.com *.google.fr *.googleadservices.com *.hcaptcha.com *.kameleoon.eu *.kameleoon.com *.kameleoon.io *.k-app.io marketing.adobe.com my.tealiumiq.com publicidees.com px.ads.linkedin.com r.turn.com secure.adnxs.com snap.licdn.com support.criteo.com *.tiqcdn.com 'unsafe-inline' 'unsafe-eval' *.1bis.com *.myfeelback.com cdn.trustindex.io analytics.tiktok.com s2.adform.net track.adform.net *.adform.net *.bing.com *.teads.tv *.criteo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com adservice.google.com *.taboola.com *.adsrvr.org tracking.e-novate.fr *.refiner.io www.redditstatic.com pixel-config.reddit.com *.linkeo.com reversimmo.banquepopulaire.fr *.banquepopulaire.fr; connect-src 'self' *.dom101.mapres *.dom101.intres *.dom101.prdres *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.k-app.io *.omtrdc.net *.tealiumiq.com *.2o7.net *.hcaptcha.com cdn.linkedin.oribi.io adservice.google.com www.facebook.com *.prod.mycloud.intrabpce.fr google.com *.google.com *.google.fr analytics.tiktok.com px.ads.linkedin.com pagead2.googlesyndication.com gen-widgets.hom.mycloud.intrabpce.fr gen-widgets.prod.mycloud.intrabpce.fr wss://www.banquepopulaire.fr/genesys/genesys/cometd *.teads.tv *.bing.com *.criteo.com *.linkeo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com https://www.google.com *.adform.net *.taboola.com *.adsrvr.org *.googleadservices.com *.refiner.io tracking.e-novate.fr www.redditstatic.com pixel-config.reddit.com alb.reddit.com *.banquepopulaire.fr; img-src 'self' data: cdn.admo.tv *.cloudimg.io cstatic.weborama.fr developers.atinternet-solutions.com *.doubleclick.net d.turn.com www.facebook.com www.google.fr www.google.com *.googletagmanager.com *.kameleoon.eu *.kameleoon.com *.kameleoon.io *.k-app.io *.omtrdc.net ib.adnxs.com publicidees.com *.hcaptcha.com r.turn.com secure.adnxs.com snap.licdn.com support.criteo.com *.myfeelback.com *.kxcdn.com www.linkedin.com dc.ads.linkedin.com px.ads.linkedin.com px4.ads.linkedin.com cdn.trustindex.io my.tealiumiq.com action.metaffiliation.com *.bing.com *.teads.tv *.criteo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com adservice.google.com *.adform.net *.googleadservices.com tracking.e-novate.fr alb.reddit.com *.linkeo.com *.banquepopulaire.fr; style-src 'self' fonts.googleapis.com *.hcaptcha.com 'unsafe-inline' *.kameleoon.eu *.kameleoon.com *.kameleoon.io *.k-app.io cdn.trustindex.io *.linkeo.com *.banquepopulaire.fr; font-src 'self' data: fonts.gstatic.com; frame-ancestors 'self' *.dom101.mapres *.dom101.intres *.dom101.prdres *.banquepopulaire.fr; frame-src https: * *.refiner.io; worker-src 'self' blob:; report-uri https://www.csp.bpce.fr/v1/record?id=CEPME; 3 child-src 'self';connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.googleapis.com *.cookieyes.com cdn-cookieyes.com *.paypal.com;font-src 'self' fonts.gstatic.com;frame-src 'self' *.paypal.com;frame-ancestors 'self';img-src *.mvmnet.com data: maps.gstatic.com *.gstatic.com *.ggpht.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.googleapis.com *.facebook.com *.cookieyes.com cdn-cookieyes.com *.paypalobjects.com *.google.it *.paypal.com;manifest-src 'self';media-src 'self';object-src 'self';worker-src 'self'; 3 connect-src 'self' registry.tierra.net:8443 wss://registry.tierra.net:8443 *.tierra.net *.zdassets.com *.zendesk.com api.smooch.io wss://*.smooch.io *.sentry.io www.google-analytics.com; default-src 'none'; font-src 'self' static.tierra.net maxcdn.bootstrapcdn.com use.fontawesome.com use.typekit.net; frame-src 'self' www.youtube.com player.vimeo.com static.tierra.net; img-src 'self' *.tierra.net secure.gravatar.com *.wp.com *.amazonaws.com *.zendesk.com *.zdassets.com data:; media-src; object-src *.tierra.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' static.tierra.net ajax.googleapis.com www.googletagmanager.com maxcdn.bootstrapcdn.com use.fontawesome.com *.zdassets.com *.zendesk.com api.smooch.io *.clearhello.com js.stripe.com; style-src 'self' 'unsafe-inline' static.tierra.net cdnjs.cloudflare.com maxcdn.bootstrapcdn.com use.fontawesome.com *.typekit.net; upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self'; report-uri /special/report/csp; report-to default 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://mc.yandex.ru https://www.googletagmanager.com https://talkdriver.ru https://support.smsc.ru https://support.smsc.kz https://sup.smsc.ua https://plugins.stripo.email blob: 3 frame-src 'self' *.captcha-delivery.com *.optimizely.com *.doubleclick.net *.adsrvr.org *.bounceexchange.com *.amazon-adsystem.com *.owneriq.net *.google.com *.facebook.com *.facebook.net *.rokt.com *.amazon.com *.paypal.com *.payments-amazon.com *.sojern.com *.qantasloyalty.com *.qantas.com tag.yieldoptimizer.com img3.avis.com img3.budget.com img3.paylesscar.com *.youtube.com quantserv.com adnxs.com impactradius-event.com dgm-au.com everestjs.net everesttech.net yahoo.com xg4ken.com *.online-metrix.net *.uplift.com *.quantummetric.com api.securedvisit.com track.securedvisit.com content.securedvisit.com images.securedvisit.com track.sv.rkdms.com *.mypurecloud.com *.nagich.com cloudfront.net bing.com go.pardot.com sme.avis.co.nz sme.avis.com.au sme.budget.co.nz sme.budget.com.au *.salecycle.com abgnz.wufoo.com *.youtube-nocookie.com *.mypurecloud.com *.mypurecloud.com.au; worker-src 'self' blob:; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://phrase.com https://*.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://www.gstatic.cn https://www.recaptcha.net https://www.youtube.com https://oxaewmwfp6.kameleoon.io https://cookie-cdn.cookiepro.com https://*.clarity.ms https://bat.bing.com https://js.hubspot.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hs-scripts.com https://js.hsforms.net https://connect.facebook.net https://snap.licdn.com https://pixel.byspotify.com https://tracking.g2crowd.com https://assets.apollo.io https://js.chilipiper.com https://e.infogram.com https://jobs.ashbyhq.com https://boards.eu.greenhouse.io; style-src 'self' 'unsafe-inline' https://phrase.com https://fonts.googleapis.com; img-src 'self' data: https://phrase.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.google.com https://cookie-cdn.cookiepro.com https://www.facebook.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://track.hubspot.com https://px.ads.linkedin.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://ct.capterra.com https://*.clarity.ms https://i.ytimg.com https://js.chilipiper.com https://cdn-images-1.medium.com https://s.w.org https://phraseapp.com https://staging-phrasestagingpx-phrasedev.kinsta.cloud; font-src 'self' data: https://phrase.com https://fonts.gstatic.com; frame-src 'self' https://phrase.com https://www.googletagmanager.com https://www.google.com https://www.recaptcha.net https://www.youtube.com https://www.youtube-nocookie.com https://jobs.ashbyhq.com https://boards.eu.greenhouse.io https://job-boards.eu.greenhouse.io https://forms.hsforms.com https://www.facebook.com https://player.bilibili.com https://phrase.chilipiper.com https://www.g2.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://privacyportal.cookiepro.com https://eu-data.kameleoon.io https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://perf-na1.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://px.ads.linkedin.com https://www.facebook.com https://pixels.spotify.com https://tracking-api.g2.com https://aplo-evnt.com https://phrase.chilipiper.com https://api.chilipiper.com https://tracking.chilipiper.com https://noembed.com; media-src 'self' https://phrase.com https://*.hubspotusercontent-na1.net; object-src 'none'; base-uri 'self'; report-uri https://o319746.ingest.us.sentry.io/api/4511309638795264/security/?sentry_key=e21151de46e1f976858c58e3ca5cbef6; report-to csp-endpoint 3 frame-ancestors 'self' *.dastelefonbuch.de *.schatten.dastelefonbuch.de *.telefonbuch.de *.meinungsmeister.de 3 connect-src 'self' https://api2.amplitude.com sr-client-cfg.amplitude.com https://maps.googleapis.com/maps/api/js https://maps.googleapis.com/maps-api-v3/api/ https://maps.googleapis.com/maps/api/mapsjs/ https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/$rpc/ https://maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/QuotaService.RecordEvent https://maps.googleapis.com/maps/api/staticmap https://www.googletagmanager.com https://www.googletagmanager.com/gtm.js https://platform-api.sharethis.com/js/sharethis.js https://buttons-config.sharethis.com/js/ https://l.sharethis.com/pview https://ascensioncrm--uat.sandbox.my.site.com/ https://ascensioncrm--acc.sandbox.my.site.com https://ascensioncrm--acc.sandbox.my.salesforce.com/ https://service.force.com https://ascensioncrm.my.salesforce-sites.com https://ascensioncrm.my.salesforce.com https://ascension.force.com https://ascensioncrm--acc.sandbox.my.salesforce-sites.com/ https://ascensioncrm--uat.sandbox.my.salesforce.com/ https://ascensioncrm--uat.sandbox.my.salesforce-sites.com/ https://static.lightning.force.com/ https://service.force.com/ https://*.salesforceliveagent.com/chat/ https://ascensioncrm.my.site.com/ https://ascensioncrm.my.salesforce-scrt.com/ https://a.tiles.mapbox.com/ https://*.localsearchprofiles.com/ https://support.doctorpodcasting.com/ https://radiomd.com/ https://az416426.vo.msecnd.net/scripts/ https://dc.services.visualstudio.com/v2/track https://static.srcspot.com/libs/hannie.js https://www.google.com/recaptcha/enterprise.js blob: https://bcbolt446c5271-a.akamaihd.net/media/ https://players.brightcove.net/ https://edge.api.brightcove.com/ https://metrics.brightcove.com/ https://vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js https://cf-images.us-east-1.prod.boltdns.net/ https://manifest.prod.boltdns.net/ https://gallery-metrics.api.brightcove.com/ *.brightcovecdn.com https://service.reputation.com/ https://api.mapbox.com/ assets.reputation.com reputation-com-enterprise-prod.s3.us-east-1.amazonaws.com https://s3.amazonaws.com/r4e-cstatic.reputation.com r4e-assets-prod-us.s3.amazonaws.com https://s3.amazonaws.com/ *.visualwebsiteoptimizer.com app.vwo.com https://cdn.schemaapp.com https://data.schemaapp.com https://api.schemaapp.com *.launchdarkly.com *.formstack.com https://www.formassembly.com/ https://www.volgistics.com/ https://ascension.tfaforms.net/ https://zn0ng4rqajq6fnr3w-ascensionexperience.siteintercept.qualtrics.com *.qualtrics.com *.google-analytics.com analytics.google.com gtm.prd.healthcare.ascension.org *.ascension.org https://cdn.amplitude.com https://gs.amplitude.com https://api-sr.amplitude.com *.ascension.org;default-src 'self' blob: *.ascension.org;font-src 'self' fonts.gstatic.com https://fonts.googleapis.com https://ascensioncrm--uat.sandbox.my.site.com/ https://ascensioncrm--acc.sandbox.my.site.com https://ascensioncrm--acc.sandbox.my.salesforce.com/ https://service.force.com https://ascensioncrm.my.salesforce-sites.com https://ascensioncrm.my.salesforce.com https://ascension.force.com https://ascensioncrm--acc.sandbox.my.salesforce-sites.com/ https://ascensioncrm--uat.sandbox.my.salesforce.com/ https://ascensioncrm--uat.sandbox.my.salesforce-sites.com/ https://static.lightning.force.com/ https://service.force.com/ https://*.salesforceliveagent.com/chat/ https://ascensioncrm.my.site.com/ https://ascensioncrm.my.salesforce-scrt.com/ https://stackpath.bootstrapcdn.com data: *.ascension.org;frame-src 'self' *.formstack.com https://www.formassembly.com/ https://www.volgistics.com/ https://ascension.tfaforms.net/ blob: https://bcbolt446c5271-a.akamaihd.net/media/ https://players.brightcove.net/ https://edge.api.brightcove.com/ https://metrics.brightcove.com/ https://vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js https://cf-images.us-east-1.prod.boltdns.net/ https://manifest.prod.boltdns.net/ https://gallery-metrics.api.brightcove.com/ *.brightcovecdn.com https://ascensioncrm--uat.sandbox.my.site.com/ https://ascensioncrm--acc.sandbox.my.site.com https://ascensioncrm--acc.sandbox.my.salesforce.com/ https://service.force.com https://ascensioncrm.my.salesforce-sites.com https://ascensioncrm.my.salesforce.com https://ascension.force.com https://ascensioncrm--acc.sandbox.my.salesforce-sites.com/ https://ascensioncrm--uat.sandbox.my.salesforce.com/ https://ascensioncrm--uat.sandbox.my.salesforce-sites.com/ https://static.lightning.force.com/ https://service.force.com/ https://*.salesforceliveagent.com/chat/ https://ascensioncrm.my.site.com/ https://ascensioncrm.my.salesforce-scrt.com/ *.youtube.com/ https://a.tiles.mapbox.com/ https://*.localsearchprofiles.com/ https://support.doctorpodcasting.com/ https://radiomd.com/ https://az416426.vo.msecnd.net/scripts/ https://dc.services.visualstudio.com/v2/track https://static.srcspot.com/libs/hannie.js https://www.google.com/recaptcha/enterprise.js app.vwo.com *.visualwebsiteoptimizer.com https://www.google.com/ *.ascension.org;img-src 'self' https://maps.googleapis.com/maps/api/js https://maps.googleapis.com/maps-api-v3/api/ https://maps.googleapis.com/maps/api/mapsjs/ https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/$rpc/ https://maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/QuotaService.RecordEvent https://maps.googleapis.com/maps/api/staticmap https://service.reputation.com/ https://api.mapbox.com/ assets.reputation.com reputation-com-enterprise-prod.s3.us-east-1.amazonaws.com https://s3.amazonaws.com/r4e-cstatic.reputation.com r4e-assets-prod-us.s3.amazonaws.com https://s3.amazonaws.com/ https://ascensioncrm--acc.sandbox.my.site.com https://ascensioncrm.my.salesforce-sites.com https://ascensioncrm--acc.sandbox.my.salesforce-sites.com/ https://ascensioncrm--uat.sandbox.my.salesforce.com/ https://ascensioncrm--uat.sandbox.my.salesforce-sites.com/ https://service.force.com/embeddedservice/ https://ascensioncrm.my.site.com/ https://a.tiles.mapbox.com/ https://*.localsearchprofiles.com/ https://support.doctorpodcasting.com/ https://radiomd.com/ https://az416426.vo.msecnd.net/scripts/ https://dc.services.visualstudio.com/v2/track https://static.srcspot.com/libs/hannie.js https://www.google.com/recaptcha/enterprise.js blob: https://bcbolt446c5271-a.akamaihd.net/media/ https://players.brightcove.net/ https://edge.api.brightcove.com/ https://metrics.brightcove.com/ https://vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js https://cf-images.us-east-1.prod.boltdns.net/ https://manifest.prod.boltdns.net/ https://gallery-metrics.api.brightcove.com/ *.brightcovecdn.com *.visualwebsiteoptimizer.com chart.googleapis.com app.vwo.com *.doubleclick.net *.google-analytics.com analytics.google.com gtm.prd.healthcare.ascension.org *.formstack.com https://www.formassembly.com/ https://www.volgistics.com/ https://ascension.tfaforms.net/ https://www.googletagmanager.com https://www.googletagmanager.com/gtm.js https://zn0ng4rqajq6fnr3w-ascensionexperience.siteintercept.qualtrics.com *.qualtrics.com fonts.gstatic.com https://fonts.googleapis.com data: *.ascension.org;object-src 'none' ;script-src 'self' 'unsafe-eval' https://cdn.amplitude.com https://gs.amplitude.com https://api-sr.amplitude.com https://ascensioncrm--uat.sandbox.my.site.com/ https://ascensioncrm--acc.sandbox.my.site.com https://ascensioncrm--acc.sandbox.my.salesforce.com/ https://service.force.com https://ascensioncrm.my.salesforce-sites.com https://ascensioncrm.my.salesforce.com https://ascension.force.com https://ascensioncrm--acc.sandbox.my.salesforce-sites.com/ https://ascensioncrm--uat.sandbox.my.salesforce.com/ https://ascensioncrm--uat.sandbox.my.salesforce-sites.com/ https://static.lightning.force.com/ https://service.force.com/ https://*.salesforceliveagent.com/chat/ https://ascensioncrm.my.site.com/ https://ascensioncrm.my.salesforce-scrt.com/ https://tfaforms.com https://service.reputation.com/ https://api.mapbox.com/ assets.reputation.com reputation-com-enterprise-prod.s3.us-east-1.amazonaws.com https://s3.amazonaws.com/r4e-cstatic.reputation.com r4e-assets-prod-us.s3.amazonaws.com https://s3.amazonaws.com/ https://www.googletagmanager.com https://www.googletagmanager.com/gtm.js 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/react/18.2.0/ https://cdnjs.cloudflare.com/ajax/libs/react-dom/18.2.0/ https://cdnjs.cloudflare.com/ajax/libs/es6-shim/ https://cdnjs.cloudflare.com/ajax/libs/es5-shim/ https://maps.googleapis.com/maps/api/js https://maps.googleapis.com/maps-api-v3/api/ https://maps.googleapis.com/maps/api/mapsjs/ https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/$rpc/ https://maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/QuotaService.RecordEvent https://maps.googleapis.com/maps/api/staticmap https://platform-api.sharethis.com/js/sharethis.js https://buttons-config.sharethis.com/js/ https://l.sharethis.com/pview https://a.tiles.mapbox.com/ https://*.localsearchprofiles.com/ https://support.doctorpodcasting.com/ https://radiomd.com/ https://az416426.vo.msecnd.net/scripts/ https://dc.services.visualstudio.com/v2/track https://static.srcspot.com/libs/hannie.js https://www.google.com/recaptcha/enterprise.js blob: https://bcbolt446c5271-a.akamaihd.net/media/ https://players.brightcove.net/ https://edge.api.brightcove.com/ https://metrics.brightcove.com/ https://vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js https://cf-images.us-east-1.prod.boltdns.net/ https://manifest.prod.boltdns.net/ https://gallery-metrics.api.brightcove.com/ *.brightcovecdn.com blob: *.visualwebsiteoptimizer.com app.vwo.com https://cdn.schemaapp.com https://data.schemaapp.com https://api.schemaapp.com *.launchdarkly.com *.formstack.com https://www.formassembly.com/ https://www.volgistics.com/ https://ascension.tfaforms.net/ https://www.gstatic.com/recaptcha/ https://zn0ng4rqajq6fnr3w-ascensionexperience.siteintercept.qualtrics.com *.qualtrics.com *.ascension.org;style-src 'self' 'unsafe-eval' 'unsafe-inline' https://ascensioncrm--acc.sandbox.my.site.com https://ascensioncrm.my.salesforce-sites.com https://ascensioncrm--acc.sandbox.my.salesforce-sites.com/ https://ascensioncrm--uat.sandbox.my.salesforce.com/ https://ascensioncrm--uat.sandbox.my.salesforce-sites.com/ https://service.force.com/embeddedservice/ https://ascensioncrm.my.site.com/ fonts.gstatic.com https://fonts.googleapis.com https://service.reputation.com/ https://api.mapbox.com/ assets.reputation.com reputation-com-enterprise-prod.s3.us-east-1.amazonaws.com https://s3.amazonaws.com/r4e-cstatic.reputation.com r4e-assets-prod-us.s3.amazonaws.com https://s3.amazonaws.com/ *.visualwebsiteoptimizer.com app.vwo.com *.launchdarkly.com *.formstack.com https://www.formassembly.com/ https://www.volgistics.com/ https://ascension.tfaforms.net/ https://stackpath.bootstrapcdn.com https://www.googletagmanager.com https://www.googletagmanager.com/gtm.js *.ascension.org; 3 base-uri 'self' https://www.sidn.nl https://www.sidnlabs.nl;default-src 'self';connect-src 'self' https://*.algolia.net https://*.algolianet.com https://*.dynamics.com https://*.europe-west4.run.app https://*.facebook.com https://*.googleapis.com https://*.googlesyndication.com https://*.linkedin.com https://*.linkedin.oribi.io https://*.piwik.pro https://*.recruitee.com https://*.sidn.nl https://sidn.nl https://*.twitter.com https://*.typeform.com https://*.usercentrics.eu https://*.usmedia.nl https://api.opencagedata.com https://vimeo.com https://www.google.com https://*.run.app https://sidn.mosparo.usmedia.nl;font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://*.piwik.pro https://*.twitter.com https://*.typeform.com https://vimeo.com;form-action 'self' https://*.dynamics.com https://*.mailplus.nl https://internet.nl https://sidn.activehosted.com https://sidn.recruitee.com;frame-ancestors 'none';frame-src 'self' https://*.azureedge.net https://*.doubleclick.net https://*.dynamics.com https://*.google.com https://*.googleapis.com https://*.sidnlabs.nl https://*.spotify.com https://*.twitter.com https://*.typeform.com https://*.vimeo.com https://*.tmrrw.nl https://anchor.fm https://www.facebook.com https://www.youtube.com;img-src 'self' data: https://*.domain-registry.nl https://*.doubleclick.net https://*.europe-west4.run.app https://*.google.com https://*.google.nl https://*.googleapis.com https://*.gstatic.com https://*.licdn.com https://*.linkedin.com https://*.piwik.pro https://*.sidn.nl https://*.sidnlabs.nl https://*.statcounter.com https://*.twimg.com https://*.twitter.com https://*.typeform.com https://*.usercentrics.eu https://*.usmedia.nl https://*.viglink.com https://*.vimeocdn.com https://*.youtube.com https://*.ytimg.com https://downloads.ctfassets.net https://images.ctfassets.net https://static.mailplus.nl https://vimeo.com https://www.facebook.com/ https://sidn.mosparo.usmedia.nl;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.azureedge.net https://*.bizographics.com https://*.cloudfront.net https://*.creative-serving.com https://*.doubleclick.net https://*.dynamics.com https://*.google.com https://*.google.nl https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://*.licdn.com https://*.linkedin.com https://*.mailplus.nl https://*.piwik.pro https://*.statcounter.com https://*.twimg.com https://*.twitter.com https://*.typeform.com https://*.usercentrics.eu https://*.ytimg.com https://connect.facebook.net https://sidn.activehosted.com https://vimeo.com https://www.youtube.com https://sidn.mosparo.usmedia.nl;script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://sidn.activehosted.com https://*.azureedge.net https://*.cloudfront.net https://*.doubleclick.net https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://*.licdn.com https://*.linkedin.com https://*.mailplus.nl https://*.piwik.pro https://*.sidn.nl https://sidn.nl https://*.twitter.com https://*.usercentrics.eu https://*.ytimg.com https://vimeo.com https://www.youtube.com https://sidn.mosparo.usmedia.nl;style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.mailplus.nl https://*.piwik.pro https://*.twitter.com https://*.typeform.com https://sidn.mosparo.usmedia.nl;report-to default;report-uri https://sidn-nl.uriports.com/reports/report 3 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.aks-dinmedia.net *.algolia.io *.algolia.net *.algolianet.com *.beuth.de *.bing.com *.dinmedia.de *.etracker.com *.etracker.de *.freshworks.com *.google-analytics.com *.googleadservices.com *.googleoptimize.com *.hotjar.com *.podigee-cdn.net *.soundcloud.com *.youtube.com/iframe_api *.ytimg.com https://*.blickinsbuch.de/gateway/ https://*.googletagmanager.com https://blickinsbuch.de/gateway/ https://cdn.jsdelivr.net/npm/friendly-challenge@0.9.14/widget.module.min.js https://cdnjs.cloudflare.com/ajax/libs/mathjax/ https://code.jquery.com https://googleads.g.doubleclick.net https://public.flourish.studio/resources/embed.js siteimproveanalytics.com; style-src 'self' 'unsafe-inline' *.freshworks.com *.podigee-cdn.net https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.algolia.io *.algolia.net *.algolianet.com *.etracker.de *.freshdesk.com *.freshworks.com *.friendlycaptcha.com *.google.com *.googleadservices.com *.openstreetmap.org bat.bing.com bat.bing.net https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://beuth.prudsys-rde.de https://flourish-api.com https://public.flourish.studio https://stats.g.doubleclick.net wss://*.hotjar.com https://metrics.dinmedia.de; font-src 'self' data: *.podigee-cdn.net https://*.hotjar.com https://fonts.gstatic.com; frame-src 'self' *.google.com *.google.de *.podigee-cdn.net *.soundcloud.com blob: data: https://*.blickinsbuch.de https://*.blickinsbuch.net https://*.googletagmanager.com https://*.hotjar.com https://*.youtube-nocookie.com https://*.youtube.com https://cdn.knightlab.com/ https://flo.uri.sh https://flourish-api.com https://googleads.g.doubleclick.net https://www.openstreetmap.org https://youtube.com https://metrics.dinmedia.de; img-src * data: https://*.google-analytics.com https://*.googletagmanager.com; frame-ancestors 'self' *.aks-dinmedia.net *.algolia.io *.algolia.net *.algolianet.com *.din.de *.dinmedia.de *.etracker.com; worker-src 'self' blob:; 3 frame-ancestors http://*.t-mobile.nl https://*.t-mobile.nl http://*.tele2.nl https://*.tele2.nl http://*.ben.nl https://*.ben.nl https://app.storyblok.com https://internet.odido.nl http://*.odido.nl https://*.odido.nl 3 frame-ancestors 'self' https://data.disneystreaming.com https://data-staging.disneystreaming.com https://data-dev.disneystreaming.com https://outlooksts.disney.com 3 object-src 'none'; base-uri 'self' *.rediffmailpro.com; frame-ancestors 'self' *.rediffmailpro.com 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.adform.net 360yield.com *.doubleclick.net cdn.tiny.cloud adservice.google.com adservice.google.pl ahrefs.com analytics.tiktok.com apis.google.com app.usercentrics.eu bat.bing.com connect.facebook.net doubleclick.net emplocity.com *.facebook.com *.facebook.net fintech.pkobp.pl fonts.googleapis.com fonts.gstatic.com iko.pkobp.pl kredobank.com.ua ls.hit.gemius.pl m.emplobot.com maps.google.com maps.googleapis.com maps.gstatic.com media.pkobp.pl sr-dev.travatar.ai pkosr.travatar.ai pagead2.googlesyndication.com platform.twitter.com pro.hit.gemius.pl pko.salesmanago.com https://programpartnerski.pkobp.pl googletagmanager.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com optimize.google.com www.google.com www.google.pl www.googleadservices.com www.googletagmanager.com www.gstatic.com www.mojafirma.pkobp.pl www.obligacjeskarbowe.pl www.pkobh.pl www.pkobp.pl www.pkofaktoring.pl www.pkofinance.se www.pkoleasing.pl www.pkopte.pl www.pkotfi.pl www.polecam.pkobp.pl www.wspieramyeksport.pl www.youtube.com www.youtube-nocookie.com www.zakup.obligacjeskarbowe.pl cdn.cookielaw.org https://consent.cookiebot.eu https://consentcdn.cookiebot.eu; worker-src 'self' blob: https://www.pkobp.pl; frame-ancestors https://ias3-ipko-ipko3-pirates-3.perversion.qa.inteligo.com.pl https://www.ipko.pl https://ipko.pkobp.pl; report-uri /report-csp; 3 frame-ancestors 'self' *.shift4shop.com *.3dcart.com *.3dcart.net *.3dc.local *.3dcart.co.uk *.3dcart.ca app.cyfe.com 3 default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' https://cdn.drda.io https://cdn.dreamdata.cloud https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://js-na1.hs-scripts.com https://js.hsforms.net https://js.usemessages.com https://js.hsadspixel.net https://js.hs-banner.com https://js.hubspot.com https://js.hs-analytics.net https://connect.facebook.net https://bat.bing.com *.clarity.ms https://bzrcdn.openai.com https://snap.licdn.com https://www.redditstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/lite-yt-embed.js; style-src 'self' 'unsafe-inline' https://cdn2.hubspot.net https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/lite-yt-embed.css https://www.googletagmanager.com/* https://www.gstatic.com/recaptcha/; img-src 'self' data: *.hubspot.net *.hubspot.com *.googleusercontent.com *.googleusercontent.google.com *.clarity.ms *.bing.com https://alb.reddit.com/ https://www.redditstatic.com/ads/pixel.js https://blog.invgate.com https://c.clarity.ms https://connect.facebook.net https://is1-ssl.mzstatic.com https://ct.capterra.com https://www.googletagmanager.com https://api-na1.hubapi.com https://i.ytimg.com https://forms.hsforms.com https://forms-na1.hsforms.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.nl https://www.google.com.ar https://2529496.fs1.hubspotusercontent-na1.net https://bat.bing.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://consentcdn.cookiebot.com https://bat.bing.net https://static.hsappstatic.net https://www.linkedin.com https://www.facebook.com https://www.google-analytics.com https://region1.google-analytics.com https://perf.hsforms.com https://*.google.co.ve https://www.googleadservices.com https://website-statics.invgate.com https://website-statics-staging.invgate.com https://info.invgate.com https://www.google.co.nz/ads https://trusty-diamond-ad358d6a82.media.strapiapp.com https://strapi.invgate.com https://perf-na1.hsforms.com https://fonts.gstatic.com/* https://imgsct.cookiebot.com https://*.googleadservices.com https://*.doubleclick.net https://*.google.com https://bat.bing.net https://api.vector.co; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://snid.snitcher.com https://www.google.com.ar/ads https://q.quora.com https://pixel-config.reddit.com https://www.redditstatic.com/ads/pixel.js *.hubspot.net *.hubspot.com *.clarity.ms https://pagead2.googlesyndication.com https://monitor.clickcease.com https://analytics.google.com https://e.clarity.ms https://www.facebook.com https://adservice.google.com https://www.google.com https://www.google.nl https://*.google.co.uk https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://api.hubapi.com https://www.google-analytics.com https://region1.google-analytics.com https://bat.bing.com https://stats.g.doubleclick.net https://cdn.linkedin.oribi.io https://connect.facebook.net https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net/pagead https://www.google.nl/pagead https://*.analytics.google.com https://*.ads.linkedin.com/wa/ https://www.googleapis.com https://px.ads.linkedin.com/attribution_trigger https://google.com https://self-trials.invgate.com https://trusty-diamond-ad358d6a82.media.strapiapp.com https://strapi.invgate.com https://cdn.dreamdata.cloud https://cdn.drda.io https://ipinfo.io https://api.ipinfo.io https://conversions-config.reddit.com https://www.redditstatic.com https://www.googleadservices.com/* https://*.googleadservices.com https://*.google.com https://*.doubleclick.net https://static.hsappstatic.net https://*.google.co.ve https://consent.cookiebot.com https://consentcdn.cookiebot.com https://bat.bing.net https://www.googletagmanager.com https://api.vector.co https://tag.demandbase.com https://api-dashboard.artisan.co https://api.company-target.com https://bzr.openai.com; media-src 'self' https://website-statics.invgate.com https://website-statics-staging.invgate.com; frame-src 'self' *.hubspot.com https://www.youtube-nocookie.com https://td.doubleclick.net https://embed.podcasts.apple.com https://tpc.googlesyndication.com https://fast.wistia.net https://www.google.com https://www.google.nl https://forms.hsforms.com https://www.googletagmanager.com https://www.facebook.com https://www.youtube.com https://open.spotify.com https://play.hubspotvideo.com https://meetings.hubspot.com https://demo.arcade.software/ https://interactive.invgate.com https://consentcdn.cookiebot.com https://recaptcha.google.com https://api.vector.co; report-uri https://invgate.report-uri.com/r/d/csp/reportOnly; report-to default; frame-ancestors https://*.invgate.co.uk 3 frame-ancestors 'self' https://deco.cx https://www.deco.cx 127.0.0.1:* localhost:* http://localhost:* http://127.0.0.1:* https://admin.deco.cx/ https://v0-admin.deco.cx/ https://play.deco.cx/ https://admin-cx.deco.page/ https://deco.chat https://admin.decocms.com https://decocms.com 3 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zoho.sg https://*.pagesense.io https://*.cdn-in.pagesense.io https://*.zoho.com https://*.zoho.com.au https://*.zoho.eu https://*.zoho.in https://*.zoho.jp https://*.zohocloud.ca https://*.zoho.uk https://*.zoho.sa https://*.zoho.ae https://*.zohocdn.com https://*.zohowebstatic.com https://zohowebstatic.com https://*.zohosalesiq.com https://*.nimbuspop.com;frame-src 'self' blob: https://*.pagesense.io https://*.zoho.com https://*.zoho.com.au https://*.zoho.eu https://*.zoho.in https://*.zoho.jp https://*.zohocloud.ca https://*.zoho.uk https://*.zoho.sa https://*.zoho.ae https://*.zohocdn.com https://*.zohocloud.ca https://*.zohopublic.com https://*.zohopublic.in https://player.vimeo.com https://*.zohoexternal.com https://*.zohoexternal.in;style-src 'self' 'unsafe-inline' https://*.zoho.com https://*.zoho.in https://*.zohocdn.com https://*.zohopublic.com https://*.zohopublic.in https://*.zohowebstatic.com;img-src 'self' data: https://*.zoho.com https://*.zoho.in https://*.zoho.com.au https://*.zoho.jp https://*.zohocloud.ca https://*.zoho.eu https://*.zoho.sa https://*.zohocdn.com https://*.zohopublic.com https://*.zohopublic.in https://*.zohowebstatic.com https://zohowebstatic.com https://*.zohocorp.com https://i.vimeocdn.com;connect-src 'self' blob: https://*.zoho.sg https://*.localzoho.com https://*.zoho.com https://*.zoho.com.au https://*.zoho.eu https://*.zoho.in https://*.zoho.jp https://*.zohocloud.ca https://*.zoho.uk https://*.zoho.sa https://*.zoho.ae https://*.zohocdn.com https://*.zohopublic.com https://*.zohopublic.in https://*.zohowebstatic.com https://*.zohocorp.com https://static.localzohocdn.com wss://vts.zohopublic.com wss://vts.zohopublic.in;font-src 'self' https://*.zoho.com https://*.zoho.in https://*.zohocdn.com https://*.zohostatic.com https://*.zohowebstatic.com https://*.gstatic.com;media-src 'self' data: https://*.zoho.com https://*.zoho.in https://*.zohocdn.com https://*.zohopublic.com https://*.zohopublic.in https://*.zohowebstatic.com https://*.zohoexternal.com https://*.zohoexternal.in;form-action 'self' https://*.zoho.com https://*.zoho.in;worker-src 'self';manifest-src 'self';object-src 'self' https://*.zohowebstatic.com;frame-ancestors 'self'; 3 frame-ancestors 'self' https://*.sharemagazines.de https://*.sharemagazines-dev.de 3 base-uri self 3 frame-src *.sailpoint.com *.facebook.com *.gartner.com *.google.com *.intellimizeio.com/ https://*.qualified.com https://8495553.fls.doubleclick.net/ https://api.intellimize.co/ https://all-demos-sigma.vercel.app/ https://app.smartsheet.com/ https://bid.g.doubleclick.net/ https://bugcrowd.com/ https://business-demo-bay.vercel.app/ https://business-plus-demo.vercel.app/ https://challenges.cloudflare.com/ https://indd.adobe.com https://platform.twitter.com/ https://pixel.mathtag.com/ https://play.vidyard.com https://player.vimeo.com/ https://recaptcha.google.com/recaptcha/ https://sailpoint2016.wpengine.com https://sp-next-sanity-git-main-sail-point-dev-team.vercel.app/ https://sp-next-sanity.vercel.app/ https://static.hotjar.com https://static.hotjar.io https://syndication.twitter.com/ https://td.doubleclick.net/ https://vars.hotjar.com/ https://vars.hotjar.io/ https://webto.salesforce.com https://w.soundcloud.com/ https://www.brighttalk.com/ https://www.google.com/recaptcha/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://www.linkedin.com/ https://www.podbean.com/ https://www.youtube-nocookie.com/ https://www.youtube.com; style-src *.sailpoint.com https://sp-next-sanity.vercel.app/ https://sp-next-sanity-git-main-sail-point-dev-team.vercel.app/ *.gartner.com https://platform.twitter.com/ https://sailpoint2016.wpengine.com *.twimg.com/ https://code.jquery.com https://c.bing.com https://play.vidyard.com https://fonts.googleapis.com https://res.cloudinary.com https://*.qualified.com https://www.gstatic.com https://www.bloomstreetjapan.com https://www.googletagmanager.com 'unsafe-inline'; script-src blob: *.sailpoint.com https://sp-next-sanity.vercel.app/ https://sp-next-sanity-git-main-sail-point-dev-team.vercel.app/ *.gartner.com *.cloudflare.com/ https://sailpoint2016.wpengine.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.zi-scripts.com/ https://cdn.intellimize.co/ https://tags.clickagy.com/data.js *.zoominfo.com https://cdn.ampproject.org/ https://bugcrowd.com/ https://assets.bugcrowdusercontent.com/ https://ib.adnxs.com/ https://tr.outbrain.com/ https://cdn.smartnews-ads.com/ https://pixel.mathtag.com/ https://pixel.advertising.com/ https://amplify.outbrain.com/ https://cnt.ads.8card.net/ https://cdn.syndication.twimg.com/ https://googleads.g.doubleclick.net https://platform.twitter.com https://api.swiftype.com https://code.jquery.com https://code.createjs.com https://www.amcharts.com https://cdn.amcharts.com/ https://connect.facebook.net/ https://j.6sc.co/ https://trk.techtarget.com/ https://googleadservices.com https://www.googleadservices.com https://www.google-analytics.com/ https://www.googletagmanager.com/ https://script.hotjar.com https://script.hotjar.io https://play.vidyard.com https://static.hotjar.com/ https://static.hotjar.io https://lltrck.com/scripts/ https://snap.licdn.com/ https://ws.zoominfo.com/ https://bat.bing.com/ https://cdn.cookielaw.org/ http://munchkin.marketo.net/ https://munchkin.marketo.net/ https://d.adroll.com/ https://static.cloudflareinsights.com/beacon.min.js/ *.clarity.ms/ https://instant.page/3.0.0 https://cdn.jsdelivr.net/ https://www.googletagmanager.com/gtm.js https://client.prod.mplat-ppcprotect.com/ https://www.redditstatic.com https://res.cloudinary.com https://ob.forroundprince.com https://obs.forroundprince.com https://*.qualified.com https://www.brighttalk.com/ https://home.integrate.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://lib-3pas.admatrix.jp https://webto.salesforce.com https://www.bloomstreetjapan.com https://cdn.amplitude.com https://www.youtube.com/ https://bzrcdn.openai.com 'unsafe-inline' 'unsafe-eval'; img-src data: *.sailpoint.com https://sp-next-sanity.vercel.app/ https://sp-next-sanity-git-main-sail-point-dev-team.vercel.app/ *.twimg.com/ https://sailpoint2016.wpengine.com *.gartner.com https://cnv.event.prod.bidr.io/ https://www.google-analytics.com https://sailpoint-digital-marketing.imgix.net/ https://cdn.cookielaw.org/ https://conversionadvocates.com/ https://www.linkedin.com/ https://t.6sc.co/ https://ups.analytics.yahoo.com/ https://pixel.advertising.com/ https://x.bidswitch.net/ https://cm.g.doubleclick.net/ https://image2.pubmatic.com/ https://beacon.krxd.net/ https://idsync.rlcdn.com/ https://www.googletagmanager.com/ https://pixel.mathtag.com/ https://dsum-sec.casalemedia.com/ https://i.smartnews-ads.com/ https://tr.outbrain.com/ https://sync.taboola.com https://sync.outbrain.com/ https://ads.yahoo.com *.twitter.com https://apt.techtarget.com/ https://dpm.demdex.net/ *.google.com/ https://googleads.g.doubleclick.net https://us-u.openx.net/ https://stags.bluekai.com/ https://www.facebook.com https://io.narrative.io/ https://p.adsymptotic.com/ https://pixel.rubiconproject.com/ https://secure.gravatar.com https://c.bing.com/ *.clarity.ms/ https://lltrck.com/ https://b.6sc.co/ https://bat.bing.com/ https://d.adroll.com https://*.ads.linkedin.com/ https://cdn.vidyard.com/ https://play.vidyard.com https://cdn.sanity.io/ https://ad.ipredictive.com/ https://res.cloudinary.com https://alb.reddit.com https://obs.forroundprince.com https://*.qualified.com https://custom.cvent.com https://googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.in https://*.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.admatrix.jp https://www.bloomstreetjapan.com https://bzr.openai.com 'self'; font-src *.sailpoint.com https://sp-next-sanity.vercel.app/ https://sp-next-sanity-git-main-sail-point-dev-team.vercel.app/ https://sailpoint2016.wpengine.com https://fonts.gstatic.com https://cdn.cookielaw.org data:; frame-ancestors *.sailpoint.com https://www.majorkeytech.com https://sailpoint2016.wpengine.com 'self'; connect-src ws://localhost:3000/_next/webpack-hmr *.sailpoint.com https://*.apicdn.sanity.io https://*.google-analytics.com https://*.googletagmanager.com https://td.doubleclick.net https://*.g.doubleclick.net https://google.com https://www.googleadservices.com https://*.intellimize.co https://cdn.cookielaw.org https://*.google.com https://play.vidyard.com https://*.onetrust.com https://*.googlesyndication.com https://sailpoint-digital-marketing.imgix.net/ https://cdn.sanity.io/ wss://*.qualified.com https://*.qualified.com wss://ws.hotjar.com https://*.hotjar.io https://px.ads.linkedin.com https://*.6sc.co https://*.6sense.com https://o4507821606436864.ingest.us.sentry.io https://pixel-config.reddit.com https://conversions-config.reddit.com https://www.redditstatic.com https://secure.adnxs.com https://626-lto-177.mktoresp.com https://*.clarity.ms https://js.zi-scripts.com https://ws.zoominfo.com https://obs.forroundprince.com https://analytics-api.integrate.com https://ibc-flow.techtarget.com https://webto.salesforce.com https://www.facebook.com https://*.amplitude.com https://bzr.openai.com; 3 default-src 'self' https: data: blob: screenpal-launcher: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob: http://localhost:* http://127.0.0.1:*; media-src 'self' https: blob:; connect-src 'self' https: wss: http://localhost:* http://127.0.0.1:*; frame-src 'self' https: screenpal-launcher:; font-src 'self' https: data:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 3 default-src 'self'; child-src 'self' blob:; connect-src 'self' cdn.bizibly.com *.algolianet.com *.g2crowd.com *.g2.com *.clarity.ms *.6sense.com *.6sc.co *.strategy.com d6nlxununhert.cloudfront.net *.twitter.com *.ads-twitter.com *.googleadservices.com rgitsprdstorage.blob.core.windows.net unpkg.com cdn.jsdelivr.net assets.contentstack.io cdn.contentstack.io api.smartrecruiters.com *.coveo.com *.cvent.com t.co pubsub.googleapis.com cdn.bizible.com munchkin.marketo.net images.contentstack.io *.typekit.net ws.zoominfo.com *.luckyorange.com *.visitors.live js.zi-scripts.com settings.luckyorange.com *.google.com cdn.cookielaw.org *.akamaihd.net *.demdex.net *.doubleclick.net www.googletagmanager.com *.google-analytics.com *.strategy.com *.microstrategy.com *.mktoutil.com *.calendly.com microstrategy.sharepoint.com *.omtrdc.net *.wistia.net *.wistia.com swb-pd-amecc5bkdjechdb2.z01.azurefd.net *.mktoresp.com platform.cloud.coveo.com; font-src 'self' *.wistia.net *.strategy.com *.microstrategy.com *.typekit.net data: fonts.gstatic.com; frame-src 'self' *.strategy.com form.typeform.com www.youtube-nocookie.com insight.adsrvr.org www.googletagmanager.com *.wistia.com *.wistia.net *.cvent.com *.demdex.net *.doubleclick.net *.microstrategy.com *.youtube.com *.calendly.com calendly.com; img-src 'self' blob: *.twitter.com t.co *.redditstatic.com *.clarity.ms *.wistia.net *.strategy.com cdn.bizible.com cdn.cookielaw.org images.contentstack.io adservice.google.com rgitsprdstorage.blob.core.windows.net microstrategy.sharepoint.com *.cvent.com *.adsymptotic.com *.ads.linkedin.com *.akamaihd.net *.demdex.net *.doubleclick.net *.everesttech.net *.google-analytics.com *.googletagmanager.com *.gstatic.com *.linkedin.com *.microstrategy.com *.omtrdc.net *.wistia.com *.6sense.com *.6sc.co data: static.cloud.coveo.com www.google.com; media-src 'self' *.akamaihd.net *.microstrategy.com *.wistia.com blob: data: fast.wistia.net; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.6sense.com *.6sc.co *.clarity.ms *.redditstatic.com *.g2crowd.com *.strategy.com *.twitter.com *.ads-twitter.com *.calendly.com *.wistia.net cdn.bizible.com cdn.bizibly.com tools.luckyorange.com js.adsrvr.org js.zi-scripts.com js.sentry-cdn.com *.cvent.com *.mktoweb.com *.googleanalytics.com *.akamaihd.net *.doubleclick.net *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.licdn.com *.marketo.net *.microstrategy.com *.onetrust.com *.wistia.com blob: assets.adobedtm.com cdn.cookielaw.org *.coveo.com wcs.naver.net ws.zoominfo.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.microstrategy.com *.strategy.com *.typekit.net cdn.cookielaw.org static.cloud.coveo.com; worker-src 'self' 'unsafe-inline' blob: data:; frame-ancestors 'none'; 3 default-src 'self' ssa.tophotels.pro tophotels.pro google.com *.google.com gstatic.com *.gstatic.com cdn.tophotels.ru s.toursites.ru video.tophotels.ru video2.tophotels.ru *.tophotels.ru travelbooking.ru carsrent.ru *.carsrent.ru netlog.ru hotelscheck.com.ru tophotels.pro toursales.ru tourindex.ru tophotels.ru travelpassport.ru *.travelpassport.ru ; connect-src 'self' ssa.tophotels.pro tophotels.pro google.com *.google.com gstatic.com *.gstatic.com cdn.tophotels.ru amc.yandex.ru s.toursites.ru *.netlog.ru video.tophotels.ru video2.tophotels.ru travelbooking.ru carsrent.ru *.carsrent.ru netlog.ru hotelscheck.com.ru tophotels.pro toursales.ru tourindex.ru tophotels.ru travelpassport.ru *.travelpassport.ru *.adriver.ru 'unsafe-inline' 'unsafe-eval' 'self'; font-src 'self' ssa.tophotels.pro tophotels.pro google.com *.google.com gstatic.com *.gstatic.com cdn.tophotels.ru tophotels.ru s.toursites.ru ; img-src 'self' ssa.tophotels.pro tophotels.pro google.com *.google.com gstatic.com *.gstatic.com cdn.tophotels.ru s.toursites.ru amc.yandex.ru blob: data: *; media-src 'self' ssa.tophotels.pro tophotels.pro google.com *.google.com gstatic.com *.gstatic.com cdn.tophotels.ru s.toursites.ru blob: video.tophotels.ru video2.tophotels.ru tophotels.ru *.tophotels.ru; frame-src 'self' ssa.tophotels.pro tophotels.pro google.com *.google.com gstatic.com *.gstatic.com s.toursites.ru *.tophotels.ru tophotels.ru *.tophotels.ru carsrent.ru *.carsrent.ru *.vimeo.com vimeo.com *.dailymotion.com *.vk.com vk.com *.adriver.ru; script-src 'self' ssa.tophotels.pro tophotels.pro google.com *.google.com gstatic.com *.gstatic.com cdn.tophotels.ru s.toursites.ru *.tophotels.ru tophotels.ru carsrent.ru *.carsrent.ru netlog.ru tophotels.pro toursales.ru tourindex.ru tophotels.ru travelpassport.ru *.travelpassport.ru *.adriver.ru 'unsafe-inline' 'unsafe-eval' 'self'; style-src 'self' cdn.tophotels.ru s.toursites.ru carsrent.ru tophotels.ru *.carsrent.ru netlog.ru tophotels.pro toursales.ru tourindex.ru tophotels.ru travelpassport.ru *.travelpassport.ru google.com *.google.com gstatic.com *.gstatic.com *.adriver.ru 'unsafe-inline' 'self'; 3 frame-ancestors 'self' http://*.essilor.com https://*.essilor.com; 3 default-src 'self' data: ws: blob: *.nr-data.net fonts.gstatic.com fonts.googleapis.com *.facebook.com *.office365.com *.kuka.com *.kuka.cn *.mouseflow.com *.zscaler.net d2csxpduxe849s.cloudfront.net kuka-digital-sphere.pages.dev; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net *.newrelic.com *.embedly.com *.embed.ly *.googletagmanager.com *.doubleclick.net *.googleadservices.com *.facebook.net snap.licdn.com *.linkedin.com *.bing.com *.ads-twitter.com *.twitter.com *.bizographics.com *.baidu.com *.google.com *.gstatic.com *.instabot.io *.yandex.ru *.convertwork.cn *.hotjar.com *.cavy9soho.com *.cloudflare.com *.force.com *.my.salesforce.com *.salesforceliveagent.com *.kuka.com *.cloudflareinsights.com *.mouseflow.com *.zscaler.net *.youtube.com kuka-digital-sphere.pages.dev *.adroll.com ingest.promptwatch.com; img-src 'self' data: *; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.force.com *.kuka.com *.googletagmanager.com *.mouseflow.com kuka-digital-sphere.pages.dev; child-src 'self' blob: *.vimeo.com; frame-src 'self' *.quartalflife.com *.youtube.com *.youtu.be *.youku.com *.embedly.com *.embed.ly player.youku.com https: *.doubleclick.net snap.licdn.com *.presono.com *.linkedin.com *.juicer.io *.audi-mediacenter.com *.office365.com *.mouseflow.com; connect-src 'self' data: ws: blob: *.googleadservices.com *.googlesyndication.com adservice.google.com *.instabot.io *.yandex.ru *.hotjar.com *.bing.com *.office365.com *.kuka.com *.mouseflow.com *.convertwork.cn noembed.com *.google.com *.doubleclick.net *.linkedin.com *.googletagmanager.com *.promptwatch.com; frame-ancestors 'self' https://kuka.presono.com *.kuka.com *.sandbox.my.site.com 3 frame-ancestors 'self' https://*.pmo.ee https://*.tvnet.lv https://*.apollo.lv https://*.tvn.lv 3 frame-ancestors *.seoclerk.com *.seoclerks.com *.listingdock.com *.codeclerks.com *.wordclerks.com *.pixelclerks.com; 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.advantech.com *.advantech.com.cn static.zdassets.com static.hotjar.com cdnjs.cloudflare.com www.gstatic.com www.googletagmanager.com dev.visualwebsiteoptimizer.com js.hs-analytics.net script.hotjar.com www.google-analytics.com lpcdn.lpsnmedia.net dashboard.whoisvisiting.com snap.licdn.com va.v.liveperson.net connect.facebook.net accdn.lpsnmedia.net fast.wistia.com fast.wistia.net api.ipify.org www.google.com hm.baidu.com az416426.vo.msecnd.net www.youtube.com www.clarity.ms kit.fontawesome.com cdn-cookieyes.com cdn.jsdelivr.net openfpcdn.io challenges.cloudflare.com app.vwo.com cdn.mouseflow.com js.sentry-cdn.com maps.google.com maps.googleapis.com browser.sentry-cdn.com api.map.baidu.com dlswbr.baidu.com maponline0.bdimg.com googleads.g.doubleclick.net www.googleadservices.com pi.pardot.com adv.my.site.com static.cloudflareinsights.com scripts.clarity.ms adv--staging.sandbox.my.site.com cdn.dreamdata.cloud www.advantech.tw bat.bing.net bat.bing.com sc.lfeeder.com; img-src 'self' data: *.advantech.com *.advantech.com.cn campaign.advantech.online *.visualwebsiteoptimizer.com advantechfiles.blob.core.windows.net advdownload.blob.core.windows.net app.vwo.com c.bing.com c.clarity.ms cdn-cookieyes.com chart.googleapis.com dashboard.whoisvisiting.com dev.visualwebsiteoptimizer.com embed-ssl.wistia.com fast.wistia.com fonts.gstatic.com googleads.g.doubleclick.net hm.baidu.com img.videocc.net px.ads.linkedin.com www.facebook.com www.google-analytics.com www.google.com www.google.com.tw www.googleadservices.com www.googletagmanager.com www.linkedin.com maps.googleapis.com maps.gstatic.com api.map.baidu.com maponline0.bdimg.com maponline1.bdimg.com webmap0.bdimg.com miao.baidu.com fast.wistia.net bat.bing.com tr-rc.lfeeder.com tr.lfeeder.com; style-src 'self' 'unsafe-inline' *.advantech.com *.advantech.com.cn fonts.googleapis.com app.vwo.com dev.visualwebsiteoptimizer.com cdnjs.cloudflare.com kit.fontawesome.com ka-p.fontawesome.com www.googletagmanager.com api.map.baidu.com fast.wistia.com n.foxdsgn.com advantechfiles.blob.core.windows.net adv.my.site.com adv--staging.sandbox.my.site.com cdn.jsdelivr.net; font-src 'self' data: *.advantech.com *.advantech.com.cn fast.wistia.com fast.wistia.net fonts.gstatic.com script.hotjar.com ka-p.fontawesome.com; worker-src 'self' blob:; frame-ancestors 'self' *.advantech.com *.advantech.com.cn *.iotmart.com adv--iotmartdev.sandbox.my.site.com campaign.advantech.online ottlive.hinet.net www.google.com; object-src 'none'; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hubspot.com *.hsforms.net *.hs-analytics.net *.hs-scripts.com *.hscollectedforms.net *.usemessages.com *.hubapi.com *.hsadspixel.net *.hs-banner.com *.wistia.com fast.wistia.net https://www.google.com https://www.gstatic.com https://cdn-cookieyes.com *.cdn-cookieyes.com *.googletagmanager.com *.doubleclick.net *.google-analytics.com wisepops.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: blob: https:; frame-src 'self' www.youtube.com *.youtube-nocookie.com *.hubspot.com *.hsforms.com *.hsforms.net *.hs-sites-eu1.com https://forms-eu1.hsforms.com https://www.google.com https://recaptcha.google.com fast.wistia.net *.wistia.com; connect-src 'self' *.hubspot.com *.hsforms.com *.hsforms.net https://forms-eu1.hsforms.com *.hs-analytics.net *.hubapi.com *.s3.amazonaws.com *.litix.io *.wistia.com pipedream.wistia.com https://www.google.com https://www.gstatic.com *.cookieyes.com https://log.cookieyes.com https://cdn-cookieyes.com *.cdn-cookieyes.com *.google-analytics.com *.doubleclick.net *.analytics.google.com *.google.co.uk *.microsoftonline.com; object-src 'none'; base-uri 'self'; form-action 'self' *.hsforms.com *.hsforms.net https://forms-eu1.hsforms.com *.hubspot.com *.hubapi.com ; media-src 'self' https://*.hubspotusercontent-eu1.net https://*.youtube.com 3 default-src https://*.visualwebsiteoptimizer.com https://app.vwo.com https://appdsv.omie.com.br https://*.omie.cloud https://vc.hotjar.io https://js.intercomcdn.com https://in.hotjar.com https://api.hubapi.com https://www.facebook.com wss://nexus-websocket-a.intercom.io https://*.hubspot.com https://ws6.hotjar.com wss://ws6.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.dataunion.com.br https://api-iam.intercom.io; script-src 'self' 'unsafe-inline' 'report-sample' blob: https://*.getdemo.com.br https://*.kameleoon.io https://*.safetymails.com https://*.croct.io https://static.hsappstatic.net https://pagead2.googlesyndication.com https://tag.goadopt.io https://www.clarity.ms https://*.bing.com https://analytics.tiktok.com https://js.hs-scripts.com https://*.googleapis.com https://www.omie.com.br https://*.omie.cloud https://*.gomerlin.com.br https://*.amplitude.com https://js.hubspot.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.hsappstatic.net https://*.taboola.com https://api.segment.io https://tag.goadopt.io https://api.segment.com https://track.segment.com https://cdn.segment.com https://measurement-api.criteo.com https://*.clarity.ms https://*.bing.com https://apis.google.com https://analytics.tiktok.com https://appdsv.omie.com.br https://snap.licdn.com https://optimize.google.com https://www.googleanalytics.com https://www.googleoptimize.com https://cse.google.com https://www.google.com https://www.google.com.br https://cdn.jsdelivr.net https://googleads.g.doubleclick.net https://js.usemessages.com https://stackpath.bootstrapcdn.com https://www.dataunion.com.br https://js.hscollectedforms.net https://www.googletagmanager.com https://*.hotjar.com https://*.tailtarget.com https://*.intercom.io https://js.hsleadflows.net https://js.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://www.googleadservices.com https://js.hsforms.net https://js.hs-scripts.com https://connect.facebook.net https://forms.hsforms.com https://www.google-analytics.com https://app.omie.com.br https://cdnjs.cloudflare.com https://js.intercomcdn.com https://*.criteo.com https://static.criteo.net https://preview-new.mkt.omie.us; style-src 'self' 'unsafe-inline' 'report-sample' https://www.omie.com.br https://*.omie.cloud https://app.vwo.com https://*.visualwebsiteoptimizer.com https://*.gomerlin.com.br https://optimize.google.com https://preview-new.mkt.omie.us https://cdn.omie.com.br https://use.fontawesome.com https://cdn.jsdelivr.net https://fonts.googleapis.com; frame-src https://*.omie.com.br https://youtube.com https://www.youtube-nocookie.com https://scores.securityscorecard.io https://thorn-plot-94c.notion.site https://www.googletagmanager.com https://td.doubleclick.net https://app.getdemo.com.br https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.firebaseapp.com https://*.google.com https://*.omie.com.br https://*.omie.cloud https://preview-001.omie.cloud https://*.hubspot.com https://chat-convecao24.firebaseapp.com https://www.googletagmanager.com https://td.doubleclick.net https://intercom-sheets.com/ https://cdn.omie.com.br/ https://cdndsv.omie.com.br/ https://www.intercom-reporting.com/ https://www.facebook.com/ https://player.vimeo.com/ https://www.youtube.com https://optimize.google.com https://www.googletagmanager.com/ https://bid.g.doubleclick.net/ https://vars.hotjar.com/ https://tags.t.tailtarget.com/ https://forms.hsforms.com/ https://*.criteo.com https://static.criteo.net; img-src 'self' data: blob: https://*.safetymails.com https://googleads.g.doubleclick.net https://secure.gravatar.com https://*.amazonaws.com https://*.gomerlin.com.br https://dev.visualwebsiteoptimizer.com https://measurement-api.criteo.com https://ads.stickyadstv.com https://*.clarity.ms https://*.bing.com https://www.googletagmanager.com https://s3-sa-east-1.amazonaws.com https://www.linkedin.com https://px.ads.linkedin.com https://www.google-analytics.com https://sync-t1.taboola.com https://*.criteo.com https://criteo-partners.tremorhub.com https://criteo-sync.teads.tv https://sync-criteo.ads.yieldmo.com https://cm.g.doubleclick.net https://*.hubspot.com https://*.omie.com.br padding https://*.omie.cloud https://conpass.blob.core.windows.net https://fast.conpass.io https://static.intercomassets.com https://omie-b8c3f6a65bc3.intercom-attachments-5.com https://app.intercom.com/ https://*.intercomcdn.com/ https://omiexperience-sa.intercom-attachments-7.com/ https://omie-b8c3f6a65bc3.intercom-attachments-1.com/ https://omie-b8c3f6a65bc3.intercom-attachments-9.com/ https://*.googleapis.com https://*.gstatic.com *.google.com *.google.com.br *.googleusercontent.com *.facebook.net *.facebook.com https://*.hsforms.com; font-src 'self' data: https://app.vwo.com https://*.visualwebsiteoptimizer.com https://use.typekit.net https://script.hotjar.com https://js.intercomcdn.com https://fonts.gstatic.com https://*.omie.com.br/omiesaga/ https://*.omie.cloud/ https://use.fontawesome.com; connect-src 'self' https://*.getdemo.com.br https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.kameleoon.io https://*.safetymails.com https://*.croct.io https://static.hsappstatic.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://axeptio-api.goadopt.io https://analytics-ipv6.tiktokw.us wss://app.gomerlin.com.br https://*.gomerlin.com.br https://*.amplitude.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://omie.ravena.app https://*.taboola.com https://api.hsforms.com https://disclaimer-api.goadopt.io https://api.segment.io https://cdn.jsdelivr.net https://api.segment.com https://track.segment.com https://cdn.segment.com https://measurement-api.criteo.com https://*.clarity.ms https://*.bing.com https://google.com https://securetoken.googleapis.com https://identitytoolkit.googleapis.com https://firestore.googleapis.com https://analytics.tiktok.com https://px.ads.linkedin.com https://analytics.google.com https://sslwidget.criteo.com https://blog.omie.com.br https://forms.hscollectedforms.net https://viacep.com.br https://appdsv.omie.com.br https://api.crm.ops.omie.us https://apidev.crm.ops.omie.us https://api.plm.ops.omie.us https://www.omie.com.br https://*.omie.cloud https://preview-001.omie.cloud https://app.omie.com.br https://forms.hsforms.com wss://nexus-websocket-a.intercom.io/ https://api-iam.intercom.io https://hubspot-forms-static-embed.s3.amazonaws.com https://www.dataunion.com.br https://www.google-analytics.com https://*.doubleclick.net https://www.google.com https://www.google.com.br https://www.facebook.com/ https://*.hubspot.com https://*.hubapi.com https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com; form-action https://intercom.help https://api-iam.intercom.io https://www.facebook.com https://*.omie.com.br https://*.omie.cloud https://omie.clickmeeting.com/ https://app.omie.com.br https://www.omie.com.br https://forms.hsforms.com; media-src blob: https://js.intercomcdn.com https://*.hubspotusercontent-na1.net https://preview.omie.com.br https://www.omie.com.br https://*.omie.cloud https://omie.com.br; frame-ancestors 'self'; object-src 'none'; worker-src blob: https://*.omie.com.br https://*.omie.cloud; base-uri 'self'; 3 media-src * blob:; worker-src * data: blob:; default-src https: *.cdn.imgeng.in *.akamaized.net *.golfnow.com *.golfnow.io *.golfnow.com.au *.golfnow.eu *.teeoff.com *.teeitup.com *.golfid.io data: blob; connect-src http: ws: self; script-src https: data: *.cdn.imgeng.in *.akamaized.net *.golfnow.com *.golfnow.io *.golfnow.com.au *.golfnow.eu *.teeoff.com 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com; style-src https: data: blob: *.cdn.imgeng.in *.akamaized.net *.golfnow.com *.golfnow.io *.golfnow.com.au *.golfnow.eu *.teeoff.com https://fonts.googleapis.com 'unsafe-inline'; img-src https: blob: data: *.cdn.imgeng.in *.akamaized.net *.golfnow.com *.golfnow.io *.golfnow.com.au *.golfnow.eu *.teeoff.com s3.amazonaws.com https://www.google-analytics.com *.googleusercontent.com; font-src https: data: *.cdn.imgeng.in *.akamaized.net *.golfnow.com *.golfnow.io *.golfnow.com.au *.golfnow.eu *.teeoff.com https://fonts.gstatic.com; frame-src https: data: *.cdn.imgeng.in *.akamaized.net *.golfnow.com *.golfnow.io *.golfnow.com.au *.golfnow.eu *.teeoff.com *.teeitup.com *.golfid.io; frame-ancestors 'self' *.onlinereservationsystems.com; 3 frame-ancestors 'self' *.partnerize.com *.paperflite.com *.cleverstory.io; report-uri https://partnerize.com?gdsih-csp-report; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; connect-src 'self' https: wss:; img-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; frame-src 'self' https: blob: data:; 3 default-src 'self' https: wss: data: 'unsafe-inline' 'unsafe-eval'; 3 script-src 'unsafe-eval' 'unsafe-inline' 'self' *.addthis.com *.addthisedge.com *.adnxs.com *.adobedtm.com *.ads-twitter.com *.adsrvr.org *.adsymptotic.com *.advertising.com *.akamaihd.net *.amazon-adsystem.com *.bing.com *.bluekai.com *.c212.net *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.crwdcntrl.net *.cvent-assets.com *.cvent.com *.d1emzqdvia1vut.cloudfront.net *.demandbase.com *.demdex.net *.doubleclick.net *.drivetheweb.com *.errors.adobeaemcloud.com *.everesttech.net *.exelator.com *.google-analytics.com *.google.com *.google.ie *.googleadservices.com *.googletagmanager.com *.gstatic.com *.highcharts.com *.hotjar.com *.ibm.com *.ispot.tv *.jquery.com *.jsdelivr.net *.linkedin.com *.marketo.net *.marketo.com *.mathtag.com *.medallia.eu *.mediaroom.com *.mktoweb.com *.mktoweb.net *.moatads.com *.newrelic.com *.nr-data.net *.omtrdc.net *.pippio.com *.prnewswire.com *.qualtrics.com *.adobeaemcloud.com *.redditstatic.com *.rlcdn.com *.s81c.com *.simplecast.com *.simplecastcdn.com *.sitescout.com *.survata.com *.taboola.com *.talentbrew.com *.talentbrew.io *.teads.tv *.tealiumiq.com *.tidaltv.com *.tiqcdn.com *.tiqcdn.com *.trustarc.com *.truste-svc.net *.truste.com *.trustradius.com *.turn.com *.twitter.com *.typekit.net *.w55c.net *.wallst.com *.yahoo.co.jp *.yahoo.com *.youtube.com *.company-target.com *.licdn.com *.pdst.fm *.kyndryl.com *.scene7.com *.cloudfront.net *.unpkg.com unpkg.com *.seg.js *.adobe.com *.googleapis.com amplify.outbrain.com tr.outbrain.com wave.outbrain.com *.yimg.jp *.trendemon.com *.flourish.studio *.adoberesources.net *.googleusercontent.com; object-src 'none'; worker-src blob: 3 frame-ancestors 'self' http://*.commonwealthu.edu https://*.commonwealthu.edu http://commonwealthu.prod.acquia-sites.com https://commonwealthu.prod.acquia-sites.com http://commonwealthustage.prod.acquia-sites.com https://commonwealthustage.prod.acquia-sites.com http://commonwealthudev.prod.acquia-sites.com https://commonwealthudev.prod.acquia-sites.com http://commonwealthura.prod.acquia-sites.com https://commonwealthura.prod.acquia-sites.com http://commonwealth.ddev.site https://commonwealth.ddev.site https://*.vimeo.com https://*.youtube.com https://bbox.blackbaudhosting.com 3 frame-ancestors 'self' *.evergage.com *.evgnet.com *.vimeo.com *.hotjar.com *.apps.bsci.com https://fuse-event.com farapulse.stage.apps.bsci.com eligibility.farapulse.com www.relievant.com www.intracept.com relievantstage.wpengine.com https://urologynation.com https://urologynationsandbox.skipta.com; frame-src 'self' blob: https:; default-src 'self' 'unsafe-inline' blob: https:; font-src 'self' https: data:; script-src 'self' blob: data: https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data:; connect-src 'self' wss: data: https: blob:; 3 default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' multimedia.gsb.bund.de *.netzlabor.de *.spaceview.net; connect-src 'self' tracking.netmind-cloud.com *.itzbund.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' multimedia.gsb.bund.de piwik.itzbund.de webtv.bundestag.de *.googleapis.com *.google.com *.gstatic.com *.instagram.com tracking.netmind-cloud.com twemoji.maxcdn.com maps.wikimedia.org *.ytimg.com *.youtube.com *.youtube-nocookie.com *.googlevideo.com *.openstreetmap.org *.spaceview.net *.netzlabor.de *.blitzvideoserver.de *.video-stream-hosting.de *.3qsdn.com *.start.video-stream-hosting.de *.cloudfront.net vimeo.com multimedia.gsb.bund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' piwik.itzbund.de multimedia.gsb.bund.de *.fbcdn.net *.youtube.com *.youtube-nocookie.com *.googlevideo.com; frame-src 'self' *.google.com *.gstatic.com webtv.bundestag.de *.cdninstagram.com *.fbcdn.net *.youtube.com *.youtube-nocookie.com *.instagram.com twemoji.maxcdn.com maps.wikimedia.org *.youtube.com *.youtube-nocookie.com *.googlevideo.com *.openstreetmap.org piwik.itzbund.de *.blitzvideoserver.de *.video-stream-hosting.de *.3qsdn.com *.video-stream-hosting.de *.cloudfront.net vimeo.com multimedia.gsb.bund.de; img-src 'self' data: *.google.com *.gstatic.com piwik.itzbund.de webtv.bundestag.de *.youtube.com *.twimg.com *.fbcdn.net *.youtube-nocookie.com *.cdninstagram.com *.openstreetmap.org twemoji.maxcdn.com maps.wikimedia.org *.youtube-nocookie.com *.googlevideo.com vimeo.com *.cloudfront.net *.gsb.bund.de; frame-ancestors 'self' admin.prod.gsb.bmel.in.bund.de;upgrade-insecure-requests; 3 default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; media-src 'self' https: blob:; frame-src 'self' https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none'; upgrade-insecure-requests 3 frame-ancestors 'self' *.mexc.me *.mexc.com *.mexceu.com *.mexc.kr *.mexc.co sensors.xiaoxiame.com *.365huo.xyz *.mexc.fm *.mexc.in *.mexc.us *.greentreeone.com *.gdiii.xyz *.mcaketech.com *.mexc.ae *.mexc.cl *.mexc.ee *.mexc.ge *.mexccex.com *.mexcsite.com *.mx-exchange.co *.winappnet.com *.weappnet.com *.getappnet.com *.cryptolinkapp.com *.mexc.io *.mexc.cc *.coldbookfly.ru *.hottreeswim.ru *.linkappmarketing.com *.payapptoday.com 3 default-src 'self' region1.analytics.google.com *.doubleclick.net my.blendee.com c.blendee.com www.google.com www.ferrero.com acsbapp.com www.google-analytics.com cdn.acsbapp.com region1.google-analytics.com fonts.gstatic.com analytics.ferrero.com privacyportal-eu.onetrust.com static.addtoany.com vod.ferrero.com cdn.cookielaw.org geolocation.onetrust.com ssl.google-analytics.com privacyportal-eu-cdn.onetrust.com; script-src 'self' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' carewebform-uix.ferrero.com privacyportal-eu-cdn.onetrust.com fonts.googleapis.com cdn.userway.org; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' carewebform-uix.ferrero.com cdn.userway.org tra.neodatagroup.com googleads.g.doubleclick.net c.neodatagroup.com ssl.google-analytics.com privacyportal-eu-cdn.onetrust.com eu-ma.sam4m.com tracker.marinsm.com www.youtube.com www.gstatic.com c.blendee.com www.google.com www.google-analytics.com acsbapp.com analytics.ferrero.com cdn.cookielaw.org www.googletagmanager.com static.addtoany.com cdn.acsbapp.com; img-src 'self' data: blob: carewebform-uix.ferrero.com www.google.be www.youronlinechoices.com cdn.userway.org aax-eu.amazon-adsystem.com tracker.neodatagroup.com www.google.com www.google.it ssl.google-analytics.com www.googletagmanager.com *.doubleclick.net cdn.cookielaw.org privacy-policy.truste.com fonts.gstatic.com lh3.googleusercontent.com *.googleusercontent.com; style-src 'self' 'unsafe-inline' *.onetrust.com www.googletagmanager.com fonts.googleapis.com; object-src 'none'; frame-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.userway.org cdn77.api.userway.org www.googletagmanager.com fast.wistia.net fast.wistia.com static.addtoany.com www.facebook.com *.doubleclick.net www.youtube.com www.youtube-nocookie.com geolocation.onetrust.com ssl.google-analytics.com privacyportal-eu-cdn.onetrust.com c.blendee.com www.google.com; connect-src 'self' geolocation.onetrust.com www.google-analytics.com www.google.it carewebformbackend.ferrero.com www.googleadservices.com www.google.be ad.doubleclick.net region1.analytics.google.com www.google.com my.blendee.com cdn77.api.userway.org cdn.userway.org www.googletagmanager.com www.googleservices.com googleads.g.doubleclick.net analytics.ferrero.com privacyportal-eu.onetrust.com cdn.cookielaw.org cdn.acsbapp.com region1.google-analytics.com api.userway.org; font-src 'self' 'unsafe-inline' 'unsafe-eval' carewebform-uix.ferrero.com cdn.userway.org cdn77.api.userway.org fonts.gstatic.com; 3 base-uri 'self'; default-src 'self' www.google.com www.googletagmanager.com nordlayer.com *.nordlayer.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googleadservices.com www.google.com www.gstatic.com *.google-analytics.com https://*.googletagmanager.com https://www.googleanalytics.com https://pagead2.googlesyndication.com googleads.g.doubleclick.net nordlayer.com *.nordlayer.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.typeform.com *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com https://a.quora.com/qevents.js *.redditstatic.com *.alb.reddit.com px.ads.linkedin.com *.oribi.io snap.licdn.com analytics.twitter.com static.ads-twitter.com connect.facebook.net bat.bing.com p.adsymptotic.com sentry.netaltr.com cdn.wisepops.com app.getwisp.co wisepops.net cdn.wisepops.net loader.wisepops.com *.salesloft.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://cdn.veritonic.com https://s1.nordcdn.com https://*.clarity.ms https://c.bing.com https://cdn.dreamdata.cloud https://cdn.drda.io; connect-src 'self' *.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com www.googleadservices.com https://ad.doubleclick.net https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat cdn.growthbook.io nordlayer.com *.nordlayer.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com *.typeform.com *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com static.hsappstatic.net *.redditstatic.com *.alb.reddit.com pixel-config.reddit.com conversions-config.reddit.com www.linkedin.com px.ads.linkedin.com snap.licdn.com connect.facebook.net www.facebook.com p.adsymptotic.com sentry.netaltr.com activity.wisepops.com tracking.wisepops.com app.getwisp.co wisepops.net loader.wisepops.com bat.bing.com *.salesloft.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.veritonicmetrics.com https://sb.nordcdn.com https://*.clarity.ms https://c.bing.com https://cdn.dreamdata.cloud; form-action 'self' webto.salesforce.com https://www.facebook.com/tr *.hsforms.com https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io; frame-src 'self' www.google.com www.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io www.youtube.com https://www.youtube.com/ www.youtube-nocookie.com https://www.youtube-nocookie.com/ *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com *.typeform.com notifications.wisepops.com wisepops.net loader.wisepops.com https://*.clarity.ms https://c.bing.com; img-src * data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://ct.capterra.com js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com https://q.quora.com *.alb.reddit.com px.ads.linkedin.com t.co analytics.twitter.com static.ads-twitter.com *.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://www.googleadservices.com https://google.com www.gstatic.com https://pagead2.googlesyndication.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat cdn.wisepops.com tracking.wisepops.com dx4nr741tfc02.cloudfront.net wisp-production-storage.s3.amazonaws.com cdn.wisepops.net assets.wisepops.net loader.wisepops.com www.facebook.com blob: data: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://*.veritonicmetrics.com https://*.clarity.ms https://c.bing.com; style-src 'self' 'unsafe-inline' *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net *.typeform.com https://fonts.googleapis.com https://s1.nordcdn.com https://sb.nordcdn.com https://*.clarity.ms https://c.bing.com; media-src 'self' 'unsafe-inline' nordlayer.com *.nordlayer.com false https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com; font-src 'self' data: www.google.com fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://js.intercomcdn.com https://fonts.intercomcdn.com https://*.clarity.ms https://c.bing.com; child-src 'self' *.hsforms.com https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://fast.wistia.net https://*.clarity.ms https://c.bing.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.americorps.gov https://code.jquery.com https://www.googletagmanager.com https://dap.digitalgov.gov https://app.powerbigov.us https://www.bing.com https://cdn.gtranslate.net; object-src 'none'; style-src 'self' 'unsafe-inline' https://www.americorps.gov https://app.powerbigov.us; img-src 'self' data: https://www.americorps.gov https://app.powerbigov.us https://www.googletagmanager.com https://p1.aprimocdn.net https://adam.americorps.gov; media-src 'self'; frame-src 'self' https://www.americorps.gov https://app.powerbigov.us https://www.youtube.com https://www.youtube-nocookie.com https://data.americorps.gov; font-src 'self' data: https://app.powerbigov.us; connect-src 'self' https://dap.digitalgov.gov https://analytics.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://js.monitor.azure.com https://dc.applicationinsights.us https://wabi-us-gov-virginia-api.analysis.usgovcloudapi.net https://pbivisuals.powerbigov.us https://app.powerbigov.us https://appsource.powerbi.com https://data.americorps.gov; report-uri /report-csp-violation; upgrade-insecure-requests 3 https://dynamic.criteo.comhttps://sslwidget.criteo.com 3 upgrade-insecure-requests; frame-ancestors 'self'; report-uri https://cspabuse.itpays.no 3 default-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src blob: https: 3 default-src 'self' https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.youtube-nocookie.com https://*.googlevideo.com https://cdn.sanity.io https://consentcdn.cookiebot.com https://*.bugherd.com ws.pusherapp.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://vercel.live https://*.vercel.live https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.vimeo.com https://*.youtube.com https://www.youtube.com https://*.googletagmanager.com https://tagmanager.google.com https://browser.sentry-cdn.com https://*.firstup.io https://*.bugherd.com https://js.storylane.io https://*.google-analytics.com https://analytics.google.com https://code.jquery.com https://ws.pusherapp.com https://consent.cookiebot.com https://*.pusher.com https://*.marketo.com https://dx.mountain.com https://www.redditstatic.com https://www.clickcease.com https://*.stackadapt.com https://cdn.jsdelivr.net https://snap.licdn.com https://qvdt3feo.com https://px.mountain.com https://*.doubleclick.net https://*.googleadservices.com https://js.zi-scripts.com https://bat.bing.com https://*.hotjar.com https://tracking.g2crowd.com https://munchkin.marketo.net https://*.mktoutil.com https://consentcdn.cookiebot.com https://*.qualified.com https://js.qualified.com https://*.facebook.com https://*.facebook.net https://*.clickagy.com; style-src 'self' 'unsafe-inline' blob: https://*.vimeo.com *.firstup.io https://*.bugherd.com https://express.theroishop.com https://fonts.googleapis.com https://*.googletagmanager.com https://tagmanager.google.com *.marketo.com https://*.stackadapt.com https://*.qualified.com https://*.clickagy.com; img-src 'self' blob: data: https://cdn.sanity.io https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.vimeocdn.com https://*.ytimg.com https://i.ytimg.com https://*.bugherd.com https://imgsct.cookiebot.com https://alb.reddit.com https://bugherd-attachments.s3.amazonaws.com https://d2iiunr5ws5ch1.cloudfront.net *.bugherd.com https://*.linkedin.com https://px.ads.linkedin.com https://*.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.qualified.com https://*.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://*.bing.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.clickagy.com; connect-src 'self' https://*.wistia.com https://*.wistia.net http://*.wistia.com http://*.wistia.net https://*.litix.io https://*.algolia.net https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.google.com https://cdn.sanity.io https://consentcdn.cookiebot.com https://*.bugherd.com https://imgsct.cookiebot.com ws.pusherapp.com https://*.pusher.com wss://*.pusher.com sessions.bugsnag.com https://api.storylane.io ats.comparably.com https://*.hockeystack.com https://*.stackadapt.com https://*.linkedin.com https://px.ads.linkedin.com https://*.reddit.com https://pixel-config.reddit.com https://cdn.jsdelivr.net https://browser.sentry-cdn.com https://*.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com https://*.zi-scripts.com https://*.zoominfo.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://api.lever.co https://*.googletagmanager.com https://*.qualified.com wss://*.qualified.com https://*.bing.com https://*.mktoresp.com https://*.mktoutil.com https://*.marketo.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.g2.com https://*.facebook.com https://*.facebook.net https://*.clickagy.com; frame-src https://vercel.live https://*.vercel.live https://fast.wistia.com https://fast.wistia.net https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://express.theroishop.com https://player.simplecast.com https://*.bugherd.com *.marketo.com https://consentcdn.cookiebot.com *.firstup.io https://www.googletagmanager.com https://*.qualified.com https://*.clickagy.com; media-src 'self' blob: data: mediastream: https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.vimeocdn.com https://cdn.sanity.io https://*.bugherd.com https://imgsct.cookiebot.com https://bugherd-attachments.s3.amazonaws.com https://d2iiunr5ws5ch1.cloudfront.net https://*.qualified.com https://*.clickagy.com; font-src 'self' data: https://*.wistia.com https://*.wistia.net https://*.vimeo.com https://*.firstup.io https://*.bugherd.com https://fonts.googleapis.com https://fonts.gstatic.com https://d2iiunr5ws5ch1.cloudfront.net https://*.qualified.com; worker-src blob: https://*.qualified.com; child-src blob: https://*.qualified.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.marketo.com https://*.mktoweb.com https://*.bugherd.com https://sessions.bugsnag.com https://sockjs.pusher.com https://*.firstup.io; frame-ancestors 'self' https://www.sanity.io https://*.sanity.studio https://*.vercel.app http://localhost:3333 http://localhost:3000; upgrade-insecure-requests; 3 object-src *.calgary.ca:*; frame-ancestors *.calgary.ca:* *.coc.ca *.arcgis.com 3 frame-ancestors 'self' https://navibot.dev https://*.navibot.dev 3 default-src 'self' 'unsafe-inline'; child-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.telia.fi *.google.com *.google.fi addsearch.com *.addsearch.com *.searchcdn.com *.lekane.net *.survicate.com *.twitter.com *.ads-twitter.com *.facebook.net *.facebook.com code.jquery.com b2b-eshop-preprod.online-channels.com *.online-channels.com cdn.jsdelivr.net *.licdn.com unpkg.com *.igodigital.com *.linkedin.com *.cloudfront.net https://googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com *.browser-intake-datadoghq.eu *.blueconic.net *.kampyle.com *.medallia.eu *.decibelinsight.net *.decibel.com blob: cdn.cookielaw.org videobot.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com cdn.signalfx.com *.googleapis.com *.gstatic.com https://www.datadoghq-browser-agent.com/ https://coverage.ddc.teliasonera.net *.youtube.com *.youtube-nocookie.com *.bc0a.com *.addsearch.com *.customersaas.com https://cdn.stape.io *.spotify.com *.cloudflarestream.com *.insided.com *.algolianet.com *.algolia.net *.ziftsolutions.com *.cloudflare.com *.amazonaws.com; style-src 'self' 'unsafe-inline' *.telia.fi *.google.com *.google.fi addsearch.com *.addsearch.com *.searchcdn.com *.cloudfront.net hello.myfonts.net b2b-eshop-preprod.online-channels.com *.online-channels.com cdn.jsdelivr.net *.lekane.net *.igodigital.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com *.blueconic.net *.kampyle.com *.medallia.eu *.googletagmanager.com *.gstatic.com *.customersaas.com *.spotify.com *.cloudflarestream.com *.insided.com *.algolianet.com *.algolia.net *.ziftsolutions.com *.cloudflare.com *.amazonaws.com; img-src 'self' data: *.telia.fi *.facebook.com *.facebook.net *.amazonaws.com *.cloudfront.net beacon.krxd.net *.linkedin.com *.searchcdn.com addsearch.com *.addsearch.com *.igodigital.com t.co *.atdmt.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://*.google.fi https://*.google.de https://*.google.ee https://*.google.es https://*.google.fr https://*.google.se https://*.google.lu https://*.google.hu https://*.google.iq https://*.google.ru https://google.com https://*.googlesyndication.com https://www.google.co.uk https://www.google.co.in https://www.google.com.tr https://ad.doubleclick.net *.blueconic.net *.kampyle.com *.medallia.eu geolocation.onetrust.com cdn.cookielaw.org *.cloudflarestream.com https://optimizely.teliacompany.com https://www.sttinfo.fi https://maps.googleapis.com https://maps.gstatic.com *.googletagmanager.com *.gstatic.com *.customersaas.com *.spotify.com *.cloudflarestream.com *.youtube.com *.insided.com *.algolianet.com *.algolia.net *.ziftsolutions.com *.cloudflare.com *.amazonaws.com; font-src 'self' data: https://fonts.gstatic.com *.kampyle.com *.medallia.eu *.googletagmanager.com *.gstatic.com *.customersaas. *.spotify.com *.cloudflarestream.com *.ziftsolutions.com *.cloudflare.com *.amazonaws.com; object-src 'none'; media-src 'self' data: blob: *.telia.fi *.cloudflarestream.com *.ziftsolutions.com *.cloudflare.com *.amazonaws.com; connect-src 'self' wss://*.telia.fi hello.myfonts.net *.doubleclick.net *.lekane.net wss://*.lekane.net *.searchcdn.com *.facebook.com *.igodigital.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.fi https://google.com https://*.googlesyndication.com https://www.googleadservices.com *.browser-intake-datadoghq.eu *.blueconic.net https://px.ads.linkedin.com *.kampyle.com *.medallia.eu *.decibelinsight.net wss://*.decibelinsight.net *.decibel.com geolocation.onetrust.com privacyportal-de.onetrust.com cdn.cookielaw.org *.videobot.com *.cloudflarestream.com https://optimizely.teliacompany.com rum-ingest.eu0.signalfx.com https://*.telia.fi https://maps.googleapis.com https://maps.gstatic.com *.bc0a.com *.addsearch.com *.customersaas.com *.spotify.com *.cloudflarestream.com *.insided.com *.youtube.com *.algolianet.com *.algolia.net *.ziftsolutions.com *.cloudflare.com *.amazonaws.com; frame-src 'self' platform.twitter.com *.doubleclick.net *.google.com *.google.fi *.facebook.com *.searchcdn.com *.survicate.com *.cloudfront.net https://www.googletagmanager.com https://cat.telia.fi *.blueconic.net *.kampyle.com *.medallia.eu videobot.com https://optimizely.teliacompany.com *.youtube-nocookie.com *.youtube.com https://coverage.ddc.teliasonera.net https://teliacompany.speedtestcustom.com *.spotify.com *.cloudflarestream.com *.ziftsolutions.com *.cloudflare.com *.amazonaws.com; worker-src 'self' blob: *.lekane.net *.telia.fi *.ziftsolutions.com *.cloudflare.com *.amazonaws.com 3 default-src 'self' * data: blob: https: *.safetydetectives.com safetydetectives.com *.safetydetective.com safetydetective.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.safetydetectives.com safetydetectives.com *.safetydetective.com safetydetective.com cdn.cookielaw.org *.tctm.co *.tctm.xyz *.clarity.ms *.peacebanana.com *.ostrichesica.com *.googlesyndication.com *.cloudflareinsights.com *.cheqzone.com *.cloudfront.net *.datadoghq-browser-agent.com *.gstatic.com *.google.com *.alooma.com *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.hhtpp.com *.facebook.net *.dropbox.com *.bing.com *.yandex.ru *.quora.com *.yimg.com sp.analytics.yahoo.com *.hotjar.com *.ipify.org blob: data:; style-src 'self' data: blob: 'unsafe-inline' *;connect-src 'self' data: blob: https: safetydetectives.com *.safetydetectives.com safetydetective.com *.safetydetective.com *.google-analytics.com *.doubleclick.net *.google.com *.hhtpp.com *.yandex.ru *.gravatar.com wss://*.hotjar.com *.wp.com;font-src 'self' data: blob: *.googletagmanager.com *.googleapis.com *.gstatic.com ; 3 upgrade-insecure-requests; default-src 'self' 'unsafe-inline' ametekcdn2.azureedge.net ametekcdn.azureedge.net; script-src 'self' 'unsafe-inline' dunkermotoren-sr.eu.encoway.cloud static.lightning.force.com b.static.lightning.force.com js.driftt.com widget.drift.com ametekemip--dev.sandbox.my.site.com ametekemip.my.site.com enterprise-demo.tfaforms.net js.sentry-cdn.com affimvip.baidu.com static.lightning.force.com creaform.my.salesforce.com c.la1-core1.sfdc-58ktaz.salesforceliveagent.com creaform.my.site.com d.la1-core1.sfdc-58ktaz.salesforceliveagent.com chatai-cdn.ametek.com ametekpds.us17.list-manage.com mc.us17.list-manage.com static.addtoany.com fast.wistia.net wappass.baidu.com hmcdn.baidu.com fast.wistia.com static.zdassets.com affim.baidu.com safe.cdn.bcebos.com aifanfan.baidu.com a.omappapi.com go.zygo.com aff-im.cdn.bcebos.com cdnjs.cloudflare.com goutong.baidu.com player.youku.com hm.baidu.com js.hscollectedforms.net dmpstatic.cdn.bcebos.com sofire.bdstatic.com aiff.cdn.bcebos.com cdn.syndication.twimg.com api.twitter.com platform.twitter.com cdn.jsdelivr.net embed.tawk.to shopapi.dunkermotoren.de dwebshoptest.plan-software.de aff-im.cdn.bcebos.com ametekcdn2.azureedge.net ametekcdn.azureedge.net cdn.cookielaw.org go.phantomcamera.es go.phantomcameras.cn go.phantomcamera.fr wistia.com wistia.net go.ametekesp.com go.powervar.com go.precitech.com go.precitech.com.de *.creaform-engineering.com *.zygo.tw *.introtek.com *.alphasense.com *.egsautomation.de *.rtds.com *.skybitz.com *.ametek.com *.ametekweb.com go.sunpowerinc.com go.ameteksi.com go.ortec-online.com ajax.cloudflare.com static.cloudflareinsights.com facebook.com facebook.net connect.facebook.net googleads.g.doubleclick.net google-analytics.com www.google-analytics.com ssl.google-analytics.com google.com www.google.com support.google.com www.googleadservices.com fonts.googleapis.com ajax.googleapis.com maps.googleapis.com fonts.gstatic.com www.gstatic.com *.hsforms.com *.hsforms.net *.hs-analytics.net *.hs-scripts.com *.hsadspixel.net *.hubspot.com js.hscollectedforms.net t.sharethis.com code.jquery.com ws.sharethis.com info.ametek-land.com go.spectro.com twitter.com player.vimeo.com/api/ webtraxs.com youku.com youtube.com www.youtube.com go.techmfg.com go.techmfg.cn go.techmfg.de go.techmfg.jp go.techmfg.es chimpstatic.com cox`okie-cdn.cookiepro.com emip.ametek.com emipi.ametek.com geolocation.onetrust.com go.ametekaerospaceanddefense.com go.ametek-airtechnology.com go.ametekcalibration.cn go.ametekcalibration.com go.ametek-coining.com go.ametekfactoryautomation.com *.ametek-measurement.com go.ameteksfms.com go.ametekstc.com go.ametektest.cn go.ametektest.com go.ametektest.fr go.ametekusg.com go.brookfieldengineering.cn go.brookfieldengineering.com go.brookfieldengineering.de go.brookfieldengineering.in go.brookfieldengineering.uk go.drexelbrook.com go.emip.ametek.com go.fmhaerospace.com go.hughes-treitler.com go.hunterspringandreel.com go.pd-tech.com go.phantomcamera.de go.phantomhighspeed.com go.phantomcamera.fr go.phantomcameras.cn go.precitech.cn go.precitech.co.kr go.precitech.com.de go.precitech.jp go.precitech.tw go.rauland.com go.rauland.com go.spectro.de go.spectro.jp go.store.csiheat.com go.zygo.cn go.zygo.com.cn go.zygo.de go.zygo.jp *.zygo.kr go.zygo.sg go.zygo.th info.ametekland.com info.ametek-land.com info.ameteksurfacevision.com listadmin.ametek.com pardot1022173.ametek.com privacyportal.onetrust.com www.linkedin.com players.brightcove.net brightcvove.com brightinfo.com vjs.zencdn.net *.amazonaws.com js.hscta.net js.hs-banner.com js.hsleadflows.net analytics-eu.clickdimensions.com widgets.wp.com snap.licdn.com *.salesforceliveagent.com service.force.com bat.bing.com *.salesforce.com www.googletagmanager.com static.doubleclick.net fwww.surveymonkey.com fr.surveymonkey.com es.surveymonkey.com nl.surveymonkey.com de.surveymonkey.com jp.surveymonkey.com help.surveymonkey.com it.surveymonkey.com apply.surveymonkey.com pt.surveymonkey.com ru.surveymonkey.com sv.surveymonkey.com fi.surveymonkey.com da.surveymonkey.com zh.surveymonkey.com ko.surveymonkey.com no.surveymonkey.com tr.surveymonkey.com secure.surveymonkey.com contribute.surveymonkey.com fdeveloper.surveymonkey.com godaddy.surveymonkey.com linuxfoundation.surveymonkey.com eu.surveymonkey.com cx.surveymonkey.com investor.surveymonkey.com widget.surveymonkey.com engage.surveymonkey.com smenterprise.surveymonkey.com smaudience.surveymonkey.com blog.electiontracking.surveymonkey.com seattle.surveymonkey.com de.eu.surveymonkey.com uber.surveymonkey.com jpmc.surveymonkey.com en.surveymonkey.com ourstory.surveymonkey.com carerstrust.surveymonkey.com lp.surveymonkey.com demo.cx.surveymonkey.com cx-help.surveymonkey.com engage-help.surveymonkey.com images.surveymonkey.com kab.surveymonkey.com sgs.surveymonkey.com mobile.surveymonkey.com att.surveymonkey.com thearcus.surveymonkey.com winnipeg.surveymonkey.com petersburgmedicalcenter.surveymonkey.com cs.surveymonkey.com cy.surveymonkey.com el.surveymonkey.com ro.surveymonkey.com asm.surveymonkey.com cfchildren.surveymonkey.com ga.surveymonkey.com kooziegroup.surveymonkey.com mcafee.surveymonkey.com audience.surveymonkey.com fit.eu.surveymonkey.com click.outbound.surveymonkey.com secure.eu.surveymonkey.com anpost.eu.surveymonkey.com oesb.surveymonkey.com kla.surveymonkey.com nycdohmh.surveymonkey.com csl.surveymonkey.com wwww.surveymonkey.com blumenthalarts.surveymonkey.com api.surveymonkey.com labelmaster.surveymonkey.com thelynxgroup.surveymonkey.com try.surveymonkey.com assets01.surveymonkey.com lcoa.surveymonkey.com bnymellon.surveymonkey.com placer.surveymonkey.com ayuda.surveymonkey.com avon.surveymonkey.com auth0.surveymonkey.com maximus.surveymonkey.com sasb.surveymonkey.com nmhs.surveymonkey.com csp.surveymonkey.com strong365northwell.surveymonkey.com be.surveymonkey.com augustatech.surveymonkey.com woodplc.surveymonkey.com go.surveymonkey.com fr.eu.surveymonkey.com nychealthandhospitals.surveymonkey.com hca.surveymonkey.com nhl.surveymonkey.com slsnz.surveymonkey.com ds.surveymonkey.com ww.surveymonkey.com symplr.surveymonkey.com ca.surveymonkey.com aktionen.surveymonkey.com pncpa.surveymonkey.com seiu1021.surveymonkey.com kornferry.surveymonkey.com streetwisepartners.surveymonkey.com gamechange.surveymonkey.com jp.blog.surveymonkey.com google.surveymonkey.com styles.surveymonkey.com 222.surveymonkey.com pg.surveymonkey.com engineering.surveymonkey.com scitechinstitute.orgwww.surveymonkey.com surveymonkeysv.surveymonkey.com aide.surveymonkey.com levelaccess.surveymonkey.com roamrobotics.surveymonkey.com smonkey.surveymonkey.com resources.surveymonkey.com ar.surveymonkey.com bg.surveymonkey.com bs.surveymonkey.com et.surveymonkey.com hr.surveymonkey.com hu.surveymonkey.com id.surveymonkey.com is.surveymonkey.com lv.surveymonkey.com ms.surveymonkey.com pl.surveymonkey.com sk.surveymonkey.com sl.surveymonkey.com sr.surveymonkey.com th.surveymonkey.com tl.surveymonkey.com uk.surveymonkey.com vi.surveymonkey.com scfirststeps.surveymonkey.com www.qlzn6i1l.com secure.neck6bake.com go.universalanalyzers.com go.store.universalanalyzers.com cdn-images.mailchimp.com gallery.mailchimp.com downloads.mailchimp.com login.mailchimp.com kb.mailchimp.com blog.mailchimp.com us1.admin.mailchimp.com admin.mailchimp.com styleguide.mailchimp.com polyfill.mailchimp.com developer.mailchimp.com templates.mailchimp.com ux.mailchimp.com api.mailchimp.com connect.mailchimp.com us16.admin.mailchimp.com us19.admin.mailchimp.com us7.admin.mailchimp.com us17.admin.mailchimp.com us3.admin.mailchimp.com us10.admin.mailchimp.com us2.admin.mailchimp.com us11.admin.mailchimp.com us20.admin.mailchimp.com us4.admin.mailchimp.com us12.admin.mailchimp.com us18.admin.mailchimp.com us14.admin.mailchimp.com us8.admin.mailchimp.com apidocs.mailchimp.com us13.admin.mailchimp.com experts.mailchimp.com us1.api.mailchimp.com img.mailchimp.com us15.admin.mailchimp.com status.mailchimp.com us5.admin.mailchimp.com us6.admin.mailchimp.com us9.admin.mailchimp.com us1.mailchimp.com ls.mailchimp.com devs.mailchimp.com shopware.mailchimp.com postcards.mailchimp.com delivery.mailchimp.com plums.mailchimp.com linkedin.mailchimp.com mixpanel.mailchimp.com partner-assets.mailchimp.com patreon.mailchimp.com inspiration.mailchimp.com us11.mailchimp.com us9.mailchimp.com us16.mailchimp.com us19.mailchimp.com us20.mailchimp.com us15.mailchimp.com creative.mailchimp.com posthaste.mailchimp.com us3.mailchimp.com us6.mailchimp.com us4.mailchimp.com us12.mailchimp.com us14.mailchimp.com us2.mailchimp.com us12.api.mailchimp.com us10.mailchimp.com sopresto.mailchimp.com us17.mailchimp.com us7.mailchimp.com us18.mailchimp.com us13.mailchimp.com us8.mailchimp.com us20.api.mailchimp.com meowmart.mailchimp.com fastfives.mailchimp.com us2.api.mailchimp.com us5.mailchimp.com designlab.mailchimp.com us7.api.mailchimp.com img2.mailchimp.com us11.api.mailchimp.com us5.api.mailchimp.com us16.api.mailchimp.com sawa-usercontent.mailchimp.com us9.api.mailchimp.com docmakers.mailchimp.com us6.api.mailchimp.com help.mailchimp.com resources.mailchimp.com us15.api.mailchimp.com nonprofits.mailchimp.com m.mailchimp.com us4.api.mailchimp.com us19.api.mailchimp.com lurvin.mailchimp.com jungle.mailchimp.com us17.api.mailchimp.com us10.api.mailchimp.com us18.api.mailchimp.com us3.api.mailchimp.com privacyportal-cdn.onetrust.com privacyportal-eu-cdn.onetrust.com privacyportal-eu.onetrust.com www.onetrust.com privacyportal.onetrust.com cdn-ukwest.onetrust.com app.onetrust.com privacyportalde-cdn.onetrust.com geolocation.onetrust.com app-de.onetrust.com privacyportal-de.onetrust.com cdn-apac.onetrust.com app-eu.onetrust.com privacyportal-hulu-cdn.onetrust.com privacyportal-uk-cdn.onetrust.com cdn.onetrust.com privacyportal-uk.onetrust.com privacyportal-br-cdn.onetrust.com my.onetrust.com privacyportal-br.onetrust.com cruise-requests.my.onetrust.com privacyportal-na01-cdn.onetrust.com privacyportal-fr.onetrust.com iapp.onetrust.com sncf-portail.my.onetrust.com dpd-paris2.my.onetrust.com app.elq.onetrust.com tastemade-privacy.my.onetrust.com cdn-au.onetrust.com privacyportal-au.onetrust.com images.elq.onetrust.com allegion-privacy.my.onetrust.com privacyportal-ch.onetrust.com tcf.onetrust.com ggoutfitters-requests.my.onetrust.com privacyportal-apac.onetrust.com portal-verint.my.onetrust.com app-au.onetrust.com developer.onetrust.com uat-de.onetrust.com movado-privacy.my.onetrust.com privacyportal-allstate-cdn.onetrust.com proximospirits-privacy.my.onetrust.com free.onetrust.com privacy-portal-manpowergroup.my.onetrust.com privacyportal-discover-cdn.onetrust.com web.onetrust.com privacyportal-uat-cdn.onetrust.com privacyportal-uatde-cdn.onetrust.com info.onetrust.com support.onetrust.com chownow-requests.my.onetrust.com privacyportal-cisco-cdn.onetrust.com tv.onetrust.com data-protection-man-privacy.my.onetrust.com privacyportal-free-cdn.onetrust.com privacyportaluat.onetrust.com privacyportal-apac-cdn.onetrust.com privacyportal-free.onetrust.com smartfit-dsar.my.onetrust.com privacyportal-ch-cdn.onetrust.com privacyportaltrial-cdn.onetrust.com app-uk.onetrust.com app-apac.onetrust.com app-br.onetrust.com app-ca.onetrust.com app-ch.onetrust.com privacyportal-na01.onetrust.com lunagrill-requests.my.onetrust.com cbcfcu-requests.my.onetrust.com dropps-privacy.my.onetrust.com otcc-training.onetrust.com tdic-privacy.my.onetrust.com caire-requests.my.onetrust.com goodworldwide-requests.my.onetrust.com telteclgpd-privacy.my.onetrust.com privacyportaluatde.onetrust.com certain-requests.my.onetrust.com engieimpact-privacy.my.onetrust.com agriness-privacy.my.onetrust.com trial.onetrust.com ideas.onetrust.com lendico-privacy.my.onetrust.com go.pardot.com pi.pardot.com go.obcorp.com go.csiheat.com go.cardinaluhp.com go.barbenanalytical.com optinmonster.com cdn.datatables.net s7.addthis.com v1.addthisedge.com 'unsafe-eval'; style-src * 'unsafe-inline' creaform.my.site.com service.force.com ton.twimg.com platform.twitter.com ametekcdn2.azureedge.net ametekcdn.azureedge.net tagmanager.google.com fonts.googleapis.com; font-src * 'unsafe-inline' ametekcdn2.azureedge.net ametekcdn.azureedge.net fonts.gstatic.com data:; img-src * 'unsafe-inline' ametekcdn2.azureedge.net ametekcdn.azureedge.net img.mailchimp.com img2.mailchimp.com images.surveymonkey.com images.elq.onetrust.com ssl.gstatic.com www.gstatic.com www.google-analytics.com googleads.g.doubleclick.net www.google.com data: abs.twimg.com pbs.twimg.com ton.twimg.com platform.twitter.com syndication.twitter.com; frame-src * 'unsafe-inline' programmablepower.my.salesforce-sites.com js.driftt.com widget.drift.com enterprise-demo.tfaforms.net service.force.com twitter.com platform.twitter.com syndication.twitter.com player.vimeo.com/video/ ametekcdn2.azureedge.net ametekcdn.azureedge.net; connect-src * 'unsafe-inline' creaform.my.site.com ametekcdn2.azureedge.net ametekcdn.azureedge.net www.google-analytics.com cloudflareinsights.com; worker-src 'self' ametekcdn2.azureedge.net ametekcdn.azureedge.net blob:; media-src 'self' *.akamaihd.net manifest.prod.boltdns.net *.wistia.com aifanfan.baidu.com ametekcdn2.azureedge.net ametekcdn.azureedge.net blob:; object-src 'unsafe-inline' ametekcdn2.azureedge.net ametekcdn.azureedge.net aifanfan.baidu.com 'self' 3 default-src 'none'; connect-src 'self' api.passwordpurgatory.com bloghelpers.troyhunt.com links.services.disqus.com syndication.twitter.com troyhunt.ghost.io cdn.jsdelivr.net/ghost/ *.google-analytics.com *.privacymanager.io; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com; frame-src www.linkedin.com disqus.com c.disquscdn.com www.youtube.com player.vimeo.com twitter.com platform.twitter.com syndication.twitter.com omny.fm pastebin.com www.google.com; img-src 'self' c.disquscdn.com referrer.disqus.com syndication.twitter.com platform.twitter.com www.gravatar.com storage.ghost.io *.twimg.com data:; script-src 'self' passwordpurgatory.com c.disquscdn.com disqus.com troyhunt.disqus.com cdnjs.cloudflare.com platform.twitter.com platform.x.com cdn.syndication.twimg.com syndication.twitter.com gist.github.com/troyhunt/ cdn.jsdelivr.net/ghost/ www.googletagmanager.com *.privacymanager.io www.google.com www.gstatic.com static.cloudflareinsights.com ajax.cloudflare.com 'sha256-26FfYB0WAsKHsnA92jxqaHCDCNo7MV3NrLe1wgLwuI4=' 'sha256-4JqPqO/eQLWuWw1AE7dCvI9hPwiBcw0gy7uoLqS0ncg='; style-src 'self' 'unsafe-inline' c.disquscdn.com cdnjs.cloudflare.com platform.twitter.com ton.twimg.com assets-cdn.github.com github.githubassets.com fonts.googleapis.com; form-action *.twitter.com; media-src 'self'; frame-ancestors 'self' troyhunt.ghost.io; upgrade-insecure-requests; report-uri https://troyhunt.report-uri.com/r/d/csp/enforce 3 default-src gap://ready file://* * data:; style-src 'self' http://* https://* 'unsafe-inline'; script-src 'self' http://* https://* 'unsafe-inline' 'unsafe-eval' blob: 3 frame-ancestors https://*.com 3 frame-ancestors https://*.lifecell.ua https://*.lifecell.com.ua 3 frame-ancestors 'self' mijn.hosting.nl 3 child-src 'self' *.facebook.com connect.facebook.net www.googletagmanager.com *.vidyard.com *.trustarc.com go.jaggaer.com jaggaer.cuvama.com https://*.qualified.com; connect-src 'self' ad.doubleclick.net www.googleadservices.com unpkg.com *.googletagmanager.com *.googlesyndication.com pi.pardot.com go.jaggaer.com *.google-analytics.com *.wpengine.com yoast.com *.g.doubleclick.net *.trustarc.com *.linkedin.com *.6sense.com secure.adnxs.com js.zi-scripts.com *.6sc.co *.qualified.com ws.zoominfo.com wss://ws.qualified.com play.vidyard.com *.clarity.ms *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; default-src 'self' wss://*.qualified.com play.vidyard.com; font-src 'self' *.gstatic.com *.bootstrapcdn.com data: fonts.gstatic.com cdn.jsdelivr.net; form-action 'self' *.facebook.com connect.facebook.net; frame-src 'self' www.slideshare.net *.facebook.com *.doubleclick.net *.google.com blob: www.google.com play.vidyard.com go.jaggaer.com jaggaer.cuvama.com *.trustarc.com app.qualified.com play.goconsensus.com *.youtube.com www.youtube-nocookie.com *.linkedin.com player.vimeo.com *.soundcloud.com platform.twitter.com www.googletagmanager.com promo.com *.g.doubleclick.net *.fls.doubleclick.net; frame-ancestors 'self' pi.pardot.com; img-src 'self' blob: pi.pardot.com *.googlesyndication.com *.youtube.com match.adsrvr.org go.jaggaer.com wec-assets.terminus.services *.ytimg.com *.bing.com *.doubleclick.net *.googletagmanager.com *.w.org *.gravatar.com *.google-analytics.com *.gstatic.com *.vidyard.com data: ts.w.org s.w.org ps.w.org *.linkedin.com *.trustarc.com consent.truste.com *.6sc.co *.clarity.ms https://*.qualified.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; media-src 'self' s.w.org *.qualified.com mediastream:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.truste.com https://cdnjs.cloudflare.com https://choices.trustarc.com https://consent.trustarc.com https://connect.facebook.net https://content.linkedin.com https://go.jaggaer.com https://graph.facebook.com https://googletagmanager.com https://js.zi-scripts.com https://js.qualified.com https://js.facebook.com https://j.6sc.co https://okt.to https://play.vidyard.com https://pi.pardot.com https://platform.linkedin.com https://static-exp1.licdn.com https://snap.licdn.com https://static.oktopost.com https://tagmanager.google.com https://ws-assets.zoominfo.com https://www.gartner.com https://www.googletagmanager.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com cdn.jsdelivr.net js.zi-scripts.com; script-src-elem 'self' 'unsafe-inline' unpkg.com *.usbrowserspeed.com *.googlesyndication.com wec-assets.terminus.services tracking.intentsify.io https://*.truste.com https://cdnjs.cloudflare.com https://choices.trustarc.com https://consent.trustarc.com https://connect.facebook.net https://content.linkedin.com https://go.jaggaer.com https://graph.facebook.com https://googletagmanager.com https://js.zi-scripts.com https://js.qualified.com https://js.facebook.com https://j.6sc.co https://okt.to https://play.vidyard.com https://pi.pardot.com https://platform.linkedin.com https://static-exp1.licdn.com https://snap.licdn.com https://static.oktopost.com https://tagmanager.google.com ws-assets.zoominfo.com https://www.gartner.com https://www.googletagmanager.com cdn.jsdelivr.net js.zi-scripts.com *.clarity.ms *.youtube.com platform.twitter.com blob: data: *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' *.licdn.com *.qualified.com cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com www.googletagmanager.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' *.licdn.com *.qualified.com cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com www.googletagmanager.com cdn.jsdelivr.net *.googleapis.com *.gstatic.com; style-src-attr 'self' 'unsafe-inline' *.licdn.com *.qualified.com cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com www.googletagmanager.com cdn.jsdelivr.net; worker-src 'self' blob: *.qualified.com; upgrade-insecure-requests; 3 upgrade-insecure-requests; frame-ancestors 'self' blaetterkatalog.musicstore.de 3 default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'self'; img-src 'self'; frame-src 'self'; font-src 'self' data:; object-src 'none'; frame-ancestors 'none'; 3 frame-ancestors intapp.seismic.com intapp.com www.intapp.com seismic.com www.seismic.com intapp.wpengine.com intapp.gcs-web.com investors.intapp.com; 3 default-src 'none'; connect-src 'self'; frame-ancestors 'self'; child-src 'self'; frame-src 'none'; script-src 'self' 'sha256-ieoeWczDHkReVBsRBqaal5AFMlBtNjMzgwKvLqi/tSU='; style-src 'self' 'sha256-F8cu7BKRl4BoblXMReCG+tDSra+yGY8oApi037xhk/8=' 'sha256-4Su6mBWzEIFnH4pAGMOuaeBrstwJN4Z3pq/s1Kn4/KQ=' 'sha256-hMEnt2qMHAmQZgCjWJ4hweKuzi+3YEdUo00f8k/ebMo=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; font-src 'self'; img-src 'self'; object-src 'none'; base-uri 'self'; worker-src 'self'; form-action 'self' 3 frame-ancestors 'self' http://*.essilorluxottica.com https://*.essilorluxottica.com; 3 frame-ancestors https://*.builder.io https://builder.io http://localhost:3000 https://*.bodi.com https://*.vercel.app 3 frame-ancestors https://www.iway.ch https://www.sak-digital.ch https://freerideict.ch https://www.crossdata.ch https://www.telcomnet.ch https://www.rhone.ch https://www.uli-l.ch https://www.pc-zbinden.ch https://www.2com.ch https://www.jpag.ch https://www.bluenetsys.ch https://www.bluenetworksystems.ch https://www.agiba.ch https://agiba.ch https://www.ewh.ch https://isptv.ch https://www.isptv.ch https://profifon.ch https://starnet24.com https://www.jobs.ch https://login.ispvoip.ch 3 default-src * http: https:; style-src 'self' 'unsafe-inline' http: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: http: https: portalcloud.oni.pt; frame-ancestors 'self' *.gigas.com portalcloud.oni.pt grupogigas.com;img-src data: 'self' 'unsafe-inline' 'unsafe-eval' http: https:; 3 frame-ancestors 'self' https://www.ringier-advertising.ch https://ringier-staging.hacepiby.cyon.site https://blumen.palantirfoundry.de; 3 frame-ancestors 'self' www.cv.ee cv.ee www.cv.lv cv.lv www.prakse.lv prakse.lv https://www.fritz-henkel.com https://fritz-henkel.com dm.henkel-dam.com; 3 default-src 'self' https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud https://*.bswhealth.com https://bswcdndesign-prod.bswhealth.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://*.unpkg.com https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud https://*.bswhealth.com https://*.bswhealth2.com http://pages.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://*.bswapi.com https://*.bswhive.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.gstatic.com https://*.googleapis.com https://www.google.com https://maps.google.com https://cdn.plyr.io https://player.vimeo.com https://vimeo.com https://*.vimeo.com https://www.youtube.com https://*.marketo.net http://*.marketo.net https://*.mktoresp.com http://*.mktoresp.com https://*.hilemangroup.com https://quiz.hilemangroup.com https://cdn.amplitude.com https://*.amplitude.com https://experiment-overlay.prod.us-west-2.amplitude.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.gstatic.com https://*.googleapis.com https://www.google.com https://maps.google.com https://*.qualtrics.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://*.cloudfront.net https://cdn.jsdelivr.net https://*.azureedge.net https://cdnjs.cloudflare.com https://unpkg.com https://*.bablic.com https://www.instagram.com https://*.instagram.com https://www.facebook.com https://*.facebook.com https://platform.twitter.com https://*.twimg.com https://*.pinterest.com https://*.vercel.app https://*.findhelp.com https://*.mypurecloud.com wss://*.mypurecloud.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud https://*.bswhealth.com https://*.bswhealth2.com http://pages.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://*.bswapi.com https://*.bswhive.com https://*.cloudfront.net https://cdn.jsdelivr.net https://*.azureedge.net https://cdnjs.cloudflare.com https://unpkg.com https://cdn.amplitude.com https://*.amplitude.com https://experiment-overlay.prod.us-west-2.amplitude.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.gstatic.com https://*.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://maps.google.com https://*.qualtrics.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://*.hilemangroup.com https://quiz.hilemangroup.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud https://*.bswhealth.com https://*.bswhealth2.com http://pages.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://*.bswapi.com https://*.bswhive.com https://*.cloudfront.net https://cdn.jsdelivr.net https://*.azureedge.net https://cdnjs.cloudflare.com https://unpkg.com https://cdn.amplitude.com https://*.amplitude.com https://experiment-overlay.prod.us-west-2.amplitude.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.gstatic.com https://*.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://maps.google.com https://*.qualtrics.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://*.hilemangroup.com https://quiz.hilemangroup.com; img-src 'self' data: blob: https: http: https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud; font-src 'self' data: https://*.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://fonts.gstatic.com https://*.cloudfront.net https://cdn.jsdelivr.net https://*.azureedge.net https://cdnjs.cloudflare.com https://unpkg.com https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud https://*.cdn.office.net; connect-src 'self' data: https://vimeo.com https://*.vimeo.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.gstatic.com https://*.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://maps.google.com https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud https://*.bswhealth.com https://*.bswhealth2.com http://pages.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://*.bswapi.com https://*.bswhive.com https://*.vercel.app wss://*.vercel.app https://*.cloudfront.net https://cdn.jsdelivr.net https://*.azureedge.net https://cdnjs.cloudflare.com https://unpkg.com https://*.marketo.net http://*.marketo.net https://*.mktoresp.com http://*.mktoresp.com https://*.hilemangroup.com https://quiz.hilemangroup.com https://cdn.amplitude.com https://*.amplitude.com https://experiment-overlay.prod.us-west-2.amplitude.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.gstatic.com https://*.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://maps.google.com https://*.qualtrics.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://*.bablic.com https://www.instagram.com https://*.instagram.com https://www.facebook.com https://*.facebook.com https://platform.twitter.com https://*.twimg.com https://*.pinterest.com https://*.omnichannelengagementhub.com https://browser.pipe.aria.microsoft.com https://go.trouter.skype.com https://*.trouter.skype.com wss://*.trouter.skype.com https://edge.skype.com https://*.skype.com https://*.communication.azure.com https://*.findhelp.com https://*.mypurecloud.com wss://*.mypurecloud.com; frame-src 'self' https://bswcdndesign-prod.bswhealth.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://maps.google.com https://*.qualtrics.com https://*.omnichannelengagementhub.com https://customervoice.microsoft.com https://www.bellababyphotography.com https://www.instagram.com https://*.pinterest.com https://giphy.com https://*.rxwiki.com https://oc-cdn-ocprod.azureedge.net https://*.bswhealth.com https://*.bswhealth2.com http://pages.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://*.bswapi.com https://*.bswhive.com https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud https://*.findhelp.com https://*.mypurecloud.com wss://*.mypurecloud.com; frame-ancestors 'self' https://*.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://oc-cdn-ocprod.azureedge.net https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud; media-src data: 'self' https://*.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://*.sitecorecontenthub.cloud https://player.vimeo.com https://*.vimeo.com https://*.azureedge.net blob: https://*.sitecore.cloud https://*.sitecorecloud.io https://pages.sitecorecloud.io https://*.xmcloud.cloud https://*.sitecorecontenthub.cloud; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.sitecore.cloud https://*.sitecorecloud.io https://*.bswhealth.com https://bswcdndesign-prod.bswhealth.com https://*.bswapi.com https://*.bswhive.com https://*.marketo.net https://*.qualtrics.com https://*.az1.qualtrics.com 3 object-src 'none'; report-uri /report-csp-violation 3 script-src 'unsafe-inline' 'unsafe-eval' *.bradescoseguros.com.br *.bradescosaude.com.br *.bradescoautore.com.br *.bradescovp.com.br *.bradescodental.com.br *.bradescocapitalizacao.com.br *.mediservice.com.br *.novamedsaude.com.br *.bradseg.com.br *.googletagmanager.com *.google.com *.googleapis.com *.facebook.net *.licdn.com *.cloudflare.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.goadopt.io *.typeform.com *.hotjar.com *.iesnare.com *.medallia.com *.kampyle.com *.datatables.net *.evgnet.com *.thunderhead.com *.handtalk.me *.js.org *.clarity.ms *.jsdelivr.net *.jquery.com *.sunovitoso.com *.blob *.fullstory.com bradescoseguros.csod.com *.bradescoseguros.csod.com viacep.com.br *.go-mpulse.net; frame-ancestors 'self' *.bradescoseguros.com.br *.bradescosaude.com.br *.bradescoautore.com.br *.bradescovp.com.br *.bradescodental.com.br *.bradescocapitalizacao.com.br *.mediservice.com.br *.novamedsaude.com.br *.bradseg.com.br *.googletagmanager.com *.google.com *.googleapis.com *.facebook.net *.licdn.com *.cloudflare.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.goadopt.io *.typeform.com *.hotjar.com *.iesnare.com *.medallia.com *.kampyle.com *.datatables.net *.evgnet.com *.thunderhead.com *.handtalk.me *.js.org *.clarity.ms *.jsdelivr.net *.jquery.com *.sunovitoso.com *.blob *.fullstory.com bradescoseguros.csod.com *.bradescoseguros.csod.com viacep.com.br *.go-mpulse.net; 3 default-src 'self' *.targetfirst.com *.hsforms.com heeet.io *.heeet.io 'unsafe-inline' *.googleadservices.com webcdn.ringover.com *.schedulehero.io *.revenuehero.io; img-src user-images.crazyeggcdn.com *.lfeeder.com *.crazyegg.com *.albacross.com *.targetfirst.com http://watcheebox.net http://*.watcheebox.net *.reddit.com *.bing.net tag.nrich.ai audience.nrich.ai storage.googleapis.com fonts.gstatic.com *.hsforms.com *.hubspot.com *.linkedin.com *.liadm.com 'self' data: *.clarity.ms *.google.com *.bing.com *.rlcdn.com *.sitescout.com *.clickagy.com www.google.fr webcdn.ringover.com ct.capterra.com *.ytimg.com ytimg.com www.google.com www.facebook.com google-analytics.com *.google-analytics.com *.googletagmanager.com *.ads.linkedin.com cdn.livechat-files.com; script-src 'self' *.crazyegg.com *.guideflow.com *.athenahq.ai *.albacross.com www.redditstatic.com *.nrich.ai appvizer.one *.hsforms.net *.heeet.io cdn.heeet.io/js/localstorage-gau.js *.snitcher.com *.amazonaws.com *.liadm.com *.hsforms.com *.hs-scripts.com *.hubspot.com *.hsadspixel.net *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.clarity.ms *.targetfirst.com http://watcheebox.net http://*.watcheebox.net 'unsafe-inline' 'unsafe-eval' 'self' *.tapfiliate.com *.hs-scripts.com *.googleoptimize.com bat.bing.com *.clickagy.com *.cloudflare.com *.googleadservices.com *.rsc.cdn77.org cdn77.ringover.com cdn.jsdelivr.net *.algolianet.com *.algolia.net *.googlesyndication.com *.g.doubleclick.net *.welcomekit.co welcomekit.co facebook.com linkedin.com *.link-page.info snippets.freshchat.com snap.licdn.com dc.ads.linkedin.com storage.googleapis.com px.ads.linkedin.com ct.capterra.com google.com google.fr *.trustpilot.com embed.tawk.to *.gotolstoy.com youtube.com pi.pardot.com redirectmail.ringover.com static-v.tawk.to *.google-analytics.com *.googleadservices.com *.googletagmanager.com gstatic.com *.g.doubleclick.net *.gstatic.com *.facebook.net *.gotolstoy.com redirectmail.ringover.com *.google.com *.hotjar.com *.lfeeder.com *.zoominfo.com *.livechatinc.com *.googleanalytics.com *.schedulehero.io *.revenuehero.io; style-src 'self' *.crazyegg.com *.rsc.cdn77.org *.google.com *.googleapis.com *.ringover.com https://fonts.googleapis.com fonts.gstatic.com *.targetfirst.com http://watcheebox.net http://*.watcheebox.net 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; connect-src *.crazyegg.com *.athenahq.ai wss://*.watcheebox.net http://watcheebox.net http://*.watcheebox.net *.targetfirst.com *.appvizer.one appvizer.one *.redditstatic.com *.reddit.com *.bing.net *.ringover.net wss://*.ringover.net ipapi.co/json *.hsforms.com *.heeet.io *.snitcher.com *.amazonaws.com alocdn.com *.ip-api.com 'self' *.hscollectedforms.net *.hubapi.com *.hubspot.com *.statuspage.io *.liadm.com *.oribi.io *.ads.linkedin.com *.clickagy.com *.clarity.ms *.zoominfo.com *.rsc.cdn77.org cdn.jsdelivr.net *.lfeeder.com *.googleusercontent.com *.algolia.net *.algolianet.com *.googlesyndication.com *.welcomekit.co welcomekit.co *.ringover.com va.tawk.to *.googleadservices.com *.hotjar.com wss://*.hotjar.com *.gotolstoy.com *.google.com *.google-analytics.com *.google.fr *.g.doubleclick.net *.schedulehero.io *.revenuehero.io; font-src 'self' data: http://watcheebox.net http://*.watcheebox.net 'unsafe-inline' *.rsc.cdn77.org *.gstatic.com fonts.googleapis.com fonts.gstatic.com; media-src 'self' *.targetfirst.com *.rsc.cdn77.org *.ringover.com cdn.livechatinc.com; frame-src 'self' *.crazyegg.com *.guideflow.com *.appspot.com *.googletagmanager.com *.ringover.com *.hsforms.com *.cloudflare.com *.google.com *.youtube-nocookie.com *.google.com *.hotjar.com *.gotolstoy.com *.youtube.com youtube-nocookie.com *.livestorm.co calendly.com *.facebook.com *.trustpilot.com *.doubleclick.net *.livechatinc.com *.schedulehero.io; child-src 'self' blob: *.rsc.cdn77.org *.ringover.com; form-action 'self' *.hsforms.com *.rsc.cdn77.org *.facebook.com; frame-ancestors 'self' *.rsc.cdn77.org *.schedulehero.io; object-src 'none'; base-uri 'self' *.rsc.cdn77.org; worker-src 'self' blob: *.rsc.cdn77.org *.ringover.com; manifest-src 'self' *.rsc.cdn77.org; 3 frame-ancestors 'self' googleads.g.doubleclick.net www.youtube.com propellerads.com *.propellerads.com; 3 frame-ancestors 'none'; default-src 'self' static.zdassets.com viabtc.zendesk.com *.zendesk.com www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net www.youtube-nocookie.com *.viabtc.com:* viabtc.com:* *.viabtc.com viabtc.com *.viabtc.net:* viabtc.net:* *.viabtc.net viabtc.net *.viabtc.top:* viabtc.top:* *.viabtc.top viabtc.top *.viabtc.co:* viabtc.co:* *.viabtc.co viabtc.co *.viadeploy.com:* viadeploy.com:* *.viadeploy.com viadeploy.com *.viabtc.info:* viabtc.info:* *.viabtc.info viabtc.info; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com *.zdassets.com res.wx.qq.com viabtc.zendesk.com www.google-analytics.com stats.g.doubleclick.net static.cloudflareinsights.com api.geetest.com api.geevisit.com monitor.geetest.com static.geetest.com static.geevisit.com gcaptcha4.geetest.com gcaptcha4.geevisit.com dn-staticdown.qbox.me *.viabtc.com:* viabtc.com:* *.viabtc.com viabtc.com *.viabtc.net:* viabtc.net:* *.viabtc.net viabtc.net *.viabtc.top:* viabtc.top:* *.viabtc.top viabtc.top *.viabtc.co:* viabtc.co:* *.viabtc.co viabtc.co *.viadeploy.com:* viadeploy.com:* *.viadeploy.com viadeploy.com *.viabtc.info:* viabtc.info:* *.viabtc.info viabtc.info; style-src 'unsafe-inline' at.alicdn.com viabtc.zendesk.com static.geetest.com static.geevisit.com gcaptcha4.geetest.com gcaptcha4.geevisit.com dn-staticdown.qbox.me *.viabtc.com:* viabtc.com:* *.viabtc.com viabtc.com *.viabtc.net:* viabtc.net:* *.viabtc.net viabtc.net *.viabtc.top:* viabtc.top:* *.viabtc.top viabtc.top *.viabtc.co:* viabtc.co:* *.viabtc.co viabtc.co *.viadeploy.com:* viadeploy.com:* *.viadeploy.com viadeploy.com *.viabtc.info:* viabtc.info:* *.viabtc.info viabtc.info; img-src i.ytimg.com www.google-analytics.com www.google.com *.aliyuncs.com *.alicdn.com viabtcconfig.oss-cn-shenzhen.aliyuncs.com viapoolconfig.oss-cn-hongkong.aliyuncs.com data: stats.g.doubleclick.net static.geetest.com static.geevisit.com gcaptcha4.geetest.com gcaptcha4.geevisit.com dn-staticdown.qbox.me event-verify-test.s3.ap-east-1.amazonaws.com s3.ap-east-1.amazonaws.com *.amazonaws.com viapoolconfig.s3.ap-east-1.amazonaws.com *.viabtc.com:* viabtc.com:* *.viabtc.com viabtc.com *.viabtc.net:* viabtc.net:* *.viabtc.net viabtc.net *.viabtc.top:* viabtc.top:* *.viabtc.top viabtc.top *.viabtc.co:* viabtc.co:* *.viabtc.co viabtc.co *.viadeploy.com:* viadeploy.com:* *.viadeploy.com viadeploy.com *.viabtc.info:* viabtc.info:* *.viabtc.info viabtc.info; font-src 'unsafe-inline' at.alicdn.com data: *.viabtc.com:* viabtc.com:* *.viabtc.com viabtc.com *.viabtc.net:* viabtc.net:* *.viabtc.net viabtc.net *.viabtc.top:* viabtc.top:* *.viabtc.top viabtc.top *.viabtc.co:* viabtc.co:* *.viabtc.co viabtc.co *.viadeploy.com:* viadeploy.com:* *.viadeploy.com viadeploy.com *.viabtc.info:* viabtc.info:* *.viabtc.info viabtc.info; connect-src 'self' viabtc.zendesk.com *.zendesk.com viabtc-help.zendesk.com *.zdassets.com https://widget-mediator.zopim.com https://p.extfun.com wss://widget-mediator.zopim.com www.google-analytics.com stats.g.doubleclick.net event-verify-test.s3.ap-east-1.amazonaws.com *.viabtc.com:* viabtc.com:* *.viabtc.com viabtc.com *.viabtc.net:* viabtc.net:* *.viabtc.net viabtc.net *.viabtc.top:* viabtc.top:* *.viabtc.top viabtc.top *.viabtc.co:* viabtc.co:* *.viabtc.co viabtc.co *.viadeploy.com:* viadeploy.com:* *.viadeploy.com viadeploy.com *.viabtc.info:* viabtc.info:* *.viabtc.info viabtc.info; frame-src www.bilibili.com player.bilibili.com player.vimeo.com *.viabtc.com *.jumio.com www.youtube.com www.youtube-nocookie.com www.ixigua.com v.qq.com 3 frame-ancestors 'none'; object-src 'self'; upgrade-insecure-requests 3 font-src 'self' themes.googleusercontent.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://*.cookiebot.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://www.googletagmanager.com https://www.google-analytics.com https://consentcdn.cookiebot.com https://connect.ekomi.de https://googleads.g.doubleclick.net https://www.googleadservices.com https://td.doubleclick.net https://pagead2.googlesyndication.com https://connect.facebook.net https://app.cortina-consult.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cookiebot.com https://consentcdn.cookiebot.com https://app.cortina-consult.com; font-src 'self' https://fonts.gstatic.com https://userlike-cdn-umm.b-cdn.net data:; img-src 'self' data: https: blob:; connect-src 'self' https://*.cookiebot.com https://*.userlike.com https://www.google-analytics.com https://region1.google-analytics.com https://www.google.com https://api.userlike.com wss://*.userlike.com https://connect.ekomi.de https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://td.doubleclick.net https://pagead2.googlesyndication.com https://connect.facebook.net https://www.facebook.com https://app.cortina-consult.com; frame-src 'self' https://consentcdn.cookiebot.com https://*.cookiebot.com https://www.googletagmanager.com https://*.personio.de https://td.doubleclick.net https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.facebook.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.paypal.com; 3 default-src 'self' 'unsafe-inline' fellow.app; frame-ancestors 'self' https://fellow.app https://*.fellow.app https://staging.fellow.co https://*.staging.fellow.co; connect-src 'self' api.hubapi.com api.hubspot.com api.segment.io cdn.segment.com fellow.app forms.hsforms.com forms.hubspot.com heapanalytics.com https://*.hotjar.com:* https://*.hotjar.io:* wss://*.hotjar.com monitor.clickcease.com stats.g.doubleclick.net www.facebook.com google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com *.googleadservices.com bat.bing.com yoast.com my.wpengine.com cdn.linkedin.oribi.io px.ads.linkedin.com bzr.openai.com bzrcdn.openai.com forms.hscollectedforms.net *.chilipiper.com *.clarity.ms c.bing.com app.clearbit.com share.cello.so growthbook-proxy.fellow.app pocustrack.com *.pocustrack.com framerusercontent.com *.framerusercontent.com *.framerstatic.com *.framer.com *.framercdn.com *.framer.app *.framercanvas.com *.hsforms.net *.hsforms.com *.hubspot.com app.revenuehero.io api.rudderstack.com *.dataplane.rudderstack.com cdn.rudderlabs.com cdn.jsdelivr.net pixel-config.reddit.com ads.reddit.com www.redditstatic.com conversions-config.reddit.com www.google.com google.com data.debugbear.com *.beehiiv.net *.intercom.io *.intercomcdn.com *.intercomusercontent.com pro.ip-api.com wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io wss://nexus-europe-websocket.intercom.io wss://nexus-australia-websocket.intercom.io wss://*.intercom-messenger.com app.ablecdp.com ga.jspm.io; img-src 'self' blob: data: https: monitor.clickcease.com script.hotjar.com static.hotjar.com js.chilipiper.com google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com *.framerusercontent.com *.framerstatic.com *.framer.com *.framercdn.com *.framer.app *.framercanvas.com; media-src 'self' *.cloudfront.net *.vidyard.com fellow.app framerusercontent.com *.framerusercontent.com *.framerstatic.com *.framer.com *.framercdn.com *.framer.app *.framercanvas.com; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.adroll.com *.hs-banner.com *.hs-scripts.com *.hsappstatic.net *.twimg.com *.twitter.com *.youtube.com *.cloudflare.com ddwl4m2hdecbv.cloudfront.net bat.bing.com cdn.heapanalytics.com cdn.segment.com connect.facebook.net ct.capterra.com d.adroll.mgr.consensu.org fellow.app forms.hubspot.com js.hs-analytics.net js.hsadspixel.net js.hscollectedforms.net js.hsleadflows.net monitor.clickcease.com optimize.google.com script.hotjar.com static.hotjar.com snap.licdn.com bzrcdn.openai.com static.cloudflareinsights.com static.hotjar.com www.clickcease.com google-analytics.com *.google-analytics.com www.google.com googleadservices.com *.googleadservices.com googleads.g.doubleclick.net *.googletagmanager.com www.gstatic.com *.googleoptimize.com youtube.com js.usemessages.com *.vidyard.com www.gstatic.com js.chilipiper.com use.fontawesome.com yoast.com fellowapp.bamboohr.com *.clarity.ms c.bing.com tag.clearbitscripts.com *.clearbitjs.com assets.cello.so embed.typeform.com bat.bing.com *.pocustrack.com pocustrack.com framerusercontent.com framer.com *.framerusercontent.com *.framerstatic.com *.framer.com *.framercdn.com *.framer.app *.framercanvas.com *.hsforms.net app.revenuehero.io cdn.rudderlabs.com cdn.jsdelivr.net www.redditstatic.com embeds.beehiiv.com cdn.debugbear.com beehiiv-adnetwork-production.s3.amazonaws.com https://s3-us-west-2.amazonaws.com/b2bjsstore/ *.intercom.io js.intercomcdn.com app.ablecdp.com cdn.cookie-script.com ga.jspm.io; frame-src 'self' blob: fellow.app app.hubspot.com forms.hubspot.com vars.hotjar.com www.facebook.com player.vimeo.com vimeo.com www.youtube.com youtube.com optimize.google.com anchor.fm *.twitter.com open.spotify.com embed-standalone.spotify.com *.vidyard.com www.google.com recaptcha.google.com *.chilipiper.com clarity.microsoft.com bid.g.doubleclick.net td.doubleclick.net form.typeform.com forms.hsforms.com *.schedulehero.io embeds.beehiiv.com www.googletagmanager.com framer.com *.framerusercontent.com *.framerstatic.com *.framer.com *.framercdn.com *.framer.app *.framercanvas.com intercom-sheets.com *.hubspot.com; font-src 'self' data: fellow.app fonts.gstatic.com script.hotjar.com *.typekit.net framerusercontent.com *.framerusercontent.com *.framerstatic.com *.framer.com *.framercdn.com *.framer.app *.framercanvas.com fonts.intercomcdn.com; style-src 'self' 'unsafe-inline' *.twitter.com fellow.app fonts.googleapis.com optimize.google.com static.hotjar.com script.hotjar.com embed.typeform.com *.typekit.net *.framerusercontent.com *.framerstatic.com *.framer.com *.framercdn.com *.framer.app *.framercanvas.com 3 default-src 'self' misc.poalim-site.co.il fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://i11.co.il https://mathilim.co.il https://round-table.co.il https://ba-media.co.il https://www.google.co.il/ads/ga-audiences https://ad.doubleclick.net misc.poalim-site.co.il *.bcodes.co.il bcodes.bankhapoalim.co.il bcodes.bankhapoalim.biz bcodes.fingrow.co.il https://*.googletagmanager.com www.googletagmanager.com https://www.googleadservices.com https://www.google.com/pagead/ www.google-analytics.com googleads.g.doubleclick.net maps.googleapis.com www.youtube.com tagmanager.google.com connect.facebook.net https://cdn.taboola.com https://trc-events.taboola.com https://wave.outbrain.com https://tr.outbrain.com https://amplify.outbrain.com https://analytics.tiktok.com https://snap.licdn.com https://amplify.outbrain.com/cp/obtp.js https://cdn.taboola.com/libtrc/unip/1606574/tfa.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://analytics.tiktok.com/i18n/pixel/sdk.js https://trc.taboola.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com; img-src 'self' data: connect.facebook.net https://*.googletagmanager.com www.googletagmanager.com www.facebook.com www.google.co.il www.google.com https://*.g.doubleclick.net https://*.google-analytics.com www.google-analytics.com maps.googleapis.com https://*.gstatic.com maps.gstatic.com misc.poalim-site.co.il https://*.ads.linkedin.com https://px.fls.doubleclick.net https://ad.doubleclick.net https://www.linkedin.com/px/li_sync; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; connect-src 'self' https://trc-events.taboola.com https://www.google.com/pagead/ https://www.googleadservices.com https://www.google.com/ccm/collect https://ad.doubleclick.net misc.poalim-site.co.il stats.g.doubleclick.net https://*.google-analytics.com www.google-analytics.com maps.googleapis.com www.youtube.com youtu.be https://*.analytics.google.com https://*.googletagmanager.com www.facebook.com analytics.google.com https://wave.taboola.com https://tr.outbrain.com https://amplify.outbrain.com https://px.ads.linkedin.com https://analytics.tiktok.com https://amplify.outbrain.com/topics https://psb.taboola.com https://pips.taboola.com https://cds.taboola.com https://trc.taboola.com; frame-src 'self' www.facebook.com connect.facebook.net https://mortgage.bankhapoalim.co.il https://www.googletagmanager.com https://14947322.fls.doubleclick.net open.spotify.com tools.bizportal.co.il bid.g.doubleclick.net https://td.doubleclick.net *.bcodes.co.il bcodes.bankhapoalim.co.il bcodes.bankhapoalim.biz bcodes.fingrow.co.il www.youtube.com poalimcalculator.kavmanche.co.il www.facebook.com https://butterfly-button.web.app https://13053220.fls.doubleclick.net; frame-ancestors https://konimmkan.com https://ymag.ynet.co.il https://x.calcalist.co.il https://lp-im.com https://mylp.co.il https://brands.n12.co.il https://i11.co.il https://mathilim.co.il https://round-table.co.il https://ba-media.co.il https://www.google.co.il/ads/ga-audiences https://ad.doubleclick.net misc.poalim-site.co.il *.bcodes.co.il bcodes.bankhapoalim.co.il bcodes.bankhapoalim.biz bcodes.fingrow.co.il https://*.googletagmanager.com www.googletagmanager.com https://www.googleadservices.com https://www.google.com/pagead/ www.google-analytics.com googleads.g.doubleclick.net maps.googleapis.com www.youtube.com tagmanager.google.com connect.facebook.net https://cdn.taboola.com https://trc-events.taboola.com https://wave.outbrain.com https://tr.outbrain.com https://amplify.outbrain.com https://analytics.tiktok.com https://snap.licdn.com https://amplify.outbrain.com/cp/obtp.js https://cdn.taboola.com/libtrc/unip/1606574/tfa.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://analytics.tiktok.com/i18n/pixel/sdk.js https://trc.taboola.com 3 frame-ancestors 'self';default-src 'self';frame-src 'self' https://*.qualtrics.com https://login.microsoftonline.com *.gigya.com *.storygize.net *.youtube.com https://youtu.be https://www.youtube-nocookie.com *.biomerieux.com *.soundcloud.com *.demdex.net *.adobe.com elearning.easygenerator.com bmx-emlearning.com player.vimeo.com *.google.com https://www.gstatic.com *.doubleclick.net https://www.googletagmanager.com *.figma.com;script-src https://*.qualtrics.com *.adobe.com https://*.adobedtm.com *.crwdcntrl.net *.google.com https://www.gstatic.com https://cdn.cookielaw.org *.onetrust.com https://dpm.demdex.net *.youtube.com *.gigya.com *.scene7.com *.biomerieux.com https://www.googletagmanager.com https://munchkin.marketo.net https://connect.facebook.net https://bat.bing.com https://bat.bing.net https://snap.licdn.com *.storygize.net https://id.rlcdn.com https://*.contextweb.com *.d41.co *.doubleclick.net *.figma.com 'self' 'unsafe-eval' 'unsafe-inline' blob:;img-src 'self' https: data:;style-src *.scene7.com *.biomerieux.com 'self' 'unsafe-inline';connect-src 'self' https:;font-src 'self' https://fonts.gstatic.com *.figma.com data:;media-src 'self' https: blob:; 3 upgrade-insecure-requests; default-src https://*.apptio.com 'self'; script-src 'self' https://*.apptio.com https://cdn-app.pathfactory.com/ https://app.cdn.lookbookhq.com/production/jukebox/current/jukebox.js https://web.cvent.com https://www.cvent-assets.com https://bat.bing.com https://cdn.cookielaw.org https://cdnjs.cloudflare.com https://connect.facebook.net https://*.cloudfront.net/fullcircle.js https://dev.visualwebsiteoptimizer.com https://*.wistia.com https://*.wistia.net https://www.trustradius.com https://googleads.g.doubleclick.net https://*.clarity.ms https://js.driftt.com https://munchkin.marketo.net https://script.hotjar.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.hotjar.com https://tag.demandbase.com https://tracking.intentsify.io https://www.gartner.com/reviews/public/Widget/js/widget.js https://www.google-analytics.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleoptimize.com/optimize.js https://www.googletagmanager.com https://www.google.com/pagead/conversion_async.js https://app.cdn.lookbookhq.com/libraries/overlay/overlay.js https://src.litix.io https://*.addthis.com https://*.moatads.com https://*.addthisedge.com https://cdn.shortpixel.ai https://app.vwo.com https://s.pointerpro.com https://snap.licdn.com https://*.ibm.com https://*.s81c.com https://tags.tiqcdn.com https://cdn.segment.com https://consent.trustarc.com https://scripts.demandbase.com https://*.tealiumiq.com https://cdn.metadata.io/site-script.js https://my.g2.com https://830-dts-057.mktoweb.com https://browser.sentry-cdn.com 'unsafe-inline' 'unsafe-eval'; style-src 'report-sample' 'self' blob: https://*.apptio.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdn.shortpixel.ai https://fast.wistia.com https://www.cvent-assets.com https://www.gartner.com https://www.trustradius.com https://d30ia583fbtg8i.cloudfront.net https://app.cdn.lookbookhq.com https://app.vwo.com https://cdn-app.pathfactory.com https://830-dts-057.mktoweb.com https://*.ibm.com 'unsafe-inline'; object-src 'self'; base-uri 'self'; connect-src 'self' https://*.apptio.com https://*.mktoresp.com https://935-cth-469.mktoutil.com https://www.facebook.com https://apptio.widen.net https://cf-store.widencdn.net/apptio https://api.company-target.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://bat.bing.com https://cdn.linkedin.oribi.io https://cdn.cookielaw.org https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.wistia.com https://*.wistia.net https://*.litix.io https://geolocation.onetrust.com https://*.cloudfront.net https://*.clarity.ms https://*.hotjar.com https://*.hotjar.io https://www.trustradius.com https://jukebox.pathfactory.com https://embedwistia-a.akamaihd.net https://spcollector.pathfactory.com https://st.fullcircleinsights.com https://*.addthis.com https://www.facebook.com https://segments.company-target.com https://tag-logger.demandbase.com https://px.ads.linkedin.com https://platformapi.metadata.io https://my.g2.com https://www.g2.com https://*.ibm.com https://*.tealiumiq.com https://*.segment.com https://830-dts-057.mktoweb.com https://cdnjs.cloudflare.com/ajax/libs/dompurify/3.1.3/purify.min.js.map https://browser.sentry-cdn.com; font-src 'self' data: https://fonts.gstatic.com https://*.cloudfront.net https://cdn.shortpixel.ai https://*.wistia.com https://maxcdn.bootstrapcdn.com https://app.cdn.lookbookhq.com https://cdn-app.pathfactory.com https://cdn.pathfactory.com https://*.gartner.com https://tag-logger.demandbase.com https://1.www.s81c.com; frame-src 'self' https://*.apptio.com https://js.driftt.com https://web.cvent.com https://vars.hotjar.com https://www.facebook.com https://www.gartner.com https://fast.wistia.net https://fast.wistia.com https://maps.google.com https://www.google.com https://*.addthis.com https://*.doubleclick.net https://app.vwo.com https://s.pointerpro.com https://s.company-target.com https://apptio.jifflenow.com https://reprint.forrester.com https://www.figma.com https://www.g2.com https://www.googletagmanager.com/ https://830-dts-057.mktoweb.com; img-src 'self' data: blob: https://*.apptio.com https://*.bing.com https://*.clarity.ms https://cdn.shortpixel.ai https://s.w.org https://*.cloudfront.net https://*.wistia.com https://*.visualwebsiteoptimizer.com https://embedwistia-a.akamaihd.net https://*.wistia.net https://id.rlcdn.com https://match.prod.bidr.io https://*.linkedin.com https://www.facebook.com https://connect.facebook.net https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://www.googletagmanager.com https://segments.company-target.com https://*.adsymptotic.com https://cdn.cookielaw.org https://reviews.static.gartner.com https://cdn.pathfactory.com https://media.trustradius.com https://*.s81c.com https://images.g2crowd.com https://www.g2.com; manifest-src 'self'; media-src 'self' blob: data: https://*.wistia.net https://*.wistia.com https://embedwistia-a.akamaihd.net https://js.driftt.com https://episodes.castos.com; worker-src https://*.apptio.com blob: 'self'; frame-ancestors 'self' https://*.apptio.com https://*.tbmcouncil.org https://*.tbmconference.org https://*.ibm.com https://apptio.lookbookhq.com; 3 form-action 'self' https://*.entorno.es; frame-ancestors 'none'; report-uri https://nicdev9.entorno.es/scp-report.php 3 frame-ancestors 'self' https://bsp.hallmarkchannel.com https://eu-s.wayin.com https://xd.wayin.com https://open.spotify.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.origin.akamai.prod.serial-2.hallmark-channel.psdops.com https://*.akamaihd.net http://*.serial1.hallmark-channel.psdops.com https://ads.stickyadstv.com http://cms.verify.serial-2.hallmark-channel.psdops.com https://cms.prod.serial-2.hallmark-channel.psdops.com https://cms.hallmarkchannel.com http://hd.prod.hallmark-channel.psdops.com http://origin.akamai.prod.serial-2.hallmark-channel.psdops.com http://prod.serial-2.hallmark-channel.psdops.com http://verify.hallmark-channel.psdops.com http://verify.serial-2.hallmark-channel.psdops.com http://www.hallmarkchannel.com http://www.hallmarkfamily.com http://www.hallmarkmoviechannel.com https://asset.engagesciences.com http://www.hallmarkmystery.com https://*.adtrafficquality.google https://*.akstat.io https://*.analytics.edgekey.net https://*.googlesyndication.com https://*.go-mpulse.net https://*.uat.serial-2.hallmark-channel.psdops.com https://*.v.fwmrm.net https://ad.ipredictive.com https://i.ytimg.com https://googleads.g.doubleclick.net https://amp.akamaized.net https://bsp.hallmarkchannel.com https://cdn.cookielaw.org https://cdn.jsdelivr.net https://cdn.plyr.io https://connect.facebook.net https://crownmedia-vm.akamaized.net https://crownvideos.akamaized.net https://ep2.adtrafficquality.google https://fonts.googleapis.com https://fonts.gstatic.com https://geolocation.onetrust.com https://giftguide2024.si-hallmark.com https://hallmark-brightspot-lower.s3.amazonaws.com https://hallmark-channel-brightspot.s3.amazonaws.com https://hallmark.brightspotcdn.com https://googleads.g.doubleclick.net https://hcnews.crownmediaemail.com https://images.crownmediadev.com https://m.feiwei.tv https://master.d2zwwssdr9yxnk.amplifyapp.com https://mssl.fwmrm.net https://user-sync.fwmrm.net https://cdn1.extremereach.io https://open.spotify.com https://pagead2.googlesyndication.com https://privacyportal.onetrust.com https://region1.google-analytics.com https://www.google-analytics.com https://s.adex2.fwmrm.net https://match.prod.bidr.io https://sb.scorecardresearch.com https://b.scorecardresearch.com https://trial-eum-clientnsv4-s.akamaihd.net https://verify.serial-2.hallmark-channel.psdops.com https://web.hallmarkmoviechecklist.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.gravatar.com https://www.hallmarkchannel.com https://www.hallmarkfamily.com https://s1.fwmrm.net/ https://www.hallmarkmoviechannel.com https://www.hallmarkmystery.com https://www.youtube.com https://xd.wayin.com https://eu-s.wayin.com https://s.wayin.com https://a.wayin.com https://match.adsrvr.org https://sync.springserve.com https://ups.analytics.yahoo.com https://ad.turn.com https://sync.srv.stackadapt.com https://qvdt3feo.com https://c1.adform.net https://ssum.casalemedia.com https://sync.ipredictive.com https://eb2.3lift.com https://pixel-sync.sitescout.com https://www.tiktok.com https://*.tiktokcdn.com https://*.tiktokcdn-us.com https://*.tiktok.com blob: data:; 3 frame-ancestors 'self' https://*.mindtickle.com 3 default-src https: wss: 'self' *.mightycause.com api.autopilothq.com *.braintreegateway.com cdnjs.cloudflare.com *.doubleclick.net cdn.embedly.com *.facebook.net *.facebook.com *.firebaseio.com *.fontawesome.com *.formstack.com cdn.jsdelivr.net *.kaptcha.com *.maxmind.com *.plaid.com *.paypal.com *.paypalobjects.com *.segment.com *.segment.io *.stripe.com *.surveymonkey.com *.uploadcare.com ucarecdn.com *.youtube.com *.vimeo.com *.awswaf.com *.flockler.com *.hsforms.net *.thefamousgroup.com *.visualwebsiteoptimizer.com app.vwo.com *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com d2c6wt5h92c1t2.cloudfront.net da3a5jhrzfmu8.cloudfront.net; script-src https: 'self' 'unsafe-eval' 'unsafe-inline' blob: nimbleswan.io static.tagboard.com *.mightycause.com api.autopilothq.com *.braintreegateway.com cdnjs.cloudflare.com *.doubleclick.net cdn.embedly.com *.facebook.net *.facebook.com *.firebaseio.com *.fontawesome.com *.formstack.com cdn.jsdelivr.net *.kaptcha.com *.maxmind.com *.plaid.com *.paypal.com *.paypalobjects.com *.segment.com *.segment.io *.stripe.com *.surveymonkey.com *.uploadcare.com ucarecdn.com *.youtube.com *.vimeo.com *.awswaf.com *.flockler.com *.hsforms.net *.thefamousgroup.com *.visualwebsiteoptimizer.com app.vwo.com *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com d2c6wt5h92c1t2.cloudfront.net da3a5jhrzfmu8.cloudfront.net; style-src 'self' https: 'unsafe-inline' *.mightycause.com api.autopilothq.com *.braintreegateway.com cdnjs.cloudflare.com *.doubleclick.net cdn.embedly.com *.facebook.net *.facebook.com *.firebaseio.com *.fontawesome.com *.formstack.com cdn.jsdelivr.net *.kaptcha.com *.maxmind.com *.plaid.com *.paypal.com *.paypalobjects.com *.segment.com *.segment.io *.stripe.com *.surveymonkey.com *.uploadcare.com ucarecdn.com *.youtube.com *.vimeo.com *.awswaf.com *.flockler.com *.hsforms.net *.thefamousgroup.com *.visualwebsiteoptimizer.com app.vwo.com *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com d2c6wt5h92c1t2.cloudfront.net da3a5jhrzfmu8.cloudfront.net; img-src 'unsafe-eval' https: data: blob: mediastream: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; media-src https: 'self' *.mightycause.com blob:; font-src https: data: 'self' *.mightycause.com *.gstatic.com cdn.embedly.com; manifest-src 'self' *.mightycause.com; report-uri https://mightycause.report-uri.com/r/d/csp/reportOnly 3 default-src 'self' *.deltek.com *.episerver.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com/recaptcha/ https://recaptcha.net/recaptcha/ *.googletagmanager.com *.google.com *.google.co.in *.googleadservices.com *.doubleclick.net cdn.cookielaw.org *.onetrust.com roper-privacy.my.onetrust.com bat.bing.com bat.bing.net *.demandbase.com *.eloqua.com *.en25.com tr.capterra.com cdn.jsdelivr.net *.hockeystack.com fpjscdn.net snap.licdn.com *.adsrvr.org *.company-target.com *.clarity.ms *.qualified.com *.redditstatic.com *.vimeo.com vimeo.com *.vimeocdn.com vimeocdn.com *.youtube.com *.visualwebsiteoptimizer.com *.vwo.com use.typekit.net *.dxcloud.episerver.net js.monitor.azure.com *.deltek.com *.episerver.net; connect-src 'self' https://recaptchaenterprise.googleapis.com *.googletagmanager.com analytics.google.com *.google-analytics.com *.google.com *.google.co.in *.googleadservices.com *.doubleclick.net *.googlesyndication.com cdn.cookielaw.org *.onetrust.com roper-privacy.my.onetrust.com bat.bing.com bat.bing.net *.demandbase.com *.eloqua.com *.en25.com tr.capterra.com *.hockeystack.com fpjscdn.net *.fpjs.io snap.licdn.com px.ads.linkedin.com *.adsrvr.org *.company-target.com *.clarity.ms *.qualified.com wss://*.qualified.com alb.reddit.com pixel-config.reddit.com *.vimeo.com vimeo.com *.vimeocdn.com vimeocdn.com *.youtube.com *.visualwebsiteoptimizer.com *.vwo.com use.typekit.net p.typekit.net cdn.jsdelivr.net *.dxcloud.episerver.net *.applicationinsights.azure.com js.monitor.azure.com *.deltek.com *.episerver.net; img-src 'self' data: blob: *.qualified.com qualified.com *.deltek.com *.google.com *.google.co.in *.gstatic.com *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com bat.bing.com bat.bing.net *.bing.com *.en25.com *.eloqua.com tr.capterra.com px.ads.linkedin.com *.linkedin.com *.clarity.ms alb.reddit.com *.redditstatic.com *.ytimg.com *.youtube.com *.vimeo.com vimeo.com *.vimeocdn.com vimeocdn.com use.typekit.net p.typekit.net *.dxcloud.episerver.net cdn.cookielaw.org *.visualwebsiteoptimizer.com *.trustarc.com; frame-src 'self' *.demostack.app demostack.app *.vimeo.com vimeo.com *.vimeocdn.com vimeocdn.com *.youtube.com *.youtube-nocookie.com *.googletagmanager.com *.doubleclick.net *.company-target.com *.qualified.com https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ *.deltek.com *.episerver.net; style-src 'self' 'unsafe-inline' cdn.cookielaw.org *.onetrust.com cdn.jsdelivr.net use.typekit.net p.typekit.net https://www.gstatic.com/ *.deltek.com *.episerver.net; font-src 'self' data: use.typekit.net p.typekit.net cdn.jsdelivr.net; media-src 'self' *.qualified.com *.vimeo.com vimeo.com *.vimeocdn.com vimeocdn.com *.deltek.com *.episerver.net; worker-src 'self' blob: *.deltek.com *.episerver.net 3 script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/ https://maps.googleapis.com https://googleads.g.doubleclick.net https://s.ytimg.com https://ssl.google-analytics.com https://www.googleadservices.com/pagead/ https://www.youtube.com https://youtube.com https://youtube.googleapis.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/GoogleCloudUxWebAppCgcUi/cspreport/allowlist 3 default-src * blob: data: https:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 3 frame-ancestors 'self' https://testbaba.virtualcms.it 3 default-src 'self'; connect-src 'self' wss://webmessaging.usw2.pure.cloud https://browser-intake-us5-datadoghq.com https://www.googleadservices.com https://*.clarity.ms https://www.facebook.com https://ws.zoominfo.com https://js.zi-scripts.com https://aorta.clickagy.com https://hemsync.clickagy.com https://api.usw2.pure.cloud/ https://api-cdn.usw2.pure.cloud/ https://*.api.sanity.io https://*.apicdn.sanity.io wss://*.api.sanity.io https://csp.withgoogle.com https://google.com https://*.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.gstatic.com https://shop.ezeefiber.com https://api.vercel.com https://vercel.live https://maps.googleapis.com https://fresnel.vimeocdn.com https://sockjs-us3.pusher.com https://*.weglot.com https://cdn-api-weglot.com wss://ws-us3.pusher.com https://recruitingbypaycor.com https://*.hotjar.com https://*.hotjar.io wss://ws.hotjar.com https://bat.bing.com https://amazon-adsystem.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon/ https://paa-reporting-advertising.amazon/ https://www.googletagmanager.com *.visualwebsiteoptimizer.com app.vwo.com https://mybundle.tv https://www-app-dev.mybundle.tv https://px.premion.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: http://www.gstatic.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://js.zi-scripts.com https://tags.clickagy.com https://*.jquery.com https://apps.usw2.pure.cloud https://www.google.com https://shop.ezeefiber.com https://googleads.g.doubleclick.net https://recruitingbypaycor.com http://recruitingbypaycor.com https://player.vimeo.com https://ezeefiber.speedtestcustom.com/ https://c.speedtestcustom.com https://www.googletagmanager.com https://recruitingbypaycor.com https://f.vimeocdn.com https://maps.googleapis.com https://cdn.weglot.com https://mybundle.tv https://www-app-dev.mybundle.tv https://vercel.live https://www.gstatic.com https://*.hotjar.com http://www.youtube.com https://www.youtube.com https://www.googleadservices.com https://amazon-adsystem.com https://*.amazon-adsystem.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://px.premion.com; style-src 'self' 'unsafe-inline' https://vercel.live https://shop.ezeefiber.com https://recruitingbypaycor.com https://ezeefiber.speedtestcustom.com/ https://c.speedtestcustom.com https://fonts.googleapis.com https://cdn.weglot.com https://www.gstatic.com/ *.visualwebsiteoptimizer.com app.vwo.com; img-src 'self' blob: data: https://bat.bing.com https://www.facebook.com https://www.google.com https://www.google.com.mx https://www.google.ae https://www.google.co.uk https://lh3.googleusercontent.com https://shop.ezeefiber.com https://www.googletagmanager.com https://cdn.sanity.io https://i.vimeocdn.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.weglot.com https://vercel.live https://vercel.com https://www.gstatic.com https://i.ytimg.com https://insight.adsrvr.org https://googleads.g.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; media-src 'self' https://cdn.sanity.io https://player.vimeo.com https://www.youtube.com; frame-src 'self' https://hemsync.clickagy.com https://apps.usw2.pure.cloud https://player.vimeo.com https://www.youtube.com https://ezeefiber.speedtestcustom.com/ https://td.doubleclick.net https://recruitingbypaycor.com https://vercel.live https://www.googletagmanager.com https://mybundle.tv https://www-app-dev.mybundle.tv https://www.google.com https://www.gstatic.com *.visualwebsiteoptimizer.com app.vwo.com; font-src 'self' https://fonts.gstatic.com https://vercel.live https://assets.vercel.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://ezeefiber.speedtestcustom.com/ https://stats.g.doubleclick.net https://www.google-analytics.com https://*.google.com https://*.gstatic.com; upgrade-insecure-requests; 3 default-src 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' data: https://ktb.gov.tr https://s3.ktb.gov.tr https://cdn.datatables.net https://www.googletagmanager.com https://fonts.googleapis.com https://apiservice.kultur.gov.tr https://istatistik.ktb.gov.tr https://istatistik.kultur.gov.tr https://my.matterport.com https://analitik.edevlet.gov.tr https://cdn.e-devlet.gov.tr https://www.google-analytics.com https://ajax.googleapis.com https://code.jquery.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://ssl.google-analytics.com https://webtv.kultur.gov.tr https://webtvpanel.kultur.gov.tr http://webtvpanel.kultur.gov.tr https://livechat.connexease.com https://www.google.com https://sergiler-api.ktb.gov.tr https://cloud.360tr.com https://docs.google.com https://tescil1.telifhaklari.gov.tr https://www.youtube.com; font-src 'self' data: https:; object-src 'none'; 3 upgrade-insecure-requests; default-src 'self' https://*.canadalife.com https://*.canadavie.com; connect-src 'self' https://*.canadalife.com https://*.canadavie.com https://*.greatwestlife.com https://www.google-analytics.com https://pdx-col.eum-appdynamics.com https://greatwestlife.sc.omtrdc.net https://dpm.demdex.net https://maps.googleapis.com https://greatwestlife.tt.omtrdc.net https://*.fls.doubleclick.net https://stats.g.doubleclick.net https://*.qualtrics.com https://*.tt.omtrdc.net https://analytics.google.com https://ct.pinterest.com https://*.force.com https://*.salesforce-sites.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.gwl.bz https://*.mouseflow.com https://edge.adobedc.net https://analytics.tiktok.com https://*.onetrust.com https://cdn.cookielaw.org https://cookies-data.onetrust.io https://pagead2.googlesyndication.com https://www.tickertech.com https://lifeco--fit.sandbox.my.site.com https://lifeco--mop.sandbox.my.site.com https://lifeco.my.site.com https://lifeco--ecrmagent.sandbox.my.site.com https://s.pinimg.com/ct/ https://pixel-config.reddit.com/pixels/ https://*.ads.linkedin.com; script-src 'self' 'unsafe-eval'; script-src-attr 'unsafe-hashes' 'sha256-s03MppK+yldqebQIUHl/a3rnlThCtQkSXSmmZOF3+F4=' 'sha256-8lDeP0UDwCO6/RhblgeH/ctdBzjVpJxrXizsnIk3cEQ='; script-src-elem 'self' 'sha256-KGpysfB7dOhcoL/uXax8dTNCyUpWrfJqNwiNFetXEVA=' 'sha256-W28TGSJNfmy5XONcd6yiZsWaqAGQyzy2pBTKTwKtehA=' 'sha256-pYJMobxz+vNYnWqdX/IjC/6MWx5STpkYRw01Lk5yRKg=' 'sha256-rxbB0dwoVgxFLovO+2QdlowWXjNRQqQ2N+l1eql3idk=' 'sha256-FBNK2rdRWFlHdRsYGZZBmuYu5+CkAl+Wn1JoYWqrksM=' 'sha256-F4BYc9lsI/Vrx9C9i80ixfUTjvillF19Ozmb78mybec=' 'sha256-AQOwIQfwXmjGkJa3okk527EAh1ebFJRpTTZl+5jRXbY=' 'sha256-g2Pta/3ikSvMxquiOYn0GW46rWdTYOpxkQZQy4WkDmg=' 'sha256-KoHyQmm+D9hBDaBTR6+gxOIONQBIayKMbpsmhIC1btA=' 'sha256-aPmuEA+YTJeUe5vchynnoiv3QTQuOLlWWoFTWMZ0g1g=' 'sha256-qLzKpw2YpqphcZ2dUfDq+nZ5lHCEZFVVMQAG3QzDYFs=' 'sha256-mpui/uSvBk50FoZaT31+E4TDh6X31gDoxHjIJDzRJZg=' 'sha256-77v6+Y2oUkIbs8c4pNz/22z+7s+raZVjnYoWAy3n340=' 'sha256-E7YCGQ5MRgDfOE83WCZrO5WMF47b8DMQrCCUsSG4BZA=' 'sha256-7sAcIrWL0oWh2ze3yV6tqz1RbnGmqhIx1Qus9jRracQ=' 'sha256-M+nrL1i0jyqg3asaQwtMrGR3HewAhiK/bpVvlDbxPVA=' 'sha256-2w2VuPWkQ3e1VTwZBpAMJr/J8SGDI2TAq/lDdYX5rCM=' 'sha256-QmTlplZrwxtcIjf0Qw5pH3wwugda+oguLrKTkvZcEZg=' 'sha256-c/UuTsNI4PzkW3h2TEBTba6cHzrxCGLRLm7e7JFOMTA=' 'sha256-iyqTc3hqwkLOBdzXfypaUKkfBjoe6ISFWFJymJlkhi0=' 'sha256-6vmJe+REQ2uvXdOcmOA0gV2Ghe2w9VIMFQMDJ6mfiIY=' 'sha256-djABxqtTxWmFtje0qzMk5v6m47EuSHXoA7G6ISvWRcM=' 'sha256-IkjtHJi30pQL4HJunVbbOb0eddxKbzQS73A/uLX1dxc=' 'sha256-y5DfkiVFp/0+RV2R/V4+yuEwoazHEGO2dtoyyobVfMg=' 'sha256-sjwHEvEEd6LOECfafoaXLp4pSwGYpxKixkV7uzUd1mI=' 'sha256-hUAVVCKUCsvj/NRR8gA7De+28k1VzMT2WZInYuEgow4=' 'sha256-Hts4iOCYzEeuX6rdSp2aiZrU4RwBn9aQiN5om8ue+WU=' 'sha256-myEuPW+nKtNfz374HWMHz0UGYwyue8KuWk8jIG/3GeQ=' 'sha256-47hygcsCeuaz/wFDcfGceDzFRbsMCTKLzIipw5aiGI4=' 'sha256-y4f9W+6dx+NJrSoXaIp4Z68xghYiTAOTKAc+aAakarg=' 'sha256-Nj9ZkTPsRdNRP79R2LmmJ6tqxvZLVGv/R2HV0/4hAuM=' 'sha256-VSXobtrxfF6D1p+BtC9xltlwQmAVWcyRIJuSFJqFdSQ=' 'sha256-UslN52emMX/WzG5xOZW4SSmhTC38p8AM6nfHugezhSI=' 'sha256-lQ6eoHMCd67KWAE6M0dmCsdtT09Z5b9MmQCXkeamxmQ=' 'sha256-nBTL0DLRiY+hsIzhqY9Jb8ccDjvqXeTIhD33F03d/gM=' 'sha256-ZWgZJAe8UxKbbxDUk7J1fwnARaVMJdrHfoWjmLFxgXc=' 'sha256-v68uDI5VvfFqPm0HqePyy/qY1WToOE6l3MiSxN5Casg=' 'sha256-6Z4JoQ3TBZB2OcKMIs6CvFmme+YeFAQbiG7GrAahfNI=' 'sha256-iS48O/fgbnai5FMX3da30U8fIINIwz51rVInKe6W9ao=' 'sha256-9CZK3YzPu8aJunwuH+esHbPwCwWtJkRSXFP8kO9xc8E=' 'sha256-9/7dSS2q31/XJ1gh6Iq5VIYDS7yuIPm/GXuWkRHME6o=' 'sha256-ta6BtLrS/anMkCdbo74TYQNu6Fe4kzpt+W57MIQL1Sk=' 'sha256-t5LwvhD7H1fx2C1ItoWQ1dWmzBvCKEBVI1nTkoMe5vQ=' 'sha256-L2hxMuj5d/1wMly5LZWlvaDzoHdccTBj6qqpiyOkJ+M=' https://*.canadalife.com https://*.canadavie.com https://*.gwl.bz https://assets.adobedtm.com https://cdn.appdynamics.com https://www.google-analytics.com/analytics.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/ https://*.qualtrics.com https://dpm.demdex.net https://ad.doubleclick.net https://*.fls.doubleclick.net https://snap.licdn.com https://static.ads-twitter.com https://analytics.twitter.com https://px.ads.linkedin.com https://secure.adnxs.com https://maps.googleapis.com/maps/ https://maps.googleapis.com/maps-api-v3/ https://play.vidyard.com https://p.adsymptotic.com https://www.googletagmanager.com/gtag/ https://mboxedge35.tt.omtrdc.net https://s.pinimg.com/ct/ https://ct.pinterest.com https://googleads.g.doubleclick.net https://bat.bing.com/bat.js https://bat.bing.com/p/action/11042675.js https://bat.bing.com/p/insights/t/11042675 https://bat.bing.com/p/insights/s/ https://www.googleadservices.com https://analytics.google.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://*.salesforceliveagent.com https://*.mouseflow.com https://www.gstatic.com https://www.google.com/recaptcha/enterprise.js https://www.redditstatic.com/ads/pixel.js https://analytics.tiktok.com https://cdn.cookielaw.org https://embed.myadvocado.com https://canada-life.gitlab.io https://www.winquote.net https://lifeco--fit.sandbox.my.site.com https://lifeco--mop.sandbox.my.site.com https://lifeco.my.site.com https://lifeco--ecrmagent.sandbox.my.site.com; style-src 'self' blob: 'unsafe-inline' https://*.canadalife.com https://*.canadavie.com https://*.gwl.bz https://*.vidyard.com https://*.qualtrics.com https://*.force.com https://*.salesforce-sites.com https://fonts.googleapis.com https://lifeco--fit.sandbox.my.site.com https://lifeco--mop.sandbox.my.site.com https://lifeco.my.site.com https://lifeco--ecrmagent.sandbox.my.site.com https://www.winquote.net; img-src 'self' data: https://*.canadalife.com https://*.canadavie.com https://*.gwl.bz https://*.ggpht.com https://*.googleapis.com/ https://greatwestlife.sc.omtrdc.net https://greatwestlife.tt.omtrdc.net https://www.facebook.com https://*.qualtrics.com https://cm.everesttech.net https://*.fls.doubleclick.net https://maps.googleapis.com https://*.ads.linkedin.com https://www.linkedin.com https://ad.doubleclick.net https://secure.adnxs.com https://analytics.twitter.com https://p.adsymptotic.com https://adservice.google.com/ddm/ https://adservice.google.ca/ddm/ https://dpm.demdex.net https://maps.gstatic.com https://*.vidyard.com https://www.google.ca/ads/ https://www.google.com/ads/ https://www.google-analytics.com https://www.google.com/pagead/ https://www.google.ca/pagead/ https://www.googletagmanager.com https://t.co https://s.pinimg.com/ct/ https://ct.pinterest.com https://bat.bing.com https://*.force.com https://*.salesforce-sites.com https://ca-gmtdmp.mookie1.com https://cdn.cookielaw.org https://alb.reddit.com https://www.redditstatic.com; font-src 'self' data: https://*.canadalife.com https://*.canadavie.com https://*.gwl.bz https://fonts.googleapis.com https://fonts.gstatic.com https://*.qualtrics.com https://*.vidyard.com; frame-src 'self' blob: https://player.vimeo.com https://play.vidyard.com https://*.gwl.bz https://*.qualtrics.com https://www.youtube.com https://www.youtube-nocookie.com https://www.pinterest.com https://gwl.demdex.net https://*.force.com https://www.google.com https://td.doubleclick.net https://ct.pinterest.com https://dh-fet-assets.s3.us-west-2.amazonaws.com https://financialcalculators.net https://embed.myadvocado.com; child-src https://*.canadalife.com https://*.canadavie.com https://*.gwl.bz https://*.qualtrics.com https://greatwestlife.sc.omtrdc.net https://greatwestlife.tt.omtrdc.net; object-src 'none'; base-uri 'none'; 3 frame-ancestors 'self' metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr webvisor.com *.webvisor.com 3 default-src 'self'; script-src 'self' https://maps.googleapis.com https://newlogin.dimepkairos.com.br https://5chat.5hub.com.br https://script.hotjar.com https://code.jquery.com https://static.hotjar.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cdn.dimepkairos.com.br https://www.google-analytics.com https://cdnjs.cloudflare.com https://l2.io https://cdn.jsdelivr.net https://js-agent.newrelic.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' https://newlogin.dimepkairos.com.br https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.gstatic.com 'unsafe-inline'; font-src 'self' https://newlogin.dimepkairos.com.br https://fonts.gstatic.com; img-src 'self' data: *; connect-src 'self' https://maps.googleapis.com https://maps.google.com https://maps.google https://stats.g.doubleclick.net https://tagus.5hub.com.br https://www.google.com https://www.google-analytics.com https://bam.nr-data.net http://127.0.0.1:8731; frame-src 'self' https://qcmaint.dimepkairos.com.br https://www.google.com https://5chat.5hub.com.br https://www.dimep.space https://qcmaint.mdcomune.com.br https://www.dimepkairos.com.br https://www.mdcomune.com.br https://www.dimepkairos.pt https://www.dimepkairos.com.mx; object-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; block-all-mixed-content; upgrade-insecure-requests; 3 frame-ancestors 'self' *.devolutions.app *.devolutions.com *.devolutions.xyz 3 frame-ancestors 'self' https://www.circana.com https://*.circana.com https://*.iriworldwide.com; 3 default-src 'self' blob: data: mailto: tel: 'unsafe-inline' 'unsafe-eval' *.onetrust.com *.cookielaw.org *.adobedtm.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.ca *.googleapis.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.demdex.net *.hotjar.com *.twitter.com *.licdn.com *.facebook.net *.zencdn.net *.twitter.com *.go-mpulse.net *.ads-twitter.com *.gstatic.com *.linkedin.com *.hotjor.io *.akstat.io *.customgpt.ai *.botframework.com *.powerplatform.com *.akamaihd.net *.panter.biz *.advancedbionics.com *.salesforce.com *.bing.com *.fonts.net *.doubleclick.net *.salesforceliveagent.com *.salesforce-sites.com *.callrail.com *.microsoft.com *.logwork.com wss://*.botframework.com *.googlesyndication.com *.clarity.ms https://product-support-global.phonak.com https://dsp-media.eskimi.com https://unitron-discover.panter.biz https://install.events https://*.spotme.com https://spotme.com https://it2v7.interactiv-doc.fr https://acrobatservices.adobe.com https://viewlicense.adobe.io https://logwork.com https://emersya.com https://*.hotjar.io wss://*.hotjar.com https://zingtree.com https://tridimens.ch https://www.google.com https://www.googleadservices.com https://www.phonak.com.seg https://sonova.tt.omtrdc.net *.stackadapt.com *.force.com https://sonova--qas.sandbox.my.site.com https://ab--q.sandbox.my.site.com https://ab--q.sandbox.my.salesforce-scrt.com https://ab.my.site.com https://ab.my.salesforce-scrt.com https://www.youtube.com https://www.youtube-nocookie.com https://advancedbionics.formstack.com https://static.formstack.com https://js.stripe.com https://cdn.jsdelivr.net https://cdn.growthbook.io; img-src 'self' data: *.phonak.com *.advancedbionics.com *.cookielaw.org *.day.com *.everesttech.net https://t.co https://www.google.com https://www.google.ca https://googleads.g.doubleclick.net https://tags.srv.stackadapt.com *.twitter.com *.googletagmanager.com *.gstatic.com *.brightcove.com *.customgpt.ai *.googleapis.com *.google-analytics.com *.boltdns.net *.demdex.net *.linkedin.com *.facebook.com *.facebook.net *.bing.com https://sonovahansatonproduction.112.2o7.net *.emersya.com i.ytimg.com https://install.events/ https://*.spotme.com https://spotme.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://v3.atender.com https://widget.trustpilot.com https://*.wufoo.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src https://player.vimeo.com https://www.youtube.com https://widget.trustpilot.com https://*.wufoo.com https://*.atender.com; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https://ox.hmg9.webhuset.no; frame-ancestors 'self' 3 frame-ancestors 'self' *.marketing.ai *.myclickfunnels.com; 3 default-src 'self' https://*.pusher.com wss://ws-eu.pusher.com wss://ws-eu.pusher.com:443; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://plausible.io https://acsbapp.com https://widget.datablocks.se https://challenges.cloudflare.com; connect-src 'self' https://plausible.io https://acsbapp.com https://*.acsbapp.com wss://ws-eu.pusher.com https://sockjs-eu.push https://widget.datablocks.se https://*.mfn.se https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://*.graphassets.com https://storage.googleapis.com blob: data:; media-src 'self' https://*.graphassets.com https://storage.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com https://challenges.cloudflare.com; upgrade-insecure-requests; 3 frame-ancestors 'self' https://dashsocial.saleshood.com; 3 default-src * 'unsafe-inline' 'unsafe-eval' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com js-agent.newrelic.com pi.pardot.com *.gstatic.com connect.facebook.net *.googletagmanager.com bam.nr-data.net *.google-analytics.com *.clarity.ms bat.bing.com *.spscommerce.com j.6sc.co/6si.min.js googleads.g.doubleclick.net *.intercom.io js.intercomcdn.com *.youtube.com static.ads-twitter.com snap.licdn.com ws.zoominfo.com tag.demandbase.com *.calendly.com *.g2.com *.stackadapt.com *.googleadservices.com *.gaconnector.com acsbapp.com *.6sc.co *.6sense.com *.tfaforms.net *.company-target.com https://google.com *.typeform.com *.intellimize.co tags.srv.stackadapt.com google.com www.google.com https://tags.srv.stackadapt.com https://js.zi-scripts.com blob: *.trustarc.com google-analytics.com www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com maps.googleapis.com maps.google.com www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' data: cdnjs.cloudflare.com bat.bing.com *.stackadapt.com spscommerce.tfaforms.net stackpath.bootstrapcdn.com *.typeform.com *.intellimize.co fonts.googleapis.com 'unsafe-inline' maps.googleapis.com maps.google.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: ps.w.org *.google.com bat.bing.com b.6sc.co *.facebook.com analytics.twitter.com *.spscommerce.com *.linkedin.com match.prod.bidr.io id.rlcdn.com *.company-target.com t.co *.g2.com *.stackadapt.com *.doubleclick.net *.clarity.ms js.intercomcdn.com *.intercomassets.com *.bing.com blubrry.co google.com www.google.ca www.google.com.ph www.googleadservices.com www.google.com.mx bat.bing.net www.google.com blubrry.com www.google.co.nz www.google.com.tr www.google.com.au www.google.hn cdn.honey.io connect.facebook.net www.google.co.uk www.google.com.pr www.google.fi www.google.be www.google.de www.google.sc www.google.com.pk www.google.nl www.google.ru www.google.co.kr www.google.cm www.google.com.sg *.trustarc.com s.w.org ts.w.org secure.gravatar.com www.gravatar.com data: blob: google-analytics.com www.google-analytics.com ssl.google-analytics.com *.googleapis.com maps.google.com maps.gstatic.com www.gstatic.com *.ggpht.com www.googletagmanager.com; connect-src 'self' bat.bing.com bam.nr-data.net stats.g.doubleclick.net google-analytics.com ipv6.6sc.co secure.adnxs.com wss://nexus-websocket-a.intercom.io *.clarity.ms api.company-target.com *.facebook.com cdn.linkedin.oribi.io c.6sc.co adservice.google.com ws.zoominfo.com *.intercom.io *.stackadapt.com *.demandbase.com *.gaconnector.com *.linkedin.com *.acsbapp.com acsbapp.com *.tfaforms.net *.company-target.com *.google.com *.typeform.com *.intellimize.co google.com yoast.com www.google.com bat.bing.net www.googleadservices.com www.google.ca region1.google-analytics.com www.google.com.ph www.google.com.pk www.g2.com https://js.zi-scripts.com *.6sense.com https://sourcemap.devowl.io *.trustarc.com www.google-analytics.com ampcid.google.com analytics.google.com about: maps.googleapis.com maps.google.com www.googletagmanager.com; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com fonts.intercomcdn.com at.alicdn.com stackpath.bootstrapcdn.com *.trustarc.com data: fonts.googleapis.com; object-src * *.stackadapt.com *.tfaforms.net; media-src * js.intercomcdn.com *.clarity.ms; frame-src 'self' maps.googleapis.com *.youtube.com *.google.com *.facebook.com go.spscommerce.com *.calendly.com *.company-target.com *.demandbase.com calendly.com *.getreprise.com go.pardot.com *.iheart.com *.doubleclick.net youtube.com spscommerce.my.site.com player.captivate.fm *.tfaforms.net intercom-sheets.com universal.accessibe.com www.podbean.com *.typeform.com *.intellimize.co 117822509.intellimizeio.com pwm-image.trendmicro.com bat.bing.com demo.spscommerce.com *.trustarc.com maps.google.com www.googletagmanager.com; child-src 'self' intercom-sheets.com *.intercom-reporting.com *.youtube.com fast.wistia.net player.vimeo.com www.googletagmanager.com; frame-ancestors * spscommerce.my.site.com https://intercom-sheets.com/; upgrade-insecure-requests; block-all-mixed-content; 3 frame-ancestors 'self' https://*.googleapis.com *.google.com https://*.gstatic.com data: blob:; 3 default-src 'self' *.vidyard.com https: mailto:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: mailto: blob:; object-src 'self'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' https: blob:; frame-ancestors 'self' *.netscout.com thescout.sharepoint.com netscout.pathfactory.com; font-src 'self' https: data:; connect-src 'self' https: wss: ; upgrade-insecure-requests 3 default-src 'self' 'unsafe-inline' *.gopay.cz gopay.com *.gopay.com goshop.com *.google-analytics.com stats.g.doubleclick.net *.google.com *.google.cz *.googletagmanager.com *.smartsuppcdn.com *.gopaycdn.com *.gopaycdn-test.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.bing.com *.clarity.ms; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.gopay.cz gopay.com *.gopay.com goshop.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.google.com *.google.cz *.googleapis.com cdn.getbeyond.io *.googletagmanager.com *.hostedstatus.com *.leady.com *.crazyegg.com *.hotjar.com *.hotjar.io wss://*.hotjar.com googleads.g.doubleclick.net *.googlesyndication.com *.smartsuppchat.com *.smartsuppcdn.com *.smartsupp.com wss://*.smartsupp.com *.gopaycdn.com *.gopaycdn-test.com *.clarity.ms *.licdn.com *.linkedin.com *.seznam.cz *.bing.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.gopay.cz gopay.com *.gopay.com goshop.com *.gstatic.com *.google-analytics.com stats.g.doubleclick.net *.google.com *.google.cz *.googleapis.com cdn.getbeyond.io *.googletagmanager.com *.hotjar.com *.crazyegg.com *.facebook.net *.leady.com c.imedia.cz *.googleadservices.com *.seznam.cz *.smartsuppchat.com *.doubleclick.net *.smartsuppcdn.com *.smartsupp.com *.gopaycdn.com *.gopaycdn-test.com *.bing.com *.clarity.ms *.licdn.com *.linkedin.com; img-src 'self' data: *.gopay.cz gopay.com *.gopay.com goshop.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.google.com *.google.cz *.googleapis.com *.typekit.net *.gstatic.com *.googletagmanager.com *.facebook.com *.seznam.cz *.smartsuppcdn.com *.maxcdn.com *.gopaycdn.com *.gopaycdn-test.com *.hotjar.com *.bing.com *.clarity.ms *.licdn.com *.linkedin.com; style-src 'self' 'unsafe-inline' *.gopay.cz gopay.com *.gopay.com *.typekit.net *.googletagmanager.com *.googleapis.com *.gopaycdn.com *.gopaycdn-test.com *.hotjar.com; frame-src *; child-src 'none'; frame-ancestors *; font-src 'self' data: use.typekit.net fonts.gstatic.com *.hotjar.com; object-src 'none'; report-to 'default'; 3 default-src 'self' blob:; media-src https: blob:; frame-ancestors https:; connect-src https:; img-src https: data:; frame-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; script-src-elem https: 'unsafe-inline'; style-src https: 'unsafe-inline'; worker-src https: blob:; font-src https: data:; 3 default-src 'self'; script-src 'self' https://*.azureedge.net https://cdn-prod.securiti.ai https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://www.youtube.com/iframe_api https://view.ceros.com/scroll-proxy.min.js https://js.navattic.com/embed.js https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js https://*.formstack.com; script-src-elem 'self' 'unsafe-inline' https://*.azureedge.net https://*.googletagmanager.com https://*.securiti.ai https://vercel.live https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://www.youtube.com/iframe_api https://view.ceros.com/scroll-proxy.min.js https://js.navattic.com/embed.js https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js https://*.formstack.com https://*.contentsquare.net https://app.contentsquare.com/ https://*.userway.org https://forte-payments.freshchat.com https://*.mkt.dynamics.com https://googleads.g.doubleclick.net https://tag.demandbase.com https://snap.licdn.com; connect-src 'self' https://*.azureedge.net https://*.mkt.dynamics.com https://*.dynamics.com https://*.algolia.net https://*.algolianet.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://recaptcha.google.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://*.googletagmanager.com https://*.securiti.ai https://vimeo.com https://*.ceros.com https://*.navattic.com https://*.formstack.com https://vercel.live wss://ws-us3.pusher.com https://sockjs-us3.pusher.com https://*.contentsquare.net https://*.freshchat.com https://*.userway.org https://mobile.events.data.microsoft.com https://px.ads.linkedin.com https://api.company-target.com https://tag-logger.demandbase.com https://id.rlcdn.com; frame-src 'self' https://*.mkt.dynamics.com https://*.dynamics.com https://*.googletagmanager.com https://vercel.live https://www.google.com https://recaptcha.google.com https://www.recaptcha.net https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://*.issuu.com https://*.ceros.com https://*.navattic.com https://*.genial.ly https://*.genially.com https://*.formstack.com https://cdn.userway.org https://s.company-target.com https://forte-payments.freshchat.com https://csxd.forte.net https://csxd.csgi.com https://demo.csgi.com/; child-src 'self' blob:; form-action 'self' https://*.dynamics.com https://*.formstack.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://cdn-prod.securiti.ai https://*.googletagmanager.com https://unpkg.com https://vercel.live https://cdn.userway.org https://forte-payments.freshchat.com; img-src 'self' data: blob: https://*.ctfassets.net https://*.vimeocdn.com https://*.googletagmanager.com https://*.google-analytics.com https://maps.googleapis.com https://tile.openstreetmap.org https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://*.formstack.com https://static.formstack.com https://vercel.live https://vercel.com https://avatars.githubusercontent.com https://cdn.userway.org https://*.contentsquare.net https://googleads.g.doubleclick.net https://*.ads.linkedin.com https://id.rlcdn.com https://segments.company-target.com; font-src 'self' data: https://fonts.gstatic.com https://static.formstack.com https://vercel.live; media-src 'self' https://player.vimeo.com https://vod-progressive.akamaized.net https://*.vimeocdn.com https://*.ctfassets.net; worker-src 'self' blob: https://www.google.com https://www.gstatic.com https://t.contentsquare.net; base-uri 'self'; object-src 'none' 3 frame-ancestors 'self' https://*.helloprint.com https://www.helloprint.com 3 default-src 'none'; script-src 'self' 'sha256-LhgjEUDTB5uVcQPxB7ClpuZyNmHM6EsxG6GFSRQyGrM='; img-src 'self' https://*.demdex.net https://cm.everesttech.net https://assets.adobedtm.com https://*.qbrick.com:443 https://*.dna.ip-only.net https://bilder.hemnet.se:443 https://files2.bovision.se https://mb.cision.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.se https://9848475f-428b-4380-8d26-dfe74eb251f7.at.rivsec.eu; media-src 'self' https://*.qbrick.com:443 https://*.dna.ip-only.net https://qcnl.tv; connect-src 'self' https://*.demdex.net https://cm.everesttech.net https://feed.jobylon.com https://publish.ne.cision.com https://handelsbanken-marknadsinformation.se https://assets.adobedtm.com https://*.handelsbanken.se https://*.handelsbanken.no https://*.handelsbanken.nl https://*.handelsbanken.com https://*.handelsbanken.co.uk https://*.qbrick.com:443 https://qcnl.tv; style-src 'self' 'unsafe-inline'; frame-src https://assets.adobedtm.com https://handelsbanken-marknadsinformation.se *.demdex.net *.handelsbanken.se *.handelsbanken.fi *.handelsbanken.no *.handelsbanken.co.uk *.handelsbanken.pl *.handelsbanken.de r1.surveysandforms.com handelsbanken.fondlista.se secure.msse.se www.efn.se borsrum.episerverhosting.com shbfxcalc.millistream.com mws-2.millistream.com www.anpdm.com services.cicero.no nettbank.edb.com cphspk01.shbmain.shb.biz irs.tools.investis.com otp.tools.investis.com vp292.alertir.com forms.apsisforms.com video.qbrick.com dreambroker.com handelsbanken.dreambroker.com web.efn.se news.alertir.com giosg-handelsbanken.giosg.com vp306.alertir.com client3.mailmailmail.net handelsbanken.newsroom.cision.com handelsbanken-en.newsroom.cision.com mb.cision.com app.marketingplatform.com go.beanstream.com qcnl.tv widget.datablocks.se; frame-ancestors 'self' *.handelsbanken.se *.handelsbanken.fi *.handelsbanken.no *.handelsbanken.co.uk *.handelsbanken.pl *.handelsbanken.de; font-src 'self' 3 frame-ancestors 'self' https://payfit.com https://*.payfit.com https://payfit-website.admin.datocms.com 3 frame-ancestors www.medidata.com medidata.com next.medidata.com loc.medidata.com explorer.medidata.com https://*.mdsol.com test-medidata-next.pantheonsite.io ecoa-medidata-corporate.pantheonsite.io dev-medidata-next.pantheonsite.io blog-medidata-corporate.pantheonsite.io dev-medidata-corporate.pantheonsite.io test-medidata-corporate.pantheonsite.io 26five4-medidata-corporate.pantheonsite.io perf-medidata-corporate.pantheonsite.io tags-medidata-corporate.pantheonsite.io updates-medidata-corporate.pantheonsite.io web.cvent.com mdsol.preview.salesforce-experience.com mdsol.live-preview.salesforce-experience.com mdsol.my.site.com *.3ds.com 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://matomo.drzwi-warszawa.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' wss: https:; frame-ancestors 'none' 3 frame-ancestors 'self' *.download.com.vn download.com.vn *.download.vn download.vn *.softvn.com softvn.com *.quantrimang.com quantrimang.com *.meta.vn meta.vn *.vndoc.com vndoc.com *.gamevui.vn gamevui.vn *.hoatieu.vn hoatieu.vn 3 default-src 'self'; media-src 'self' media.epic.com; script-src 'self' 'unsafe-inline' www.gstatic.com www.google.com stats.epic.com; child-src player.vimeo.com www.google.com cdnapisec.kaltura.com; style-src 'self' 'unsafe-inline'; form-action 'self'; font-src 'self' data:; connect-src 'self' www.google.com stats.epic.com; img-src 'self' data: stats.epic.com i.ytimg.com cfvod.kaltura.com media.epic.com; 3 default-src https: data: 'unsafe-eval' 'unsafe-inline' blob: 3 frame-ancestors 'self' https://www.conet.de; 3 default-src 'self'; font-src https://m.sive.rs; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://js.stripe.com; worker-src 'self' blob:; img-src 'self' data: https://m.sive.rs https://m.nownownow.com; style-src 'self' 'unsafe-inline'; connect-src 'self' https://*.b-cdn.net; media-src 'self' blob: https://m.sive.rs https://*.b-cdn.net; frame-src https://js.stripe.com; frame-ancestors 'self'; object-src 'none' 3 default-src 'none'; connect-src 'self' https://www.google-analytics.com https://sdk.privacy-center.org https://analytics.google.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://assets-ctb.pernod-ricard.io https://api.pernod-ricard.io https://cdn.jsdelivr.net/npm/algoliasearch https://zfm2j5365u-3.algolianet.com https://zfm2j5365u-dsn.algolia.net https://d8ejoa1fys2rk.cloudfront.net https://brandcloud.pernod-ricard.com https://optoutapi.evidon.com *.evidon.com *.betrad.com https://us-central1-pantheon-psapps.cloudfunctions.net https://insight.pravp.com/analytics *.pernod-ricard.io https://live-pernod-ricard-global-cms.pantheonsite.io https://cdn.linkedin.oribi.io https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css agegate.pr-globalcms.com 4q87csmwes-dsn.algolia.net *.didomi.io pernod-ricard-deutschland.mynewsdesk.com px.ads.linkedin.com https://loop.pr-globalcms.com https://cdn.blueconic.net https://pernodricardusa.blueconic.net https://www.facebook.com cdn.jsdelivr.net api.privacy-center.org https://www.googletagmanager.com; font-src 'self' https://maxcdn.bootstrapcdn.com https://app-avp.pravp.com https://assets-ctb.pernod-ricard.io https://cdnjs.cloudflare.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://static.addtoany.com https://emperia.gallery https://my.matterport.com https://www.google.com pernod-ricard-deutschland.mynewsdesk.com https://www.mynewsdesk.com https://live.eventtia.com; img-src 'self' https: data:; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://sdk.privacy-center.org https://avp.pravp.com https://www.google-analytics.com https://c.evidon.com https://assets-ctb.pernod-ricard.io https://cdn.jsdelivr.net/npm/algoliasearch https://zfm2j5365u-3.algolianet.com https://www.youtube.com https://player.vimeo.com *.facebook.net https://js-agent.newrelic.com https://bam.nr-data.net *.pernod-ricard.io https://live-pernod-ricard-global-cms.pantheonsite.io https://snap.licdn.com https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com agegate.pr-globalcms.com pernod-ricard-deutschland.mynewsdesk.com https://loop.pr-globalcms.com https://cdn.blueconic.net https://pernodricardusa.blueconic.net https://plugins.blueconic.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://vuejs.org; style-src 'self' 'unsafe-inline' https://assets-ctb.pernod-ricard.io data: https://live-pernod-ricard-global-cms.pantheonsite.io https://loop.pr-globalcms.com https://plugins.blueconic.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; base-uri 'self'; form-action 'self' https://login.microsoftonline.com https://device.login.microsoftonline.com; frame-ancestors 'self' 3 default-src 'self' https://geodis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com unpkg.com *.cloudflare.com cdn.jsdelivr.net *.smart-tribune.com polyfill.io cdn.cookielaw.org tag.aticdn.net *.googleapis.com *.adroll.com snap.licdn.com *.optimonk.com connect.facebook.net *.newrelic.com *.pardot.com bat.bing.com hcaptcha.com crm.geodis.com *.iti-maps.fr lex.33across.com static.hotjar.com script.hotjar.com www.gstatic.com matomojs.trackify.info *.extranet.geodis.org polyfill-fastly.io googleads.g.doubleclick.net www.googleadservices.com analytics.geodis.com analytics.intranet.geodis.org; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com *.smart-tribune.com https://cdn.jsdelivr.net uloga.github.io www.gstatic.com analytics.intranet.geodis.org; img-src * 'self' 'unsafe-inline' https://geodis.com data: www.googletagmanager.com https://geodis.widen.net https://server.arcgisonline.com *.widencdn.net *.xiti.com https://cdn.cookielaw.org https://www.google.com *.smart-tribune.com https://maps.gstatic.com *.ads.linkedin.com www.google.fr *.adroll.com pixel.rubiconproject.com sync.outbrain.com dsum-sec.casalemedia.com image2.pubmatic.com sync.taboola.com eb2.3lift.com www.facebook.com www.google.pl bat.bing.com www.google-analytics.com px.ads.linkedin.com www.google.be; media-src 'self' https://geodis.com https://geodis.widen.net *.widencdn.net; frame-src 'self' https://www.youtube.com geodis.widen.net cf-store.widencdn.net cf-store.widencdn.net newassets.hcaptcha.com *.doubleclick.net x.adroll.com *.googletagmanager.com; frame-ancestors 'self' https://sites-ms.lumapps.com https://dwp.geodis.com https://wishes.geodis.com; font-src 'self' data: *.smart-tribune.com fonts.gstatic.com cdnjs.cloudflare.com cdn.jsdelivr.net github.com unpkg.com; connect-src 'self' geodis.com *.google.com adservice.google.com *.smart-tribune.com cdn.cookielaw.org www.google-analytics.com *.doubleclick.net *.onetrust.com maps.googleapis.com *.optimonk.com *.analytics.google.com bam.nr-data.net cdn.linkedin.oribi.io *.hcaptcha.com bat.bing.com bat.bing.net px.ads.linkedin.com www.google.fr analytics.google.com www.google.pl *.google.com www.google.ca region1.analytics.google.com *.analytics.google.com www.google.com.mx www.google.co.uk www.google.sk stats.g.doubleclick.net www.google.ae vc.hotjar.io metrics.hotjar.io *.hotjar.io wss://ws.hotjar.com www.google.de www.google.co.nz www.google.bg www.google.es *.extranet.geodis.org google.com unpkg.com region1.google-analytics.com analytics.geodis.com *.googlesyndication.com; upgrade-insecure-requests 3 default-src https: data: blob: wss:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors https://app.contentful.com; 3 base-uri 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net;child-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net;connect-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data: mailto: tel: https://pub.highlight.io https://*.qualtrics.com webpack://*;default-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data: mailto: tel:;font-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data:;form-action 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net https://*.bethematch.org;frame-ancestors 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net https://*.bethematch.org https: data:;frame-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data: https://*.qualtrics.com;img-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data: https://*.qualtrics.com;manifest-src 'self';media-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data:;script-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data: https://*.qualtrics.com;style-src 'self' https://*.vbrick.com https://api-engage-us.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://d35vb5cccm4xzp.cloudfront.net 'unsafe-inline' 'unsafe-eval' https: data:;worker-src data: blob:; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ad.doubleclick.net https://cdn.consentmanager.net https://cdn.jsdelivr.net https://cdn.plyr.io https://d1sag09wwfbul8.cloudfront.net https://d335luupugsy2.cloudfront.net https://flagcdn.com https://i.ytimg.com https://img.youtube.com https://restcountries.com https://slsnlytcs.com https://snap.licdn.com https://userlike-cdn-umm.b-cdn.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://*.appcast.io https://*.b-cdn.net https://*.bing.com https://*.clarity.ms https://*.consentmanager.net https://*.conversionsapigateway.com https://*.facebook.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.de https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hubspot.com https://*.recruitmentplatform.com https://*.run.app https://*.targetbox.de https://*.tuev-nord.de https://*.userlike.com https://*.vimeo.com https://*.youtube.com; style-src 'self' 'unsafe-inline' https://cdn.consentmanager.net https://cdn.plyr.io https://flagcdn.com https://userlike-cdn-umm.b-cdn.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://*.b-cdn.net https://*.consentmanager.net https://*.googleapis.com https://*.gstatic.com https://*.recruitmentplatform.com https://*.tuev-nord.de https://*.userlike.com; img-src 'self' data: https://ad.doubleclick.net https://cdn.consentmanager.net https://flagcdn.com https://i.ytimg.com https://img.youtube.com https://player.vimeo.com https://restcountries.com https://userlike-cdn-umm.b-cdn.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://*.ads.linkedin.com https://*.appcast.io https://*.b-cdn.net https://*.bing.com https://*.cloudfront.net https://*.consentmanager.net https://*.facebook.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.de https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hsforms.com https://*.hubspot.com https://*.kununu.com https://*.lumessetalentlink.com https://*.targetbox.de https://*.tuev-nord.de https://*.userlike.com; font-src 'self' data: https://cdn.consentmanager.net https://*.b-cdn.net https://*.consentmanager.net https://*.gstatic.com https://*.lumessetalentlink.com https://*.recruitmentplatform.com https://*.shared.lumessetalentlink.com https://*.tb.lumesse.com https://*.tuev-nord.de https://*.userlike.com; connect-src 'self' https://ad.doubleclick.net https://cdn.consentmanager.net https://cdn.jsdelivr.net https://cdn.plyr.io https://cta-redirect.rdstation.com https://flagcdn.com https://pageview-notify.rdstation.com.br https://popups.rdstation.com.br https://restcountries.com https://slsnlytcs.com https://userlike-cdn-umm.b-cdn.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://*.ads.linkedin.com https://*.analytics.google.com https://*.b-cdn.net https://*.bing.com https://*.clarity.ms https://*.cloudfront.net https://*.consentmanager.net https://*.conversionsapigateway.com https://*.facebook.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.de https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.hsappstatic.net https://*.hubapi.com https://*.hubspot.com https://*.recruitmentplatform.com https://*.run.app https://*.shared.lumessetalentlink.com https://*.targetbox.de https://*.tb.lumesse.com https://*.tuev-nord.de wss://*.userlike.com https://*.userlike.com; frame-src 'self' https://cdn.consentmanager.net https://embed.podcasts.apple.com https://*.b-cdn.net https://*.consentmanager.net https://*.google.com https://*.tuev-nord.de https://*.userlike.com https://*.vimeo.com https://*.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.google.com https://www.googletagmanager.com https://*.nord-kurs.de https://*.tuev-nord.de; 3 default-src 'self';form-action 'self'; object-src 'self'; frame-ancestors 'self'; connect-src 'self' ely-keskus.fi *.youtube.com *.tyomarkkinatori.fi *.ahtp.fi keha-matomo-sdg-qa-qa.azurewebsites.net *.cookiebot.com wss://*.tyomarkkinatori.fi *.elisa.fi wss://*.elisa.fi tetyomarkkinatori.boost.ai lukija.aimater.com fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' *.elisa.fi fonts.googleapis.com *.youtube.com gstatic.com blob:; img-src * data: blob:; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' *.tyomarkkinatori.fi *.ahtp.fi *.elisa.fi lukija.aimater.com tetyomarkkinatori.boost.ai *.cookiebot.com keha-matomo-sdg-qa-qa.azurewebsites.net youtube.com blob:; frame-src 'self' data: feed.mikle.com *.elisadesk.com *.cookiebot.com *.youtube.com; media-src 'self' data: blob:; font-src 'self' data: fonts.gstatic.com; 3 object-src *; script-src 'unsafe-inline' 'unsafe-eval' https: http: 'self' blob:; base-uri https: http:; frame-ancestors https://app.contentful.com 3 default-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; img-src * 'self' blob: data:; connect-src *; font-src *; frame-src *; object-src 'none'; base-uri 'self' https://static-2c.gitbook.com; form-action 'self' https://static-2c.gitbook.com *; frame-ancestors https: ; 3 frame-ancestors 'self'; img-src 'self' data: https:; 3 frame-ancestors 'self' https://nintex.pathfactory.com https://resources.nintex.com https://pathfactory.nintex.com https://info.nintex.com 3 upgrade-insecure-requests; default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' 3 default-src 'self' http://*.jwpcdn.com; connect-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: http://*.jwpcdn.com http://*.googleapis.com http://*.googletagservices.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *; script-src-elem 'self' 'unsafe-inline' *; media-src 'self' blob: data: *; img-src 'self' blob: data: *; font-src 'self' http://*.gstatic.com http://*.civicscience.com; frame-src 'self' *; object-src 'self' *; base-uri 'self'; form-action 'self'; frame-ancestors 'self' http://localhost:* https://*.dev-univision.com https://*.univision.com https://*.tudn.com https://*.mulher.com.br https://*.delicioso.com.br https://*.zappeando.com.br https://*.tasaudavel.com.br https://*.lasestrellas.tv https://*.canal5.com https://*.elnu9ve.com https://*.distritocomedia.com https://*.televisa.com https://*.unicable.tv https://*.telehit.com https://*.losbingers.com https://*.bandamax.tv https://*.lacasadelosfamososmexico.tv http://*.uvn.io http://*.psdops.com https://static.univision.com https://viz.flowics.com https://*.flowics.com https://asset-cdn.flowics.com https://*.lightboxcdn.com https://www.lightboxcdn.com https://d1d3r9ycsgcvfq.cloudfront.net https://dlteo4612k88e.cloudfront.net https://d3txwxt3zc43fw.cloudfront.net https://*.vix.com https://*.vix.tv https://vix.tv https://vix.com https://*.todoelmundialporvix.com https://todoelmundialporvix.com; block-all-mixed-content; 3 default-src * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; worker-src blob:; child-src * blob: gap:; img-src * 'self' blob: data: https:; script-src * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-elem * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-attr * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-hashes'; style-src-elem * 'unsafe-inline' 'unsafe-hashes'; style-src-attr * 'unsafe-inline' 'unsafe-hashes'; font-src * 'self' data: https:; connect-src *; media-src *; object-src *; base-uri *; frame-ancestors 'self' *.blueconic.net https://app.contentful.com 3 default-src 'self' https:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src * data: blob:; font-src 'self' https: data:; connect-src *; media-src 'self' https: blob:; object-src 'none'; frame-ancestors *; upgrade-insecure-requests 3 frame-ancestors 'self' https://adobemc.com https://centerparcs.experiencecloud.adobe.com https://experience.adobe.com; 3 frame-ancestors 'self' *.umcchurches.org https://trinityoran.org https://enfieldum.org https://canaanum.org https://umclowell.org http://wesleychapelumcreidsville.org https://thearisenetwork.net https://indioumc.org https://sshpumc.org https://www.graceumcmesa.org https://everettumc.org https://unitedchurchofthetford.org https://zionumchurch.com 3 default-src 'self' https://www.figma.com/ https://cdnjs.cloudflare.com/ https://plugin.handtalk.me https://stats.g.doubleclick.net; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js cdnjs.cloudflare.com https://dec.azureedge.net/ https://rum-static.pingdom.net munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.msecnd.net http://maps.google.com https://unpkg.com www.googletagmanager.com https://*.cookiebot.com *.ads-twitter.com *.doubleclick.net *.teads.tv *.cdnjs.cloudflare.com plugin.handtalk.me https://d335luupugsy2.cloudfront.net https://cdn.jsdelivr.net *.plugin.handtalk.me https://www.gstatic.com/ https://static.elfsight.com/ https://cdn.curator.io/ https://snap.licdn.com/ https://cdn.commented.io/ https://brand.phinia.com/ *.adform.net https://px.ads.linkedin.com https://js.createsend1.com https://secure.imaginative-trade7.com/js/807289.js https://tags.srv.stackadapt.com https://526003333.collect.igodigital.com/collect.js 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://cdn.curator.io/ https://tags.srv.stackadapt.com/ 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net 'unsafe-inline'; img-src data: blob: * 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net track.hubspot.com js.hsleadflows.net forms.hsforms.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; frame-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://www.google.com https://consentcdn.cookiebot.com https://td.doubleclick.net https://fledge.teads.tv https://cloud.news.borgwarner.com https://brand.phinia.com/ https://open.spotify.com https://www.googletagmanager.com/ forms.hsforms.com; connect-src accounts.google.com https://*.googleapis.com/ *.mktoresp.com *.pingdom.net *.visualstudio.com http://maps.googleapis.com https://*.cookiebot.com https://*.google-analytics.com https://*.teads.tv https://api.mypartfinder.com https://webservice.tecalliance.services https://stats.g.doubleclick.net https://pageview-notify.rdstation.com.br https://popups.rdstation.com.br https://*.handtalk.me https://core.service.elfsight.com https://storage.elfsight.com https://www.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://api.curator.io https://px.ads.linkedin.com https://cdn.dev.commented.io wss://api.commented.io https://functions.commented.io https://cdn-image.commented.io https://api.commented.io https://brand.phinia.com/ https://s3.eu-west-2.amazonaws.com https://createsend.com https://tags.srv.stackadapt.com https://cdn.commented.io 'self' https://*.insight.sitefinity.com https://*.dec.sitefinity.com forms.hubspot.com *.hsforms.com; media-src 'self' data: blob: *.azureedge.net https://curatorio.s3.amazonaws.com/ https://curator-assets.b-cdn.net https://dms.licdn.com; child-src 'self' https://www.figma.com/ https://www.google.com/ *.borgwarner.com borgwarner.com https://*.cookiebot.com https://plugin.handtalk.me phinia.wd5.myworkdayjobs.com configurator.delphiautoparts.com data: 3 default-src 'self'; connect-src 'self' data: *.paychex.eu *.google.com google.com *.google.co.uk *.google.de *.google.fr *.google.es *.google.it *.google.nl *.google.be *.google.at *.google.ch *.google.dk *.google.se *.google.no *.google.fi *.google.ie *.google.pt *.google.pl *.google.cz *.google.ro *.google.hu *.google.ca *.google.com.br *.google.com.mx *.google.co.jp *.google.com.au *.google.co.nz *.google.com.sg *.google.co.in *.google.co.kr *.googleapis.com *.googletagmanager.com *.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com *.doubleclick.net *.g.doubleclick.net td.doubleclick.net *.googlesyndication.com sourcemap.devowl.io *.storylane.io policy.app.cookieinformation.com consent.app.cookieinformation.com https://*.hubspot.com https://*.hubapi.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.linkedin.com *.hsappstatic.net bat.bing.com *.clarity.ms/collect https://tags.srv.stackadapt.com https://fast.wistia.net *.twentythree.com; font-src 'self' data: *.gstatic.com https://fast.wistia.net; frame-src blob: *.google.com google.com *.google.co.uk *.google.de *.google.fr *.google.es *.google.it *.google.nl *.google.be *.google.at *.google.ch *.google.dk *.google.se *.google.no *.google.fi *.google.ie *.google.pt *.google.pl *.google.cz *.google.ro *.google.hu *.google.ca *.google.com.br *.google.com.mx *.google.co.jp *.google.com.au *.google.co.nz *.google.com.sg *.google.co.in *.google.co.kr *.googleapis.com *.googletagmanager.com *.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com *.doubleclick.net *.g.doubleclick.net td.doubleclick.net *.googlesyndication.com app.storylane.io policy.app.cookieinformation.com https://forms-eu1.hsforms.com https://*.hsforms.net gtm.trlution.com https://fast.wistia.net tralut.paychex.eu; img-src 'self' data: blob: *.paychex.eu *.google.com google.com *.google.co.uk *.google.de *.google.fr *.google.es *.google.it *.google.nl *.google.be *.google.at *.google.ch *.google.dk *.google.se *.google.no *.google.fi *.google.ie *.google.pt *.google.pl *.google.cz *.google.ro *.google.hu *.google.ca *.google.com.br *.google.com.mx *.google.co.jp *.google.com.au *.google.co.nz *.google.com.sg *.google.co.in *.google.co.kr *.googleapis.com *.googletagmanager.com *.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com *.doubleclick.net *.g.doubleclick.net td.doubleclick.net *.googlesyndication.com *.gstatic.com secure.gravatar.com *.storylane.io paychex.eu pixel.wp.com https://*.hubspot.com *.hsforms.net *.hsforms.com *.linkedin.com *.facebook.com bat.bing.com https://fast.wistia.net *.twentythree.com; script-src 'self' 'strict-dynamic' 'nonce-PsZ8VFcNYcFtiJHS8m' 'wasm-unsafe-eval' *.paychex.eu *.google.com google.com *.google.co.uk *.google.de *.google.fr *.google.es *.google.it *.google.nl *.google.be *.google.at *.google.ch *.google.dk *.google.se *.google.no *.google.fi *.google.ie *.google.pt *.google.pl *.google.cz *.google.ro *.google.hu *.google.ca *.google.com.br *.google.com.mx *.google.co.jp *.google.com.au *.google.co.nz *.google.com.sg *.google.co.in *.google.co.kr *.googleapis.com *.googletagmanager.com *.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com *.doubleclick.net *.g.doubleclick.net td.doubleclick.net *.googlesyndication.com *.storylane.io policy.app.cookieinformation.com https://*.hs-scripts.com *.hsforms.net *.googletagmanager.com https://tags.srv.stackadapt.com https://fast.wistia.net; style-src 'self' blob: 'unsafe-inline' *.paychex.eu *.gstatic.com https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com *.googletagmanager.com https://tags.srv.stackadapt.com https://fast.wistia.net; object-src 'none'; base-uri 'self'; form-action 'self' *.paychex.eu; frame-ancestors 'self' *.paychex.eu; 3 default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; frame-ancestors 'self'; 3 frame-ancestors 'self' https://connect.igen.fr https://macg.co https://www.macg.co https://igen.fr https://www.igen.fr https://watchgeneration.fr https://www.watchgeneration.fr; 3 frame-ancestors 'self' https://dashboard.sitew.com https://admin.sitew.com https://www.sitew.com; 3 frame-ancestors self vsadmin.badge.nl 3 frame-ancestors 'self' https://www.endesaclientes.com https://syndication.teleborsa.it https://accounts-coll.enel.com:9443 https://assets.adobedtm.com http://52.144.89.133 https://enel.taleo.net https://reg.enel.it https://aemproddmz.enel.com https://endesa.cogitodesk.com https://www.energiaxxi.com https://www.endesatarifasluzygas.com https://watlab.es https://*.watlab.es 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.hellweg.digital applepay.cdn-apple.com *.chatvisor.com *.clic2buy.com *.dynamicyield.com *.ecn-ldr.de *.econda-monitor.de *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hellweg.test hibitaro.de *.hibitaro.de *.idealo-partner.com *.jsdelivr.net *.loadbee.com *.payments-amazon.com *.paypal.com *.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com *.pay1.de *.searchhub.io *.tp-de.net *.trustedshops.com integrations.etrusted.com *.usercentrics.eu; frame-src *.econda-monitor.de *.google.com *.googletagmanager.com *.dynamicyield.com applepay.cdn-apple.com *.hellweg.test hibitaro.de *.hibitaro.de *.idealo-partner.com *.loadbee.com *.paypal.com *.cardinalcommerce.com assets.braintreegateway.com secure.pay1.de *.tp-de.net *.usercentrics.eu *.youtube.com *.youtube-nocookie.com; 3 font-src 'self' fonts.gstatic.com cdn.ashurstperkinscoie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ashurstperkinscoie.com unpkg.com www.youtube.com view.ceros.com www.google.com www.gstatic.com www.googletagmanager.com cdn.cookielaw.org snap.licdn.com script.hotjar.com static.hotjar.com; style-src 'self' cdn.ashurstperkinscoie.com 'unsafe-inline' fonts.googleapis.com; upgrade-insecure-requests; 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval';script-src * data: blob: 'unsafe-inline' 'unsafe-eval';script-src-attr * data: blob: 'unsafe-inline' 'unsafe-eval';connect-src * data: blob: 'unsafe-inline';img-src * data: blob: 'unsafe-inline';style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline';frame-ancestors 'none';frame-src * data: blob:;form-action *;base-uri 'self';object-src 'none' 3 frame-ancestors 'self' fnbo.com *.fnbo.com banking.scsbnet.com *.banking.scsbnet.com banking.houghtonstatebank.com *.banking.houghtonstatebank.com banking.crawfordcountybank.com *.banking.crawfordcountybank.com banking.fsbloomis.com *.banking.fsbloomis.com banking.landmands.com *.banking.landmands.com banking.sibleystatebank.com *.banking.sibleystatebank.com banking.washingtoncountybank.com *.banking.washingtoncountybank.com banking.yorkstatebank.com *.banking.yorkstatebank.com banking.fandmstatebank.com *.banking.fandmstatebank.com banking.fnbodirect.com *.banking.fnbodirect.com 3 base-uri 'self' https://*.adsrvr.org; form-action 'self' 'unsafe-eval' 'unsafe-inline' https://*.adsrvr.org https://*.bausch.com https://*.consentmanager.net https://*.doctor.com/ https://*.facebook.com https://copilotstudio.microsoft.com; upgrade-insecure-requests; report-to stott-security-endpoint; 3 default-src * blob:; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.melita.com https://*.melitabusiness.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.google-analytics.com https://*.zopim.com https://static.zdassets.com https://*.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.googleadservices.com https://*.facebook.net https://*.doubleclick.net https://*.addthis.com https://cdn.mxpnl.com https://*.youtube.com https://*.moatads.com https://*.addthisedge.com https://fast.wistia.com https://beacon-v2.helpscout.net https://ekr.zdassets.com https://snap.licdn.com https://static-exp1.licdn.com https://content.linkedin.com https://platform.linkedin.com https://www.googleoptimize.com https://kit.fontawesome.com https://cdnjs.cloudflare.com/ajax/libs/jsrsasign/11.1.0/jsrsasign-all-min.js https://consent.cookiebot.eu https://consent.cookiebot.com https://cdn-cookieyes.com https://consentcdn.cookiebot.eu; style-src 'self' 'unsafe-inline' https://*.melita.com https://*.melitabusiness.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.fontawesome.com *.visualwebsiteoptimizer.com app.vwo.com *.licdn.com; img-src * data:; font-src 'self' data: https://fonts.gstatic.com https://*.zopim.com https://*.fontawesome.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; connect-src * 'self' blob:; form-action 'self' https://*.facebook.com https://*.melita.com; frame-ancestors 'self'; upgrade-insecure-requests 3 frame-ancestors 'self' *.amplience.net adm.dynamicyield.eu 3 frame-ancestors 'self' pro.leparking.ch pro.dasparking.de pro.leparking.fr pro.theparking-cars.co.uk pro.theparking.ca pro.theparking-cars.com pro.leparking.be bresil.leparking.fr pro.nl.leparking.be pro.fr.theparking.ca roextpro.ads4all.fr atextpro.ads4all.fr bgextpro.ads4All.fr czextpro.ads4all.fr eeextpro.ads4all.fr grextpro.ads4all.fr hrextpro.ads4all.fr huextpro.ads4all.fr ltextpro.ads4all.fr luextpro.ads4all.fr lvextpro.ads4all.fr siextpro.ads4all.fr skextpro.ads4all.fr pro.de.leparking.ch keextpro.ads4all.fr pro.el-parking.es pro.oparking.pt pro.theparking.eu pro.el-parking.pe pro.leparking.ma pro.ilparking.it; 3 frame-ancestors 'self'; default-src 'self' *.lvvwd.com *.youtube.com data:; style-src 'self' 'unsafe-inline' *.lvvwd.com *.juicer.io *.cludo.com *.cludo.com.cdn.cloudflare.net *.googleapis.com; script-src 'self' 'unsafe-inline' blob: cdn.lvvwd.com *.lvvwd.com *.juicer.io *.digicert.com *.google-analytics.com *.googleapis.com *.jwpcdn.com *.gstatic.com *.google.com *.googletagmanager.com *.facebook.net *.facebook.com *.cludo.com *.cludo.com.cdn.cloudflare.net apps.usw2.pure.cloud cdn.jwplayer.com api.flickr.com *.onelink-edge.com *.youtube.com talkdeskchatsdk.talkdeskapp.com data:; connect-src 'self' *.lvvwd.com *.juicer.io *.facebook.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.doubleclick.net *.cludo.com *.cludo.com.cdn.cloudflare.net cdn.jwplayer.com entitlements.jwplayer.com cdn3.wowza.com *.onelink-edge.com api.talkdeskapp.com data:; font-src 'self' *.lvvwd.com *.juicer.io *.jwpcdn.com *.gstatic.com data:; img-src 'self' *.lvvwd.com *.snwa.com *.springspreserve.org *.google.com *.juicer.io *.cdninstagram.com prd.jwpltx.com seal.digicert.com maps.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com cdn.jwplayer.com assets-jpcust.jwpsrv.com live.staticflickr.com *.cludo.com *.facebook.com *.fbcdn.net *.facebook.net blob: data:; frame-src 'self' *.captionedtext.com *.youtube.com *.doubleclick.net *.google.com *.facebook.com talkdeskchatsdk.talkdeskapp.com data:; media-src 'self' *.lvvwd.com cdn3.wowza.com blob: data:; 3 default-src https: data: wss://*.qualified.com wss://*.hotjar.com wss://*.crazyegg.com *.crazyegg.com wss://*.zohopublic.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; media-src 'self' blob: data: https:; 3 frame-ancestors 'self' embed.eventfrog.ch embed.eventfrog.de embed.eventfrog.at 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://ltm.scene7.com https://ws-assets.zoominfo.com https://js.zi-scripts.com https://maps.googleapis.com https://lonrtp1-cdn.marketo.com https://lonrtp1.marketo.com https://rtp-static.marketo.com https://assets.calendly.com https://www.youtube.com https://tag.demandbase.com https://*.demdex.net https://together.ltimindtree.com https://www.google.com https://www.gstatic.com https://interactive.ltm.com interactive.ltm.com 574-lhh-431.mktoresp.com https://574-lhh-431.mktoresp.com https://574-lhh-431.mktoresp.com/webevents/visitWebPage https://avatartraining.ltimindtree.info avatartraining.ltimindtree.info assets.adobedtm.com https://www.googletagmanager.com analytics.google.com www.google.com www.google.co.in www.google-analytics.com https://www.google-analytics.com https://www.google-analytics.com/analytics.js https://scripts.clarity.ms https://scripts.clarity.ms/0.8.51/clarity.js tag.demandbase.com tag-logger.demandbase.com cdn.jsdelivr.net cdn.jsdelivr.net/npm/ cdnjs.cloudflare.com munchkin.marketo.net cdn.botframework.com powervirtualagents.microsoft.com static.hotjar.com cdn.mouseflow.com https://trk.techtarget.com https://trk.techtarget.com/tracking.js snap.licdn.com https://ws.zoominfo.com https://cdn.cookielaw.org www.gstatic.com https://www.gstatic.com https://www.gstatic.com/recaptcha/releases/PoyoqOPhxBO7pBk68S4YbpHZ/recaptcha__en.js https://vidassets.terminus.services https://vidassets.terminus.services/b4171d2a-05ee-4ea7-bc9f-30b04bf05863/t.js www.influ2.com https://ltm-crystal.itonics.io cdn-script.com cdn.acsbapp.com acsbapp.com publish-p126202-e1500667.adobeaemcloud.com publish-p126202-e1235109.adobeaemcloud.com publish-p126202-e1500666.adobeaemcloud.com publish-p126202-e1500667.adobeaemcloud.com.seg.js publish-p126202-e1235109.adobeaemcloud.com.seg.js publish-p126202-e1500666.adobeaemcloud.com.seg.js www.figma.com; style-src 'self' 'unsafe-inline' https://ltm.scene7.com https://rtp-static.marketo.com https://together.ltimindtree.com fonts.googleapis.com cdn.jsdelivr.net cdn.jsdelivr.net/npm/ cdnjs.cloudflare.com https://cdn.cookielaw.org cdn.jotfor.ms cdn.jotfor.ms/; font-src 'self' data: fonts.gstatic.com https://rtp-static.marketo.com fonts.googleapis.com; img-src 'self' data: https: *.opendns.com gateway.id.swg.umbrella.com *.sse.cisco.com *.ciscosecureaccess.cn id.rlcdn.com cm.everesttech.net smetrics.ltimindtree.com media.licdn.com segments.company-target.com maps.gstatic.com https://maps.googleapis.com assets.calendly.com https://assets.calendly.com https://www.google.co.in https://c.clarity.ms/c.gif https://dpm.demdex.net https://c.bing.com/c.gif px.ads.linkedin.com https://cdn.cookielaw.org https://*.cookielaw.org td.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net ltimindtreeglobaldev.112.2o7.net cdn.acsbapp.com acsbapp.com; connect-src 'self' https://accesswidget-log-receiver.ascbapp.com https://adobedc.demdex.net https://ltimindtree.data.adobedc.net https://ltm.scene7.com https://s7mbrstream-ap1.scene7.com https://ws-assets.zoominfo.com https://js.zi-scripts.com https://ltimindtreelimited.tt.omtrdc.net https://maps.googleapis.com https://cdn.acsbapp.com https://cdn.cookielaw.org https://together.ltimindtree.com https://tag-logger.demandbase.com https://www.google.com dpm.demdex.net https://ltimindtree.demdex.net cm.everesttech.net stats.g.doubleclick.net smetrics.ltimindtree.com ltimindtreeglobaldev.112.2o7.net api.company-target.com s.company-target.com segments.company-target.com id.rlcdn.com https://directline.botframework.com wss://directline.botframework.com https://login.microsoftonline.com https://s.clarity.ms https://s.clarity.ms/collect https://www.clarity.ms td.doubleclick.net googleads.g.doubleclick.net www.google.com www.google.co.in analytics.google.com www.google-analytics.com https://www.google-analytics.com https://geolocation.onetrust.com https://privacyportal-de.onetrust.com munchkin.marketo.net 574-lhh-431.mktoresp.com https://574-lhh-431.mktoresp.com https://ws.zoominfo.com cdn.acsbapp.com acsbapp.com; frame-src 'self' https://www.youtube.com https://calendly.com https://ltimindtree.demdex.net https://s.company-target.com https://www.google.com https://recaptcha.google.com calendly.com www.youtube.com player.vimeo.com vimeo.com form.jotform.com https://interactive.ltm.com interactive.ltm.com https://avatartraining.ltimindtree.info avatartraining.ltimindtree.info https://together.ltimindtree.com together.ltimindtree.com https://ltm-crystal.itonics.io ltm-crystal.itonics.io www.figma.com https://maps.googleapis.com maps.googleapis.com content.dionglobal.in www.w3.org cdn.jotfor.ms; form-action 'self' submit.jotform.com form.jotform.com 574-lhh-431.mktoresp.com https://574-lhh-431.mktoresp.com; media-src 'self' https://ltm.scene7.com https://www.youtube.com player.vimeo.com vimeo.com assets.calendly.com blob: *.adobeaemcloud.com; frame-ancestors 'self'; worker-src 'self' blob:; 3 connect-src 'self' https://analytics-framework-service.eks.staging.ethos-int.com https://ipinfo.io/json https://segment-api.ethoslife.com https://api.stage.ethoslife.com https://www.ethoslife.com https://api.ethoslife.com https://browser-intake-datadoghq.com https://io.ethoslife.com https://*.ethoslife.com wss://io.ethoslife.com https://www.getethos.com https://api.getethos.com https://io.getethos.com wss://io.getethos.com https://*.ar1d.net https://*.segment.io https://*.bing.com https://*.policybull.com https://*.fullstory.com https://*.facebook.com https://*.facebook.net https://rp4.liadm.com https://*.googleapis.com https://*.gstatic.com https://google.com https://*.google.com https://*.googleadservices.com https://*.google-analytics.com https://*.google.ca https://*.doubleclick.net https://boards-api.greenhouse.io https://api.stripe.com https://*.launchdarkly.com https://*.adroll.com https://*.pinterest.com https://*.katch.com https://create.leadid.com https://create.lidstatic.com https://info.leadid.com https://d2m2wsoho8qq12.cloudfront.net https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://*.ar1d.net https://*.optimizely.com https://vc.hotjar.io wss://*.hotjar.com https://*.hotjar.com https://*.ethos.com wss://*.ethos.com https://rum-http-intake.logs.datadoghq.com https://rum.browser-intake-datadoghq.com https://session-replay.browser-intake-datadoghq.com/ https://www.datadoghq-browser-agent.com/datadog-rum-v4.js https://*.userway.org https://app.leadsrx.com https://b-code.liadm.com https://rp.liadm.com https://analytics.tiktok.com https://hello.staticstuff.net https://win.staticstuff.net https://*.transcend.io https://late-glade-2372.tines.com https://hooks.torq.io https://d2hrivdxn8ekm8.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net https://gum.criteo.com https://*.athenahq.ai https://ethos-life.sjv.io https://*.ads-twitter.com https://analytics.twitter.com https://t.co https://*.tiktokw.us; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.userway.org blob: https://*.transcend.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stage.ethoslife.com https://acdn.adnxs.com https://*.ethoslife.com https://*.policybull.com https://*.getethos.com https://*.netlify.com https://*.facebook.com https://*.facebook.net http://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleadservices.com https://*.google-analytics.com https://*.google.ca https://*.doubleclick.net https://*.segment.com https://*.bing.com https://*.fullstory.com https://fullstory.com https://*.taboola.com https://*.linkedin.com https://*.licdn.com https://js.stripe.com https://*.quora.com https://*.adroll.com https://*.pinimg.com https://aa.agkn.com https://create.leadid.com https://create.lidstatic.com https://info.leadid.com https://*.cloudfront.net https://*.katch.com https://js.driftt.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.optimizely.com https://assets.customer.io http://tagmanager.google.com/debug http://www.googletagmanager.com https://optimizely.s3.amazonaws.com/ https://*.hotjar.com https://www.datadoghq-browser-agent.com/datadog-rum-us.js https://www.datadoghq-browser-agent.com/datadog-rum-v4.js https://vt.myvisualiq.net https://px.airpr.com/airpr.js https://cdn.pbbl.co https://*.userway.org https://amplify.outbrain.com https://tr.outbrain.com https://*.segment.com https://*.segment.io https://app.leadsrx.com https://b-code.liadm.com https://rp.liadm.com https://analytics.tiktok.com https://hello.staticstuff.net https://win.staticstuff.net https://cdn.riskid.security https://*.transcend.io/ https://www.youtube-nocookie.com/ https://unpkg.com/netlify-cms@%5E2.0.0/dist/netlify-cms.js https://media-library.cloudinary.com https://websitevisitorleads.com https://*.pinterest.com https://*.ethos.com https://dynamic.criteo.com https://*.athenahq.ai https://utt.impactcdn.com/A2901942-2a08-47f6-a038-7076e31122041.js https://*.ads-twitter.com https://vault.pactsafe.io https://*.stackadapt.com; object-src 'self'; frame-src 'self' https://app.ethos.com https://app.ethoslife.com https://app.staging.ethos.com https://app.stage.ethoslife.com https://app.dev.ethos.com https://app.dev.ethoslife.com https://www.googletagmanager.com https://stage.ethoslife.com https://agents.stage.ethoslife.com https://agents.ethoslife.com https://quote-widget.ethoslife.com https://quote-widget.getethos.com https://*.facebook.com https://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleadservices.com https://*.google-analytics.com https://*.google.ca https://*.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com/ https://js.stripe.com https://d2m2wsoho8qq12.cloudfront.net/ https://hooks.stripe.com https://ethslf.com https://player.vimeo.com https://fast.wistia.net https://www.quotelab.com https://t1.webbconnected.com https://www.emjcd.com https://cj.dotomi.com https://www.mailtrck.com https://www.trcknow.com https://pranwtr.com https://gztkr.mobi https://prformc.com https://www.authoritytrcker.com https://315track.com https://js.driftt.com https://share.intercom.io https://*.optimizely.com https://vars.hotjar.com https://cdn.pbbl.co https://app.storylane.io https://js.storylane.io https://cloudinary.com/ https://console.cloudinary.com/ https://*.userway.org https://www.xol82trk.com https://hackerone.com https://*.transcend.io https://ct.pinterest.com/ https://d2hrivdxn8ekm8.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net; font-src 'self' data: https://*.gstatic.com https://js.intercomcdn.com https://script.hotjar.com https://*.userway.org; img-src 'self' data: http://www.google-analytics.com http://bat.bing.com https://res.cloudinary.com https://*.facebook.com https://*.facebook.net https://rp4.liadm.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.google.ca https://*.googleadservices.com https://*.google-analytics.com https://*.doubleclick.net https://*.bing.com https://*.yahoo.com https://*.googletagmanager.com https://*.taboola.com https://*.linkedin.com https://create.leadid.com https://data.adxcel-ec2.com https://*.pinterest.com https://*.adroll.com https://*.twitter.com https://*.reddit.com https://*.quora.com https://click.clktraker.com https://pinterest.adsymptotic.com https://*.bluekai.com https://*.rlcdn.com https://*.adnxs.com https://*.nextinsure.com https://*.digitru.st https://*.sharethrough.com https://*.quotelab.com https://*.shmktpl.com https://*.bizographics.com https://*.openx.net https://*.bidswitch.net https://pixel.advertising.com https://dsum-sec.casalemedia.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://sync.outbrain.com https://eb2.3lift.com https://fcmatch.youtube.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://track.customer.io/ https://*.segment.io https://*.hotjar.com https://t.myvisualiq.net https://tapestry.tapad.com https://loadus.exelator.com https://dpm.demdex.net https://dpx.airpr.com https://pixel.pointmediatracker.com/ https://cnv.event.prod.bidr.io https://px0.pbbl.co https://aa.agkn.com https://*.userway.org https://tr.outbrain.com https://pixel.videohub.tv https://rp.liadm.com https://analytics.tiktok.com https://data.adxcel-ec2.com https://i.ytimg.com/ https://*.ethoslife.com https://*.policybull.com; media-src 'self' https://js.intercomcdn.com https://*.userway.org https://res.cloudinary.com; default-src 'self'; worker-src 'self' https://www.datadoghq-browser-agent.com/datadog-rum-v4.js; frame-ancestors https://agents.ethoslife.com https://policybull.com https://*.policybull.com; 3 default-src * data: 'unsafe-eval' 'unsafe-inline'; 3 frame-ancestors 'self' chayns.de qa.chayns.de tobit.team qa.tobit.team fff.chayns.site 3 frame-ancestors 'self' https://*.bod.de https://*.bod.ch https://*.bod.dk https://*.bod.fi https://*.bod.fr https://*.bod.se https://*.bod.com.es https://*.bod.no; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.viavisolutions.com https://players.brightcove.net https://view.ceros.com https://www.googletagmanager.com https://www.google-analytics.com https://*.g.doubleclick.net https://snap.licdn.com https://*.googlesyndication.com https://img.en25.com https://connect.facebook.net https://static.ads-twitter.com https://ws.zoominfo.com https://*.googleadservices.com https://*.google.com https://*.brightcove.com https://*.gstatic.com https://maps.googleapis.com https://*.hotjar.com https://*.clarity.ms https://vjs.zencdn.net https://secure.p04.eloqua.com https://tag.demandbase.com https://tags.srv.stackadapt.com https://srv.stackadapt.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com https://*.opendns.com https://opencdn.fpjs.sh https://fpnpmcdn.net https://*.linkedin.com https://*.gartner.com https://cdnjs.cloudflare.com https://openfpcdn.io https://*.adtrafficquality.google https://*.company-target.com https://*.blackfire.io https://*.ads-twitter.com https://*.facebook.net https://*.licdn.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://*.viavisolutions.com https://*.googleapis.com https://tags.srv.stackadapt.com https://www.googletagmanager.com https://players.brightcove.net https://www.gartner.com https://*.brightcove.com; img-src 'self' about: blob: data: https://*.viavisolutions.com http://comms.viavisolutions.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googlesyndication.com https://*.google.com https://maps.gstatic.com https://maps.googleapis.com https://*.clarity.ms https://t.co https://analytics.twitter.com https://*.linkedin.com https://www.facebook.com https://*.brightcove.com https://ws.zoominfo.com https://*.boltdns.net https://fonts.gstatic.com https://id.rlcdn.com https://segments.company-target.com https://tags.srv.stackadapt.com https://stickerly.pstatic.net https://players.brightcove.net https://*.gartner.com https://*.clarity.ms https://*.bing.com https://*.linkedin.com; media-src 'self' blob: https://*.brightcovecdn.com https://*.boltdns.net https://*.media.brightcove.com https://*.akamaihd.net https://*.cf.brightcove.com; frame-src 'self' https://*.viavisolutions.com https://players.brightcove.net https://view.ceros.com https://*.youtube.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.google.com https://www.facebook.com https://s.company-target.com https://td.doubleclick.net https://widget.spreaker.com https://packetpushers.net https://*.gartner.com https://*.linkedin.com https://www.googletagmanager.com https://*.libsyn.com; frame-ancestors 'self' https://*.viavisolutions.com https://viavi.seismic.com; child-src 'self' blob: https://*.viavisolutions.com https://players.brightcove.net https://view.ceros.com https://*.youtube.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.google.com https://www.facebook.com https://s.company-target.com https://widget.spreaker.com https://packetpushers.net https://*.gartner.com https://*.linkedin.com; font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://players.brightcove.net https://*.brightcove.com; connect-src 'self' https://*.viavisolutions.com https://players.brightcove.net https://*.gstatic.com https://www.google-analytics.com https://*.googleadservices.com https://*.googlesyndication.com https://*.google.com https://maps.googleapis.com https://*.g.doubleclick.net https://tags.srv.stackadapt.com https://*.brightcove.com https://ws.zoominfo.com https://*.hotjar.com https://*.hotjar.io wss://ws.hotjar.com https://*.clarity.ms https://*.boltdns.net https://*.akamaihd.net https://cdn.linkedin.oribi.io https://www.facebook.com https://api.company-target.com https://tag-logger.demandbase.com https://*.opendns.com https://px.ads.linkedin.com https://api.fpjs.io https://www.feedrapp.info https://*.adtrafficquality.google https://*.ceros.com https://*.brightcovecdn.com https://*.google-analytics.com; report-uri /report-csp-violation 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.cookielaw.org https://www.bnpparibas.de https://brasil.bnpparibas; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fast.wistia.com https://beacon-v2 https://analyticsgroupcom.bnpparibas.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas ajax.googleapis.com www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://www.gstatic.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https://s.w.org https://wp-rocket.me https://c.tile.openstreetmap.org https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org blob: https://www.google.com/pagead/landing https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://contrib.territories.bnpparibas https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas secure.gravatar.com www.gravatar.com i.ytimg.com data: www.googletagmanager.com; connect-src 'self' https://bnp-privacy.my.onetrust.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://yoast.com https://cdn.cookielaw.org https://o173685.ingest.sentry.io https://analyticsgroupcom.bnpparibas.com https://contrib.territories.bnpparibas https://www.google.com/pagead/landing https://pagead2.googlesyndication.com https://adservice.google.com https://sourcemap.devowl.io https://sourcemap.devowl.io/real-media-library/4.22.47/adb9a2f4ef22d5d85978840bd322bf76/index.js.map www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://fast.wistia.com https://github.com/google/fonts https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.gstatic.com fonts.googleapis.com data:; media-src 'self' https://asset.mediahub.bnpparibas https://upload.wikimedia.org https://broadcast.mediahub.bnpparibas data: https://mediahub.group.echonet https://my.mediahub.bnpparibas https://my.mediahub.bnpparibas/AssetLink/1cwfu8n4ki414p6d240ff18r41ver00j.mp4 https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas; frame-src 'self' https://www.youtube.com https://wp-rocket.me https://open.spotify.com https://www.youtube-nocookie.com https://centric.bnpparibas.com https://13179764.fls.doubleclick.net https://td.doubleclick.net https://gateway.zscalertwo.net https://remove.video https://mozbar.moz.com blob: https://fxplus.bnpparibas.com www.youtube.com www.googletagmanager.com; child-src 'self' www.youtube.com www.googletagmanager.com; worker-src 'self' blob:; 3 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; img-src 'self' data: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; script-src 'self' https://static.cloudflareinsights.com 'wasm-unsafe-eval' 'unsafe-inline'; connect-src 'self' https://cloudflareinsights.com; worker-src 'self' blob:; manifest-src 'self'; frame-src 'self'; media-src 'self' 3 frame-ancestors 'self' redbus.my.site.com partners.apnacomplex.com *.cdn.ampproject.org www.google.com www.google.co.id m.redbus.id m.redbus.my m.redbus.sg *.redbus.com; worker-src 'self' blob:; default-src 'self' *.googleapis.com c.riskified.com wss://*.firebaseio.com wss://rbpub.redbus.com h.online-metrix.net s3.rdbuz.com *.doubleclick.net *.facebook.com *.redbus.in *.redbus.com *.googleapis.com www.google-analytics.com www.googletagmanager.com *.google.com *.google.co.in *.facebook.net www.googleadservices.com www.facebook.com recorder.sessionstack.com o2.mouseflow.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.go-mpulse.net *.cdn4.forter.com *.forter.com *.cloudfront.net *.tiktok.com flackr.github.io *.moengage.com *.newrelic.com *.sentry-cdn.com *.ttwstatic.com *.clarity.ms www.lacmp.net cdn.debugbear.com flackr.github.io redbus.my.site.com www.youtube.com stackpath.bootstrapcdn.com unpkg.com *.redbus.com *.moengage.com in.fw-cdn.com *.freshchat.com cdn.conveythis.com *.googleoptimize.com app.link cdn.branch.io beacon.riskified.com tags.tiqcdn.com cdn-akamai.mookie1.com *.firebaseio.com h.online-metrix.net *.twitter.com static.ads-twitter.com *.googletagservices.com bam.nr-data.net *.doubleclick.net maxcdn.bootstrapcdn.com *.google.com cdn.jsdelivr.net *.taboola.com cdn.mouseflow.com maps.googleapis.com sg-pl.vizury.com cdnjs.cloudflare.com adservice.google.co.in ssl.google-analytics.com *.googlesyndication.com www.google-analytics.com cdn.sessionstack.com www.googletagmanager.com connect.facebook.net *.googleadservices.com *.rdbuz.com *.redbus.in www.gstatic.com; img-src 'self' data: blob: unicorn.indorent.co.id tiles.stadiamaps.com iconslib.rapyd.net rbdatum.s3.amazonaws.com *.clarity.ms bs.serving-sys.com product-image.globaltix.com img.youtube.com *.makemytrip.com moe-email-campaigns.s3.amazonaws.com *.moengage.com mmt.servedbyadbutler.com servedbyadbutler.com iconslib.rapyd.net *.twitter.com gos3.ibcdn.com lh3.googleusercontent.com i.ytimg.com img.riskified.com web-elb *.online-metrix.net *.goibibo.com barcode-latam.s3.amazonaws.com t.co www.googletagmanager.com *.doubleclick.net tpc.googlesyndication.com *.gstatic.com maps.googleapis.com *.s3.ap-southeast-1.amazonaws.com s3-ap-southeast-1.amazonaws.com *.s3-ap-southeast-1.amazonaws.com h.online-metrix.net www.google.co.in *.redbus.in *.google.com www.google-analytics.com ssl.google-analytics.com *.facebook.com *.rdbuz.com api.midtrans.com www.glassdoor.co.in; style-src 'self' 'unsafe-inline' blob: *.ttwstatic.com redbus.my.site.com cdn.jsdelivr.net stackpath.bootstrapcdn.com *.freshchat.com www.googletagmanager.com maxcdn.bootstrapcdn.com *.google.com cdnjs.cloudflare.com fonts.googleapis.com fonts.googleapis.com *.rdbuz.com st.redbus.in *.rdbuz.com; font-src 'self' data: maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com *.rdbuz.com st.redbus.in fonts.gstatic.com; frame-src 'self' *.taboola.com redbus.my.site.com partners.apnacomplex.com m.redbus.sg m.redbus.my *.moengage.com m.redbus.my *.freshchat.com payment.pagoefectivo.pe st.redbus.in *.twitter.com www.youtube-nocookie.com *.firebaseapp.com *.firebaseio.com www.surveymonkey.com *.google.com isb.au1.qualtrics.com www.googletagservices.com www.googletagmanager.com *.redbus.com h.online-metrix.net *.doubleclick.net *.vizury.com *.facebook.com www.youtube.com; object-src 'self'; connect-src 'self' wss://ai2.redbus.vn wss://ai2.redbus.com *.go-mpulse.net *.taboola.com *.forter.com wss://cdn0.forter.com *.cloudfront.net *.redbus.in *.moengage.com browser.sentry-cdn.com *.ingest.de.sentry.io data.debugbear.com www.lacmp.net *.redbus.my redbus.my.salesforce-scrt.com wss://tracking.yourbus.in:1031 barcode-latam.s3-ap-southeast-1.amazonaws.com cxselfhelp.s3-ap-southeast-1.amazonaws.com recorder.sessionstack.com *.moengage.com *.makemytrip.com *.googlesyndication.com *.google.com *.aws.elastic-cloud.com api2.branch.io wss://rbpub.redbus.vn wss://rbpub.redbus.com *.googleapis.com o2.mouseflow.com *.redbus.com *.doubleclick.net *.riskified.com www.google-analytics.com *.facebook.com 3 connect-src 'self' *.laerdal.com laerdal.com laerdalglobalhealth.com *.laerdalglobalhealth.com *.monitor.azure.com *.applicationinsights.azure.com *.google.com *.gigya.com *.cookielaw.com *.cookielaw.org *.onetrust.com *.posthog.com googleads.g.doubleclick.net cdn.jsdelivr.net *.salesforce-scrt.com *.talkdeskapp.com *.dynatrace.com *.us1.twilio.com *.google-analytics.com *.googlesyndication.com *.doubleclick.net *.facebook.com *.facebook.net *.ubembed.com ipapi.co *.googleadservices.com *.googletagmanager.com *.linkedin.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; default-src 'self' data: blob: laerdal.com *.laerdal.com laerdalglobalhealth.com *.laerdalglobalhealth.com; font-src 'self' data: blob: *.laerdal.com laerdal.com laerdalglobalhealth.com *.laerdalglobalhealth.com *.bootstrapcdn.com *.gstatic.com *.blob.core.windows.net *.cloudfront.net *.cloudflare.com *.talkdeskapp.com at.alicdn.com *.hotjar.com; frame-ancestors 'self'; frame-src laerdal.com *.laerdal.com laerdalglobalhealth.com *.laerdalglobalhealth.com *.gigya.com *.vimeo.com pointerpro.com *.pointerpro.com *.livechatinc.com laerdal.my.site.com *.buzzsprout.com *.talkdeskapp.com *.youtube.com youtube.com youtu.be *.googletagmanager.com *.google.com s.surveyanyplace.com *.youku.com *.flipsnack.com *.episerver.net *.calameo.com; img-src 'self' data: https: laerdal.com *.laerdal.com laerdalglobalhealth.com *.laerdalglobalhealth.com googleads.g.doubleclick.net laerdal.info *.googletagmanager.com cdn.brandfolder.io *.convertflow.co *.facebook.com *.facebook.net *.talkdeskdev.com *.talkdesk.com *.google-analytics.com *.linkedin.com *.baidu.com *.doubleclick.net *.ytimg.com *.hotjar.com *.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: laerdal.com *.laerdal.com laerdalglobalhealth.com *.laerdalglobalhealth.com *.blob.core.windows.net *.cloudflareinsights.com *.monitor.azure.com *.azure.com *.cookielaw.org *.convertflow.co *.en25.com code.jquery.com *.bootstrapcdn.com *.gigya.com *.gstatic.com *.google.com *.googleapis.com googleads.g.doubleclick.net *.livechatinc.com laerdal.my.site.com *.talkdeskapp.com *.ubembed.com *.google-analytics.com *.doubleclick.net *.vo.msecnd.net *.googletagmanager.com cdn.jsdelivr.net snap.licdn.com *.facebook.net *.hotjar.com youtube.com *.youtube.com; style-src 'self' 'unsafe-inline' laerdal.com *.laerdal.com laerdalglobalhealth.com *.laerdalglobalhealth.com *.blob.core.windows.net *.bootstrapcdn.com *.googleapis.com *.posthog.com laerdal.my.site.com cdn.jsdelivr.net *.gstatic.com; report-to csp-report-to 3 frame-ancestors 'self' https://*.system4travel.com 3 default-src 'self' https://*.aoshearman.com https://*.gedikeraksoy.com https://*.sitecorecloud.io https://*.vercel-scripts.com https://*.sitecorecloud.io https://cdn.plyr.io https://*.onetrust.com https://px.ads.linkedin.com https://*.passle.net https://*.ytimg.com https://*.youtube.com https://*.g.doubleclick.net/ https://*.siteimproveanalytics.io https://*.linkedin.com https://*.cloudflare.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.aoshearman.com https://*.gedikeraksoy.com https://*.sitecorecloud.io https://*.vercel-scripts.com https://*.sitecorecloud.io https://cdn.plyr.io https://*.onetrust.com https://px.ads.linkedin.com https://*.passle.net https://*.ytimg.com https://*.youtube.com https://*.g.doubleclick.net/ https://*.siteimproveanalytics.io https://*.linkedin.com https://*.blob.core.windows.net https://siteimproveanalytics.com https://snap.licdn.com https://secure.intelligence-enterprise.com https://public.flourish.studio https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com https://*.allenovery.com flo.uri.sh https://*.ceros.com https://cdn.yoshki.com https://cdn.iframe.ly https://*.twitter.com https://*.spotify.com https://*.podbean.com https://*.intelligence-enterprise.com;style-src 'self' 'unsafe-inline' https://*.aoshearman.com https://*.gedikeraksoy.com https://*.sitecorecloud.io https://*.vercel-scripts.com https://*.sitecorecloud.io https://cdn.plyr.io https://*.onetrust.com https://px.ads.linkedin.com https://*.passle.net https://*.ytimg.com https://*.youtube.com https://*.g.doubleclick.net/ https://*.siteimproveanalytics.io https://*.linkedin.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com;img-src 'self' blob: data: https://*.aoshearman.com https://*.gedikeraksoy.com https://*.sitecorecloud.io https://*.vercel-scripts.com https://*.sitecorecloud.io https://cdn.plyr.io https://*.onetrust.com https://px.ads.linkedin.com https://*.passle.net https://*.ytimg.com https://*.youtube.com https://*.g.doubleclick.net/ https://*.siteimproveanalytics.io https://*.linkedin.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com https://*.intelligence-enterprise.com;font-src 'self' https://*.aoshearman.com https://*.gedikeraksoy.com https://*.sitecorecloud.io https://*.vercel-scripts.com https://*.sitecorecloud.io https://cdn.plyr.io https://*.onetrust.com https://px.ads.linkedin.com https://*.cloudflare.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com data:;connect-src 'self' https://*.aoshearman.com https://*.gedikeraksoy.com https://*.sitecorecloud.io https://*.vercel-scripts.com https://*.sitecorecloud.io https://cdn.plyr.io https://*.onetrust.com https://px.ads.linkedin.com https://noembed.com https://*.cloudflare.com https://*.g.doubleclick.net https://*.passle.net https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com;object-src 'none';base-uri 'self';form-action 'self';frame-src 'self' https://*.aoshearman.com https://*.gedikeraksoy.com https://*.sitecorecloud.io https://*.allenovery.com flo.uri.sh https://*.ceros.com https://cdn.yoshki.com https://cdn.iframe.ly https://*.twitter.com https://*.spotify.com https://*.podbean.com https://youtube.com https://*.youtube.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com;block-all-mixed-content;upgrade-insecure-requests; 3 default-src * data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; frame-src 'self' blob: https:; 3 img-src * data: blob:; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com https://api.mapbox.com https://api.tiles.mapbox.com https://embed.typeform.com widget.trustpilot.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem * 'unsafe-inline'; style-src *; style-src-attr 'unsafe-inline'; style-src-elem * 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self'; upgrade-insecure-requests 3 frame-ancestors 'self' ocfl.net *.ocfl.net onetgov.net *.onetgov.net orangecountyfl.net *.orangecountyfl.net 3 block-all-mixed-content; frame-ancestors 'self'; object-src 'none' 3 frame-ancestors 'self' https://*.clasquin.com https://clasquin.com 3 frame-ancestors 'self' wbpa.wdo.io eu.wotblitz.com na.wotblitz.com asia.wotblitz.com 3 upgrade-insecure-requests; frame-ancestors 'self' tigertech.net *.tigertech.net; 3 frame-ancestors 'self', frame-ancestors 'self' 3 frame-ancestors 'self' *.marketo.com *.hubspot.com *.olark.com *.resi.io; 3 default-src 'self' https://*.paysign.com https://*.aws.paysign.com https://*.paysign.net https://zip.getziptastic.com https://www.googletagmanager.com *.lambda-url.us-east-1.on.aws https://api.main.prod.copay.paysign.com/; img-src * data:; script-src 'self' 'sha256-4qHwYstA/HMoqYktYjfAnyNPmBqLeAqunX99JaEvimc=' https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com/ https://www.google-analytics.com https://*.cookiebot.com/ https://cookiebot.com/*; frame-ancestors 'self' https://copay-portalapi.paysign.net/; frame-src https://www.google.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://copayassets-test.aws.paysign.com/ https://s3.amazonaws.com/ https://*.cookiebot.com/ https://*.paysign.com https://*.s3.amazonaws.com/ https://portal.main.prod.copay.paysign.com/ https://copay-portalapi.paysign.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.paysign.com https://*.aws.paysign.com https://*.paysign.net; font-src 'self' https://fonts.gstatic.com; connect-src https://*.paysign.com https://*.3pea.net https://*.aws.paysign.com https://*.paysign.net https://*.s3.us-east-1.amazonaws.com/ https://zip.getziptastic.com https://www.googletagmanager.com https://maps.googleapis.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ *.lambda-url.us-east-1.on.aws/ https://*.cookiebot.com/ https://www.google.com https://api.main.prod.copay.paysign.com/; manifest-src 'self' https://maps.googleapis.com/ https://www.google-analytics.com/; 3 frame-ancestors 'self' https://www.youtube.com; 3 object-src 'none'; base-uri 'none'; 3 base-uri 'self'; frame-ancestors 'none'; report-uri /report-csp-violation 3 default-src 'self' https: data: blob: 'unsafe-inline' 3 default-src 'none'; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; connect-src 'self' https:; media-src *.kaltura.com blob: data:; worker-src blob: 3 frame-ancestors 'self' webvisor.com; 3 img-src 'self' data: https://library.elementor.com https://gravityforms.s3.amazonaws.com https://s3.amazonaws.com https://api.wpmet.com https://s38924.pcdn.co https://assets.elementor.com https://cdn.gtranslate.net https://store.bdthemes.com https://dashboard.bdthemes.io https://wordpress.org https://www.googletagmanager.com https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://player.vimeo.com https://snap.licdn.com https://www.gstatic.com https://purplevrs.my.site.com 'unsafe-eval' https://www.google.com/recaptcha/; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://player.vimeo.com https://snap.licdn.com https://purplevrs.my.site.com https://google.com https://www.google.com https://gstatic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://rgsharedweb.s3.amazonaws.com https://purplevrs.my.site.com ; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://rgsharedweb.s3.amazonaws.com https://purplevrs.my.site.com ; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://player.vimeo.com https://get.purplevrs.com https://library.elementor.com https://get.zpbettertogether.com https://www.youtube.com https://purplevrs.my.site.com blob: https://google.com https://www.google.com https://gstatic.com https://www.gstatic.com; connect-src 'self' https://www.google-analytics.com https://yoast.com https://purplevrs.my.site.com https://purplevrs.my.salesforce-scrt.com; worker-src 'self' blob:; upgrade-insecure-requests; 3 frame-ancestors 'self' manyavar--dev.sandbox.lightning.force.com manyavar--uat.sandbox.lightning.force.com manyavar.lightning.force.com 3 frame-ancestors 'self' https://tbohotels.com https://*.tbohotels.com https://tboholidays.com https://*.tboholidays.com https://www.tbo.com https://wallet.tbo.com 3 default-src 'self'; script-src 'self' *.go-mpulse.net apis.mappls.com 'unsafe-eval' assets.adobedtm.com connect.facebook.net snap.licdn.com cdn.branch.io *.clarity.ms app.link 'unsafe-inline' https://www.youtube.com https://www.google.com https://www.gstatic.com cdn.rudderlabs.com; style-src 'self' apis.mappls.com fonts.googleapis.com 'unsafe-inline'; img-src 'self' *.tatacliq.com onemg.gumlet.io *.mapmyindia.com *.mappls.com placehold.co media.tatacroma.com media.croma.com *.cloudfront.net data: blob: *.tatadigital.com *.clarity.ms cdn.sanity.io ik.imagekit.io px.ads.linkedin.com ad.doubleclick.net adservice.google.com c.bing.com media-ik.croma.com; media-src 'self' https://media.tatacroma.com https://media-ik.croma.com https://ik.imagekit.io blob:; font-src 'self' fonts.gstatic.com; connect-src 'self' rs.tataneu.com cdn.rudderlabs.com *.launchdarkly.com https://tataneu.com https://tatadigitacvyl.dataplane.rudderstack.com *.akstat.io *.go-mpulse.net *.mappls.com *.mapmyindia.com unpkg.com cdn.jsdelivr.net px.ads.linkedin.com *.api.sanity.io o4504451288334336.ingest.us.sentry.io *.branch.io *.clarity.ms *.tatadigital.com cdn.sanity.io api.rudderstack.com *.rudderstack.com https://firestore.googleapis.com https://*.googleapis.com https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://www.googleapis.com https://ik.imagekit.io; worker-src 'self' blob:; frame-src 'self' https://chatbot.tatadigital.com https://www.youtube.com https://www.youtube-nocookie.com *.youtube.com https://www.google.com; frame-ancestors 'self' https://luxury.tatacliq.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; media-src 'self' https: blob:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self' 3 frame-ancestors 'self' https://sensors.olighthk.com https://*.olight.com https://*.olightcloud.com; 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.bazaarvoice.com/ https://mpsnare.iesnare.com/ https://bat.bing.com/ https://cdns.brsrvr.com/ https://*.fullstory.com/ 'unsafe-inline' https://*.krxd.net/ https://h.online-metrix.net/ https://*.igodigital.com/ https://*.certcapture.com/ https://*.qualtrics.com/ https://*.kaspersky-labs.com/ https://s.go-mpulse.net/ https://www.youtube.com/ https://ajax.googleapis.com/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://*.cookiebot.com https://*.cookiebot.eu https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.google.com/ https://www.gstatic.com/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://*.hsadspixel.net https://*.hs-analytics.net https://js.hscta.net https://*.hubspot.com https://static.hsappstatic.net https://*.usemessages.com https://*.hs-banner.com https://*.hubspot.net https://*.hscollectedforms.net https://*.hsleadflows.net https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hubspotfeedback.com https://feedback.hubapi.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://js.zi-scripts.com https://tags.clickagy.com/ https://app-worker.visitor-analytics.io ;frame-ancestors 'self' *.seismic.com;worker-src 'self' blob:; 3 default-src * 'unsafe-inline' 'unsafe-eval' data: 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval' data: 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; 3 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.adroll.com https://*.demandbase.com https://*.google-analytics.com https://*.googletagmanager.com https://*.linkedin.com https://*.litix.io https://*.podcasts.apple.com https://*.spotify.com https://*.wistia.com https://*.wistia.net https://*.youtube.com https://413-fzz-310.mktoresp.com https://413-fzz-310.mktoutil.com https://a.usbrowserspeed.com https://ads.reddit.com https://alb.reddit.com https://analytics.google.com https://api.company-target.com https://app-sj13.marketo.com https://assets.calendly.com https://bat.bing.com https://bat.bing.net https://browser.sentry-cdn.com https://calendly.com https://cdn.cookielaw.org https://www.comparably.com https://connect.facebook.net https://demo.arcade.software https://embed.figma.com https://embed-ssl.wistia.com https://www.facebook.com https://fast.wistia.com https://fast.wistia.net https://www.figma.com https://fonts.googleapis.com https://fonts.gstatic.com https://geolocation.onetrust.com https://google.com https://www.google.com https://www.google.com/recaptcha/ https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.gstatic.com/recaptcha/ https://i.ytimg.com https://id.rlcdn.com https://www.imprivata.com https://jobs.jobvite.com https://js.zi-scripts.com https://marvel-b2-cdn.bc0a.com https://munchkin.marketo.net https://www.onelink-edge.com https://pagead2.googlesyndication.com https://pixel-config.reddit.com https://plausible.io https://player.vimeo.com https://privacyportal.onetrust.com https://px.ads.linkedin.com https://recaptcha.google.com/recaptcha/ https://www.redditstatic.com https://s.company-target.com https://scheduler.zoom.us/ https://scout-cdn.salesloft.com https://scout.salesloft.com https://security.imprivata.com https://segments.company-target.com https://sentry.io/api/* https://snap.licdn.com https://stats.g.doubleclick.net https://td.doubleclick.net https://tracking.intentsify.io https://*.trustarc.com https://ws-assets.zoominfo.com https://ws.zoominfo.com; frame-ancestors 'self'; connect-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.adroll.com https://*.demandbase.com https://*.google-analytics.com https://*.googletagmanager.com https://*.linkedin.com https://*.litix.io https://*.podcasts.apple.com https://*.spotify.com https://*.wistia.com https://*.wistia.net https://*.youtube.com https://413-fzz-310.mktoresp.com https://413-fzz-310.mktoutil.com https://a.usbrowserspeed.com https://ads.reddit.com https://alb.reddit.com https://analytics.google.com https://api.company-target.com https://app-sj13.marketo.com https://assets.calendly.com https://bat.bing.com https://bat.bing.net https://browser.sentry-cdn.com https://calendly.com https://cdn.cookielaw.org https://www.comparably.com https://connect.facebook.net https://demo.arcade.software https://embed.figma.com https://embed-ssl.wistia.com https://www.facebook.com https://fast.wistia.com https://fast.wistia.net https://www.figma.com https://fonts.googleapis.com https://fonts.gstatic.com https://geolocation.onetrust.com https://google.com https://www.google.com https://www.google.com/recaptcha/ https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.gstatic.com/recaptcha/ https://i.ytimg.com https://id.rlcdn.com https://www.imprivata.com https://jobs.jobvite.com https://js.zi-scripts.com https://marvel-b2-cdn.bc0a.com https://munchkin.marketo.net https://www.onelink-edge.com https://pagead2.googlesyndication.com https://pixel-config.reddit.com https://plausible.io https://player.vimeo.com https://privacyportal.onetrust.com https://px.ads.linkedin.com https://recaptcha.google.com/recaptcha/ https://www.redditstatic.com https://s.company-target.com https://scheduler.zoom.us/ https://scout-cdn.salesloft.com https://scout.salesloft.com https://security.imprivata.com https://segments.company-target.com https://sentry.io/api/* https://snap.licdn.com https://stats.g.doubleclick.net https://td.doubleclick.net https://tracking.intentsify.io https://*.trustarc.com https://ws-assets.zoominfo.com https://ws.zoominfo.com https://o133414.ingest.us.sentry.io/api/4507454004789248/envelope/; upgrade-insecure-requests 3 frame-ancestors 'self' https://eduimzo.uz 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.yandex.ru https://*.yandex.net https://bitrix.info https://mc.yandex.ru https://captcha-api.yandex.ru https://api-maps.yandex.ru https://yastatic.net https://core-renderer-tiles.maps.yandex.net https://beststocks.ru https://bidzaar.com; style-src 'self' 'unsafe-inline' https://*.yandex.ru https://*.yandex.net https://beststocks.ru https://bidzaar.com; font-src 'self' data: https://*.yandex.ru https://*.yandex.net https://yastatic.net https://beststocks.ru https://bidzaar.com; img-src 'self' data: blob: https: http: https://beststocks.ru https://chr.rbc.ru https://rbc.ru https://rg.ru https://tass.ru https://ria.ru https://www.vedomosti.ru https://aif.ru https://smotrim.ru https://www.kommersant.ru https://www.interfax.ru https://mordoviatv.ru https://www.gazeta.ru https://lenta.ru https://www.moex.com https://www.interfax-russia.ru https://www.ra-national.ru https://raexpert.ru https://www.e-disclosure.ru https://vod-video.rbc.ru https://cdnvideo.tvspb.ru https://78.ru https://rutube.ru https://bidzaar.com; connect-src 'self' https://*.yandex.ru https://*.yandex.net https://mc.yandex.ru https://metrika.yandex.ru wss://*.yandex.ru wss://*.yandex.net wss://mc.yandex.ru https://www.1c-bitrix.ru https://beststocks.ru https://bidzaar.com; frame-src https://kinescope.io https://*.kinescope.io https://promomed.pro https://captcha-api.yandex.ru https://*.yandex.ru https://*.yandex.net https://beststocks.ru https://chr.rbc.ru https://rbc.ru https://rg.ru https://tass.ru https://ria.ru https://www.vedomosti.ru https://aif.ru https://smotrim.ru https://www.kommersant.ru https://www.interfax.ru https://mordoviatv.ru https://www.gazeta.ru https://lenta.ru https://www.moex.com https://www.interfax-russia.ru https://www.ra-national.ru https://raexpert.ru https://www.e-disclosure.ru https://vod-video.rbc.ru https://cdnvideo.tvspb.ru https://78.ru https://rutube.ru https://bidzaar.com; frame-ancestors 'self'; 3 frame-ancestors https://wpp-wdcee.wirecard.com 3 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors *; 3 default-src 'self' api-js.mixpanel.com *.smct.co *.yappycloud.com *.smct.io chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.appsflyer.com appsflyer.com *.lytics.io *.groovinads.com *.creativecdn.com *.dragontail.com dragontail.com *.kfc.com.pe test.ipg-online.com mozbar.moz.com www.kfclesotho.com dev.local.com:8080 *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.fullstory.com analysts.pangle-ads.com ad.doubleclick.net *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.pizzahut.com.bo *.local.com:8080 *.local.com dev.local.com *.kaptcha.com *.smartlook.cloud *.facebook.net *.kvantum-app.com wss://*.visitors.live *.luckyorange.com *.google.co.il *.tictuk-qa.com *.googleoptimize.com wss://collection.decibelinsight.net collection.decibelinsight.net tacobell.ca *.tacobell.ca *.kfc.com.mx kfc.com.mx analytics.tiktok.com voices.s1gateway.com *.webeyez.com *.crwdcntrl.net *.braze.com wss://*.hotjar.com *.googleadservices.com *.indigitall.com consentcdn.cookiebot.com *.browser-intake-datadoghq.eu *.g.doubleclick.net *.bringg.com *.ubereats.com *.adyen.com *.oppwa.com *.onetrust.com cdn.cookielaw.org *.browser-intake-datadoghq.com *.googleapis.com wss://ws.inspectlet.com *.inspectlet.com *.google-analytics.com *.datadoghq.com *.datadoghq.eu *.browser-intake-datadoghq.eu *.hotjar.com *.googletagmanager.com *.googleusercontent.com *.lr-ingest.io *.lji.li *.tictuk.com *.facebook.com *.google.com pay.payphonetodoesposible.com *.googleads.g.doubleclick.net *.google.com *.analytics.tiktok.com *.p1.outbrain.com *.googletagmanager.com *.googletagservices.com *.bat.bing.com *.e-planning.net *.sync.e-planning.net *.cm.mgid.com 2mzwqynkiv.us-east-1.awsapprunner.com *.sync.taboola.com wa.appsflyersdk.com *.d2d7do8qaecbru.cloudfront.net data:;frame-src 'self' js.smct.io *.smct.co *.smct.io *.yappycloud.com chat.openai.com d2d7do8qaecbru.cloudfront.net *.alignet.io *.entersektehs.com *.klar.mx *.efaka.net *.secureacs.com www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.googletagmanager.com *.lili.ly *.lytics.io *.groovinads.com global.frcapi.com *.creativecdn.com *.americanexpress.com *.dragontail.com test.ipg-online.com *.kfc.com.pe mozbar.moz.com www.kfclesotho.com dev.local.com:8080 *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com 3ds.eglobal.com.mx *.fullstory.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.local.com *.tictuk.com telegram.me wa.me m.me powertranztestframeworkdsacssimulator.azurewebsites.net *.kaptcha.com *.ptranz.com *.google.com *.arcot.com *.nutritionix.com *.lji.li lili.ly *.webeyez.com voices.s1gateway.com *.amazon-adsystem.com *.crwdcntrl.net *.mathtag.com *.doubleclick.net docs.google.com tacobell.ca *.tacobell.ca *.kfc.com.mx kfc.com.mx *.prb.com.mx:* consentcdn.cookiebot.com *.tracker.dragontail.com *.youtube.com *.bringg.com *.ubereats.com *.uber.com *.adyen.com *.oppwa.com *.payeezy.com authentication.cardinalcommerce.com aacsw.3ds.verifiedbyvisa.com ecom.eglobal.com.mx *.modirum.com *.ipg-online.com pay.payphonetodoesposible.com *.mercadopago.com.co *.hotjar.com *.facebook.com *.cardnet.com.do; object-src 'self' *.smct.co *.smct.io chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.googletagmanager.com *.lytics.io *.groovinads.com *.creativecdn.com *.dragontail.com dragontail.com test.ipg-online.com *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.fullstory.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.pizzahut.com.bo *.local.com:8080 *.local.com kfc.com.mx *.kfc.com.mx *.tictuk.com tacobell.ca *.tacobell.ca *.tictuk.com;style-src 'self' 'unsafe-inline' *.smct.co *.smct.io *.yappycloud.com chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.googletagmanager.com *.lytics.io *.groovinads.com *.creativecdn.com *.dragontail.com dragontail.com test.ipg-online.com *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.fullstory.com analysts.pangle-ads.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.pizzahut.com.bo *.google.com voices.s1gateway.com use.fontawesome.com www.googletagmanager.com *.adyen.com *.oppwa.com *.lji.li *.tictuk.com fonts.googleapis.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.yappycloud.com js.smct.io *.smct.io *.smct.co smct.co chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.lytics.io *.groovinads.com *.creativecdn.com *.dragontail.com dragontail.com test.ipg-online.com *.appsflyer.com *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.fullstory.com analysts.pangle-ads.com ad.doubleclick.net bat.bing.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.local.com *.kaptcha.com web-sdk.smartlook.com *.kfcbotswana.com *.luckyorange.com *.googleoptimize.com tacobell.ca *.tacobell.ca *.kfc.com.mx kfc.com.mx cdn.decibelinsight.net voices.s1gateway.com analytics.tiktok.com *.webeyez.com *.pizzahut.com.ec *.crwdcntrl.net *.mathtag.com *.gstatic.com *.g.doubleclick.net *.googleadservices.com *.cookiebot.com *.appboycdn.com *.adyen.com *.oppwa.com *.onetrust.com cdn.cookielaw.org *.maps.yandex.net yastatic.net *.yandex.ru yandex.ru *.payeezy.com polyfill.io cdn.inspectlet.com cdn.polyfill.io lab.cardnet.com.do servicios.cardnet.com.do *.google-analytics.com *.hotjar.com *.googletagmanager.com cdn.lr-ingest.io cdn.logrocket.io cdnjs.cloudflare.com *.lji.li *.tictuk.com *.google.com *.facebook.net *.googleapis.com *.facebook.com wa.appsflyersdk.com pay.payphonetodoesposible.com;img-src 'self' braze-images.com pixel.rubiconproject.com *.yappycloud.com rt.udmserve.net us-u.openx.net sync.e-planning.net cm.mgid.com sync.taboola.com *.smct.co *.smct.io chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.appsflyer.com *.groovinads.com appsflyer.com *.lytics.io *.creativecdn.com extranet.prb.com.mx *.dragontail.com dragontail.com *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.kfc.ph *.fullstory.com analysts.pangle-ads.com ad.doubleclick.net bat.bing.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.pizzahut.com.bo media.api-kfc.com xilnexblobs.b-cdn.net www.telepizza.cl *.googletagmanager.com telepizza.cl *.telepizza.cl *.kfcbotswana.com *.xilnex.com *.kfc.co.za *.amazon-adsystem.com *.ofisistemas.com:8096 *.kfc-panama.com habit-images.s3.us-east-2.amazonaws.com tacobell.ca *.tacobell.ca *.kfc.com.mx kfc.com.mx *.pizzahut.cl pizzahut.cl *.google.co.uk *.s1gateway.com *.pizzahut.com.mx *.mathtag.com *.ofisistemas.com pizzahut.com.co *.pizzahut.com.co nolocdnmsftaznua.azureedge.net *.indigitall-cdn.com *.g.doubleclick.net *.pizzahut.com.br *.pizzahut.com.ec *.google.com.mx *.google.ca *.google.co.il *.google.es *.google.com.do *.google.com *.google.com.ec *.google.com.br *.pizzahut-tt.com *.tacobell.co.nz *.pizzahut.fi pizzahut.fi nolocdnmsftus.azureedge.net ros-prd.s3.amazonaws.com *.adyen.com *.cookielaw.org *.maps.yandex.net *.yandex.ru yandex.ru *.kfc.tt *.cognizantorderserv.com connect.facebook.net *.inspectlet.com *.google-analytics.com ph-web-bucket.s3.us-east-2.amazonaws.com *.mobstorm.com images-rest.wixmp.com *.googleusercontent.com *.lji.li *.tictuk.com *.googleapis.com *.cloudfront.net/phws/ *.gstatic.com *.wixstatic.com *.facebook.com test.ipg-online.com data:;font-src 'self' *.smct.co d2d7do8qaecbru.cloudfront.net *.yappycloud.com *.smct.io chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.googletagmanager.com *.lytics.io *.creativecdn.com *.dragontail.com dragontail.com test.ipg-online.com *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.fullstory.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.local.com voices.s1gateway.com use.fontawesome.com *.tictuk.com fonts.gstatic.com data:;worker-src 'self' 'unsafe-eval' 'unsafe-inline' *.smct.co *.smct.io chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app s-cs.send.microad.jp *.onelink.me wa.onelink.me *.googletagmanager.com *.lytics.io *.creativecdn.com *.dragontail.com dragontail.com test.ipg-online.com *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.fullstory.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com *.lji.li *.tictuk.com blob: data:;frame-ancestors 'self' *.smct.co *.smct.io chat.openai.com *.alignet.io *.entersektehs.com *.klar.mx www.kfcuganda.ug www.rsa3dsauth.com api.paymongo.com payments.gcash.com *.kfc-panama.com kiosk.kfc-panama.com prb-kfc-mx-marketing-prd-gcrs-tagm-srv-513517260482.us-central1.run.app kfc-marketing-gtm-server-side-tagging-37120935558.us-central1.run.app *.onelink.me *.googletagmanager.com *.lytics.io *.creativecdn.com *.dragontail.com dragontail.com test.ipg-online.com dev.local.com:8080 test-tictuk.kfc.com.pe *.izipay.pe edge.fullstory.com rs.fullstory.com www.kfc.tt kfc-com-mx.localhost:4000 *.kfcpuertorico.com *.fullstory.com *.kfcbrasil.com.br kfcbrasil.com.br *.tictuk-demo.com *.arcoprueba.com kfc.com.mx *.kfc.com.mx *.ipg-online.com pay.payphonetodoesposible.com *.lji.li http://local.tictuk.com:8080 *.tictuk.com *.facebook.com *.messenger.com facebook.com messenger.com *.telegram.org telegram.org kfc.cw pizzahut.cw kfc.mystagingwebsite.com kfc.com.pe *.kfc.com.pe ; 3 frame-ancestors https://*.todsgroup.com 3 script-src 'self' 'strict-dynamic' 'nonce-LSY_r4nD0m' https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://www.google-analytics.com https://assets-eur.mkt.dynamics.com https://public-eur.mkt.dynamics.com https://formui-usa1.mkt.dynamics.com https://mktdplp102cdn.azureedge.net https://www.googletagmanager.com https://connect.facebook.net https://snap.licdn.com https://px.ads.linkedin.com https://www.youtube.com https://maps.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://www.googletagmanager.com:443 https://jnn-pa.googleapis.com:443;font-src 'self';img-src 'self' data: cxppusa1formui01cdnsa01-endpoint.azureedge.net ar.lhsystems.com gtm.lhsystems.com static.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net cdn.lhsystems.com cdn.lhsystems.de cdn.lhsystems.hu px.ads.linkedin.com assets-eur.mkt.dynamics.com public-eur.mkt.dynamics.com formui-usa1.mkt.dynamics.com www.facebook.com www.google.hu www.google.com www.google.de www.google-analytics.com www.googletagmanager.com i.ytimg.com yt3.ggpht.com region1.analytics.google.com region1.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;frame-src https://gtm.lhsystems.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://www.google.com https://www.google.de https://www.google.hu https://assets-eur.mkt.dynamics.com https://public-eur.mkt.dynamics.com https://formui-usa1.mkt.dynamics.com https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com; frame-ancestors https://assets-eur.mkt.dynamics.com https://public-eur.mkt.dynamics.com https://formui-usa1.mkt.dynamics.com; form-action 'self';connect-src 'self' cxppusa1formui01cdnsa01-endpoint.azureedge.net ar.lhsystems.com gtm.lhsystems.com stapecdn.com static.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net assets-eur.mkt.dynamics.com public-eur.mkt.dynamics.com formui-usa1.mkt.dynamics.com px.ads.linkedin.com www.google-analytics.com www.google.com www.google.de www.google.hu www.facebook.com region1.analytics.google.com region1.google-analytics.com gstatic.com googletagmanager.com googleapis.com; 3 default-src 'none'; child-src 'self' *.kaltura.com *.surveygizmo.com cdn.calconic.com insuranceservicesofficeinc.demdex.net; connect-src 'self' data: *.albacross.com *.brightcove.com *.commoninja.com *.crazyegg.com *.facebook.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleapis.com *.googlesyndication.com *.hubspot.com *.kaltura.com *.kampyle.com *.linkedin.com *.maplecroft.com *.optimizely.com *.srv.stackadapt.com *.xactware.com app.calconic.com bcbolt446c5271-a.akamaihd.net cdn-app.continual.ly cdn.calconic.com cdn.cookielaw.org dc.services.visualstudio.com dl.episerver.net dpm.demdex.net geolocation.onetrust.com google.co.in http://ad.doubleclick.net https://*.6sc.co https://*.6sense.com https://*.influ2.com https://1752680588.rsc.cdn77.org https://adservice.google.com https://analytics-fe.digital-cloud-us-main.medallia.com https://analytics.google.com https://api.adblock360.net https://api.adblockertool.com https://api.adblocking247.com https://api.aituria.com https://api.awesomeblocker.com https://api.killadsapi.com https://api.onsleek.ai https://api.video-adblock.com https://app.continual.ly/ https://at.alicdn.com https://c.6sc.co https://cdn.jsdelivr.net https://cdn.linkedin.oribi.io/partner/1669474/domain/verisk.com/token https://cdn.linkedin.oribi.io/partner/384036/domain/maplecroft.com/token https://connect.facebook.net https://content.hotjar.io https://epsilon.6sense.com https://fcgt742.com https://fonts.gstatic.com https://forms-na1.hsforms.com https://ipv6.6sc.co https://js.monitor.azure.com https://metrics.hotjar.io https://risksolutions.verisk.com https://s.yimg.com https://statistics-dot-calconic-app.appspot.com/api/stats/push https://unpkg.com https://verisk.my.salesforce-scrt.com https://wss-pr.continual.ly:6001 https://www.google.com.et https://www.google.com.pr https://www.google.com.tr hubspot-forms-static-embed.s3.amazonaws.com manifest.prod.boltdns.net opreq.observepoint.com privacyportal.onetrust.com public.flourish.studio secure.adnxs.com vc.hotjar.io verisk.d1.sc.omtrdc.net veriskisonetprod.112.2o7.net ws.hotjar.com wss://ws.hotjar.com; font-src 'self' data: *.cloudfront.net *.googleapis.com *.gstatic.com *.kaltura.com cdnjs.cloudflare.com dl.episerver.net vjs.zencdn.net; frame-src 'self' *.acast.com *.brightcove.net *.commoninja.com *.eloqua.com *.facebook.com *.g.doubleclick.net *.google.com *.gstatic.com *.kaltura.com *.kampyle.com *.maplecroft.com *.optimizely.com *.pardot.com *.readymag.com *.surveygizmo.com *.twitter.com *.youtube.com activitymap.adobe.com app.powerbi.com bloomberg.com capture.navattic.com cdn-app.continual.ly cdn.calconic.com datawrapper.dwcdn.net dl.episerver.net flo.uri.sh https://app.continual.ly/ https://forms-na1.hsforms.com https://forms.hsforms.com https://open.spotify.com https://share.hsforms.com https://verisk.my.site.com https://view.ceros.com https://www.brighttalk.com https://www.googletagmanager.com insuranceservicesofficeinc.demdex.net lifedemo.shinyapps.io optimize.google.com player.vimeo.com public.tableau.com survey.alchemer.com td.doubleclick.net verisk.postclickmarketing.com www.buzzsprout.com www.google.com www.insurancejournal.tv www.youtube-nocookie.com; img-src 'self' data: *.air-worldwide.com *.albacross.com *.brightcove.com *.commoninja.com *.eloqua.com *.facebook.com *.g.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.kaltura.com *.kampyle.com *.linkedin.com *.maplecroft.com *.optimizely.com *.srv.stackadapt.com *.trendemon.com *.twimg.com *.twitter.com *.verisk.com *.youtube.com 6016449.global.siteimproveanalytics.io a.usea01.idio.episerver.net api.mapbox.com assets.adobedtm.com c.bing.com cdn.cookielaw.org cf-images.us-east-1.prod.boltdns.net cm.everesttech.net dl.episerver.net dpm.demdex.net https://*.6sc.co https://ib.adnxs.com https://sp.analytics.yahoo.com i.ytimg.com jumbe.zaius.com maps.gstatic.com optimize.google.com p.adsymptotic.com public.tableau.com t.influ2.com verisk.d1.sc.omtrdc.net veriskisonetprod.112.2o7.net w3.poweradvocate.com www.google.co.uk www.google.com www.greatplacetowork.com www.gstatic.com; media-src 'self' blob: *.air-worldwide.com *.gstatic.com *.kaltura.com *.srv.stackadapt.com bcbolt446c5271-a.akamaihd.net dl.episerver.net manifest.prod.boltdns.net; script-src-elem 'self' 'unsafe-inline' *.albacross.com *.cave9tape.com *.cloudfront.net *.cookielaw.org *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.kaltura.com *.kampyle.com *.licdn.com *.maplecroft.com *.oktopost.com *.pardot.com *.salesforceliveagent.com *.srv.stackadapt.com *.trendemon.com *.twitter.com *.xactware.com alert.risksolutions.verisk.com assets.adobedtm.com cdn-app.continual.ly cdn.calconic.com cdn.datatables.net cdnjs.cloudflare.com code.jquery.com dl.episerver.net https://*.influ2.com https://app.optimizely.com https://cdn-assets-prod.s3.amazonaws.com https://cdn.optimizely.com https://cdnapisec.kaltura.com https://j.6sc.co https://js.hsforms.net https://okt.to https://s.yimg.com https://script.hotjar.com https://static.hotjar.com https://unpkg.com https://verisk.my.site.com https://view.ceros.com https://www.brighttalk.com img.en25.com js.monitor.azure.com maxcdn.bootstrapcdn.com public.flourish.studio risksolutions.verisk.com s.usea01.idio.episerver.net siteimproveanalytics.com static.oktopost.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ads-twitter.com *.albacross.com *.cave9tape.com *.cloudflare.com *.cloudfront.net *.commoninja.com *.cookielaw.org *.facebook.net *.fraudblocker.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.herbgreencolumn.com *.hsforms.com *.kaltura.com *.licdn.com *.linkedin.com *.maplecroft.com *.oktopost.com *.optimizely.com *.pardot.com *.readymag.com *.salesforceliveagent.com *.trendemon.com *.twimg.com *.twitter.com *.xactware.com *.youtube.com activitymap.adobe.com api-ssl.bitly.com az416426.vo.msecnd.net cdn-app.continual.ly cdn-assets-prod.s3.amazonaws.com cdn.calconic.com cdn.mouseflow.com cdnjs.cloudflare.com code.jquery.com dl.episerver.net geolocation.onetrust.com https://js.monitor.azure.com https://verisk.my.site.com img.en25.com ionfiles.scribblecdn.ne js.hsforms.net js.monitor.azure.com maxcdn.bootstrapcdn.com optimize.google.com player.vimeo.com players.brightcove.net public.flourish.studio public.tableau.com s.usea01.idio.episerver.net s1065293013.t.eloqua.com script.crazyegg.com secure.leadforensics.com siteimproveanalytics.com unpkg.com vjs.zencdn.net www.buzzsprout.com www.googleadservices.com www.googleanalytics.com www.googleoptimize.com www.gstatic.com; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.srv.stackadapt.com *.verisk.com alert.risksolutions.verisk.com cdn-app.continual.ly cdn.jsdelivr.net dl.episerver.net https://app.continual.ly/css/gekr8k83y6vw/custom.css https://cdnjs.cloudflare.com https://unpkg.com https://verisk.my.site.com risksolutions.verisk.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.srv.stackadapt.com *.twimg.com *.twitter.com *.verisk.com cdn-app.continual.ly cdn.jsdelivr.net cdnjs.cloudflare.com dl.episerver.net optimize.google.com unpkg.com; worker-src 'self' blob:; script-src-attr 'unsafe-inline' *.srv.stackadapt.com *.xactware.com; frame-ancestors *.cargonet.com *.isomitigation.com *.maplecroft.com *.verisk.com https://verisk.my.salesforce-scrt.com https://verisk.my.site.com https://verisk.my.site.com/; report-to stott-security-endpoint;report-uri https://www.verisk.com/stott.security.optimizely/api/cspreporting/reporturiviolation/; 3 default-src 'self' mittwald.de *.mittwald.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' googleads.g.doubleclick.net pixel.byspotify.com assets.calendly.com *.youtube.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-umm.b-cdn.net www.redditstatic.com *.signalize.com *.etracker.com *.etracker.de *.hotjar.com events.mittwald.de *.ads.linkedin.com snap.licdn.com *.googletagmanager.com *.adform.net mittwald.de *.mittwald.de; style-src 'self' 'unsafe-inline' *.etracker.com assets.calendly.com *.hotjar.com events.mittwald.de; img-src 'self' data: www.etracker.de assets.calendly.com userlike-cdn-operators.userlike.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com userlike-cdn-web.b-cdn.net www.userlike.com userlike-store-media-files.s3.amazonaws.com i.ytimg.com alb.reddit.com *.hotjar.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.de *.adform.net px.ads.linkedin.com mittwald.de *.mittwald.de; font-src 'self' data: assets.calendly.com assets.calendly.com userlike-cdn-umm.b-cdn.net fonts.gstatic.com *.hotjar.com mittwald.de *.mittwald.de; connect-src 'self' pixels.spotify.com wss://umd.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com umd.userlike.com api.userlike.com userlike-cdn-web.b-cdn.net www.userlike.com www.redditstatic.com *.signalize.com *.etracker.de *.etracker.com *.hotjar.com *.hotjar.io wss://*.hotjar.com events.mittwald.de px.ads.linkedin.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.de *.adform.net pixel-config.reddit.com mittwald.de *.mittwald.de blob:; media-src 'self' userlike-cdn-umm.b-cdn.net userlike-store-media-files.s3.amazonaws.com www.userlike.com mittwald.de *.mittwald.de blob:; child-src 'self' api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-umm.b-cdn.net mittwald.de *.mittwald.de blob:; frame-src 'self' outlook.office.com bookings.cloud.microsoft td.doubleclick.net googletagmanager.com *.googletagmanager.com calendly.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-umm.b-cdn.net *.youtube.com www.youtube-nocookie.com player.vimeo.com *.adform.net events.mittwald.de mittwald.de *.mittwald.de; frame-ancestors 'self' https://*.etracker.com; 3 script-src-elem link.sportsgirl.com.au *.wufoo.com *.pinterest.com *.jotform.com *.jotfor.ms *.squarecdn.com https://api.smooch.io/faye https://cdn-widgetsrepository.yotpo.com https://rum.hlx.page *.hotjar.com *.rmp.rakuten.com *.facebook.net *.googletagmanager.com *.api.useinsider.com foursixty.com *.adsrvr.org *.scarabresearch.com *.plugins.emarsys.net stockinstore.net *.reloop.com.au *.resultspage.com *.pinimg.com *.bing.com *.tiktok.com *.newrelic.com *.google-analytics.com https://3739-1.sli-r.com/r-api/ https://googleads.g.doubleclick.net *.stockinstore.net *.cloudflare.com https://maps.googleapis.com *.afterpay.com *.addressfinder.io https://www.google.com https://www.gstatic.com *.sli-r.com *.braintreegateway.com *.paypal.com https://ap-gateway.mastercard.com *.zdassets.com https://www.googleadservices.com https://staticw2.yotpo.com https://tpc.googlesyndication.com https://jp-tags.rd.linksynergy.com api.neverbounce.com *.forter.com *.surveymonkey.com *.googleapis.com *.kaltura.com *.creativecdn.com *.sli-spark.com *.useinsider.com https://t.contentsquare.net/uxa/a699efee42df6.js www.clarity.ms https://scripts.clarity.ms/0.8.55/clarity.js https://scripts.clarity.ms/0.8.59-beta/clarity.js *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem *.jotfor.ms https://cdn-widget-assets.yotpo.com *.sli-r.com https://foursixty.com/ *.resultspage.com *.stockinstore.net https://assets.api.useinsider.com/ *.addressfinder.io https://fonts.googleapis.com https://staticw2.yotpo.com *.creativecdn.com https://cdn-widgetsrepository.yotpo.com *.useinsider.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com 'unsafe-inline' data: *.gstatic.com *.typekit.net *.stockinstore.net *.afterpay.com *.hotjar.com *.useinsider.com *.yotpo.com *.googleapis.com *.jotfor.ms *.slant.co cdn.neverbounce.com *.cdnfonts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.cardinalcommerce.com *.paypal.com *.yotpo.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * link.sportsgirl.com.au link.sussan.com.au 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.google.com *.mastercard.com *.adsrvr.org *.useinsider.com *.linksynergy.com *.tiktok.com *.hotjar.com *.doubleclick.net *.demdex.net *.reloop.com.au *.myunidays.com *.facebook.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.yotpo.com bid.g.doubleclick.net *.youtube-nocookie.com widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk * *.sharethis.com *.pinterest.com https://bid.g.doubleclick.net *.cloudflarestream.com videodelivery.net *.surveymonkey.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://static.afterpay.com *.googletagmanager.com *.google-analytics.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com *.paypal.com *.sportsgirl.com.au *.suzannegrae.com.au *.sussan.com.au *.cdninstagram.com *.gstatic.com *.googleapis.com *.google.com *.google.com.au *.google.co.nz *.google.com.ua *.google.by *.google.us *.google.de *.stockinstore.net *.rakuten.com *.afterpay.com *.nr-data.net *.adsrvr.org *.linksynergy.com *.bing.com *.doubleclick.net *.resultspage.com *.resultsstage.com *.resultsdemo.com *.useinsider.com *.omtrdc.net *.2o7.net *.adobedtm.com *.demdex.net *.everesttech.net *.reloop.com.au *.unidays.world www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com *.cloudfront.net *.jotfor.ms *.jotform.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com *.youtube.com https://site-assets.afterpay.com/ *.kaltura.com *.facebook.com https://static.zdassets.com/web_widget/latest/basic_settings_avatar.png www.google.com.ua *.sharethis.com *.pinterest.com *.sli-spark.com https://yotpo-editor-production.s3.amazonaws.com *.creativecdn.com https://barcode.tec-it.com https://c.contentsquare.net https://c.clarity.ms/c.gif data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googletagmanager.com *.addressfinder.io https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.plugins.emarsys.net *.scarabresearch.com tagmanager.google.com *.paypal.com *.resultspage.com *.resultsstage.com *.resultsdemo.com *.gstatic.com *.google.com *.sli-spark.com *.cloudfront.net *.sli-r.com *.mastercard.com *.googleapis.com https://connect.facebook.net http://connect.facebook.net *.doubleclick.net *.stockinstore.net http://stockinstore.net http://stockinstore.net/* *.cloudflare.com *.useinsider.com *.livechatinc.com *.adsrvr.org *.newrelic.com *.getwisp.co *.linksynergy.com *.rakuten.com *.afterpay.com *.nr-data.net *.bing.com *.hotjar.com *.tiktok.com *.omtrdc.net *.2o7.net *.adobedtm.com *.demdex.net *.everesttech.net *.reloop.com.au *.myunidays.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleadservices.com *.yotpo.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.youtube.com https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk *.squarecdn.com https://hbiq.net songbirdstag.cardinalcommerce.com *.sharethis.com https://rum.hlx.page *.googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.addressfinder.io static.afterpay.com/ tagmanager.google.com fonts.google.com *.googleapis.com *.stockinstore.net http://stockinstore.net http://stockinstore.net/* *.resultspage.com *.resultsstage.com *.resultsdemo.com *.afterpay.com *.api.useinsider.com *.reloop.com.au *.hotjar.com unsafe-inline *.yotpo.com *.squarecdn.com assets.braintreegateway.com *.jotfor.ms *.sharethis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: blob: *.kaltura.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.addressfinder.io static.afterpay.com *.scarabresearch.com *.eservice.emarsys.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.paypal.com *.braintree-api.com *.braintreegateway.com https://connect.facebook.net http://connect.facebook.net *.doubleclick.net *.stockinstore.net http://stockinstore.net http://stockinstore.net/* *.resultspage.com *.resultsstage.com *.resultsdemo.com *.cloudflare.com *.googleapis.com *.rakuten.com *.nr-data.net *.useinsider.com *.amplitude.com *.tiktok.com *.hotjar.com *.demdex.net *.everesttech.net *.adobedtm.com *.reloop.com.au *.myunidays.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com *.cloudfront.net *.forter.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com vimeo.com static.sandbox.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.clearpay.co.uk *.cardinalcommerce.com *.google.com google.com *.afterpay.com *.sentry.io *.api.useinsider.com wss://api.smooch.io/faye https://sst.suzannegrae.com.au *.sharethis.com insight.adsrvr.org *.facebook.com *.hotjar.io *.pinterest.com wss://ws.hotjar.com/api/v2/client/ws *.zdassets.com *.bing.com *.zendesk.com *.zendesk-eu.my.sentry.io https://www.google.com.au/ads/* https://www.google.com.au/ analytics.pangle-ads.com *.kaltura.com *.creativecdn.com *.sussan.com.au analytics-ipv6.tiktokw.us https://sst.sportsgirl.com.au *.siteperformancetest.net https://siteperformancetest.net *.contentsquare.net https://k.clarity.ms/collect https://*.clarity.ms/collect 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e350c8f5-2076-4690-909d-d997db0d337e.sansec.watch/; 3 default-src * 'self' data: blob: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src * 'self' data: blob: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-elem * 'self' data: blob: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; media-src * 'self' data: blob:; worker-src 'self' blob:; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 3 default-src 'self' data: consent.cookiebot.eu consentcdn.cookiebot.eu *.tiktok.com e.infogram.com *.hubspot.com *.hs-analytics.net *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.net *.hsforms.com js-eu1.hs-banner.com js-eu1.hubspot.com snap.licdn.com *.clarity.ms *.google.com *.google.co.uk *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.gstatic.com www.googleadservices.com pagead2.googlesyndication.com; script-src 'self' 'unsafe-inline' *.tiktok.com consent.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.com consentcdn.cookiebot.eu e.infogram.com *.hubspot.com *.hs-analytics.net *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.net js-eu1.hs-banner.com js-eu1.hubspot.com js-eu1.usemessages.com static.hsappstatic.net 145747460.fs1.hubspotusercontent-eu1.net snap.licdn.com *.clarity.ms *.google.com *.google.co.uk *.googletagmanager.com *.g.doubleclick.net pagead2.googlesyndication.com www.googleadservices.com cdn.sanity.io cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' data: fonts.googleapis.com *.googletagmanager.com cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' data: fonts.googleapis.com *.googletagmanager.com *.google-analytics.com cdn.jsdelivr.net; style-src-attr 'self' 'unsafe-inline' data: fonts.googleapis.com; img-src 'self' data: *.rebelliousdigital.co.uk *.clarity.ms *.hubspot.com *.hsforms.com track-eu1.hubspot.com static.hsappstatic.net img.sct.eu1.usercentrics.eu imgsct.cookiebot.com www.linkedin.com px.ads.linkedin.com px4.ads.linkedin.com c.bing.com i.vimeocdn.com secure.gravatar.com *.google.com *.google.co.uk *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.gstatic.com www.googleadservices.com pagead2.googlesyndication.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' cdn.sanity.io k7sqtopt.apicdn.sanity.io cdn.jsdelivr.net analytics.tiktok.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.hubspot.com *.hscollectedforms.net *.hsforms.com api-eu1.hubapi.com cta-eu1.hubspot.com static.hsappstatic.net *.clarity.ms px.ads.linkedin.com vimeo.com *.google.com *.google.co.uk *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net stats.g.doubleclick.net ad.doubleclick.net www.googleadservices.com pagead2.googlesyndication.com; media-src 'self'; frame-src 'self' consentcdn.cookiebot.com consentcdn.cookiebot.eu e.infogram.com *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com *.hsforms.com js.hsforms.net js-eu1.hsforms.net player.vimeo.com *.google.com *.youtube.com td.doubleclick.net *.googletagmanager.com app.powerbi.com; 3 default-src *.myidx.cloud 'self' blob: house-fastly-signed-eu-west-1-prod.brightcovecdn.com manifest.prod.boltdns.net *.prod.boltdns.net *.cookielaw.org cdn.cookielaw.org *.analytics.google.com cdnjs.cloudflare.com *.google.com *.google-analytics.com *.googletagmanager.com googleapis.com *.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com viz.tools.investis.com otp.tools.investis.com irs.tools.investis.com players.brightcove.net edge.api.brightcove.com f1.cf.brightcove.com f1.media.brightcove.com www.google-analytics.com fonts.googleapis.com fonts.gstatic.com arg.investis.com www.youtube.com staticcontents.investisdigital.com staticcontents.investis.com stats.g.doubleclick.net vjs.zencdn.net sc.lfeeder.com *.execute-api.eu-west-1.amazonaws.com viz.tools.investis.com *.googletagmanager.com *.arceralifesciences.com assets.adobedtm.com; img-src *.myidx.cloud 'self' 'unsafe-inline' blob: * data: www.w3.org manifest.prod.boltdns.net players.brightcove.net edge.api.brightcove.com f1.cf.brightcove.com f1.media.brightcove.com arg.tools.investis.com snap.licdn.com staticcontents.investisdigital.com staticcontents.investis.com code.jquery.com; frame-src *.myidx.cloud 'self' www.googletagmanager.com *.doubleclick.net *.blubrry.com atkinsrealis.com http://www.atkinsrealis.com/ *.atkinsrealis.com ir.connectidfeed.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.flockler.com *.doubleclick.net *.doubleclick.net players.brightcove.net www.google.com viz.tools.investis.com otp.tools.investis.com irs.tools.investis.com www.youtube.com staticcontents.investisdigital.com staticcontents.investis.com bcove.video cloud.3dissue.com lavalab-montreal.netlify.app *.googletagmanager.com; style-src *.myidx.cloud 'self' 'unsafe-inline' 'unsafe-eval' *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net staticzone.idigitalcontents.com flockler.com *.investisdigital.com *.flockler.com viz.tools.investis.com otp.tools.investis.com irs.tools.investis.com players.brightcove.net edge.api.brightcove.com f1.cf.brightcove.com f1.media.brightcove.com fonts.googleapis.com fonts.gstatic.com staticcontents.investisdigital.com staticcontents.investis.com; font-src *.myidx.cloud 'self' 'unsafe-inline' * data: vjs.zencdn.net fonts.googleapis.com fonts.gstatic.com; script-src *.myidx.cloud viz.tools.investis.com 'self' *.doubleclick.net atkinsrealis.cm.invdcloud-is.co.uk 'unsafe-inline' 'unsafe-eval' static.trackedweb.net static.cloudflareinsights.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.analytics.google.com *.google.com *.google-analytics.com preview-experiences.brightcove.net connect.facebook.net staticzone.idigitalcontents.com manifest.prod.boltdns.net blob: *.investisdigital.com *.jquery.com flockler.com *.flockler.com arg.investisdigital.net www.google.com www.gstatic.com maps.google.com maps.googleapis.com googleapis.com *.googleapis.com *.cookielaw.org cdn.cookielaw.org *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com r1.trackedweb.net viz.tools.investis.com otp.tools.investis.com irs.tools.investis.com players.brightcove.net edge.api.brightcove.com f1.cf.brightcove.com f1.media.brightcove.com fonts.googleapis.com fonts.gstatic.com www.google-analytics.com arg.investis.com arg.tools.investis.com snap.licdn.com www.youtube.com staticcontents.investisdigital.com staticcontents.investis.com vjs.zencdn.net secure.brightcove.com f1.cf.brightcove.com f1.media.brightcove.com sc.lfeeder.com *.execute-api.eu-west-1.amazonaws.com; connect-src *.myidx.cloud 'self' *.highcharts.com assets.adobedtm.com cdnjs.cloudflare.com code.jquery.com *.arceralifesciences.com *.googletagmanager.com viz.tools.investis.com *.doubleclick.net *.linkedin.com region1.google-analytics.com atkinsrealis.cd.invdcloud-is.co.uk staticzone.idigitalcontents.com house-fastly-signed-eu-west-1-prod.brightcovecdn.com r1.trackedweb.net *.hs.llnwd.net *.google.com cdn.linkedin.oribi.io *.analytics.google.com *.google-analytics.com *.google.com *.investisdigital.com *.investis.com *.linkedin.oribi.io arg.tools.investis.com manifest.prod.boltdns.net maps.google.com gallery-metrics.api.brightcove.com flockler.com *.flockler.com privacyportal-de.onetrust.com *.cookielaw.org cdn.cookielaw.org www.googleadservices.com www.google-analytics.com maps.googleapis.com googleapis.com *.googleapis.com players.brightcove.net edge.api.brightcove.com f1.media.brightcove.com stats.g.doubleclick.net secure.brightcove.com f1.cf.brightcove.com *.execute-api.eu-west-1.amazonaws.com manifest.prod.boltdns.net geolocation.onetrust.com *.onetrust.com; base-uri 'self'; form-action 'self'; script-src-elem 'self' *.highcharts.com *.doubleclick.net *.adobedtm.com atkinsrealis.cm.invdcloud-is.co.uk 'unsafe-inline' 'unsafe-eval' static.trackedweb.net sc.lfeeder.com static.cloudflareinsights.com communications.atkinsrealis.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.analytics.google.com *.google.com *.google-analytics.com preview-experiences.brightcove.net connect.facebook.net staticzone.idigitalcontents.com r1.trackedweb.net manifest.prod.boltdns.net blob: *.investisdigital.com *.jquery.com flockler.com *.flockler.com arg.investisdigital.net www.google.com www.gstatic.com maps.google.com maps.googleapis.com googleapis.com *.googleapis.com *.cookielaw.org cdn.cookielaw.org *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com viz.tools.investis.com otp.tools.investis.com irs.tools.investis.com players.brightcove.net edge.api.brightcove.com f1.cf.brightcove.com f1.media.brightcove.com fonts.googleapis.com fonts.gstatic.com www.google-analytics.com arg.investis.com arg.tools.investis.com snap.licdn.com www.youtube.com staticcontents.investisdigital.com staticcontents.investis.com vjs.zencdn.net secure.brightcove.com f1.cf.brightcove.com 3 frame-ancestors 'self' *.westchestercountyny.gov *.westchestergov.com *.myaccess.westchestergov.com *.westchestercatalyst.com westchestercatalyst.com *.westchesterputnamonestop.com *.westchesterda.net westchesterda.net *.westchesterlegislators.com westchesterlegislators.com; 3 frame-ancestors 'self' https://app.contentful.com https://*.netlify.app; base-uri 'self'; media-src 'self' https://videos.ctfassets.net data:; font-src 'self' data:; frame-src 'self' https://challenges.cloudflare.com https://preview.widgets.ninetailed.io https://bid.g.doubleclick.net https://td.doubleclick.net https://info.hireright.com https://www.youtube.com https://endpoint-app-us.cognigy.ai https://assets.ctfassets.net https://hemsync.clickagy.com https://*.doubleclick.net https://insight.adsrvr.org https://app.netlify.com https://match.adsrvr.org; form-action 'self'; img-src 'self' data: https://cdn.cookielaw.org https://*.google-analytics.com https://*.googletagmanager.com https://www.google.co.in https://www.linkedin.com https://*.ads.linkedin.com *.analytics.google.com https://endpoint-app-us.cognigy.ai https://ha.prelytix.com https://b.6sc.co https://www.google.co.uk https://www.google.com https://www.google-analytics.com https://dpm.demdex.net https://stags.bluekai.com *.agkn.com https://aorta.clickagy.com https://images.ctfassets.net https://cdn.sanity.io https://j.mrpdata.net https://px.ads.linkedin.com https://pixel-sync.sitescout.com *.rlcdn.com https://us-u.openx.net https://sync.crwdcntrl.net *.doubleclick.net *.clarity.ms https://c.bing.com https://*.google.ee https://bat.bing.com https://www.facebook.com https://ml314.com https://www.google.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://challenges.cloudflare.com https://www.gstatic.com/recaptcha/ https://j.6sc.co/6si.min.js https://static.srcspot.com/libs/bessy.js http://info.hireright.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com *.doubleclick.net https://tags.clickagy.com *.pardot.com https://ws.zoominfo.com https://js.zi-scripts.com https://ws-assets.zoominfo.com https://cdn.cookielaw.org https://snap.licdn.com *.rlcdn.com *.clarity.ms https://www.youtube.com https://assets.ctfassets.net https://endpoint-app-us.cognigy.ai https://www.google.com https://bat.bing.com https://connect.facebook.net https://tracking-api.g2.com https://js.adsrvr.org enterprise.js blob:; connect-src 'self' https://challenges.cloudflare.com https://preview.contentful.com https://experience.ninetailed.co https://ingest.insights.ninetailed.co https://ingesteer.services-prod.nsvcs.net https://privacyportal.onetrust.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.analytics.google.com https://*.googletagmanager.com https://ws.zoominfo.com https://js.zi-scripts.com https://aorta.clickagy.com https://hemsync.clickagy.com https://secure.adnxs.com https://c.6sc.co/ https://ipv6.6sc.co/ https://analytics.google.com https://cdn.linkedin.oribi.io https://cdn.contentful.com *.google-analytics.com *.analytics.google.com *.algolianet.net *.algolianet.com *.algolia.net *.clickagy.com *.doubleclick.net https://insights.algolia.io *.clarity.ms https://api-ext.hireright.com https://endpoint-app-us.cognigy.ai wss://*.cognigy.ai https://www.google.com https://www.googleadservices.com https://www.facebook.com https://px.ads.linkedin.com https://tracking-api.g2.com https://insight.adsrvr.org https://match.adsrvr.org https://bat.bing.com https://www.google.com.hk; object-src 'none'; upgrade-insecure-requests; 3 default-src 'self' https: data:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; worker-src 'self' blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com; child-src 'self' blob: https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests; 3 default-src 'self'; connect-src 'self' https://eauction.gov.in/ ; img-src 'self' data: 'unsafe-eval' ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ;media-src 'self' nicmedia.akamaized.net ; font-src 'self' data: 3 default-src 'self' https: ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' ; script-src-elem 'self' https: 'unsafe-inline' 'unsafe-eval' ; style-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: ; form-action 'self' https: 'unsafe-inline' 'unsafe-eval'; media-src 'self' blob: https: ; font-src 'self' data: https: ; worker-src 'self' blob: ; 3 frame-ancestors 'self' https://www.rhonefm.ch; 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob:; 3 default-src *.crazyegg.com *.cognigy.ai *.iubenda.com blob: wss: https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; font-src https: data:; object-src 'self' blob:; media-src 'self' https://foundever.com https://*.foundever.com data: blob:; upgrade-insecure-requests;frame-ancestors 'self'; 3 frame-ancestors 'self' https://www.facebook.com 3 base-uri 'self'; font-src 'self' data: https:; form-action *; frame-ancestors 'self' https://*.e-spirit.hosting; img-src 'self' data: https:; object-src 'none'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; upgrade-insecure-requests; default-src 'self'; media-src 'self' https:; script-src-elem 'self' 'unsafe-inline' https:; connect-src 'self' https: data: blob:; frame-src 'self' https:; worker-src 'self' blob:; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: 3 frame-ancestors 'self';upgrade-insecure-requests; 3 connect-src wss: blob: data: https:; child-src blob: data: https:; style-src 'self' 'unsafe-inline' blob: data: https:; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: https:; object-src 'self'; worker-src blob: data: https:; media-src 'self' blob: data: https:; frame-src blob: data: https:; img-src https: blob: data: android-webview-video-poster:; default-src 'self' https:; font-src 'self' https: blob: data: safari-extension://* 3 default-src https: 'unsafe-inline' 'unsafe-eval' data: wss://ws.hotjar.com https://zn9nu0hwrbff0dgcq-cnhind.siteintercept.qualtrics.com; upgrade-insecure-requests; frame-ancestors 'self' https://prod103.cnhrents.com; https://prod103.newholland.com; https://prod103.casece.com; https://prod103-ce.newholland.com; https://prod103.caseih.com; https://www.cnhrents.com; https://prodstaging.cnhrents.com; https://prodstaging103-ce.newholland.com; https://prodstaging103.newholland.com; https://prodstaging103.caseih.com; https://prodstaging103.casece.com; 3 script-src 'self' 'unsafe-inline' https://cdn.socialsecurity.be https://matomo.bosa.be https://www.flexmail.eu https://openfed.github.io https://squizlabs.github.io https://plausible.io/; frame-ancestors 'self' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com cdn.jsdelivr.net www.googletagmanager.com www.google-analytics.com js.stripe.com js.braintreegateway.com assets.braintreegateway.com *.paypal.com www.paypalobjects.com blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' blob: *.dashboardpack.com *.pages.dev js.stripe.com *.braintreegateway.com *.paypal.com; frame-ancestors 'self'; 3 default-src 'self'; script-src cdn.bookboon.io cdn.wootric.com cdn.jsdelivr.net minio.stage.bookboon.io *.omappapi.com *.google-analytics.com *.googletagmanager.com *.visualwebsiteoptimizer.com app.vwo.com *.stripe.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ blob: 'unsafe-eval' 'unsafe-inline' *.workspace.accessacloud.com access-workspace.com https://cookie.access-evo.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://esm.sh 'self'; style-src *.googleapis.com *.omappapi.com *.visualwebsiteoptimizer.com app.vwo.com s3.amazonaws.com cdn.jsdelivr.net blob: 'unsafe-inline' 'self'; img-src bookboon.com boont.co www.gravatar.com *.omappapi.com *.visualwebsiteoptimizer.com *.content.bookboon.com chart.googleapis.com www.google.co.uk www.google.com wingify-assets.s3.amazonaws.com staging.covergenerator.stage.bookboon.io staging.action-receiver.stage.bookboon.io minio.stage.bookboon.io s3proxy-staging.bookboon.io static.intercomassets.com *.intercomcdn.com data: 'self'; connect-src esm.sh boont.co cdn.bookboon.io sentry.bookboon.io stream.bookboon.com *.stripe.com staging.argus.stage.bookboon.io wss://bookboon.com *.omappapi.com *.google-analytics.com *.visualwebsiteoptimizer.com *.doubleclick.net app.vwo.com *.workspace.accessacloud.com *.accessacloud.com *.applicationinsights.azure.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.wootric.com https://bookboon.com/services/profile 'self' wss://ejabberd.bookboon.io/ws; font-src 'self' https://fonts.gstatic.com https://a.omappapi.com https://js.intercomcdn.com https://fonts.intercomcdn.com data:; media-src stream.bookboon.com *.content.bookboon.com content.bookboon.com minio.stage.bookboon.io staging.argus.stage.bookboon.io s3proxy-staging.bookboon.io https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com data: blob: 'unsafe-inline' 'self'; frame-src *.stripe.com https://www.google.com/recaptcha/ https://a.omappapi.com app.vwo.com *.visualwebsiteoptimizer.com *.workspace.accessacloud.com intercom-sheets.com https://bookboon.com/services/profile 'self'; child-src https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net blob: 'self'; worker-src blob: 'self'; form-action https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io 'self'; frame-ancestors https://*.accessacloud.com; report-uri https://sentry.bookboon.io/api/2/security/?sentry_key=a9cb61f0b4d1404cbef0284b913d154c&sentry_environment=production&sentry_release=premium@v4.29.1; 3 frame-ancestors 'self'; 3 frame-ancestors 'self' https://*.cloudfront.net/ https://*.inovalon.com https://*.optimizely.com https://www.mdon-line.com/ https://inovalon.canto.com; 3 default-src 'self' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' *;img-src 'self' * data:;frame-src 'self' *;font-src 'self' * data:;connect-src 'self' *;child-src 'self' * 3 frame-ancestors 'self' temenos.seismic.com 3 default-src 'self' *.everllence.com *.man-es.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adnxs.com *.amazon-adsystem.com *.bing.com *.bing.net cdnjs.cloudflare.com cdn.cookielaw.org *.clarity.ms cookie-cdn.cookiepro.com *.doubleclick.net *.everllence.com *.facebook.net *.googleapis.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com *.hotjar.com *.hs-analytics.net *.hscollectedforms.net *.hsforms.net *.hs-scripts.com *.hs-banner.com *.hubspot.com code.jquery.com *.licdn.com *.linkedin.com *.man-es.com *.onetrust.com *.paa-reporting-advertising.amazon *.podigee-cdn.net *.podigee.io *.youtube.com; script-src-elem 'self' 'unsafe-inline' *.amazon-adsystem.com *.adnxs.com *.bing.com cdn.cookielaw.org cdnjs.cloudflare.com *.clarity.ms *.facebook.net googleads.g.doubleclick.net *.everllence.com *.googletagmanager.com maps.googleapis.com maps.gstatic.com *.hs-analytics.net *.hscollectedforms.net *.hsforms.net *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hsadspixel.net *.hotjar.com *.licdn.com *.youtube.com; frame-src 'self' map.baidu.com *.map.baidu.com *.doubleclick.net everllence.com *.everllence.com www.google.com www.googletagmanager.com *.hsforms.net *.hsforms.com *.man-es.com *.mandieselturbo.com everllence.online-recruiter.ch *.s4hana.ondemand.com *.podigee-cdn.net *.podigee.io player.vimeo.com saipeexternalpmanes.blob.core.windows.net www.youtube-nocookie.com; connect-src 'self' *.adnxs.com api.addsearch.com *.amazon-adsystem.com *.bing.net *.bing.com *.clarity.ms cdnjs.cloudflare.com cdn.cookielaw.org ad.doubleclick.net *.doubleclick.net everllence.com *.everllence.com web-analytics.everllence.com *.facebook.com google.com *.google.com analytics.google.com *.analytics.google.com *.googleapis.com *.google-analytics.com *.googlesyndication.com wss://ws.hotjar.com *.hotjar.com *.hotjar.io *.hsforms.com static.hsappstatic.net forms-eu1.hscollectedforms.net api-eu1.hubapi.com *.hubspot.com *.linkedin.com *.mandieselturbo.com *.man-es.com *.s4hana.ondemand.com geolocation.onetrust.com privacyportal-eu.onetrust.com *.paa-reporting-advertising.amazon; style-src 'unsafe-inline' 'self' *.googleapis.com cdn.cookielaw.org *.onetrust.com *.everllence.com; font-src 'self' data: *.googleapis.com fonts.gstatic.com cdn.cookielaw.org *.everllence.com; img-src data: 'self' *.adnxs.com *.bing.com *.cloudfront.net cdn.cookielaw.org ad.doubleclick.net *.everllence.com *.facebook.com *.google.com *.google.de *.google.dk *.google.ch *.google.co.in google.nl www.google.nl googleadservices.com www.googleadservices.com maps.googleapis.com maps.gstatic.com ade.googlesyndication.com *.googletagmanager.com *.hsforms.com track-eu1.hubspot.com *.linkedin.com *.man-es.com *.mandieselturbo.com; media-src 'self' 3 default-src 'self' https://*.giosg.com https://*.giosgusercontent.com https://*.interactionbuilder.giosg.com https://*.mouseflow.com; img-src 'self' https://*.mouseflow.com https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.google.fi https://*.google.ie https://*.google.nl https://*.bing.com https://*.omtrdc.net https://*.tt.omtrdc.net https://*.onetrust.com https://*.onetrust.eu https://*.demdex.net https://*.everesttech.net https://*.adobedtm.com https://*.facebook.com https://*.linkedin.com https://*.adform.net https://*.g.doubleclick.net https://app.readpeak.com https://*.giosgusercontent.com https://images.ctfassets.net https://bat.bing.net https://www.googletagmanager.com data:;media-src https://*;script-src 'unsafe-inline' 'unsafe-eval' https://* https://*.chat-app.lahitapiola.fi https://lt-chat-app-dev.s3.eu-west-1.amazonaws.com https://lt-chat-app-sit.s3.eu-west-1.amazonaws.com https://lt-chat-app.s3.eu-west-1.amazonaws.com;style-src 'unsafe-inline' 'self' https://* https://*.chat-app.lahitapiola.fi https://lt-chat-app-dev.s3.eu-west-1.amazonaws.com https://lt-chat-app-sit.s3.eu-west-1.amazonaws.com https://lt-chat-app.s3.eu-west-1.amazonaws.com;connect-src https://* wss://*.service.lahitapiola.fi; frame-src https://* https://*.chat-app.lahitapiola.fi https://lt-chat-app-dev.s3.eu-west-1.amazonaws.com https://lt-chat-app-sit.s3.eu-west-1.amazonaws.com https://lt-chat-app.s3.eu-west-1.amazonaws.com;worker-src blob:; child-src https://*.mouseflow.com blob:;font-src 'self' https://*.googleapis.com/ https://*.gstatic.com https://*.giosgusercontent.com https://*.mouseflow.com; 3 default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ http://967-doi-302.mktoweb.com/ https://app-static.turtl.co/ https://widget.trustpilot.com https://*.optimizely.com app.optimizely.com; font-src 'self' data: https://fonts.gstatic.com/ https://*.trustarc.com/ https://fast.wistia.com/ https://*.optimizely.com; img-src 'self' data: https://fast.wistia.com/ https://dam.oneadvanced.com/ https://a.emea01.idio.episerver.net/ http://b.6sc.co/ https://id.rlcdn.com/ https://b.6sc.co/ https://www.google.co.uk/ https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com/ https://www.googleadservices.com https://google.com https://i.ytimg.com/ https://embed-ssl.wistia.com/ https://px.ads.linkedin.com/ https://*.trustarc.com/ https://*.truste.com/ https://cdn.optimizely.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com https://www.google.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.trustarc.com/ https://static.claydar.com https://cdn.claydar.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com; script-src-elem 'self' 'unsafe-inline' https://*.trustarc.com/ https://js.qualified.com/ http://munchkin.marketo.net/ http://967-doi-302.mktoweb.com/ https://j.6sc.co/ https://www.clarity.ms/ https://www.tracking-api.g2.com/ https://s.eme01.idio.episerver.net/ https://www.scripts.clarity.ms/ https://analytics.ahrefs.com/ https://tracking-api.g2.com/ http://s.emea01.idio.episerver.net/ https://tag.demandbase.com/ https://scripts.clarity.ms/ https://www.youtube.com/ https://fast.wistia.com/ https://browser.sentry-cdn.com/ https://app-static.turtl.co/ https://cdn.walls.io/ https://gateway.on24.com/ https://form.jotform.com/ https://*.googletagmanager.com/ https://googleads.g.doubleclick.net/ https://widget.trustpilot.com https://static.claydar.com https://cdn.claydar.com https://*.optimizely.com; connect-src 'self' https://*.trustarc.com/ https://www.google.com/ http://967-doi-302.mktoresp.com/ https://app.qualified.com/ wss://ws4.qualified.com/ https://api.company-target.com/ https://ad.doubleclick.net/ https://ipv6.6sc.co/ https://epsilon.6sense.com/ https://y.clarity.ms/ https://tag-logger.demandbase.com/ https://region1.analytics.google.com/ http://pipedream.wistia.com/ https://tracking-api.g2.com/ https://fast.wistia.com/ https://distillery.wistia.com/ https://embed-cloudfront.wistia.com/ https://browser.sentry-cdn.com/ https://www.google.co.uk/ https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://www.googleadservices.com/ https://pagead2.googlesyndication.com https://google.com https://api.claydar.com https://logx.optimizely.com https://*.optimizely.com wss://*.optimizely.com; frame-src 'self' https://www.youtube.com/ https://s.company-target.com https://13944262.fls.doubleclick.net https://8852439.fls.doubleclick.net https://www.googletagmanager.com/ http://967-doi-302.mktoweb.com https://oneadvanced.turtl.co/ https://my.walls.io/ https://play.goconsensus.com/ https://embed.calculoid.com/ https://gateway.on24.com/ https://form.jotform.com/ https://app.qualified.com/ https://event.on24.com/ https://*.trustarc.com/ https://consent-pref.trustarc.com/ https://widget.trustpilot.com https://*.optimizely.com; media-src 'self' blob:; object-src 'none'; base-uri 'self' 3 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline' script-src: 'self' 'wasm-unsafe-eval'; frame-ancestors 'self'; 3 frame-ancestors 'self' https://web.telegram.org 3 frame-ancestors 'self' https://*.medbridge.io https://*.medbridge.com https://*.medbridgeeducation.com https://*.xealth.io; 3 style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; 3 frame-src *; frame-ancestors *; 3 frame-ancestors 'self' wss://*.zopim.com wss://*.hotjar.com *.api.friendlycaptcha.com *.jobsplice.com *.eu-api.friendlycaptcha.eu secure-ds.serving-sys.com *.goldenbees.fr *.botrecruiter.com *.evergage.com *.youtube-nocookie.com *.evgnet.com secure.adnxs.com *.criteo.net *.addthisedge.com *.ads-twitter.com *.infogram.com *.adnxs.com *.optimalworkshop.com *.audioboom.com *.acsbapp.com acsbap.com *.appcast.io *.bizographics.com *.bootstrapcdn.com *.browser-update.org *.cloudflare.com *.cloudfront.net *.cloudinary.com *.criteo.com *.eggplant.cloud *.fontawesome.com *.google.co.uk *.google.ie *.googleadservices.com *.indeed.com *.ionicframework.com *.jquery.com *.jsdelivr.net *.moatads.com *.npmcdn.com *.plyr.io *.recaptcha.net *.scorecardresearch.com *.serving-sys.com *.sndcdn.com *.unpkg.com *.vimeocdn.com *.ytimg.com *.zencdn.net *.zendesk.com *.hays.ie *.d3fw5vlhllyvee.cloudfront.net vc.hotjar.io *.addthis.com *.outbrain.com *.licdn.com *.doubleclick.net acsbapp.com *.accesstrade.net consent-or.trustarc.com *.taboola.com web-material3.yokogawa view.ceros.com *.quantcount.com *.quantserve.com *.adscience.nl *.akamaized.net *.bit.ly *.crazyegg.com *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.graph.instagram.com *.gstatic.com *.hays.co.uk *.hays.com *.hotjar.com *.igodigital.com *.instagram.fbom5-1.fna.fbcdn.net *.linkedin.com *.nccgroup-webperf.com *.onrecruit.net *.optimizely.com *.slideshare.net *.soundcloud.com *.surveymonkey.com *.tealiumiq.com *.tiqcdn.com *.twimg.com *.twitter.com *.typography.com *.vimeo.com secure.imaginative-trade7.com *.yahooapis.com *.youtube.com *.zdassets.com *.zopim.com *.zopim.io accessibe.com consent.trustarc.com consent-pref.trustarc.com consent-st.trustarc.com prefmgr-cookie.truste-svc.net hm.baidu.com data: 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com; object-src 'none'; worker-src 'self' blob: 'unsafe-inline'; 3 default-src 'none'; object-src 'self'; media-src blob: https://s3.amazonaws.com https://*.genial.ly https://*.aiaibot.com https://*.elsevier.com https://*.zdassets.com https://*.scene7.com https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.podcast.co https://*.pod.co https://*.radio.co https://*.lpsnmedia.net https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.hirslanden.ch https://*.infocentric.ch https://*.wistia.com https://*.medicosearch.ch https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com https://*.userway.org https://*.powerappsportals.com https://*.linkedin.com https://*.pinterest.com https://*.adform.net https://*.mailxpert.ch https://*.eyevip.ch https://*.hirslanden.ch https://*.ibelsa.com https://*.yandex.ru https://*.snapchat.com https://*.mediclinic.ae https://*.google.com https://*.googletagmanager.com https://avisec.com https://*.elfsightcdn.com https://*.doubleclick.net https://*.med-congress.just-medical.com; font-src 'self' data: https://*.podigee.com https://*.podigee-cdn.net https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.amazonaws.com https://portal.k8s.preprod.msio.cloud https://*.medicosearch.ch https://*.powerappsportals.com https://*.linkedin.com https://*.pinterest.com https://*.adform.net https://*.yandex.ru https://*.snapchat.com https://*.mediclinic.ae https://*.google.com https://avisec.com https://*.googletagmanager.com https://*.doubleclick.net https://*.elfsightcdn.com https://*.med-congress.just-medical.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.mkt.dynamics.com https://elshbe.mediclinic.co.za https://superspider-dev.azurewebsites.net https://*.data.adobedc.net https://extend.vimeocdn.com https://*.sc.omtrdc.net https://*.2o7.net https://assets.adobedtm.com https://www.googleoptimize.com https://googleads.g.doubleclick.net https://portal.k8s.preprod.msio.cloud https://*.aiaibot.com https://analytics.tiktok.com https://mcmebotstorage.blob.core.windows.net https://protect-de.mimecast.com https://*.yandex.ru https://*.zdassets.com https://analytics-eu.clickdimensions.com https://widget-mediator.zopim.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://cdnjs.cloudflare.com https://*.zvv.ch https://*.genial.ly https://*.3qsdn.com https://*.scene7.com https://*.pinimg.com https://*.podigee.com https://*.podigee-cdn.net https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.typeform.com https://play.pod.co https://siteimproveanalytics.com https://*.lpsnmedia.net https://*.licdn.com https://sc-static.net https://*.liveperson.net https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.linkedin.com https://*.instagram.com https://*.mediclinic.com https://*.elfsight.com https://uberall.com https://static-prod.uberall.com https://api.instacloud.io https://mediclinic.mediaplatform.com https://api.doctena.ch https://createsend.com https://createsend1.com https://*.createsend.com https://*.createsend1.com https://cdn.dotcy.com.cy https://*.crazyegg.com https://prodmcmebot.azurewebsites.net https://testmcmebot.azurewebsites.net https://*.medicosearch.ch https://*.infocentric.ch https://www.puls-berufe.ch https://*.gstatic.com https://*.google.com https://*.sprechzimmer.ch https://*.wistia.com https://fast.wistia.net https://src.litix.io https://s.ytimg.com https://www.youtube.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://connect.facebook.net https://*.twitter.com https://cdn.syndication.twimg.com https://csi.gstatic.com https://*.podcast.co https://*.pod.co https://*.radio.co https://code.jquery.com https://*.dynamics.com https://*.azureedge.net https://*.microsoft.com https://*.clever-click.ch https://*.sli.do https://scatec.io https://soundcloud.com/ https://*.userway.org https://*.mcme.az.bh.mehilainen.care https://*.powerappsportals.com https://*.pinterest.com https://*.adform.net https://*.mailxpert.ch https://*.eyevip.ch https://*.hirslanden.ch https://www.recaptcha.net https://*.ibelsa.com https://*.snapchat.com https://*.mediclinic.ae https://*.google.com https://*.elfsightcdn.com https://*.doubleclick.net https://avisec.com https://analytics.ahrefs.com https://*.med-congress.just-medical.com; connect-src 'self' https://*.mkt.dynamics.com https://px.ads.linkedin.com/wa https://*.googlesyndication.com https://cdn.linkedin.oribi.io https://adservice.google.com https://analytics.google.com https://*.112.2o7.net https://dpm.demdex.net https://createsend.com https://createsend1.com https://*.createsend.com https://*.createsend1.com https://*.aiaibot.com https://api.bing.microsoft.com https://analytics.tiktok.com https://*.yandex.ru https://pecontent-health-elsevier-com.s3.amazonaws.com https://*.zdassets.com https://*.elsevier.com https://*.zendesk.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://cdnjs.cloudflare.com https://*.pinterest.com https://*.medicosearch.ch https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://stats.g.doubleclick.net https://*.blueglass.io https://*.mediclinic.co.za https://*.podcast.co https://*.pod.co https://*.radio.co https://*.googleadservices.com https://*.google-analytics.com https://*.analytics.google.com https://*.elfsight.com https://uberall.com https://blog.hirslanden.ch https://er24.info https://*.typeform.com https://*.wistia.com https://*.litix.io https://www.facebook.com https://*.crazyegg.com https://*.akamaihd.net https://www.google-analytics.com https://s7.addthis.com https://m.addthis.com https://*.tagboard.com https://tagboard.com https://*.onetrust.com https://*.dynamics.com https://*.azureedge.net https://*.microsoft.com https://ton.twimg.com https://*.clever-click.ch https://scatec.io https://*.sli.do https://*.userway.org https://*.mcme.az.bh.mehilainen.care https://*.powerappsportals.com https://*.adform.net https://*.mailxpert.ch https://*.eyevip.ch https://*.hirslanden.ch https://www.recaptcha.net https://*.ibelsa.com https://*.snapchat.com https://*.ads-twitter.com https://*.mediclinic.ae https://*.google.com https://*.googletagmanager.com https://*.elfsightcdn.com https://analytics.ahrefs.com https://*.doubleclick.net https://avisec.com https://*.med-congress.just-medical.com; img-src * 'self' data:; style-src 'self' 'unsafe-inline' https://mcmebotstorage.blob.core.windows.net https://protect-de.mimecast.com https://*.podigee.com https://*.podigee-cdn.net https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.google.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://*.ads-twitter.com https://*.google.ch https://mediclinic.mediaplatform.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://cdn.dotcy.com.cy https://*.medicosearch.ch https://portal.k8s.preprod.msio.cloud https://cloud.typography.com https://*.sprechzimmer.ch https://*.twitter.com https://www-prod.hirslanden.ch https://*.tagboard.com https://tagboard.com https://*.crazyegg.com https://ton.twimg.com https://*.userway.org https://*.powerappsportals.com https://*.linkedin.com https://*.pinterest.com https://*.adform.net https://*.yandex.ru https://*.snapchat.com https://*.mediclinic.ae https://*.google.com https://*.googletagmanager.com https://*.elfsightcdn.com https://*.doubleclick.net https://avisec.com https://analytics.ahrefs.com https://*.med-congress.just-medical.com; frame-src 'self' https://*.mkt.dynamics.com https://feed.yellow.camera https://*.pinterest.com https://hirslandenag.demdex.net https://portal.k8s.preprod.msio.cloud https://*.medicosearch.ch https://analytics-eu.clickdimensions.com https://*.goreview.co.za https://*.aiaibot.com https://webform.mediclinicsa.co.za https://*.indigo.online https://*.artbutler.com https://*.zvv.ch https://*.genial.ly https://*.3qsdn.com https://*.tourmkr.com https://tourmkr.com https://*.tourextender.ch https://tourextender.ch https://*.podigee.com https://*.podigee-cdn.net https://*.infomaniak.com https://*.business360.ch https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.typeform.com https://*.doubleclick.ne https://*.pinimg.com https://*.doubleclick.net https://*.yandex.ru https://play.pod.co https://*.onedoc.ch https://onedoc.ch https://vimeo.com https://*.vimeo.com https://*.brightcove.net https://mixlr.com https://*.mixlr.com https://*.liveperson.net https://*.lpsnmedia.net https://*.snapchat.com https://*.ads-twitter.com https://*.linkedin.com https://*.instagram.com https://*.mediclinic.com https://*.mediclinic.co.za https://mediclinic.mediaplatform.com http://mcairportrdauh.royalwebhosting.net https://*.google.ch https://*.twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.doctena.com https://createsend.com https://createsend1.com https://*.createsend.com https://*.createsend1.com https://*.google.com https://*.googletagmanager.com https://w.soundcloud.com https://cdn.dotcy.com.cy https://prodmcmebot.azurewebsites.net https://testmcmebot.azurewebsites.net https://fast.wistia.com https://s7.addthis.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com https://www.youtube.com https://*.sprechzimmer.ch https://www.med-congress.info https://*.datahouse.ch https://*.detailnet.ch https://www2.hirslanden.ch https://vr.zaak.ch https://staticxx.facebook.com https://www.facebook.com https://tourmake.it https://tools.eurolandir.com https://twitter.com https://*.dynamics.com https://*.azureedge.net https://*.microsoft.com https://*.crazyegg.com https://www.facebook.com https://*.clever-click.ch https://*.sli.do https://*.userway.org https://*.mcme.az.bh.mehilainen.care https://*.powerappsportals.com https://*.adform.net https://*.mailxpert.ch https://*.eyevip.ch https://event.hirslanden.ch https://www.recaptcha.net https://*.ibelsa.com https://*.mediclinic.ae https://*.google.com https://*.elfsightcdn.com https://*.doubleclick.net https://*.med-congress.just-medical.com https://ucrm-app-p.eu.hcnet.biz https://demo.emarsys.net https://*.ucrm-app-p.eu.hcnet.biz https://avisec.com https://analytics.ahrefs.com https://*.demo.emarsys.net; child-src 'self' blob: https://*.mkt.dynamics.com https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.google.ch http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://staticxx.facebook.com https://fast.wistia.com https://s7.addthis.com https://*.twitter.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://*.dynamics.com https://*.azureedge.net https://*.microsoft.com https://*.crazyegg.com https://ton.twimg.com https://*.clever-click.ch https://*.sli.do https://*.userway.org https://*.mcme.az.bh.mehilainen.care https://*.powerappsportals.com https://*.linkedin.com https://*.pinterest.com https://*.adform.net https://*.mailxpert.ch https://*.eyevip.ch https://event.hirslanden.ch https://*.ibelsa.com https://*.yandex.ru https://*.snapchat.com https://*.ads-twitter.com https://*.mediclinic.ae https://*.google.com https://*.googletagmanager.com https://*.elfsightcdn.com https://*.doubleclick.net https://analytics.ahrefs.com https://avisec.com https://*.med-congress.just-medical.com; frame-ancestors 'self' https://*.mkt.dynamics.com https://*.dynamics.com https://*.azureedge.net https://*.microsoft.com https://*.crazyegg.com https://*.clever-click.ch https://*.sli.do https://*.userway.org https://*.mcme.az.bh.mehilainen.care https://*.powerappsportals.com https://*.linkedin.com https://*.pinterest.com https://*.adform.net https://*.mailxpert.ch https://*.eyevip.ch https://event.hirslanden.ch https://*.ibelsa.com https://*.yandex.ru https://*.snapchat.com https://*.ads-twitter.com https://*.google.com https://*.googletagmanager.com https://*.elfsightcdn.com https://*.doubleclick.net https://analytics.ahrefs.com https://avisec.com https://*.mediclinic.ae https://*.hirslanden.ospanel.services; 3 default-src 'self'; connect-src 'self' https://*.komatsu.com https://edge.adobedc.net https://analytics.google.com https://region1.analytics.google.com https://www.google.co.in https://dpm.demdex.net https://cdn.cookielaw.org https://stats.g.doubleclick.net https://www.google-analytics.com https://adobedc.demdex.net https://maps.googleapis.com https://places.googleapis.com https://maps.gstatic.com https://*.clarity.ms https://*.onetrust.com https://*.speccheck.com https://*.qualtrics.com https://*.siteintercept.qualtrics.com https://www.juicer.io https://s7d9.scene7.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.adobedtm.com https://cdn.cookielaw.org https://edge.adobedc.net https://www.youtube.com/s/player https://www.google.com/js/th https://www.gstatic.com https://www.googletagmanager.com https://static.doubleclick.net https://analytics.google.com https://www.google-analytics.com https://dpm.demdex.net https://maps.googleapis.com https://maps.gstatic.com https://*.clarity.ms https://*.onetrust.com https://*.speccheck.com https://*.siteintercept.qualtrics.com https://*.qualtrics.com https://www.juicer.io https://s7d9.scene7.com https://iframe.traderclassifieds.com.au https://www.instagram.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://privacyportal-cdn.onetrust.com https://lite.speccheck.com https://www.juicer.io https://cdn.cookielaw.org; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.gstatic.com/s/notosans https://fonts.gstatic.com/s/roboto https://cdnjs.cloudflare.com https://fonts.gstatic.com https://assets.juicer.io; img-src 'self' data: blob: https://*.komatsu.com https://*.scene7.com https://*.stylelabs.cloud https://www.google.co.in https://cdn.cookielaw.org https://dev.day.com https://www.googletagmanager.com https://img.youtube.com https://cm.everesttech.net https://*.adobeaemcloud.com https://dpm.demdex.net https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.onetrust.com https://*.clarity.ms https://*.speccheck.com https://c.bing.com https://*.qualtrics.com https://*.juicer.io; frame-src 'self' https://www.youtube.com https://komatsu.demdex.net https://*.google.com https://kadfacilitytour2026.z11.web.core.windows.net https://*.qualtrics.com https://online.fliphtml5.com https://iframe.tradeearthmovers.com.au https://survey.bizapp.komatsu https://www.instagram.com https://*.fls.doubleclick.net; frame-ancestors 'self' https://www.komatsu.com https://mykomatsu.komatsu 3 frame-ancestors https://cms-prod.brxm.grandvision.io 3 block-all-mixed-content; frame-ancestors 'self' https://dash.cloudflare.com 3 frame-ancestors https://flcourts-admin.ccplatform.net https://flcourts-admin.ccstage.net 3 frame-ancestors 'self' https://extrawatch.com https://app.extrawatch.com; upgrade-insecure-requests; 3 default-src 'self' *.greenhouse.io *.sharethis.com *.rhombusads.com *.google-analytics.com *.doubleclick.net *.fullstory.com *.mktoresp.com *.hscollectedforms.net *.hsforms.com veradigm-com-cache.s3.amazonaws.com *.cookiebot.com *.analytics.google.com *.ads.linkedin.com *.acsbapp.com *.google.com acsbapp.com ws.zoominfo.com *.hubspot.com *.driftt.com *.crazyegg.com blob: *.googleapis.com *.gstatic.com *.hsappstatic.net; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com; frame-src *.greenhouse.io *.doubleclick.net *.marketo.com *.sitescout.com *.krxd.net *.youtube.com *.sharethis.com *.consensu.org *.cookiebot.com *.hsforms.com issuu.com *.google.com *.drift.com *.driftt.com *.adroll.com *.crazyegg.com *.google.com theorthoshow.com *.cohostpodcasting.com *.hubspot.com; img-src 'self' data: *.zoominfo.com *.google-analytics.com *.marketo.com *.linkedin.com *.lfeeder.com *.sitescout.com *.adsymptotic.com *.krxd.net *.youtube.com *.sharethis.com *.googleapis.com *.gstatic.com *.googleusercontent.com *.doubleclick.net *.google.com *.fullstory.com *.hubspot.com *.analytics.google.com *.hsforms.com *.geniusmonkey.com *.cookiebot.com *.capterra.com *.adroll.com *.bidswitch.net *.openx.net *.adnxs.com *.analytics.yahoo.com *.rlcdn.com *.googlesyndication.com *.rubiconproject.com *.casalemedia.com *.pubmatic.com *.outbrain.com *.taboola.com *.3lift.com *.company-target.com *.facebook.com *.googleapis.com; object-src 'none'; script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.greenhouse.io *.zoominfo.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.marketo.com *.marketo.net *.licdn.com *.pixel.ad *.krxd.net *.lfeeder.com *.sharethis.com *.google.com *.googleadservices.com *.doubleclick.net *.youtube.com *.fullstory.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsforms.com *.hsforms.net *.hscollectedforms.net *.cookiebot.com *.geniusmonkey.com *.adroll.com *.ads.linkedin.com acsbapp.com *.acsbapp.com *.gstatic.com *.drift.com *.driftt.com *.crazyegg.com *.contextweb.com *.hubspot.com connect.facebook.net *.usemessages.com static.hsappstatic.net blob: 'unsafe-eval' *.googletagmanager.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com *.marketo.com *.google.com *.crazyegg.com; 3 frame-ancestors 'self' *.ariba.com *.gn.com 3 default-src 'self' *.google.com *.addthis.com *.brazenconnect.com *.youtube.com *.vimeo.com *.dvidshub.net *.military.com *.cloudfront.net; img-src 'self' data: *.mapbox.com *.sharethis.com *.bing.com *.clarity.com *.clarity.ms *.linkedin.com *.google.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.storeimaging.com *.ytimg.com *.vimeocdn.com *.click2apply.net *.staticflickr.com *.cloudfront.net; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.mapbox.com *.jsdelivr.net *.googleapis.com *.fonts.net *.cloudfront.net *.brazenconnect.com; font-src 'self' *.jsdelivr.net *.gstatic.com *.fonts.net; script-src-elem 'self' 'unsafe-inline' *.mapbox.com *.sharethis.com *.clarity.com *.clarity.ms *.google.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleoptimize.com *.licdn.com *.brazenconnect.com *.addthis.com *.moatads.com *.addthisedge.com *.military.com *.cloudfront.net *.vimeo.com; connect-src 'self' *.mapbox.com *.sharethis.com *.clarity.com *.clarity.ms *.google.com *.googleapis.com *.google-analytics.com *.addthis.com *.brazenconnect.com *.linkedin.com *.linkedin.oribi.io *.luckyorange.com *.luckyorange.net wss://*.live *.doubleclick.net; form-action 'self' *.gdmissionsystems.com; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; 3 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://pub.dv.tech https://dynacrems-stage.wp.pl https://challenges.cloudflare.com grid.grupawp.pl adssettings.google.com https://fpnpmcdn.net https://fpjscdn.net wpext.pl *.wpext.pl *.survicate.com *.survicate-cdn.com *.abtshield.com fpx.o2.pl *.doubleverify.com s1.adform.net track.adform.net rt.inistrack.net *.sensic.net system3secure.pl sentry-2-poczta.grupawp.pl pixel.adsafeprotected.com *.wp.pl *.wpimg.pl pocztanh.wpcdn.pl *.wpcdn.pl *.tradedoubler.com *.hit.gemius.pl *.salesmore.pl onapi.o2.pl *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.2mdn.net *.googleadservices.com d.rxthdr.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google-analytics.com *.moatads.com ib.adnxs.com adservice.google.pl adservice.google.com *.meetrics.net *.mxcdn.net *.criteo.com static.criteo.net imasdk.googleapis.com cdn.netsco.re 3p.ampproject.net *.payu.com *.doubleverify.com ho.novem.pl; object-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://dynacrems-stage.wp.pl adssettings.google.com *.survicate.com *.survicate-cdn.com pocztanh.wpcdn.pl s1.adform.net track.adform.net rt.inistrack.net system3secure.pl sentry-2-poczta.grupawp.pl pixel.adsafeprotected.com *.wp.pl *.wpimg.pl; img-src 'self' data: blob: *.wphcdn.cloud *.wpcdna.pl https://dynacrems-stage.wp.pl res.cloudinary.com *.nsaudience.pl *.survicate.com events.mediarithmics.com s1.adform.net track.adform.net rt.inistrack.net *.exactag.com zasobygwp.pl zasoby.tlen.pl pl-gmtdmp.mookie1.com system3secure.pl sentry-2-poczta.grupawp.pl pixel.adsafeprotected.com *.wp.pl rek.www.wp.pl *.wpimg.pl *.wpcdn.pl *.moatads.com *.tradedoubler.com ads.salesmore.pl *.doubleclick.net *.2mdn.net bs.serving-sys.com *.googlesyndication.com *.google.com delivery.way2traffic.com *.hit.gemius.pl t.qservz.com cdn.qservz.com beta.pocketads.pl ssl.google-analytics.com dmp.adform.net asa.allegro.pl ad.atdmt.com ads.businessclick.com/mailing/ *.meetrics.net *.mxcdn.net *.criteo.com *.criteo.net stags.bluekai.com www.ojrq.net/p/ secure-gl.imrworldwide.com www.facebook.com *.payu.com *.doubleverify.com ho.novem.pl; media-src 'self' v.wpimg.pl adv.wp.pl *.wpcdn.pl data:; child-src 'self' blob: *.hit.gemius.pl system3secure.pl sentry-2-poczta.grupawp.pl pixel.adsafeprotected.com *.wp.pl config.sensic.net *.tagcdn.com *.googlesyndication.com ads.salesmore.pl ad.doubleclick.net *.2mdn.net *.bing.com adexa.me googleads.g.doubleclick.net; frame-src 'self' blob: https://dynacrems-stage.wp.pl https://challenges.cloudflare.com adssettings.google.com *.survicate.com *.wpext.pl wpext.pl *.wpimg.pl *.hit.gemius.pl system3secure.pl sentry-2-poczta.grupawp.pl pixel.adsafeprotected.com *.wp.pl stg.wp.pl *.wpcdn.pl config.sensic.net *.tagcdn.com *.googlesyndication.com ads.salesmore.pl ad.doubleclick.net *.2mdn.net *.bing.com adexa.me www.google.com/recaptcha/ *.criteo.com googleads.g.doubleclick.net masscdn.com *.payu.com *.doubleverify.com ho.novem.pl gwp.typeform.com *.doubleclick.net *.googletagservices.com; font-src 'self' data: *.survicate.com *.survicate-cdn.com *.wpimg.pl *.wpcdn.pl; connect-src 'self' https://dynacrems-stage.wp.pl https://fpnpmcdn.net https://api.fpjs.io https://*.api.fpjs.io *.survicate.com *.abtshield.com fpx.o2.pl *.wpext.pl wpext.pl *.sensic.net *.hit.gemius.pl imppl.tradedoubler.com secure.espago.com wp.tv csi.gstatic.com *.criteo.com static.criteo.net bidder.criteo.com *.moatads.com *.meetrics.net wss://poczta.o2.pl wss://poczta.wp.pl system3secure.pl sentry-2-poczta.grupawp.pl pixel.adsafeprotected.com *.wp.pl *.wpcdn.pl *.money.pl www.google.com pubs2-eu.creativecdn.com *.wpimg.pl profil.o2.pl *.netscore.eu/v2/api/adinfo/ ib.adnxs.com/ptv *.googlesyndication.com *.payu.com *.doubleverify.com ho.novem.pl *.doubleclick.net *.googletagservices.com grid.grupawp.pl; report-uri /csp-reports; manifest-src 'self' 'unsafe-eval' 3 require-trusted-types-for 'script';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport 3 default-src 'self'; script-src 'self' https://js.stripe.com 'unsafe-inline'; frame-src 'self' https://js.stripe.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src * data: blob: wss: ws:; child-src * data: blob:; frame-src 'self' https:; media-src 'self' blob: https:; worker-src * data: blob:; manifest-src *; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 3 font-src 'self' app-tu.wigeogis.com app.wigeogis.com data: 3 frame-ancestors 'self' https://latitude.sh 3 default-src 'self' https://karlstorz.com https://*.karlstorz.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://karlstorz.com https://*.karlstorz.com https://players.brightcove.net vjs.zencdn.net https://*.cookielaw.org https://*.cookiepro.com https://*.onetrust.com https://*.googletagmanager.com https://*.licdn.com https://*.doubleclick.net https://*.facebook.net https://*.facebook.com https://*.google.com https://*.google.co.uk https://*.google.de https://cdn.jsdelivr.net/npm/ https://unpkg.com/friendly-challenge@0.9.9/ https://*.yimg.com; connect-src 'self' https://karlstorz.com https://*.karlstorz.com https://*.boltdns.net https://players.brightcove.net https://edge.api.brightcove.com https://metrics.brightcove.com https://*.akamaihd.net https://*.brightcovecdn.com https://*.cookielaw.org https://*.cookiepro.com https://*.onetrust.com https://*.linkedin.com https://*.google.com https://*.google.co.uk https://*.google.de https://*.pardot.com https://*.googleapis.com https://*.friendlycaptcha.eu https://*.facebook.net https://*.facebook.com https://*.yimg.com; img-src 'self' data: https://karlstorz.com https://*.karlstorz.com https://players.brightcove.net https://*.boltdns.net https://*.akamaihd.net https://*.brightcove.com https://*.brightcovecdn.com https://*.linkedin.com https://*.google.com https://*.google.co.uk https://*.google.de https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.googleapis.com https://*.gstatic.com https://*.cookielaw.org https://*.yahoo.com https://*.yimg.com; style-src 'self' 'unsafe-inline' https://karlstorz.com https://*.karlstorz.com https://players.brightcove.net https://*.googleapis.com; frame-src 'self' https://karlstorz.com https://*.karlstorz.com https://players.brightcove.net https://*.google.com https://*.google.co.uk https://*.google.de https://*.googletagmanager.com; frame-ancestors 'self' https://karlstorz.com https://*.karlstorz.com https://karlstorz-kslife.sabacloud.com https://360.articulate.com https://*.etracker.com; media-src 'self' blob: https://karlstorz.com https://*.karlstorz.com https://*.brightcovecdn.com https://*.boltdns.net https://*.media.brightcove.com https://*.akamaihd.net https://*.cf.brightcove.com; font-src 'self' data: https://karlstorz.com https://*.karlstorz.com https://players.brightcove.net https://*.gstatic.com; worker-src 'self' blob:; child-src 'self' blob:; 3 frame-ancestors 'self' https://localhost:* 3 upgrade-insecure-requests; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://*.myatproperties.com/ https://*.myansleyatlanta.com https://*.mychristiesre.com/; 3 frame-ancestors 'self' https://*.salt.ch https://*.go-mo.ch https://*.lidl-connect.ch https://*.post-mobile.ch; 3 default-src 'self'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; referrer 'unsafe-url'; upgrade-insecure-requests; 3 frame-ancestors https://ads.tiktok.com 3 default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.dom101.mapres *.dom101.intres *.dom101.prdres hcaptcha.com *.hcaptcha.com *.tiqcdn.com my.tealiumiq.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.youtube.com youtube.com *.ausha.co *.2o7.net *.omtrdc.net; connect-src *.dom101.mapres *.dom101.intres *.dom101.prdres 'self' hcaptcha.com *.hcaptcha.com *.tealiumiq.com *.2o7.net *.omtrdc.net; img-src data: 'self' hcaptcha.com *.hcaptcha.com *.gravatar.com *.2o7.net *.omtrdc.net *.googleapis.com *.groupebpce.fr *.intrabpce.fr; style-src 'self' hcaptcha.com *.hcaptcha.com 'unsafe-inline'; font-src data: 'self'; frame-ancestors *.dom101.mapres *.dom101.intres *.dom101.prdres 'self'; frame-src https: *; script-src-attr 'unsafe-inline'; worker-src *.bluecoat.com; report-uri https://www.csp.bpce.fr/v1/record?id=SIUAS; media-src 'self'; 3 default-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yandex.st https://api-maps.yandex.ru https://yastatic.net https://*.maps.yandex.net https://cdnjs.cloudflare.com https://cdn.flmngr.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' https://cdn.shate-m.by/; connect-src 'self' https://api-maps.yandex.ru https://*.maps.yandex.net https://cdn.flmngr.com https://data.flmngr.com; frame-src 'self' https://api-maps.yandex.ru https://w.soundcloud.com https://www.youtube.com https://yandex.ru 3 frame-ancestors 'self'; frame-src *.facebook.com *.google.com *.hotjar.com *.youtube.com *.vimeo.com *.googletagmanager.com *.fontawesome.com *.versio.nl *.freshdesk.com *.freshchat.com *.typeform.com *.hsforms.com *.doubleclick.net *.yourhosting.nl *.cookiebot.com 3 frame-ancestors https://*.contentful.com https://www.google.com/ 'self'; 3 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: 3 upgrade-insecure-requests; default-src 'self' *.zinia.com *.openbankpay.com; script-src 'self' *.zinia.com *.openbankpay.com 'unsafe-inline' 'unsafe-eval' snap.licdn.com https://maps.googleapis.com https://browseranalytic.com https://www.google.com *.gstatic.com tags.tiqcdn.com *.google-analytics.com https://*.g.doubleclick.net *.youtube.com *.googleadservices.com *.facebook.net *.ytimg.com api-ob.nd.nudatasecurity.com https://cdnjs.cloudflare.com *.googletagmanager.com *.we-stats.com static.browseranalytic.com bat.bing.com blob: unpkg.com www.googleoptimize.com; connect-src 'self' *.zinia.com *.openbankpay.com *.google-analytics.com *.we-stats.com *.biocatch.com lib-eu-1.brilliantcollector.com op.browseranalytic.com *.google.com *.googleapis.com *.googlesyndication.com https://*.g.doubleclick.net bat.bing.com cdn.linkedin.oribi.io https://dpm.demdex.net *.zinia.de; style-src 'self' *.zinia.com *.openbankpay.com 'unsafe-inline'; img-src 'self' *.zinia.com *.openbankpay.com px.ads.linkedin.com www.financeads.net data: 'unsafe-inline' *.googletagmanager.com https://maps.googleapis.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.google.ie *.google.com https://aax-eu.amazon-adsystem.com bat.bing.com www.linkedin.com tbl.tradedoubler.com *.googlesyndication.com; media-src 'self' *.zinia.com *.openbankpay.com *.youtube.com; frame-src 'self' *.zinia.com *.openbankpay.com https://www.google.com *.gstatic.com *.youtube.com *.doubleclick.net blob: ; child-src 'self' *.zinia.com *.openbankpay.com https://www.google.com *.gstatic.com *.youtube.com blob: ;frame-ancestors 'self' *.zinia.com *.openbankpay.com https://openbank.campaign.adobe.com; 3 default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-elem * 'self' data: blob: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-attr * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; style-src * 'self' data: 'unsafe-inline' 'unsafe-hashes'; style-src-elem * 'self' data: 'unsafe-inline' 'unsafe-hashes'; style-src-attr * 'self' data: 'unsafe-inline' 'unsafe-hashes'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self'; object-src * 'self'; child-src * 'self'; frame-src * 'self'; frame-ancestors * 'self'; form-action * 'self' 3 default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://api-esp-eu.piano.io; worker-src 'self' blob:; child-src 'self' blob: https://consentcdn.cookiebot.com; frame-src 'self' https://platform.twitter.com/ *.twitter.com https://consentcdn.cookiebot.com *.googletagmanager.com https://api-esp.piano.io https://share.transistor.fm https://www.google.com *.googlesyndication.com *.adtrafficquality.google *.youtube.com datawrapper.dwcdn.net e.infogram.com js.stripe.com https://www.youtube-nocookie.com *.webclew.com *.doubleclick.net https://securepubads.g.doubleclick.net/ https://www.googleadservices.com/ *.spotify.com https://api-esp-eu.piano.io/ https://cdn-gl.imrworldwide.com/ *.soundcloud.com donorbox.org https://*.hsforms.com https://*.hsforms.net https://www.google.com/recaptcha/ https://*.linkedin.com https://*.googletagservices.com tally.so *.tally.so 3 default-src 'none'; style-src 'unsafe-inline' 3 default-src https: *.hotjar.com *.hotjar.io *.wistia.com *.wistia.net 'self' 'unsafe-inline' 'unsafe-eval'; font-src https: *.hotjar.com *.hotjar.io *.wistia.com *.tawk.to fonts.gstatic.com data: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: *.hotjar.com *.hotjar.io *.tawk.to cdn.jsdelivr.net tawk.link *.iubenda.com *.wistia.com *.wistia.net data: 'self' 'unsafe-inline' 'unsafe-eval'; script-src blob: https: 'self' *.hotjar.com *.hotjar.io *.iubenda.com *.wistia.com *.wistia.net *.tawk.to cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval'; connect-src https: wss://*.qualified.com *.ws7.qualified.com *.litix.io *.wistia.com *.tawk.to wss://*.tawk.to *.hotjar.com *.hotjar.io wss://*.hotjar.com; frame-src https: 'self' blob: *.hotjar.com *.hotjar.io *.tawk.to fast.wistia.com fast.wistia.net; style-src blob: https: 'self' *.hotjar.com *.hotjar.io *.iubenda.com fast.wistia.com *.tawk.to fonts.googleapis.com cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval'; media-src * blob: data: https: *.wistia.com *.wistia.net 'self' 'unsafe-inline' 'unsafe-eval'; 3 script-src 'self' https://olivia.paradox.ai https://cdn.siteimprove.net https://cdn.jsdelivr.net https://cdn.skypack.dev/ https://cdnjs.cloudflare.com https://dokumfe7mps0i.cloudfront.net/ 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://esm.sh https://cdn.cookielaw.org https://maps.googleapis.com https://js-cdn.dynatrace.com https://connect.facebook.net https://js.hs-scripts.com/45890406.js https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://pagead2.googlesyndication.com https://ajax.googleapis.com https://www.youtube.com https://googleads.g.doubleclick.net https://code.highcharts.com https://js-na2.hs-scripts.com https://js-na2.hs-banner.com https://js-na2.hs-analytics.net blob:; report-uri /report-csp-violation; upgrade-insecure-requests 3 default-src 'self' https: ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' ; script-src-elem 'self' https: 'unsafe-inline' 'unsafe-eval' ; style-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: ; form-action 'self' https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https: ; worker-src 'self' blob: ; media-src 'self' blob: https: ; frame-ancestors 'self' https: ; 3 base-uri self; frame-ancestors none 3 frame-ancestors 'self' https://cdn-pre.tngdigital.com.my https://cdn.tngdigital.com.my; object-src 'none'; upgrade-insecure-requests; script-src 'self' rum.hlx.page assets.adobedtm.com *.securiti.ai *.googletagmanager.com *.google-analytics.com analytics.tiktok.com *.adsrvr.org tags.crwdcntrl.net connect.facebook.net *.doubleclick.net *.google.com *.innity.net *.outbrain.com *.hotjar.com *.onetrust.com *.line-scdn.net *.demdex.net *.omtrdc.net *.cimb.com.sg *.quantserve.com *.quantcount.com *.brand-display.com *.fontawesome.com *.pand.ai *.mookie1.com *.cimbclicks.com.my *.bbci.co.uk *.oracleinfinity.io *.oracle.com *.gstatic.com *.licdn.com *.recaptcha.net *.adobe.com *.cloudfront.net *.youtube.com *.googleusercontent.com *.youtube-nocookie.com *.azureedge.net *.blob.core.windows.net 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https://www.google.com https://recaptcha.net https://www.recaptcha.net *.doubleclick.net *.brand-display.com *.googletagmanager.com *.adsrvr.org *.demdex.net *.forksurge.com *.crwdcntrl.net *.cloudfront.net youtube-nocookie.com *.youtube-nocookie.com https://*.fls.doubleclick.net players.brightcove.net *.youtube.com irs.tools.investis.com *.googleusercontent.com *.azureedge.net; 3 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https: wss:; frame-src https: 3 default-src 'self' 'unsafe-inline' https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.gladly.com https://*.gladly.chat https://*.gladly.qa https://*.gladly.ga https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://download-video.akamaized.net https://vod-progressive.akamaized.net https://*.ibytedtos.com https://*.self-veri.com https://*.evgnet.com https://*.beamimpact.com https://*.tiktok.com https://www.talkable.com https://pm.w55c.net https://*.marketingcloudapis.com https://*.smartgiftit.com https://*.listrak.com https://*.pulseidconnect.com https://*.fedex.com https://*.salesforce.com https://*.thomsonreuters.com https://*.sandbox.eshopworld.com https://account.demandware.com https://*.api.commercecloud.salesforce.com https://*.riskified.com https://player.vimeo.com https://download-video-ak.vimeocdn.com https://*.vimeocdn.com https://*.cloudfront.net https://*.adyen.com https://*.cquotient.com https://cdn.builder.io https://*.yottaa.com https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://dev.movado.com https://id5-sync.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://cdn.cookielaw.org https://cdn-swell-assets.yotpo.com; connect-src 'self' https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://cdn.gladly.qa https://*.gladly.qa https://*.gladly.com https://*.gladly.chat wss://*.gladly.qa wss://*.gladly.com wss://*.gladly.chat https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://link.mail.mvmt.com https://pixels.spotify.com https://evnt.byspotify.com https://*.lt02.net https://*.tangiblee.com https://analytics.pangle-ads.com https://evt-eu.klarnaservices.com wss://*.inside-graph.com https://mvmt.7eer.net https://test.adyen.com/hpp/skipDetails wss://input.noibu.com https://www.facebook.com https://pubsub.googleapis.com https://*.noibu.com https://*.adyen.com https://www.talkable.com https://js.klarna.com https://api.cooladata.com https://*.inside-graph.com https://media.istockphoto.com https://*.appspot.com https://*.google.com.pk https://movado-item.smartgift-uat.net https://*.ibytedtos.com https://*.self-veri.com https://*.evgnet.com https://*.beamimpact.com https://*.smartgiftit.com https://*.tiktok.com https://*.marketingcloudapis.com https://*.fedex.com https://*.pulseidconnect.com https://*.salesforce.com https://*.thomsonreuters.com https://*.sandbox.eshopworld.com https://account.demandware.com https://*.api.commercecloud.salesforce.com https://google.com https://cdn.acsbapp.com https://*.riskified.com https://*.onetrust.com https://api.honeybadger.io https://*.joinclyde.com https://*.equalweb.com https://*.criteo.com https://*.eum-appdynamics.com https://*.luckyorange.com wss://visitors.live wss://*.visitors.live https://*.amazonaws.com https://trail.grin.co https://static-na.payments-amazon.com https://maps.googleapis.com https://*.amazon.com https://*.doubleclick.net https://*.pinterest.com https://*.yotpo.com https://*.taboola.com https://*.quantcount.com https://s.yimg.com https://us-central1-adaptive-growth.cloudfunctions.net https://*.snapchat.com https://*.bing.com https://*.cloudfront.net https://*.google-analytics.com https://d1lu3pmaz2ilpx.cloudfront.net https://www.cloudflare.com https://cdn.cookielaw.org https://*.luckyorange.net https://*.cquotient.com https://*.builder.io https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://*.affirm.com https://*.yottaa.net https://*.listrakbi.com https://bl.listrakbi.com https://*.google.com https://google.com/pay https://evt-na.klarnaservices.com; img-src 'self' 'unsafe-inline' data: blob: https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://media-wc.espssl.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://*.facebook.com https://cfvod.kaltura.com https://beta.pulseidconnect.com https://dsp.adfarm1.adition.com https://movado.pulseidconnect.com https://c1.adform.net https://image8.pubmatic.com https://connect.facebook.net https://pixel.tapad.com https://sync.srv.stackadapt.com https://cdn-assets.affirm.com https://rtb.openx.net https://saas2.pulseidconnect.com https://id5-sync.com https://www.google.nl https://matching.ivitrack.com https://*.thebrighttag.com https://*.yieldlab.net https://cm.adform.net https://www.google.co.uk https://www.google.co.in https://prregcroab.icu https://tpcs.payu.in https://pixel-sync.sitescout.com https://prreqcroab.icu https://www.ojrq.net https://www.fossil.com https://sync-tm.everesttech.net https://ad.turn.com https://ws.rqtrk.eu https://live.rezync.com https://x.dlx.addthis.com https://adgen.socdm.com https://media.istockphoto.com https://sync.ipredictive.com https://api.brandbassador.com https://www.google.com.pk https://pm.w55c.net https://jelly.mdhv.io https://adx.dable.io https://www.talkable.com https://cdn.aralego.net https://bh.contextweb.com https://cs.adingo.jp https://idsync.rlcdn.com https://sync.aralego.com https://beacon.krxd.net https://*.ibytedtos.com https://*.amazonaws.com https://*.beamimpact.com https://*.smartgiftit.com https://match.prod.bidr.io https://public-prod-dspcookiematching.dmxleo.com https://www.googleadservices.com https://*.cooladata.com https://i6.liadm.com https://aa.agkn.com https://p.rfihub.com https://b1sync.zemanta.com https://sync.crwdcntrl.net https://d.turn.com https://tapestry.tapad.com https://criteo-partners.tremorhub.com https://ade.clmbtech.com https://ad.tpmn.co.kr https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://hb.yahoo.net https://tags.bluekai.com https://1f2e7.v.fwmrm.net https://match.adsrvr.org https://dpm.demdex.net https://secure.adnxs.com https://ib.adnxs.com https://s.ad.smaato.net https://match.sharethrough.com https://trends.revcontent.com https://simage2.pubmatic.com https://sync.outbrain.com https://jadserve.postrelease.com https://exchange.mediavine.com https://i.liadm.com https://ad.360yield.com https://ads.stickyadstv.com https://r.casalemedia.com https://*.criteo.com https://visitor.omnitagjs.com https://tg.socdm.com https://*.yahoo.com https://eb2.3lift.com https://criteo-sync.teads.tv https://*.taboola.com https://rtb-csync.smartadserver.com https://pixel.rubiconproject.com https://contextual.media.net https://partner.mediawallahscript.com https://x.bidswitch.net https://*.googleapis.com https://track.linksynergy.com https://*.cloudfront.net https://*.pinterest.com https://*.twitter.com https://t.co https://*.riskified.com https://*.gstatic.com https://*.payments-amazon.com https://m.media-amazon.com https://pixel.quantserve.com https://www.google-analytics.com https://*.tiktok.com https://www.facebook.com https://*.quantcount.com https://www.google.com https://*.bing.com https://listen.audiohook.com https://cdn.cookielaw.org https://mediacdn.espssl.com https://logs-01.loggly.com https://www.googletagmanager.com https://*.cquotient.com https://*.yotpo.com https://cdn.builder.io https://*.shopify.com https://*.doubleclick.net https://*.listrakbi.com https://bl.listrakbi.com https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://pay.google.com https://id5-sync.com https://*.pointmediatracker.com https://*.inside-graph.com https://*.bidr.io https://*.imrworldwide.com; style-src 'self' 'unsafe-inline' https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://*.beamimpact.com https://*.tiktok.com https://*.inside-graph.com https://*.listrakbi.com https://prreqcroab.icu https://*.googleapis.com https://*.cloudfront.net https://*.smartgiftit.com https://*.riskified.com https://*.typeform.com https://www.talkable.com https://code.jquery.com https://mediacdn.espssl.com https://*.bootstrapcdn.com https://*.klarnacdn.net https://*.yotpo.com https://cdnjs.cloudflare.com https://*.typekit.net https://www.google.com https://*.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://*.cquotient.com https://us-sandbox-live.inside-graph.com; base-uri 'self'; form-action 'self' https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://e.issuu.com/ https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://*.lt02.net https://www.facebook.com https://*.adyen.com https://*.amazon.com https://*.paypal.com/; font-src 'self' data: https://cdn.builder.io https://x.klarnacdn.net https://*.espssl.com https://*.shopify.com https://*.yotpo.com https://cdn2.smartgiftit.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://fonts.gstatic.com https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://*.typekit.net https://cdnjs.cloudflare.com; frame-src 'self' https://*.klarnaservices.com https://*.unpkg.com https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://cdn.gladly.qa https://*.gladly.qa https://*.gladly.com https://*.gladly.chat https://link.mail.oliviaburton.com https://e.issuu.com/ https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://*.youtube.com https://www.talkable.com https://tsdtocl.com https://*.self-veri.com https://*.eshopworld.com https://*.api.commercecloud.salesforce.com https://*.inside-graph.com https://*.typeform.com https://*.affirm.com https://tapestry.tapad.com https://criteo-partners.tremorhub.com https://ade.clmbtech.com https://ad.tpmn.co.kr https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://aa.agkn.com https://live.rezync.com https://sync.crwdcntrl.net https://*.yahoo.net https://tags.bluekai.com https://*.criteo.net https://*.joinclyde.com https://*.criteo.com https://*.appdynamics.com https://www.facebook.com https://www.surveymonkey.com https://*.pinterest.com https://platform.twitter.com https://*.snapchat.com https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://*.google.com https://*.doubleclick.net https://*.linksynergy.com https://*.listrak.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://cdn.gladly.qa https://*.gladly.qa https://*.gladly.com https://*.gladly.chat https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://link.mail.mvmt.com https://pixels.spotify.com https://pixel.byspotify.com https://*.lt02.net https://*.tangiblee.com https://js.klarna.com https://*.equalweb.com https://www.googleadservices.com https://*.igodigital.com https://secure.quantserve.com https://s.pinimg.com https://api.sb.joinclyde.com https://api.joinclyde.com https://dynamic.criteo.com https://*.cloudfront.net https://widget.us.criteo.com https://www.google.nl/pagead https://www.google.nl https://sslwidget.criteo.com https://rules.quantcount.com https://googleads.g.doubleclick.net https://bat.bing.com https://connect.facebook.net https://cdn.noibu.com https://*.tiktok.com https://cdn.appdynamics.com https://beacon.riskified.com https://ajax.googleapis.com https://cdn.cookielaw.org/scripttemplates https://www.google-analytics.com https://init.blackcrow.ai https://*.synchronycredit.com https://www.talkable.com https://pay.google.com https://*.appdynamics.com https://www.recaptcha.net https://*.affirm.com https://*.paypalobjects.com https://*.paypal.cn https://*.paypal.com https://*.ibytedtos.com https://*.self-veri.com https://*.evgnet.com https://*.beamimpact.com https://*.smartgiftit.com https://*.marketingcloudapis.com https://*.listrak.com https://*.pulseidconnect.com https://*.fedex.com https://*.salesforce.com https://*.thomsonreuters.com https://*.sandbox.eshopworld.com https://account.demandware.com https://*.api.commercecloud.salesforce.com https://*.riskified.com https://*.inside-graph.com https://embed.typeform.com https://*.yotpo.com https://d.impactradius-event.com https://*.listrakbi.com https://www.gstatic.com https://*.cquotient.com https://*.usablenet.com https://static-na.payments-amazon.com https://*.googleapis.com https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.cloudflare.com https://www.google.com https://*.yottaa.com https://www.googleoptimize.com https://*.cookielaw.org https://*.movado.com https://*.googletagmanager.com https://*.oliviaburton.com https://*.concord.com https://*.concord.ch https://*.movadocompanystore.com https://*.collect.igodigital.com https://*.adyen.com https://*.mvmt.com https://*.klarna.com https://*.tangiblee.com; script-src-elem 'self' 'unsafe-inline' https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://cdn.gladly.qa https://*.gladly.qa https://*.gladly.com https://*.gladly.chat https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://*.youtube.com https://cdnapisec.kaltura.com https://*.equalweb.com https://*.ibytedtos.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://conoret.com https://www.talkable.com https://static.ads-twitter.com https://*.googletagmanager.com https://*.self-veri.com https://*.evgnet.com https://*.beamimpact.com https://*.tiktok.com https://*.smartgiftit.com https://*.marketingcloudapis.com https://*.pulseidconnect.com https://*.fedex.com https://*.salesforce.com https://*.thomsonreuters.com https://account.demandware.com https://acsbapp.com https://*.riskified.com https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.cooladata.com https://oliviaburton.usablenet.com https://*.inside-graph.com https://*.typeform.com https://*.criteo.com https://*.igodigital.com https://init.blackcrow.ai https://cdn.noibu.com https://*.usedrop.io https://widget.surveymonkey.com https://www.googleadservices.com https://*.adyen.com https://www.google-analytics.com https://*.quantcount.com https://*.snapchat.com https://*.taboola.com https://api.ipify.org https://*.twitter.com https://bat.bing.com https://s.pinimg.com https://sc-static.net https://connect.facebook.net https://s.yimg.com https://cdn.pdst.fm https://googleads.g.doubleclick.net https://secure.quantserve.com https://code.jquery.com https://api.sb.joinclyde.com https://api.joinclyde.com https://*.appdynamics.com https://movado.usablenet.com https://*.builder.io https://d.impactradius-event.com https://*.cloudfront.net https://*.rakuten.com https://*.affirm.com https://*.yotpo.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://www.gstatic.com https://cdn.cookielaw.org https://www.googleoptimize.com https://cdn.yottaa.com https://*.google.com https://*.googleapis.com https://static-na.payments-amazon.com https://mvmtwatches.usablenet.com https://*.cquotient.com https://*.listrakbi.com https://bl.listrakbi.com https://*.listrak.com https://*.typekit.net https://*.linksynergy.com https://*.klarna.com https://*.tangiblee.com; style-src-elem 'self' 'unsafe-inline' https://webcontent-targeting.listrak.com https://webcontent-activity.listrak.com https://*.getangler.ai https://*.klarnaevt.com https://*.klarnaservices.com https://*.unpkg.com https://*.movado.in https://link.mail.movado.com https://link.mail.movadocompanystore.com https://link.mail.oliviaburton.com https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://*.inside-graph.com https://*.equalweb.com https://x.klarnacdn.net https://*.beamimpact.com https://*.riskified.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://embed.typeform.com https://www.talkable.com https://*.cloudfront.net https://us-sandbox-live.inside-graph.com https://*.yotpo.com https://maxcdn.bootstrapcdn.com https://mediacdn.espssl.com https://code.jquery.com https://fonts.googleapis.com https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://*.typekit.net https://*.linksynergy.com https://*.cloudflare.com https://*.listrakbi.com https://bl.listrakbi.com https://*.smartgiftit.com https://*.tangiblee.com; report-uri https://test.adyen.com/hpp/skipDetails https://cdn.cookielaw.org/scripttemplates https://*.googleapis.com https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://cdn-swell-assets.yotpo.com; sandbox allow-forms allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox allow-modals allow-top-navigation allow-top-navigation-by-user-activation; frame-ancestors 'self' https://test.adyen.com/hpp/skipDetails https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch https://*.cookielaw.org https://*.googleapis.com https://*.yotpo.com; worker-src blob: 'self' https://link.mail.mvmt.com https://*.lt02.net https://*.tangiblee.com https://*.commercecloud.salesforce.com https://staging-na02-movado.demandware.net https://*.movado.com https://*.mvmt.com https://*.movadocompanystore.com https://*.oliviaburton.com https://*.ebel.com https://*.concord.ch; 3 script-src 'self'; object-src 'self' 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https: data: blob:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https://challenges.cloudflare.com https: wss: data: blob:; frame-src 'self' https://challenges.cloudflare.com https: data:; object-src 'none'; base-uri 'self'; 3 frame-ancestors 'self' https://PRD.S4HANA.CORP.TELSTRA.COM 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com maps.googleapis.com maps.gstatic.com consent.cookiebot.eu consentcdn.cookiebot.eu bat.bing.com cdn.mouseflow.com genesys-chatbot-dev.wbs-web.de genesys-chatbot-stage.wbs-web.de chatbot.wbs-web.de connect.facebook.net tr.wbstraining.de wbstraining.omq.de *.youtube.com youtube.com *.azureedge.net *.convertexperiments.com t.webmetic.de www.redditstatic.com redditstatic.com rns.matelso.de snap.licdn.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com www.wbstraining.de www.google-analytics.com *.analytics.google.com img.sct.eu1.usercentrics.eu userlike-cdn-operators.userlike.com maps.googleapis.com maps.gstatic.com tr.wbstraining.de wbstraining.omq.de googleads.g.doubleclick.net www.googleadservices.com alb.reddit.com bat.bing.com t.webmetic.de connect.facebook.net facebook.com *.facebook.com linkedin.com *.linkedin.com fonts.gstatic.com px.ads.linkedin.com px4.ads.linkedin.com translate.google.com googletagmanager.com *.googletagmanager.com *.google.com google.com *.google.de google.de *.google.at google.at *.google.be google.be *.google.ch google.ch *.google.cz google.cz *.google.dk google.dk *.google.fr google.fr *.google.lu google.lu *.google.nl google.nl *.google.pl google.pl stats.g.doubleclick.net; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com consent.cookiebot.eu consentcdn.cookiebot.eu www.etermin.net tr.wbstraining.de genesys-chatbot-stage.wbs-web.de genesys-chatbot-dev.wbs-web.de chatbot.wbs-web.de assets-eur.mkt.dynamics.com nbs.wufoo.com widget.trustpilot.com app.convert.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com 'report-sample'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com wbstraining.omq.de *.googletagmanager.com googletagmanager.com *.gstatic.com gstatic.com 'report-sample'; script-src-elem 'self' 'unsafe-inline' tr.wbstraining.de maps.googleapis.com maps.gstatic.com consent.cookiebot.eu consentcdn.cookiebot.eu userlike-cdn-umm.a-cdn.net userlike-cdn-umm.b-cdn.net wbstraining.omq.de bat.bing.com snap.licdn.com t.webmetic.de *.convertexperiments.com cdn.mouseflow.com connect.facebook.net rns.matelso.de www.redditstatic.com redditstatic.com genesys-chatbot-dev.wbs-web.de genesys-chatbot-stage.wbs-web.de chatbot.wbs-web.de googletagmanager.com *.googletagmanager.com youtube.com *.youtube.com *.gstatic.com gstatic.com *.azureedge.net analytics.tiktok.com analytics-ipv6.tiktokw.us secure.wufoo.com widget.trustpilot.com app.convert.com 'report-sample'; connect-src 'self' sentry.wbs-web.de consent.cookiebot.eu consentcdn.cookiebot.eu api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com maps.googleapis.com maps.gstatic.com tr.wbstraining.de wbstraining.omq.de bat.bing.com px.ads.linkedin.com hub.webmetic.de t.webmetic.de *.rec.mouseflow.com pixel-config.reddit.com rns.matelso.de facebook.com *.facebook.com www.redditstatic.com wss://umd.userlike.com/umd/%2A *.convertexperiments.com conversions-config.reddit.com googletagmanager.com *.googletagmanager.com sentry.io translate.googleapis.com translate-pa.googleapis.com umd.userlike.com *.googleadservices.com googleadservices.com *.google.com google.com *.google.de google.de *.google.at google.at *.google.be google.be *.google.ch google.ch *.google.cz google.cz *.google.dk google.dk *.google.fr google.fr *.google.lu google.lu *.google.nl google.nl *.google.pl google.pl *.azureedge.net public-eur.mkt.dynamics.com googleads.g.doubleclick.net analytics.tiktok.com analytics-ipv6.tiktokw.us widget.trustpilot.com *.conversionsapigateway.com mpc-prod-24-s6uit34pua-uw.a.run.app; font-src 'self' userlike-cdn-umm.a-cdn.net userlike-cdn-umm.b-cdn.net fonts.gstatic.com wbstraining.omq.de cdn.mouseflow.com chrome-extension r2cdn.perplexity.ai; report-uri https://www.wbstraining.de/csp-report-endpoint/ 3 default-src 'self'; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://forms.hsforms.net; frame-ancestors 'self'; frame-src 'self' https://polaris.brighterir.com https://www.google.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.hs-sites.com https://player.vimeo.com https://cdn.cookielaw.org https://privacyportal.onetrust.com https://secure.leadforensics.com https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' https://ws.zoominfo.com https://*.zoominfo.com https://js.zi-scripts.com https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hs-scripts.com https://*.hsadspixel.net https://*.hs-banner.com https://*.hs-analytics.net https://*.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://api.usemessages.com https://*.vimeo.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://www.google.com https://googleads.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://secure.leadforensics.com https://js.zi-scripts.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hs-scripts.com https://*.hsadspixel.net https://*.hs-banner.com https://*.hs-analytics.net https://*.licdn.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googleapis.com https://js.usemessages.com https://player.vimeo.com https://cdn.cookielaw.org https://privacyportal.onetrust.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hsappstatic.net; img-src 'self' data: blob: https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.hubspotusercontent00.net https://*.hubspotusercontent-na1.net https://*.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://ssl.gstatic.com https://*.vimeo.com https://cdn.cookielaw.org https://googleads.g.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com https://*.hsappstatic.net; media-src 'self' blob: data: https://*.hubspotusercontent00.net https://*.vimeo.com; worker-src 'self' blob:; upgrade-insecure-requests; 3 font-src 'self' *.gstatic.com *.cloudflare.com *.sfdcstatic.com *.cstatic.co.za data:;img-src 'self' *.commercecloud.salesforce.com *.demandware.net *.capeunionmart.co.za *.oldkhaki.co.za *.poetrystores.co.za *.poetry.co.za *.force.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleapis.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googlesyndication.com *.googlesyndication.com google.com *.google.com *.google.co.za googleadservices.com *.googleadservices.com *.gstatic.com *.tiktok.com *.contentsquare.net *.pixlee.com *.pixlee.co *.edgecastcdn.net *.facebook.net *.facebook.com *.youtube.com creativecdn.com *.creativecdn.com *.sfdcstatic.com *.turnto.eu *.igodigital.com *.bing.com *.amplience.net mobicred.co.za *.mobicred.co.za *.mobicredwidget.co.za *.capeunionmart.co.za purecatamphetamine.github.io *.cloudflare.com *.jsdelivr.net *.paypal.com *.paypalobjects.com salesforce-sites.com *.salesforce-sites.com criteo.com *.criteo.com pangle-ads.com *.pangle-ads.com data: *.site.com *.sandbox.my.site.com *.salesforce-scrt.com *.srcspot.com *.ytimg.com pinterest.com *.pinterest.com blob:;script-src 'self' 'unsafe-eval' *.googleapis.com *.salesforce.com *.salesforceliveagent.com *.cloudflareinsights.com cloudflareinsights.com *.force.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googlesyndication.com *.googlesyndication.com google.com *.google.com *.google.co.za *.gstatic.com *.tiktok.com *.contentsquare.net *.contentsquare.com vic-m.co *.vic-m.co mimecastprotect.com *.mimecastprotect.com *.pixlee.com *.pixlee.co *.facebook.net *.facebook.com *.youtube.com creativecdn.com *.creativecdn.com *.sfdcstatic.com *.turnto.eu *.igodigital.com *.bing.com *.amplience.net mobicred.co.za *.mobicred.co.za *.mobicredwidget.co.za *.capeunionmart.co.za *.cloudflare.com *.jsdelivr.net *.paypal.com *.paypalobjects.com salesforce-sites.com *.salesforce-sites.com criteo.com *.criteo.com pangle-ads.com *.pangle-ads.com unsafe-inline *.site.com *.sandbox.my.site.com *.salesforce-scrt.com *.srcspot.com *.amplitude.com cnstrc.com *.cnstrc.com pinimg.com *.pinimg.com pinterest.com *.pinterest.com;frame-src 'self' *.salesforce.com *.salesforceliveagent.com *.force.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googlesyndication.com *.googlesyndication.com google.com googleadservices.com *.googleadservices.com *.google.com *.google.co.za *.gstatic.com *.tiktok.com *.contentsquare.net *.contentsquare.com *.pixlee.com *.pixlee.co *.facebook.net *.facebook.com *.youtube.com creativecdn.com *.creativecdn.com *.sfdcstatic.com *.turnto.eu *.igodigital.com *.bing.com *.amplience.net mobicred.co.za *.mobicred.co.za *.mobicredwidget.co.za *.capeunionmart.co.za *.paypal.com *.paypalobjects.com *.pargo.co.za salesforce-sites.com *.salesforce-sites.com criteo.com *.criteo.com pangle-ads.com *.pangle-ads.com *.site.com *.sandbox.my.site.com *.salesforce-scrt.com *.srcspot.com pinterest.com *.pinterest.com;frame-ancestors 'self' *.salesforce.com *.salesforceliveagent.com *.force.com *.site.com *.sandbox.my.site.com *.salesforce-scrt.com *.srcspot.com;script-src-elem 'self' 'unsafe-inline' *.force.com *.lightning.force.com *.salesforce.com *.salesforceliveagent.com *.salesforce-sites.com *.secure.force.com *.cloudflareinsights.com *.cloudflare.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googlesyndication.com *.googlesyndication.com googleadservices.com *.googleadservices.com *.facebook.net *.facebook.com *.youtube.com google.com vic-m.co *.vic-m.co mimecastprotect.com *.mimecastprotect.com *.google.com *.google.co.za *.gstatic.com *.tiktok.com *.contentsquare.net *.contentsquare.com *.pixlee.com *.pixlee.co *.cloudflare.com creativecdn.com *.creativecdn.com *.sfdcstatic.com *.turnto.eu *.igodigital.com *.bing.com *.amplience.net mobicred.co.za *.mobicred.co.za *.mobicredwidget.co.za *.capeunionmart.co.za *.jsdelivr.net *.paypal.com *.paypalobjects.com salesforce-sites.com *.salesforce-sites.com criteo.com *.criteo.com pangle-ads.com *.pangle-ads.com *.site.com *.sandbox.my.site.com *.salesforce-scrt.com *.srcspot.com *.amplitude.com *.cnstrc.com cnstrc.com pinimg.com *.pinimg.com pinterest.com *.pinterest.com;connect-src 'self' api.cquotient.com *.capeunionmart.co.za *.oldkhaki.co.za *.poetrystores.co.za *.poetry.co.za *.demandware.net *.force.com *.salesforce-sites.com *.secure.force.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googlesyndication.com *.googlesyndication.com google.com *.google.com *.google.co.za *.gstatic.com *.tiktok.com *.contentsquare.net *.contentsquare.com *.pixlee.com *.pixlee.co *.facebook.net *.facebook.com *.youtube.com creativecdn.com *.creativecdn.com *.sfdcstatic.com *.turnto.eu *.igodigital.com *.bing.com *.amplience.net mobicred.co.za *.mobicred.co.za *.mobicredwidget.co.za *.capeunionmart.co.za *.paypal.com *.paypalobjects.com salesforce-sites.com *.salesforce-sites.com criteo.com *.criteo.com pangle-ads.com *.pangle-ads.com *.site.com *.sandbox.my.site.com *.salesforce-scrt.com *.srcspot.com *.amplitude.com cnstrc.com *.cnstrc.com pinterest.com *.pinterest.com;style-src 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.jsdelivr.net unpkg.com *.unpkg.com *.salesforce.com salesforce-sites.com *.salesforce-sites.com *.turnto.eu *.force.com *.secure.force.com *.googletagmanager.com criteo.com *.criteo.com pangle-ads.com *.pangle-ads.com *.site.com *.sandbox.my.site.com *.salesforce-scrt.com;style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.jsdelivr.net unpkg.com *.unpkg.com *.salesforce.com salesforce-sites.com *.turnto.eu *.salesforce-sites.com *.force.com *.secure.force.com *.googletagmanager.com criteo.com *.criteo.com pangle-ads.com *.pangle-ads.com *.site.com *.sandbox.my.site.com *.salesforce-scrt.com;media-src 'self' *.amplience.net api.cquotient.com *.capeunionmart.co.za *.oldkhaki.co.za *.poetrystores.co.za *.poetry.co.za *.demandware.net *.force.com development-eu01-capeunion.demandware.net *.salesforce-sites.com *.secure.force.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net *.g.doubleclick.net googlesyndication.com *.googlesyndication.com google.com *.google.com *.google.co.za *.gstatic.com *.tiktok.com *.contentsquare.net *.contentsquare.com *.pixlee.com *.pixlee.co *.facebook.net *.facebook.com *.youtube.com creativecdn.com *.creativecdn.com *.sfdcstatic.com *.turnto.eu *.igodigital.com *.bing.com mobicred.co.za *.mobicred.co.za *.mobicredwidget.co.za *.media.amplience.net *.static.amplience.net *.capeunionmart.co.za *.paypal.com *.paypalobjects.com salesforce-sites.com *.salesforce-sites.com *.site.com *.sandbox.my.site.com *.salesforce-scrt.com *.srcspot.com *.ytimg.com blob:;worker-src 'self' *.capeunionmart.co.za *.oldkhaki.co.za *.poetrystores.co.za *.poetry.co.za blob:;child-src 'self' blob:;script-src-attr 'self' 'unsafe-inline';upgrade-insecure-requests;default-src 'self';base-uri 'self';block-all-mixed-content;object-src 'none' 3 default-src 'self' *.doubleclick.net *.seeburger-news.com *.seeburger.com forms.office.com munchkin.marketo.net v.qq.com mobile.events.data.microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.seeburger-news.com *.seeburger.com bat.bing.com cdn.plyr.io ce.lijit.com googleads.g.doubleclick.net googletagmanager.com idx.liadm.com munchkin.marketo.net secure.curl7bike.com secure.leadforensics.com snap.licdn.com tagmanager.google.com webeo-web-content.s3-eu-west-1.amazonaws.com www.clickcease.com www.googletagmanager.com www.youtube.com tracking-api.g2.com tracking-api.production.g2.com rdrect-eur1.mkt.dynamics.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.google-analytics.com *.linkedin.com *.seeburger.com fonts.gstatic.com googletagmanager.com i.ytimg.com monitor.clickcease.com secure.curl7bike.com secure.leadforensics.com ssl.gstatic.com www.google.ae www.google.at www.google.az www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.cl www.google.cm www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.za www.google.com www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.lb www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.om www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.kg www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sr www.google.tg www.google.tn www.googleadservices.com www.gstatic.com wwwseeburgercom-160c6.kxcdn.com www.googletagmanager.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com assets1-eur.mkt.dynamics.com forms.cloud.microsoft forms.office.com go.seeburger-news.com td.doubleclick.net v.qq.com www.googletagmanager.com www.youtube.com; upgrade-insecure-requests; connect-src 'self' *.doubleclick.net *.seeburger-news.com *.seeburger.com forms.office.com munchkin.marketo.net v.qq.com mobile.events.data.microsoft.com *.google-analytics.com *.mktoresp.com *.mktoutil.com adservice.google.com analytics.google.com cdn.plyr.io googleads.g.doubleclick.net idx.liadm.com ldynamicspublicapi.leadforensics.com monitor.clickcease.com noembed.com px.ads.linkedin.com region1.analytics.google.com stats.g.doubleclick.net www.google.ae www.google.at www.google.az www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.cl www.google.cm www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.za www.google.com www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.lb www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.om www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.kg www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sr www.google.tg www.google.tn www.googleadservices.com www.googletagmanager.com wss://*.seeburger.com tracking-api.g2.com tracking-api.production.g2.com; font-src 'self' *.doubleclick.net *.seeburger-news.com *.seeburger.com forms.office.com munchkin.marketo.net v.qq.com mobile.events.data.microsoft.com data: fonts.gstatic.com; frame-ancestors 'self' *.seeburger.com www.googletagmanager.com; media-src 'self' *.doubleclick.net *.seeburger-news.com *.seeburger.com forms.office.com munchkin.marketo.net v.qq.com mobile.events.data.microsoft.com *; style-src 'self' *.doubleclick.net *.seeburger-news.com *.seeburger.com forms.office.com munchkin.marketo.net v.qq.com mobile.events.data.microsoft.com 'unsafe-inline' fonts.googleapis.com googletagmanager.com tagmanager.google.com www.googletagmanager.com 'report-sample'; report-uri https://sentry2.in2code.de/api/7/security/?sentry_key=ac5a04f3144e74ea1ccb11c69823ed60 3 default-src * 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; connect-src * blob:; img-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * 'unsafe-inline' 'unsafe-eval' data:; frame-ancestors 'self' https://a.cms.omniupdate.com; 3 default-src 'self' blob: *.powerentity.com *.energieag.at news.netzooe.at energieag.picturepark.com energieag.cdn.picturepark.com *.google-analytics.com *.googleapis.com *.gstatic.com prezi.com www.googleadservice www.youtube.com walls.io *.walls.io *.googletagmanager.com www.netigate.se *.whatchado.com *.vimeo.com i.ytimg.com connect.facebook.net app.adwordsagentur.at s.ksrndkehqnwntyxlhgto.com *.hotjar.com *.hotjar.io wss://*.hotjar.com www.googleadservices.com *.doubleclick.net *.adform.net *.iconnode.com *.facebook.com *.google.at *.google.de *.google.com google.com *.adsrvr.org e-tankstellen-finder.com connect.shore.com *.shore-cdn.com *.teamplanbuch.ch *.cookiebot.com *.matterport.com www.360perspektiven.com sys.mailworx.info *.marketingsuite.info sc-static.net *.konzertmeister.app *.podigee-cdn.net *.podigee.com *.podigee.io marketing.piwik.pro energieag.containers.piwik.pro energieag.piwik.pro empathy-portal.de eag.viewer.cit-fusion.com *.adition.com *.powerbi.com cdnjs.cloudflare.com static.cloudflareinsights.com www.youtube-nocookie.com *.ytimg.com *.googlesyndication.com streamio.com energieag.current-picturepark.com *.mouseflow.com github.com wss://*.cognigy.ai *.cognigy.ai *.githubusercontent.com maps.google.de *.fliphtml5.com cdn.jsdelivr.net *.spotify.com *.eye-able.com *.digiaccess.org *.ksrndkehqnwntyxlhgto.com *.openstreetmap.org *.tiktok.com *.tiktokw.us *.snapchat.com *.adnxs.com 'unsafe-inline' 'unsafe-eval' data: 3 upgrade-insecure-requests; frame-ancestors 'self' ; report-uri https://cspreports.realpage.com/api/reports/save/violation; 3 default-src 'self' *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com ; connect-src 'self' *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com *.quotemedia.com d3cxgmmmi7oxsv.cloudfront.net ; script-src 'self' 'unsafe-inline' *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com *.quotemedia.com d3cxgmmmi7oxsv.cloudfront.net ; style-src 'self' 'unsafe-inline' *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com *.quotemedia.com d3cxgmmmi7oxsv.cloudfront.net *.googleapis.com ; style-src-elem 'self' 'unsafe-inline' *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com *.quotemedia.com d3cxgmmmi7oxsv.cloudfront.net *.googleapis.com ; font-src 'self' data: *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com *.quotemedia.com d3cxgmmmi7oxsv.cloudfront.net *.gs.com fonts.gstatic.com ; img-src 'self' data: *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com syndicatedsearch.goog *.quotemedia.com d3cxgmmmi7oxsv.cloudfront.net *.googleapis.com syndicatedsearch.goog ; child-src 'self' blob: *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com syndicatedsearch.goog ; object-src 'none' ; frame-ancestors 'self' *.foliofn.com folioinvesting.com *.folioinvesting.com folioinstitutional.com *.folioinstitutional.com *.folioidentity.com *.ria.site.gs.com *.advisorsolutions.site.gs.com *.gstatic.com ; upgrade-insecure-requests; block-all-mixed-content 3 frame-ancestors 'self' https://app.contentful.com/; 3 upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 3 frame-ancestors 'self' https://api.p1.mks.com https://backoffice.p1.mks.com https://backoffice.ckd4e256bp-mksinstru3-p1-public.model-t.cc.commerce.ondemand.com *.crm.cloud.sap *.crm.ondemand.com 3 frame-ancestors 'self' ballerup.dk www.hedenstederhverv.dk www.vejenerhverv.dk; 3 default-src 'self';script-src 'self' blob: https://www.google-analytics.com/ https://prep-edit.senedd.wales/ https://senedd.wales https://cc.cdn.civiccomputing.com/ https://www.googletagmanager.com/ https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.0.0.min.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.16.0/jquery.validate.min.js https://ajax.aspnetcdn.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.min.js https://cdn.jsdelivr.net https://connect.facebook.net 'sha256-qTS4cC+BnlabE/doSj+MPbjtJWVdVNtQah7AzuFfjbE=' 'sha256-h4tI5yM0TF6GI9CZe5uWnJX7WqXL1kpLAJ13Idyytts=' 'sha256-ilwf7xMCbK3zl5IAk48FJ2W7Ajaupag4/Fwk6x2wros=' 'sha256-vzagZ5N88heA6eyiqLUtxphlMdRFACSQS6Vob8dapbQ=' 'sha256-byyDoONdqE08AIFI6uBk/n8GJDNnu4o8VE6qf+NETJs=' 'sha256-GG+mi50DV7jNq33JItnAeSGKu+DyOuVZM484bs4ioq4=' 'sha256-r3mDNAbdsnbtcqGzAwDXN/1Ln5hKyg8GDZlm46+kpKg=' 'sha256-GG+mi50DV7jNq33JItnAeSGKu+DyOuVZM484bs4ioq4=' 'sha256-IZgGOToFausimoy1Ehqf2azcfWd5NrdyLunVfExDBbE=' 'sha256-NGxJAeRnkyrA2OBRtnqvyQRY28RBBbWXd+45iwUuOUU=' 'sha256-F/cu6HUELqMYhkB6TZFkoZoPLA7wPQ+ImBdqTVxZPUc=' 'sha256-OH++59VDvU6yN74Q2UuMkDjXzMZbZYGxaTP1SrqUqJs=' 'sha256-ilwf7xMCbK3zl5IAk48FJ2W7Ajaupag4/Fwk6x2wros=' 'unsafe-eval' 'unsafe-inline';style-src 'self' https://fonts.googleapis.com/ https://cdn.jsdelivr.net/npm/@duetds/date-picker@1.1.0/dist/duet/themes/default.css 'unsafe-inline';child-src https://www.youtube.com/ https://www.google.com/;connect-src 'self' https://www.google-analytics.com https://prep-edit.senedd.wales/ https://www.senedd.tv https://senedd.tv https://www.senedd.assembly.wales https://www.senedd.cynulliad.cymru https://apikeys.civiccomputing.com https://senedd.assembly.wales https://senedd.cynulliad.cymru https://player.senedd.tv https://busnes.senedd.cymru https://business.senedd.wales https://region1.google-analytics.com;font-src 'self' https://fonts.gstatic.com/ https://business.senedd.wales;img-src 'self' https://* data: https://businesstest.senedd.wales:8443/;object-src 'none';frame-src 'self' https://www.youtube.com/ https://www.google.com/ https://umap.openstreetmap.fr https://openstreetmap.cymru https://www.ons.gov.uk https://player.senedd.tv https://w.soundcloud.com https://my.matterport.com https://embeds.audioboom.com https://player.vimeo.com https://business.senedd.wales https://busnes.senedd.cymru https://www.canva.com https://forms.office.com https://app.powerbi.com https://cy.ons.gov.uk https://instagram.com https://www.instagram.com https://www.facebook.com 3 default-src 'self' cdn.jsdelivr.net jsdelivr.net c.disquscdn.com disqus.com translations.signapsesolutions.com; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' js.sitesearch360.com cdn.sitesearch360.com translations.signapsesolutions.com js.monitor.azure.com disqus.com c.disquscdn.com https://*.clarity.ms https://c.bing.com highwaysagency.disqus.com emea3.recruitmentplatform.com s.ytimg.com www.youtube.com maps.googleapis.com unpkg.com apis.google.com www.google-analytics.com widgets.flickr.com wsstatic.govmetric.com www.gstatic.com cdn.syndication.twimg.com platform.twitter.com embedr.flickr.com www.google.com www.googletagmanager.com wsstatic.servmetric.com ajax.aspnetcdn.com cc.cdn.civiccomputing.com cdnjs.cloudflare.com code.jquery.com connect.facebook.net hitcounter.govmetric.com cdn.jsdelivr.net jsdelivr.net websurveys2.govmetric.com websurveys2.servmetric.com www.browsealoud.com; style-src 'unsafe-inline' 'report-sample' 'self' wsstatic.servmetric.com cdn.jsdelivr.net jsdelivr.net c.disquscdn.com emea3.recruitmentplatform.com fonts.googleapis.com fonts.gstatic.com www.googletagmanager.com unpkg.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com ton.twimg.com platform.twitter.com p.typekit.net use.typekit.net websurveys2.govmetric.com websurveys2.servmetric.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.nationalhighways.co.uk www.googletagmanager.com js.monitor.azure.com global.sitesearch360.com insights.sitesearch360.com cdn.sitesearch360.com i0lne9atrk.execute-api.eu-west-2.amazonaws.com o4506903028891648.ingest.us.sentry.io uksouth-1.in.applicationinsights.azure.com https://*.clarity.ms https://c.bing.com region1.google-analytics.com maps.googleapis.com clapi.civiccomputing.com hitcounter.govmetric.com stats.g.doubleclick.net www.google-analytics.com emea3.recruitmentplatform.com plusqa.browsealoud.com www.browsealoud.com speech.speechstream.net embedr.flickr.com apikeys.civiccomputing.com plus.browsealoud.com; font-src 'self' emea3.recruitmentplatform.com fonts.gstatic.com cdnjs.cloudflare.com use.typekit.net; frame-src 'self' player.vimeo.com green-hill-00bcb1d03.4.azurestaticapps.net podcasters.spotify.com web.powerva.microsoft.com anchor.fm app.powerbi.com content.googleapis.com www.arcgis.com *.arcgis.com arcgis.com disqus.com websurveys2.govmetric.com w.soundcloud.com www.google.com syndication.twitter.com platform.twitter.com www.facebook.com www.youtube.com; img-src data: 'self' i.vimeocdn.com insights.sitesearch360.com cdn.sitesearch360.com *.youtube.com img.youtube.com fonts.gstatic.com c.disquscdn.com referrer.disqus.com www.googletagmanager.com emea3.recruitmentplatform.com maps.gstatic.com maps.googleapis.com websurveys2.servmetric.com www.browsealoud.com stats.g.doubleclick.net abs.twimg.com www.google-analytics.com ton.twimg.com pbs.twimg.com platform.twitter.com syndication.twitter.com live.staticflickr.com i.ytimg.com websurveys2.govmetric.com; manifest-src 'self'; media-src 'self' blob: prod-sign-backend-signapisinterpretationwebtransl-1qw8ws199jmxo.s3.eu-west-2.amazonaws.com; worker-src 'none'; 3 style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/@splidejs/splide@4.1.4/dist/css/splide.min.css https://www.googletagmanager.com/ https://embed.typeform.com/ https://cdn.honey.io/ https://mozbar.moz.com/ https://www.gstatic.com/ https://cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css https://cdn.jsdelivr.net/npm/toastify-js/src/toastify.min.css https://cdn.jsdelivr.net/npm/instantsearch.css@7.3.1/themes/reset-min.css https://fonts.googleapis.com https://hsiassetstorage.sfo2.digitaloceanspaces.com; object-src 'none'; base-uri 'self'; font-src 'self' data: https://fonts.googleapis.com https://hsiassetstorage.sfo2.digitaloceanspaces.com https://fonts.gstatic.com; frame-src 'self' https://hemsync.clickagy.com/ https://fast.wistia.net/ https://donesafe.chilipiper.com/ https://hsiassetstorage.sfo2.digitaloceanspaces.com/ https://*.healthsafetyinstitute.com/ https://form.typeform.com/ https://js.hsforms.net/ https://roicalculator.sandbox.hsiplatform.com/ https://www.g2.com/ https://hsi.storylane.io/ https://js.storylane.io/ https://cmp.osano.com/ https://cdn.osano.com/ https://*.osano.com/ https://view.ceros.com/ https://webcasts.td.org/ https://hsi.hs-sites.com/ https://widgets.boast.io/ https://s.pointerpro.com/ https://block.opendns.com/ *.opendns.com https://cn1759620867-8-7vnsr40081.ibosscloud.com/ https://bpb.opendns.com/ https://a46b2ba213084fe2909a2975f59efe90.pages.ubembed.com/ https://www.classmarker.com/ https://univ.sosintl.com/ https://www.osmanager4.com/ https://forms.hsforms.com/ https://otis.osmanager4.com/ https://app.hubspot.com/ https://www.facebook.com/ https://td.doubleclick.net https://vimeo.com/ https://www.googletagmanager.com https://player.vimeo.com https://swiftcdn6.global.ssl.fastly.net; img-src 'self' data: https: https://ct.capterra.com https://hsiassetstorage.sfo2.digitaloceanspaces.com/; manifest-src 'self'; report-uri https://6672f92ed528e3ceb6b0d39f.endpoint.csper.io/?v=0; frame-ancestors 'self' https://hsiassetstorage.sfo2.digitaloceanspaces.com/ https://vimeo.com https://googletagmanager.com https://fastly.net https://webcasts.td.org; worker-src 'self' blob:; 3 img-src * 3 default-src https: data: 'unsafe-inline' 'unsafe-eval'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; manifest-src 'self'; object-src 'none'; 3 default-src *; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * data: blob:; font-src *; object-src *; base-uri *; form-action *; frame-ancestors *; 3 frame-ancestors 'self' https://*.ageoflearning.com https://*.abcmouse.com; 3 object-src *;script-src * 'unsafe-inline' 'unsafe-eval' data: 3 child-src 'self' blob: *.somfy.fr *.bambuser.com lcx-widgets-eu.bambuser.com gum.criteo.com analytics.tiktok.com *.pinterest.com tr.snapchat.com sc-static.net static.ads-twitter.com https://*.tagcommander.com *.tagcommander.com optimize.google.com gateway.euronext.com forms.logiforms.com https://*.iadvize.com *.iadvize.com *.trustedshops.com aax-eu.amazon-adsystem.com *.trustcommander.net *.overkiz.com *.somfy.com *.somfysystems.pl e.issuu.com projects.perfoweb.fr www.tahomalink.com boutique.somfy.fr www.youtube.com www.googletagmanager.com static.addtoany.com client.alwaysupport.com *.doubleclick.net static.olark.com 212.203.79.55 somfykorea.linux.gabiauser.com shop.somfy.de shop.somfy.es shop.somfy.it easyshop.somfypro.fr tv.connexoon.de tvaktion.connexoon.de tv-at.connexoon.de *.addthis.com *.disqus.com disqus.com www.google.com webdev.abastra.com kartor.eniro.se http://kartor.eniro.se www.somfy-smart.de api.soundcloud.com w.soundcloud.com www.lespetitespierres.org https://giphy.com/upload https://hearthis.at https://soundcloud.com https://www.youtube.com https://www.lespetitespierres.org *.rlets.com https://giphy.com https://www.franceinter.fr *.zohopublic.com *.smartrecruiters.com https://subscriptions.smartrecruiters.com marketing.net.elogia.net www.facebook.com https://www.facebook.com https://www.youtube-nocookie.com www.123formbuilder.com https://c.imedia.cz player.ina.fr https://*.hotjar.com https://*.tfaforms.net *.tfaforms.net www.ausschreiben.de cdn.thinglink.me *.thinglink.com form.123formbuilder.com https://form.123formbuilder.com https://px.ads.linkedin.com *.px.ads.linkedin.com https://www.linkedin.com *.linkedin.com https://d6tizftlrpuof.cloudfront.net player.teester.com landings.somfy.co.il my.matterport.com *.myfeelback.com *.kameleoon.com *.kameleoon.eu https://somfyicebucket.com actorssl-5637.kxcdn.com *.smart-tribune.com cdnjs.cloudflare.com polyfill.io secure.livechatinc.com *.test.somfy.com *.ppr.somfy.com *.usabilla.com https://sbxp.somfysystems.com mfb.li https://mfb.li room.cxr.skeepers.io; frame-ancestors 'self' https://*.somfy.com https://*.batchgeo.com 3 object-src 'none'; block-all-mixed-content; upgrade-insecure-requests; 3 frame-ancestors 'self' https://appgate.lookbookhq.com https://appgate.pathfactory.com https://ww3.appgate.com https://appgate.sharepoint.com https://appgate.pathfactory.com https://360fraud.pathfactory.com https://360fraud.lookbookhq.com https://www.360fraud.ai 3 upgrade-insecure-requests; default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 3 default-src 'self' https://googleads.g.doubleclick.net/ https://www.google.com/ads/user-lists/ https://www.google.hu/ads/user-lists/ https://tpc.googlesyndication.com/safeframe/ https://www.youtube.com/embed/ https://server.infinety.hu/ https://*.safeframe.googlesyndication.com/safeframe/ ; img-src 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://googleads.g.doubleclick.net/ https://www.google.com/ads/ https://www.google.hu/ads/ https://csi.gstatic.com/ https://maps.googleapis.com/maps/ https://googleapis.com/ https://csi.gstatic.com/ https://maps.gstatic.com/ https://maps.google.com/ https://maps.googleapis.com/ blob: 'self' https://ad.adverticum.net/banners/ https://ssl.google-analytics.com/ https://www.facebook.com/tr/ https://ap.lijit.com/ https://u.btserve.com/ https://ad-delivery.net/ https://www.facebook.com/ data: https://www.w3.org/2000/svg/ https://dmp.adform.net/dmp/profile/ https://x.bidswitch.net/ https://ad-delivery.net/px.gif https://tpc.googlesyndication.com/ https://securepubads.g.doubleclick.net/ https://googleads.g.doubleclick.net/pagead/ https://pagead2.googlesyndication.com/ blob: 'self' https://cm.g.doubleclick.net/ https://d5p.de17a.com/ https://sync.clickonometrics.pl/ https://ib.adnxs.com/ https://mq.wp.pl/ https://s1.adform.net/ https://adx.adform.net/ https://u.btserve.com/ data: https://www.w3.org/2000/svg/ https://script.hotjar.com/ https://static.hotjar.com/ https://w35.hotjar.com/ https://www.google.com/pagead/ https://optimize.google.com/ https://nemzeticegtar.hu/files/ https://www.nemzeticegtar.hu/files/ https://www.google.co.uk/ https://nctteszt.opten.hu/ https://admin.nemzeticegtar.hu/ https://i.imgur.com/ https://widget.molin.ai/ https://www.googletagmanager.com https://fonts.gstatic.com https://ceginfo.hu/assets/images/ ; style-src 'self' https: 'unsafe-inline' https://maxcdn.bootstrapcdn.com/font-awesome/ https://fonts.googleapis.com/ https://ad.adverticum.net/banners/ https://static.hotjar.com/ https://optimize.google.com/ ; font-src 'self' https://fonts.gstatic.com/stats/ https://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://themes.googleusercontent.com/static/fonts/lato/ https://script.hotjar.com/ https://static.hotjar.com/ https://w35.hotjar.com/ https://optimize.google.com/ https://cdnjs.cloudflare.com/ajax/libs/ ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion.js https://www.google.com/recaptcha/api.js https://maps.google.com/maps/api/ https://maps.google.com/ https://maps.googleapis.com/ https://googleapis.com/ https://ad.adverticum.net/g3.js https://ls.hit.gemius.pl/ https://hu.hit.gemius.pl/xgemius.js https://www.googletagmanager.com https://ad.adverticum.net/g3.js https://www.googletagmanager.com/ https://static.hotjar.com/ https://optimize.google.com/ https://connect.facebook.net/en_US/fbevents.js https://unpkg.com/@dotlottie/player-component@latest/dist/dotlottie-player.mjs blob: 'self'; connect-src 'self' https://settings.luckyorange.net/ https://track.adform.net/ wss://in.visitors.live/socket.io/ wss://visitors.live/socket.io/ https://ad.adverticum.net/ https://fastlane.rubiconproject.com/a/api/fastlane.json https://adx.adform.net/adx/ https://securepubads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://csi.gstatic.com/ https://*.hotjar.com/ wss://*.hotjar.com/ https://vc.hotjar.io/ https://pagead2.googlesyndication.com/ https://script.4dex.io/adagio.js https://ice.360yield.com/ https://prg.smartadserver.com/ https://*.criteo.com/ https://www.facebook.com/tr/ https://www.google-analytics.com/ https://static.hotjar.com/ https://content.hotjar.io/ https://region1.google-analytics.com/ https://*.doubleverify.com/ https://region1.analytics.google.com/ https://maps.googleapis.com/ wss://molin.ai/ https://eu.posthog.com/ https://assets5.lottiefiles.com/ https://pheu.molin.ai/ https://lottie.host/18ceabf4-51c0-410e-8bce-1e1ee2924c57/gb9fKyPMO2.json https://widget.molin.ai/ https://cmp.inmobi.com/ https://api.cmp.inmobi.com/ https://ep1.adtrafficquality.google/getconfig/ https://nodejs.opten.hu/ ; frame-src 'self' https://www.google.com/recaptcha/ https://googleads.g.doubleclick.net/pagead/ https://www.google.hu/ads/user-lists/ https://maps.googleapis.com/ https://googleapis.com/ https://tpc.googlesyndication.com/ https://ls.hit.gemius.pl/ https://www.youtube.com/embed/ https://occsz.e-cegjegyzek.hu/ https://server.infinety.hu/ https://vars.hotjar.com/ https://static.hotjar.com/ https://w35.hotjar.com/ https://*.safeframe.googlesyndication.com/ https://*.doubleverify.com/ https://*.rubiconproject.com/ https://*.criteo.com/ https://www.google.com/maps/ https://optimize.google.com/ https://securepubads.g.doubleclick.net/ https://ep2.adtrafficquality.google/ ; worker-src 'self' https://www.google.com/recaptcha/ https://googleads.g.doubleclick.net/pagead/ https://bid.g.doubleclick.net/ https://www.google.hu/ads/user-lists/ https://ls.hit.gemius.pl/ https://ad.adverticum.net/external/ https://ad.adverticum.net/banners/ https://occsz.e-cegjegyzek.hu/ https://www.youtube.com/embed/ https://www.facebook.com/tr/ https://static.hotjar.com/ https://sparbanner.kolrus.cloud/ ; media-src https://sparbanner.kolrus.cloud/ https://static.hotjar.com/ https://server.infinety.hu/ https://molin.ai/ ; 3 frame-ancestors 'self' app.contentful.com; upgrade-insecure-requests 3 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: 3 default-src * ; font-src * 'self' data: ; img-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' ; style-src * 'unsafe-inline' blob:; connect-src * ; object-src blob:; worker-src * blob: 3 frame-ancestors flashpoint-intel.com *.flashpoint-intel.com flashpoint.io *.app.flashpoint.io fp.tools *.flashpoint.io *.echosec.net *.fp.tools automate.fp.tools autodemo.fp.tools *.platform.fpint.net *.cyberriskanalytics.com *.crft.app *.arcade.software *.okta.com *.calendly.com *.pendo.io *.googleapis.com *.wistia.net *.looker.com *.twitter.com *.platform.fpint.net *.saleshood.com app.userevidence.com *.userevidence.com *.varify.io app.varify.io; frame-src 'self' flashpoint-intel.com *.flashpoint-intel.com app.flashpoint.io *.app.flashpoint.io flashpoint.io *.app.flashpoint.io fp.tools *.flashpoint.io *.echosec.net *.fp.tools automate.fp.tools autodemo.fp.tools *.platform.fpint.net *.cyberriskanalytics.com *.crft.app *.arcade.software *.okta.com *.calendly.com *.pendo.io *.googleapis.com *.wistia.net *.looker.com *.twitter.com *.platform.fpint.net *.youtube.com youtube.com linkedin.com *.linkedin.com *.ashbyhq.com *.visualwebsiteoptimizer.com *.mutinycdn.com *.newrelic.com *.googletagmanager.com *.doubleclick.net *.google.com *.channeltivity.com *.saleshood.com app.qualified.com app.userevidence.com *.userevidence.com *.varify.io app.varify.io 3 default-src 'self' * 'unsafe-inline' 'unsafe-eval' data: https: blob:; report-uri /csp-violation-report/ 3 frame-ancestors 'self' https://*.eudonet.com; 3 default-src https: 'self' blob:;script-src https: 'unsafe-inline' 'unsafe-eval' 'self' blob:;script-src-elem https: 'self' 'unsafe-inline';object-src https: 'self' blob:;frame-src 'self' blob: https:;style-src 'unsafe-inline' https: data: 'self';font-src https: data:;img-src * data: 'self';connect-src https: wss://*.liveperson.net wss://tsock.us1.twilio.com/v3/wsconnect wss://*.usw2.pure.cloud wss://intercept-api.questionpro.com; frame-ancestors https://embed.questionpro.com; 3 frame-ancestors 'self' *.ourbit.com *.ourbit.io *.seebestfirst.com *.seebestsecond.com *.oceanupsky.com 3 connect-src 'self' https: wss:; default-src 'self' https:; frame-ancestors 'self'; img-src 'self' https: data:; media-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' blob:; script-src https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline' 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://api.openai.com https://*.boxever.com https://*.coveo.com https://global.ketchcdn.com https://cdn.ketchjs.com https://public.tableau.com https://*.cloudfront.net https://*.bound360.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.getsmartcontent.com https://play.vidyard.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://*.linkedin.com https://cdn.linkedin.oribi.io https://*.litix.io https://*.pardot.com https://*.questionpro.com https://*.rfihub.com https://*.rfihub.net https://*.sitecorecontenthub.cloud https://*.vizientinc.com https://*.wistia.com https://*.wistia.net https://ad.ipredictive.com https://ajax.googleapis.com https://analytics.twitter.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cnv.event.prod.bidr.io https://code.jquery.com https://connect.facebook.net https://*.sitecorecloud.io https://match.adsrvr.org https://maxcdn.bootstrapcdn.com https://snap.licdn.com https://static.ads-twitter.com http://www.vizient.localhost http://www.vizient.localhost:* ws://www.vizient.localhost:* http://localhost http://localhost:* ws://localhost:* https://t.co https://tracking.intentsify.io https://vhatv.vha.com https://vitals.vercel-insights.com https://www.cvent.com https://www.ethosce.com https://www.facebook.com https://www.google.ca https://www.google.com https://*.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://www.thinglink.com https://*.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://use.typekit.net https://p.typekit.net https://tag.demandbase.com https://api.company-target.com https://company.target.com https://rlcdn.com https://id.rlcdn.com https://scripts.demandbase.com https://segments.company-target.com https://tag-logger.demandbase.com https://www.juicer.io https://www.podbean.com https://datawrapper.dwcdn.net https://embed.acast.com https://assets.juicer.io https://static.juicer.io https://media.licdn.com https://a.usbrowserspeed.com https://img.genially.com https://view.genially.com https://view.genial.ly https://*.simpli.fi https://cdn.knightlab.com https://vizient.wispform.com https://*.6sc.co https://secure.adnxs.com https://epsilon.6sense.com https://embed.podcasts.apple.com https://app.powerbi.com https://s.company-target.com https://unpkg.com https://vizient-chatbot.vercel.app https://chat.vizient.com; media-src 'self' data: blob: https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud embedwistia-a.akamaihd.net *.wistia.net *.wistia.com; 3 default-src 'none';script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; base-uri 'self';form-action 'self';object-src 'none';frame-ancestors 'self';connect-src *;media-src *;worker-src *;child-src *;manifest-src *; 3 frame-ancestors 'self' https://app.kontent.ai; 3 worker-src 'none'; 3 default-src 'self' data: blob: *.conac.cn *.gov.cn *.jiathis.com *.baidu.com *.bshare.cn *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' * maps.googleapis.com www.google.com ajax.googleapis.com en25.com google-analytics.com analytics.google.com www.google-analytics.com *.chilipiper.com data.iongroup.com fast.wistia.com *.googletagmanager.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.google.com https://www.gstatic.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.cookiebot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://*.sitecorecloud.io https://feaasstatic.blob.core.windows.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.bing.com https://*.clarity.ms https://vercel.live https://www.youtube.com https://*.pardot.com http://pi.pardot.com https://*.huronconsultinggroup.com http://*.huronconsultinggroup.com https://tracker.gaconnector.com https://*.innosight.com https://snap.licdn.com https://js.zi-scripts.com blob: https://*.clickagy.com https://*.adsrvr.org https://www.redditstatic.com https://*.redditstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sitecorecloud.io https://feaasstatic.blob.core.windows.net https://vercel.live; font-src 'self' https://fonts.gstatic.com https://*.sitecorecloud.io https://feaasstatic.blob.core.windows.net data: https://vercel.live https://assets.vercel.com; img-src 'self' data: blob: https://*.sitecorecloud.io https://feaasstatic.blob.core.windows.net https://*.sitecorecontenthub.cloud https://*.sitecorecontenthub.com https://i.ytimg.com https://*.ytimg.com https://*.vimeocdn.com https://*.vimeo.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google.com https://*.google.com https://*.google.co.in https://www.gstatic.com https://*.gstatic.com https://*.doubleclick.net https://*.googlesyndication.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.cookiebot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdn.cookielaw.org https://*.bing.com https://*.clarity.ms https://engage.huronconsultinggroup.com https://*.pardot.com https://vercel.live https://vercel.com https://*.gcs-web.com https://*.bugherd.com https://*.innosight.com https://*.clickagy.com https://*.adsrvr.org https://www.facebook.com https://*.linkedin.com https://*.ads.linkedin.com https://*.licdn.com https://www.redditstatic.com https://*.redditstatic.com https://*.reddit.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://www.google.com https://*.cookiebot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.sitecorecloud.io https://feaasstatic.blob.core.windows.net https://*.bing.com https://*.clarity.ms https://geolocation.onetrust.com https://vercel.live https://www.youtube.com https://www.youtube-nocookie.com https://*.vimeo.com https://*.pardot.com https://*.huronconsultinggroup.com https://tracker.gaconnector.com https://*.innosight.com https://www.facebook.com https://*.facebook.com https://*.linkedin.com https://*.ads.linkedin.com https://*.licdn.com https://*.zi-scripts.com https://*.zoominfo.com https://*.clickagy.com https://*.adsrvr.org https://*.reddit.com wss://*.pusher.com; frame-src 'self' https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud https://vercel.live https://www.youtube.com https://www.youtube-nocookie.com https://*.vimeo.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://www.google.com https://*.huronconsultinggroup.com https://*.pardot.com https://view.ceros.com https://*.innosight.com https://*.salesforce.com https://*.salesforce-sites.com https://*.adsrvr.org; media-src 'self' https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud; upgrade-insecure-requests; report-uri /api/csp-report 3 frame-ancestors 'self'; upgrade-insecure-requests; script-src 'self' 'nonce-f9ec449a28' https: 'strict-dynamic'; script-src-elem 'unsafe-inline' https: 'self'; style-src-elem 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; frame-src 'self' *.vimeo.com *.youtube.com gf.canto.global consentcdn.cookiebot.com www.googletagmanager.com www.google.com; object-src 'none' ; child-src 'self' data: *.adnxs.com www.googletagmanager.com; form-action 'self'; worker-src 'self' blob:; base-uri 'self' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https:; connect-src 'self' https: blob:; media-src 'self' https: blob: data:; frame-src 'self' https:; child-src 'self' https:; frame-ancestors 'none' 3 default-src 'self' *.bootstrapcdn.com/font-awesome/ *.cookiebot.com *.hotjar.com *.visualstudio.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aspnetcdn.com *.azure.com *.bootstrapcdn.com/font-awesome/ *.cookiebot.com *.datatables.net *.fontawesome.com *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.jquery.com *.jsdelivr.net *.mouseflow.com *.msecnd.net *.sharethis.com *.typekit.net *.youtube.com;style-src 'self' 'unsafe-inline' *.bootstrapcdn.com/font-awesome/ *.cookiebot.com *.datatables.net *.fontawesome.com *.typography.com *.typekit.net;frame-src 'self' *.arcgis.com *.cookiebot.com *.cyfoethnaturiolcymru.gov.uk *.google.com *.googletagmanager.com *.hotjar.com *.powerbi.com *.youtube.com;font-src 'self' data: *.bootstrapcdn.com *.hotjar.com *.typekit.net *.fontawesome.com;img-src 'self' blob: data: *.azurefd.net *.azureedge.net *.cyfoethnaturiol.cymru *.google-analytics.com *.hotjar.com *.naturalresources.wales *.sharethis.com *.umbraco.com *.ytimg.com *.cookiebot.com *.datatables.net;connect-src 'self' ws: wss: *.azure.com *.cookiebot.com *.datatables.net *.doubleclick.net *.google-analytics.com *.hotjar.com *.hotjar.io *.sharethis.com *.visualstudio.com *.fontawesome.com;worker-src blob:;upgrade-insecure-requests 3 default-src 'self' 'unsafe-inline' region1.google-analytics.com stats.g.doubleclick.net www.google-analytics.com https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://www.linkedin.com https://indd.adobe.com https://syndication.twitter.com/; connect-src *; font-src *; frame-src 'self' https://www.google.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://imtcast.imt.fr/ https://haltools.archives-ouvertes.fr/ https://indd.adobe.com/ https://barometredelascienceouverte.esr.gouv.fr/ https://www.rcf.fr https://platform.twitter.com https://www.linkedin.com https://syndication.twitter.com/ https://v.calameo.com/ https://player.vimeo.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com www.googletagmanager.com region1.google-analytics.com stats.g.doubleclick.net google-analytics.com www.youtube.com www.youtube-nocookie.com https://cdn.jsdelivr.net https://platform.linkedin.com https://www.linkedin.com googletagmanager.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://platform.twitter.com https://www.google.com localhost:35729 yui.yahooapis.com; script-src-elem * 'unsafe-inline' localhost:35729; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdn.jsdelivr.net https://www.googletagmanager.com *.typekit.net https://cdnjs.cloudflare.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com https://cdn.jsdelivr.net https://www.googletagmanager.com *.typekit.net https://cdnjs.cloudflare.com; frame-ancestors 'self'; 3 require-trusted-types-for 'script';report-uri /_/MeetingsUi/cspreport 3 frame-ancestors 2domains.ru *.yandex.ru metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr webvisor.com *.webvisor.com reseller-admin.int.reg.ru; 3 default-src 'self' https://webanalytics.europa.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://better-internet-for-kids.europa.eu https://cdn.jsdelivr.net/npm/js-cookie@3.0.5/dist/js.cookie.min.js https://webtools.europa.eu https://cnect-bik.acc.dhs.tech.ec.europa.eu https://europa.eu/webtools/rest/nuts https://static.twitchcdn.net http://cdnjs.cloudflare.com https://unpkg.com/@popperjs/core@2.11.6/dist/umd/popper.js https://unpkg.com/tippy.js@6.3.7/dist/tippy.umd.js https://cdn.jsdelivr.net/gh/ractoon/jQuery-Text-Counter@0.9.1/textcounter.min.js https://cdn.jsdelivr.net/gh/gjunge/rateit.js@1.1.5/scripts/jquery.rateit.min.js https://webanalytics.europa.eu https://cdn.jsdelivr.net *.europa.eu https://www.webanalytics.europa.eu/ppms.js https://cdn.ckeditor.com/ckeditor5/; style-src 'self' 'unsafe-inline' https://better-internet-for-kids.europa.eu https://webtools.europa.eu https://cnect-bik.acc.dhs.tech.ec.europa.eu https://europa.eu/webtools/rest/nuts http://cdnjs.cloudflare.com https://unpkg.com/tippy.js@6.3.7/dist/tippy.css https://unpkg.com/tippy.js@6.3.7/dist/tippy.css https://cdn.jsdelivr.net/gh/NigelOToole/progress-tracker@v2.0.7/src/styles/progress-tracker.css https://cdn.jsdelivr.net/gh/gjunge/rateit.js@1.1.5/scripts/rateit.css https://cdn.jsdelivr.net *.europa.eu; img-src 'self' 'unsafe-inline' data: https://better-internet-for-kids.europa.eu https://webtools.europa.eu https://cnect-bik.acc.dhs.tech.ec.europa.eu https://europa.eu/webtools/rest/nuts https://webanalytics.europa.eu https://i.ytimg.com *.europa.eu https://www.webanalytics.europa.eu; media-src 'self' https://better-internet-for-kids.europa.eu https://webtools.europa.eu https://cnect-bik.acc.dhs.tech.ec.europa.eu https://europa.eu/webtools/rest/nuts; frame-src https://better-internet-for-kids.europa.eu https://europa.eu/webtools/rest/nuts https://indd.adobe.com https://player.twitch.tv https://webtools.europa.eu https://www.youtube.com https://youtube.com/ https://player.vimeo.com https://cnect-bik.acc.dhs.tech.ec.europa.eu; frame-ancestors 'self'; font-src 'self' 'unsafe-inline' data: https://webtools.europa.eu https://cnect-bik.acc.dhs.tech.ec.europa.eu https://europa.eu/webtools/rest/nuts https://better-internet-for-kids.europa.eu https://fonts.gstatic.com; connect-src 'self' https://better-internet-for-kids.europa.eu https://*.webtools.europa.eu https://webtools.europa.eu https://cnect-bik.acc.dhs.tech.ec.europa.eu https://europa.eu/webtools/rest/nuts https://webanalytics.europa.eu *.europa.eu https://www.webanalytics.europa.eu/ppms.php; report-uri /report-csp-violation 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: wss: data: blob: 3 ... 3 frame-ancestors 'self' https://storyblok.com https://*.storyblok.com 3 default-src 'self' data.songstats.com; img-src * data: blob:; script-src 'self' 'wasm-unsafe-eval' 'unsafe-inline' https://appleid.cdn-apple.com https://static.cloudflareinsights.com https://unpkg.com https://www.redditstatic.com https://js.stripe.com https://www.paypal.com https://www.paypalobjects.com https://*.google.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com http://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://*.onesignal.com https://onesignal.com https://js-cdn.music.apple.com https://analytics.tiktok.com; frame-src https://songstats.com https://js.stripe.com https://www.facebook.com https://www.youtube-nocookie.com https://www.youtube.com https://bid.g.doubleclick.net https://td.doubleclick.net https://www.paypal.com https://www.paypalobjects.com https://accounts.google.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://onesignal.com https://fonts.googleapis.com; object-src 'none'; media-src https://p.scdn.co https://songshare.com https://songstats.com https://playlistcheck.com https://socialstats.com https://geo-preview.traxsource.com https://geo-samples.beatport.com https://music.amazon.com https://presave.com https://radiostats.com https://*.cloudfront.net https://songsheets.com; connect-src https://*.google-analytics.com https://playlistcheck.com https://socialstats.com https://radiostats.com https://songshare.com https://fonts.gstatic.com https://*.onesignal.com https://*.analytics.google.com https://data.songstats.com https://stats.g.doubleclick.net https://www.paypal.com https://onesignal.com https://*.facebook.com https://www.redditstatic.com https://*.reddit.com wss://artistinsights-realtime3.spotify.com https://unpkg.com https://fonts.googleapis.com https://*.google.com https://songstats.com https://presave.com https://play.itunes.apple.com https://analytics.tiktok.com https://songsheets.com https://js.stripe.com https://cdn.jsdelivr.net https://analytics-ipv6.tiktokw.us https://i.scdn.co https://geo-media.beatport.com https://geo-static.traxsource.com https://is2-ssl.mzstatic.com https://e-cdn-images.dzcdn.net https://i1.sndcdn.com https://yt3.ggpht.com https://*.tiktokcdn.com https://cdn.1001.tl https://cdn.songstats.com https://pbs.twimg.com https://stats.company https://www.googletagmanager.com https://scontent-yyz1-1.xx.fbcdn.net https://monit.songstats.com; 3 frame-ancestors 'self' https://www.hckrt.com/; 3 base-uri 'self'; style-src 'self'; connect-src 'self' *.itzbund.de; script-src 'self' piwik.itzbund.de; object-src 'self' multimedia.gsb.bund.de medien.bsi.bund.de; media-src 'self' multimedia.gsb.bund.de medien.bsi.bund.de; img-src 'self' piwik.itzbund.de *.tile.openstreetmap.org; font-src 'self'; frame-ancestors 'self' *.prod.gsb.bsi.in.bund.de ; upgrade-insecure-requests; 3 frame-ancestors 'self' https://www.cvonline.lt https://www.cvmarket.lv https://www.cvkeskus.ee https://www.cvmarket.lt https://www.cv.lt https://www.visidarbi.lv; 3 frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://thomsonreuterstaxprofessionals.lookbookhq.com https://thomsonreuterstaxprofessionals.lookbookhq.com 3 font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://*.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://widgets.trustedshops.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://belco-prod.s3-eu-central-1.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sooqr.com *.spotlersearch.com www.magmodules.eu *.squeezely.tech media.k-parts.nl tagging.kparts.fr tagging.k-parts.be tagging.k-parts.nl tagging.k-parts.pl *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat tagging.k-parts.de *.snapchat.com *.clarity.ms *.bing.com *.bing.net *.amazonaws.com https://firebasestorage.googleapis.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net https://cdn.belco.io https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com squeezely.tech www.squeezely.tech *.squeezely.tech tagging.k-parts.nl tagging.kparts.fr *.tiktok.com assets.spotlersearchanalytics.com analytics.pricetweakers.net *.clarity.ms bat.bing.com tagging.k-parts.be tagging.k-parts.de sc-static.net *.billygrace.com *.cloudfront.net *.snapchat.com *.amazonaws.com *.k-parts.pl *.sendcloud.sc *.avada.io *.shopify.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://*.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com assets.braintreegateway.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.jsdelivr.net *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com wss://chat.belco.io https://cdn.belco.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sooqr.com *.spotlersearch.com squeezely.tech *.squeezely.tech *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.bing.com tagging.k-parts.nl analytics-fn.pricetweakers.net *.clarity.ms tagging.kparts.fr *.tiktok.com tagging.k-parts.be tagging.k-parts.de *.amazonaws.com *.snapchat.com *.billypx.com *.tiktokw.us *.bing.net *.k-parts.pl analytics.pricetweakers.net *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3 frame-ancestors 'self' https://brita-int.ff360.de 3 frame-ancestors 'self' https://clarity.microsoft.com https://*.clarity.microsoft.com 3 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 3 font-src 'self' https://*.freenet.de https://use.typekit.net https://fonts.gstatic.com; img-src * blob:; frame-ancestors 'self' https://*.freenet.de; object-src 'self'; base-uri 'none'; 3 script-src 'self' blob: *.hcsctest.net *.hcsc.net rum.hlx.page 'sha256-roBKNtTORGqYTZrY132I7LjnRPmJRBYk0vsWsfTJfi8=' 'sha256-Hu+TB+7+tbK6BX5NWGt+0M+Bq+eQTLzu4mfAdMsLwio=' 'sha256-m6IeQPb422Ecu6vAsJ4XwC+Q4Bnlo5vWz/eAbO1BMMY=' 'sha256-SPsZXjscKwSgFBbdcFRAE/GR7YyFgkl7d5tVBREd+pE=' 'sha256-SDHTnkuO02em0DcuwqvF5tDafRm8LYNMnYP+a2QMeyA=' 'sha256-oFLLqxbCZekFnkJfG4JJcqpyCzBF/l8PMUBQFcUbeZ0=' 'sha256-ppW1Vv+qSVcs+/pIj1ZXvMiCLoyHyCdRqtDMeK9fQ9w=' 'sha256-+YZqnAWTPJ9G7/VImu/8MHnpEzn7upBYnPfVF/yMQp4=' 'sha256-ThHZXYAEciBA4PPtRsuwrM4rS6A27cEeDZfKFgMjOHs=' *.decibelinsight.net *.twitter.com hcsctest.net *.bcbsil.com *.bcbstx.com *.hcsc.net contentz.mkt922.com healthcareservicecorporation.sc.omtrdc.net resources.digital-cloud-west.medallia.com dx.steelhousemedia.com cdn.decibelinsight.net *.facebook.net *.googleadservices.com bat.bing.com nexus.ensighten.com *.google-analytics.com js-cdn.dynatrace.com assets.adobedtm.com googleads.g.doubleclick.net gateway.foresee.com dx.steelhousemedia.com *.kampyle.com *.medallia.com, frame-src 'self' *.twitter.com hcsc.demdex.net players.brightcove.net *.youtube.com resources.digital-cloud-west.medallia.com healthcareservicecorporation.sc.omtrdc.net *.kampyle.com *.medallia.com cdn.decibelinsight.net collection.decibelinsight.net, frame-ancestors 'self', worker-src 'self' blob:, upgrade-insecure-requests 3 frame-ancestors *.plaync.com *.ncsoft.com *.plaync.com.tw *.ncsoft.jp *.ncvgames.com *.game.daum.net *.daum.net 3 default-src 'self' *.crazyegg.com; connect-src *; font-src * data:; frame-src *; img-src * data: blob: https:; worker-src blob:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 3 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'report-sample' data: blob: https://analytics.google.com https://*.google-analytics.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://www.googleservices.com https://www.google.com https://www.google.co.uk https://www.gstatic.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://*.g.doubleclick.net https://googleads.g.doubleclick.net https://td.doubleclick.net https://players.brightcove.net https://assets.map.brightcove.com https://edge.api.brightcove.com https://metrics.brightcove.com https://manifest.prod.boltdns.net https://cf-images.us-east-1.prod.boltdns.net https://bcbolt446c5271-a.akamaihd.net https://vjs.zencdn.net https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.taboola.com https://psb.taboola.com https://trc.taboola.com https://trc-events.taboola.com https://secure.adnxs.com https://cm.everesttech.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://assets.adobedtm.com https://s2448.t.eloqua.com https://img.en25.com https://www.experian.com https://smetrics1.experian.com https://experian.go-vip.net https://dpm.demdex.net https://ecs.demdex.net https://app.leadberry.com https://ws.zoominfo.com https://pulse.clickguard.com https://io.clickguard.com https://j.6sc.co https://sc.lfeeder.com https://tr-rc.lfeeder.com https://s.ml-attr.com https://attr.ml-api.io https://stats.wp.com https://pixel.wp.com https://fonts.gstatic.com https://cdn.matomo.cloud; object-src 'none'; base-uri 'self'; manifest-src 'self'; media-src 'self'; worker-src blob:; frame-ancestors 'self'; 3 default-src * 'self' data:; script-src * 'unsafe-inline'; style-src * blob: 'unsafe-inline'; frame-ancestors 'self' app.contentstack.com 3 frame-ancestors 'self' https://www.youtube.com https://youtube.com; 3 frame-ancestors 'self' https://m.v12finance.com/ https://sapc.thewosgroup.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.g.doubleclick.net *.googleadservices.com *.iqm.com *.cookielaw.org *.onetrust.com *.vimeo.com tags.srv.stackadapt.com resources.forvis.com resources.forvismazars.us *.googletagmanager.com *.knowledgeowl.com *.wistia.com *.bugherd.com *.jquery.com *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.facebook.net *.youtube.com *.twitter.com *.marketo.net *.eloqua.com *.tableau.com *.jsdelivr.net *.flourish.studio acsbapp.com snap.licdn.com *.linkedin.com *.storylane.io js.monitor.azure.com bat.bing.com; style-src 'self' 'unsafe-inline' tags.srv.stackadapt.com resources.forvis.com resources.forvismazars.us *.knowledgeowl.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google.com *.twimg.com *.typekit.net *.fontawesome.com; font-src * data:; img-src * data:; media-src 'self' data: blob: *.wistia.com; frame-src 'self' resources.forvis.com resources.forvismazars.us *.libsyn.com *.bkd.com *.yumpu.com *.brightcove.net *.knowledgeowl.com *.twitter.com *.youtube.com *.vimeo.com vimeo.com *.soundcloud.com *.bugherd.com *.google.com *.wistia.com *.wistia.net *.facebook.com *.tableau.com *.googletagmanager.com flo.uri.sh *.cookielaw.org cdn.cookielaw.org *.onetrust.com snap.licdn.com *.linkedin.com *.doubleclick.net *.podbean.com *.storylane.io; child-src 'self' resources.forvis.com resources.forvismazars.us *.libsyn.com *.bkd.com *.yumpu.com *.brightcove.net *.knowledgeowl.com *.twitter.com *.youtube.com *.vimeo.com vimeo.com *.soundcloud.com *.bugherd.com *.google.com *.wistia.com *.wistia.net *.facebook.com *.tableau.com *.googletagmanager.com flo.uri.sh *.cookielaw.org cdn.cookielaw.org *.onetrust.com snap.licdn.com *.linkedin.com *.doubleclick.net *.podbean.com; connect-src 'self' *.google.com google.com public.flourish.studio *.googleadservices.com *.g.doubleclick.net *.cookielaw.org cdn.cookielaw.org *.onetrust.com tags.srv.stackadapt.com *.google-analytics.com *.google.com *.litix.io *.wistia.com *.bugsnag.com *.pusher.com ws-mt1.pusher.com *.bugherd.com *.googleapis.com *.mktoresp.com 932-bac-700.mktoutil.com acsbapp.com *.acsbapp.com snap.licdn.com *.linkedin.com *.in.applicationinsights.azure.com js.monitor.azure.com bat.bing.com bat.bing.net pagead2.googlesyndication.com; 3 default-src https: 'unsafe-inline' 'unsafe-eval' blob:; img-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: https://f86a65dca19a.edge.sdk.awswaf.com; connect-src https: wss:; font-src https: data:; 3 object-src 'self' blob:; base-uri https://*.cloudfront.net 'self'; report-uri https://cspappdirect.report-uri.com/r/d/csp/enforce; worker-src 'self' blob:; 3 default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss: https: dot.niiid.io jobs.b-ite.com cs-assets.b-ite.com; frame-ancestors 'self'; 3 script-src 'self' 'unsafe-eval' unpkg.com *.facebook.net *.googletagmanager.com *.acquia.com *.google-analytics.com *.newrelic.com *.nr-data.net *.yimg.com *.adform.net *.licdn.com *.azureedge.net *.adsrvr.org *.gstatic.com *.taboola.com *.adobedtm.com *.vimeo.com *.googleadservices.com *.visualwebsiteoptimizer.com https://cdnjs.cloudflare.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net maps.googleapis.com 'nonce-XAvGm0eZM6JjDGaz1skPVg' 'sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo=' 'sha256-rJWF1HTwzCkij/YjN5I/DlTS2OasS08kh3e2pM1Qj/Q=' 'sha256-xQbGZ2VRgYFIBPZn2GyIMrpvD1EZ9CHxEO7U/gwUvnM=' 'sha256-UL5iGLPIaIuci6xCCNMRZfZ/HFxYdnKuPELYWO6Eh/0=' 'sha256-YuT8PtTQSQVdoGr0bfv0HLis2eHoKlqMf8WDm3JOL3o='; script-src-attr 'self' 'unsafe-eval'; script-src-elem 'self' 'unsafe-eval' unpkg.com *.facebook.net *.googletagmanager.com *.acquia.com *.google-analytics.com *.newrelic.com *.nr-data.net *.yimg.com *.adform.net *.licdn.com *.azureedge.net *.adsrvr.org *.gstatic.com *.taboola.com *.adobedtm.com *.vimeo.com *.googleadservices.com *.visualwebsiteoptimizer.com https://cdnjs.cloudflare.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net maps.googleapis.com 'nonce-XAvGm0eZM6JjDGaz1skPVg' 'sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo=' 'sha256-rJWF1HTwzCkij/YjN5I/DlTS2OasS08kh3e2pM1Qj/Q=' 'sha256-xQbGZ2VRgYFIBPZn2GyIMrpvD1EZ9CHxEO7U/gwUvnM=' 'sha256-UL5iGLPIaIuci6xCCNMRZfZ/HFxYdnKuPELYWO6Eh/0=' 'sha256-YuT8PtTQSQVdoGr0bfv0HLis2eHoKlqMf8WDm3JOL3o='; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net *.googleapis.com; worker-src 'self' blob:; frame-ancestors 'self' *.wab.avoka-transact.com apply.westernalliancebancorp.com 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: ws: *.fastway.org *.aramex.co.nz *.aramex.com.au *.aspnetcdn.com *.bing.com *.bootstrapcdn.com *.vimeo.com *.shopifycdn.com *.shopify.com *.shopifysvc.com *.fontawesome.com *.clarity.ms *.cloudflare.com *.doubleclick.net *.facebook.com *.facebook.net *.fastway.co.nz *.fastway.co.za *.fastway.com.au *.fastway.org *.fastwayenquiries.com *.fastwaystore.co.za *.ggpht.com *.google-analytics.com *.google.com *.google.com.au *.googleadservices.com *.googleapis.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.jotfor.ms *.jotform.co *.jotform.com *.jotform.io *.licdn.com *.linkedin.com *.localiq.com *.myfastway.me *.openstreetmap.org *.reachlocalservices.com *.rlets.com *.simpli.fi *.sprinklr.com *.typekit.net *.unpkg.com *.wchat.app *.wp.com *.youtube.com *.ytimg.com *.zdassets.com fastway.org aramex.co.nz aramex.com.au aspnetcdn.com bing.com bootstrapcdn.com clarity.ms cloudflare.com doubleclick.net facebook.com facebook.net fastway.co.nz fastway.co.za fastway.com.au fastway.org fastwayenquiries.com fastwaystore.co.za ggpht.com google-analytics.com google.com google.com.au googleadservices.com googleapis.com googletagmanager.com googleusercontent.com gstatic.com jotfor.ms jotform.co jotform.com jotform.io licdn.com linkedin.com localiq.com myfastway.me openstreetmap.org reachlocalservices.com rlets.com simpli.fi sprinklr.com typekit.net unpkg.com wchat.app wp.com youtube.com ytimg.com zdassets.com www.fastwayfms.com; frame-ancestors 'self' https://myaramex.me https://*.myaramex.me https://myfastway.me https://*.myfastway.me https://aramexconnect.com.au https://*.aramexconnect.com.au https://aramexconnect.co.nz https://*.aramexconnect.co.nz https://myfastway.com.au https://*.myfastway.com.au https://myfastway.co.nz https://*.myfastway.co.nz https://myfastway.co.za https://*.myfastway.co.za https://aramex.com.au https://*.aramex.com.au https://aramex.co.nz https://*.aramex.co.nz https://fastway.co.za https://*.fastway.co.za https://sprinklr.com https://*.sprinklr.com; 3 frame-ancestors 'self' https://yobingo-statices.casinomodule.com/ https://www.yobingo.es/ https://www.yocasino.es/ https://www.enracha.es/ 3 upgrade-insecure-requests; default-src 'self' https://*.screeb.app; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.googletagmanager.com/ disqus.com *.disqus.com *.disquscdn.com https://js.hs-scripts.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com https://gist.github.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.hsforms.net https://forms.hsforms.com/ https://js.hs-analytics.net https://app.getbeamer.com/js/ https://realtime.getbeamer.com/ https://apis.google.com https://*.screeb.app nominatim.openstreetmap.org http://cdn.matomo.cloud/opendatasoft.matomo.cloud/matomo.js http://cdn.mxpnl.com/ ; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://ton.twimg.com https://github.githubassets.com/ *.disquscdn.com https://fonts.googleapis.com https://app.getbeamer.com/styles/ ; img-src * data: blob:; font-src * data:; media-src 'self' https://eu.ftp.huwise.com/odsacademy/ https://eu.ftp.opendatasoft.com/odsacademy/ ; connect-src 'self' *.huwise.com *.opendatasoft.com *.disqus.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com *.algolia.net api.jawg.io tile.jawg.io https://graph.microsoft.com/ https://backend.getbeamer.com/ wss://realtime.getbeamer.com https://static.getbeamer.com/favico.js https://stats.g.doubleclick.net https://t.hs-growth-metrics.com https://*.screeb.app wss://*.screeb.app https://opendatasoft.matomo.cloud/matomo.php https://api-js.mixpanel.com/ ; frame-src 'self' https://platform.twitter.com https://syndication.twitter.com https://www.google.com/recaptcha/ https://accounts.google.com https://docs.google.com https://*.screeb.app *.huwise.com *.opendatasoft.com disqus.com https://app.hubspot.com https://forms.hsforms.com https://app.getbeamer.com https://opendatasoft-trial.com data.opendatasoft.com/ www.youtube.com/embed/ www.youtube-nocookie.com/embed/ www.dailymotion.com/embed/video/ player.vimeo.com/video/ www.veed.io/embed/ app.powerbi.com/ app.powerbigov.us/ app.high.powerbigov.us/ app.mil.powerbigov.us/ public.tableau.com/views/ arcgis.com/apps/View/ docs.google.com/forms/ forms.office.com/ www.google.com/maps/d/embed www.google.com/maps/embed www.arcgis.com/home/webscene/viewer.html www.arcgis.com/home/webmap/viewer.html www.arcgis.com/apps/dashboards/ www.arcgis.com/apps/Embed/ app.streamfizz.live/embed/ player.streamfizz.live/embed/ www.facebook.com/plugins/page.php experience.arcgis.com/experience/ www.loom.com/embed/; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.userway.org https://iframely.shorthand.com https://cdn.cookielaw.org https://haymarketimpact.shorthandstories.com https://player.vimeo.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://stackpath.bootstrapcdn.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://use.typekit.com https://*.typekit.net; img-src 'self' data: https:; frame-src https://www.youtube.com https://player.vimeo.com https://iframely.shorthand.com; media-src 'self' https://haymarketimpact.shorthandstories.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; 3 default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; connect-src 'self' *.amazonaws.com *.amazoncognito.com api.pwnedpasswords.com; frame-ancestors 'self' sf360.com.au; frame-src 'self' https://www.google.com/recaptcha/ 3 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; 3 default-src 'self' *.sleeknote.com;script-src 'self' *.zi-scripts.com vimeo.com snap.licdn.com www.google.com www.gstatic.com googleads.g.doubleclick.net tools.euroland.com region1.analytics.google.com script.hotjar.com www.vimeo.com *.sleeknote.com www.googletagmanager.com googletagmanager.com *.googletagmanager.com tagmanager.google.com www.google-analytics.com static.hotjar.com info.marel.com www.youtube.com *.youtube-nocookie.com snap.licdn.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com js.monitor.azure.com widget.datablocks.se dash.cookiehub.com *.activation-studio.com cookiehub.net cdn.cookiehub.eu connect.facebook.net hcaptcha.com *.hcaptcha.com 'unsafe-eval' 'unsafe-inline';style-src 'self' data: use.typekit.net p.typekit.net www.youtube.com *.youtube-nocookie.com fonts.googleapis.com googletagmanager.com tagmanager.google.com *.activation-studio.com cookiehub.net cdn.cookiehub.eu dash.cookiehub.com hcaptcha.com *.hcaptcha.com 'unsafe-inline';connect-src 'self' data: wss://ws.hotjar.com *.hotjar.io *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat cdnjs.cloudflare.com fonts.googleapis.com *.sleeknote.com cdn.linkedin.oribi.io region1.google-analytics.com region1.analytics.google.com www.google-analytics.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com analytics.google.com stats.g.doubleclick.net *.googlesyndication.com www.youtube.com *.youtube-nocookie.com snap.licdn.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com westeurope-5.in.applicationinsights.azure.com widget.datablocks.se vc.hotjar.io hub.mfn.se *.activation-studio.com cookiehub.net ds.cookiehub.net cdn.cookiehub.eu consent.cookiehub.net region-eu.cookiehub.net consent-eu.cookiehub.net js.zi-scripts.com *.zoominfo.com dash.cookiehub.com hcaptcha.com *.hcaptcha.com;font-src 'self' data: use.typekit.net fonts.gstatic.com *.sleeknote.com www.youtube.com *.youtube-nocookie.com snap.licdn.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com *.activation-studio.com;img-src 'self' data: blob: *.sleeknote.com www.googletagmanager.com *.google-analytics.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com ssl.gstatic.com www.gstatic.com px.ads.linkedin.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat i.vimeocdn.com dashboard.umbraco.com www.google-analytics.com www.youtube.com *.youtube-nocookie.com snap.licdn.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com *.activation-studio.com *.zoominfo.com;frame-ancestors 'self';frame-src 'self' www.slideshare.net www.googletagmanager.com td.doubleclick.net www.google.com www.google-analytics.com tools.eurolandir.com info.marel.com player.vimeo.com vimeo.com www.youtube.com *.youtube-nocookie.com snap.licdn.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com *.sleeknote.com onsite-subscribe.getdrip.com marel.activation-studio.com hcaptcha.com *.hcaptcha.com 3 default-src * data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; 3 default-src data: blob: 'unsafe-eval' 'unsafe-inline' *; 3 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline' 3 script-src 'self' http: https: https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' blob: https: 'unsafe-inline'; img-src data: http: https:; object-src 'none'; base-uri 'none'; child-src 'self'; font-src 'self' fonts.gstatic.com data:; frame-src assets.braintreegateway.com *.google.com *.youtube.com *.youtu.be *.vimeo.com www.googletagmanager.com consentcdn.cookiebot.com https://bid.g.doubleclick.net https://td.doubleclick.net romet.user.com 3 default-src 'self'; script-src * 'self' 'unsafe-inline' 'unsafe-eval'; object-src *; style-src * 'self' 'unsafe-inline'; img-src * 'self' data: https:;; media-src *; frame-src *; frame-ancestors 'self'; child-src * blob:; font-src * 'self' data: https:;; connect-src *; report-uri /log-report-uri/enforce 3 frame-ancestors 'self'; report-uri /report-csp-violation; upgrade-insecure-requests 3 default-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/tom-select/ https://*.googleapis.com/ https://fonts.gstatic.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cibtvisas.com/ https://acsbapp.com/ https://*.googleapis.com/ https://www.gstatic.com/ https://bat.bing.com/ https://*.quantummetric.com/ https://*.osano.com/ https://*.doubleclick.net/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com https://*.google.co.uk https://js.stripe.com/ https://cdn.logrocket.io https://cdn.lr-ingest.io https://cdn.lr-in.com https://cdn.lr-in-prod.com https://cdn.lr-ingest.com https://cdn.ingest-lr.com https://cdn.lr-intake.com https://cdn.intake-lr.com https://cdn.logr-ingest.com https://cdn.lrkt-in.com https://cdn.lgrckt-in.com/ https://cdn.jsdelivr.net/npm/tom-select/ https://app.squawkvoice.ai/ https://*.clarity.ms blob:; frame-src 'self' https://*.osano.com/ https://www.google.com https://www.googletagmanager.com https://js.stripe.com https://www.paypal.com https://app.squawkvoice.ai/; frame-ancestors 'self'; form-action *; font-src 'self' data: https://fonts.gstatic.com/ https://*.acsbapp.com; img-src 'self' data: blob: https://www.googletagmanager.com https://*.acsbapp.com https://www.facebook.com https://*.bing.com https://*.google.com https://*.google.co.uk https://*.google.co.in https://*.google.rs https://*.doubleclick.net https://bat.bing.com https://*.google-analytics.com https://*.cibt.com/ https://*.cibtvisas.com https://cibtvisas.com; connect-src 'self' data: https://*.google.com https://*.google.co.in https://*.google.rs https://www.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com https://*.bing.com https://*.acsbapp.com https://acsbapp.com https://*.cibt.com https://*.api.osano.com/ https://google.com https://google.co.uk https://google.co.in https://google.rs https://*.cibtvisas.com https://*.osano.com https://*.logrocket.io https://*.lr-ingest.io https://*.logrocket.com https://*.lr-in.com https://*.lr-in-prod.com https://*.lr-ingest.com https://*.ingest-lr.com https://*.lr-intake.com https://*.intake-lr.com https://*.logr-ingest.com https://*.lrkt-in.com https://*.lgrckt-in.com https://*.logr-in.com https://*.newlandchase.com https://cibt.my.salesforce-sites.com https://app.resonaterecordings.com https://*.amazonaws.com https://cdn.jsdelivr.net/npm/tom-select/ https://app.squawkvoice.ai/ https://*.clarity.ms; 3 frame-ancestors 'self' https://aderantonline.force.com; 3 frame-ancestors 'self' *.skiv.com 3 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: mediastream: ws: wss:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline' data: blob:; img-src * data: blob: filesystem:; font-src * data: blob:; connect-src * data: blob: ws: wss:; frame-src * data: blob:; media-src * data: blob:; object-src * data: blob:; worker-src * data: blob:; manifest-src * data: blob:; frame-ancestors *; base-uri *; form-action * 3 frame-ancestors 'self'; script-src 'self' cdn.rudderlabs.com js.stripe.com/v3 3 default-src 'self' repay.com csp-repay.pantheonsite.io dev-repay.pantheonsite.io live-repay.pantheonsite.io; script-src 'self' 'nonce-qfnECG4tjqIQ9Gl6hv0eiQ==' 'unsafe-eval' blob: js.zi-scripts.com *.hubspot.com *.gstatic.com googleads.g.doubleclick.net https://www.googletagmanager.com/gtag/js https://www.google.com/recaptcha/enterprise.js https://www.googletagmanager.com/gtm.js *.clarity.ms https://js-agent.newrelic.com *.mandatlyonline.com *.fontawesome.com https://cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.js cdn-cookieyes.com *.cdn-cookieyes.com dev-repay.pantheonsite.io live-repay.pantheonsite.io repay.com *.hotjar.com *.hs-scripts.com *.hsleadflows.net *.hs-banner.com *.hsadspixel.net *.hubspotfeedback.com *.usemessages.com *.hs-analytics.net *.hscollectedforms.net *.hsforms.net *.hsforms.com *.incontact.com *.adsrvr.org *.linkedin.com *.licdn.com; style-src 'self' 'unsafe-inline' *.fontawesome.com cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.css https://cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css cdnjs.cloudflare.com fonts.googleapis.com dev-repay.pantheonsite.io live-repay.pantheonsite.io; img-src 'self' data: https: c212.net repay.com *.googleadservices.com *.googleads.g.doubleclick.net *.googlesyndication.com *.mandatlyonline.net *.mandatlyonline.com tsgpayments.com rt.prnewswire.com www.googletagmanager.com i.vimeocdn.com *.google.com *.bing.com *.clarity.ms *.gravatar.com *.cookieyes.com cdn-cookieyes.com *.cdn-cookieyes.com *.repay.com *.businesswire.com dev-repay.pantheonsite.io live-repay.pantheonsite.io *.hotjar.com *.hubspot.com *.hubspot.net *.hsforms.com *.linkedin.com *.licdn.com; font-src 'self' data: *.fontawesome.com fonts.googleapis.com fonts.gstatic.com dev-repay.pantheonsite.io live-repay.pantheonsite.io *.hotjar.com repay.com; connect-src 'self' *.zoominfo.com *.zi-scripts.com *.hscollectedforms.net *.googleadservices.com *.googleads.g.doubleclick.net *.googlesyndication.com *.mandatlyonline.net *.mandatlyonline.com vimeo.com *.google.com *.contentsquare.net *.fontawesome.com bam.nr-data.net *.adsrvr.org *.cdn-cookieyes.com *.clarity.ms *.cookieyes.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.hubspot.com *.incontact.com *.licdn.com *.linkedin.com api.hubapi.com cdn-cookieyes.com dev-repay.pantheonsite.io live-repay.pantheonsite.io forms.hsforms.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com hubspot-forms-static-embed.s3.amazonaws.com wss://*.hotjar.com wss://*.niceincontact.com; media-src 'self'; object-src 'none'; child-src app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; frame-src 'self' *.google.com businessradiox.com *.googletagmanager.com *.incontact.com *.doubleclick.net vars.hotjar.com *.youtube.com *.vimeo.com *.hubspot.com *.repay.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' javascript: *.hsforms.com *.hubspot.com; frame-ancestors 'self' www.google.com *.repay.com; report-uri /wp-json/repay-csp/v1/report; report-to csp-endpoint; script-src-attr 'unsafe-inline' 3 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self' https://*.paymentsos.com; form-action 'self' https://*.paymentsos.com; object-src 'none'; 3 base-uri 'self'; style-src 'self' 'unsafe-inline' *.cognitoforms.com *.dignityhealth.org *.foresee.com *.hellohumankindness.org *.marketo.com cdn.commonspirit.org cdn.cookielaw.org cookie-cdn.cookiepro.com fonts.googleapis.com gateway.foresee.com geolocation.onetrust.com happy-hill-0c4c4691e.azurestaticapps.net p.typekit.net privacyportal.onetrust.com translate.googleapis.com use.typekit.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.dignityhealth.org *.evaliahealth.com *.everestjs.net *.everesttech.net *.google.com/pagead/ *.google.com/recaptcha/ *.googleadservices.com *.gstatic.com/recaptcha/ *.hellohumankindness.org *.invoca.net *.jotform.io *.marketo.com *.marketo.net *.recaptcha.net/recaptcha/ *.youtube-nocookie.com *.youtube.com adobedc.demdex.net ajax.googleapis.com ajax.microsoft.com assets.adobedtm.com assets.adobedtm.com bam.nr-data.net cdn.commonspirit.org cdn.cookielaw.org cdn1.commonspirit.org cdnjs.cloudflare.com code.jquery.com commonspirit.experiencecloud.adobe.com cookie-cdn.cookiepro.com experience.adobe.com gateway.foresee.com geolocation.onetrust.com googleads.g.doubleclick.net happy-hill-0c4c4691e.azurestaticapps.net js-agent.newrelic.com login.commonspirit.org maps.googleapis.com platform.twitter.com/js/ platform.twitter.com/widgets.js privacyportal.onetrust.com resources.unlockhealthnow.com/embed-script/embed.js services.cognitoforms.com static.cognitoforms.com tpc.googlesyndication.com/sodar/ twemoji.maxcdn.com unpkg.com use.typekit.net www.cognitoforms.com www.googletagmanager.com; frame-src 'self' *.jotform.io *.marketo.com *.vimeo.com *.youtube-nocookie.com *.youtube.com commonspirit.demdex.net docasap.com www.cognitoforms.com www.google.com www.recaptcha.net; img-src 'self' *.dignityhealth.org *.everesttech.net *.foresee.com *.foresee.com *.google.com/pagead/ *.googleadservices.com *.googleadservices.com/pagead/ *.googleapis.com *.googleusercontent.com *.gstatic.com *.hellohumankindness.org *.marketo.com *.youtube.com api.clearsensecloud.com apps.vmfh.org assets.gyant.com bam.nr-data.net cdn.cookielaw.org cdn.jotfor.ms d1ffafozi03i4l.cloudfront.net data: developers.google.com dpm.demdex.net googleads.g.doubleclick.net happy-hill-0c4c4691e.azurestaticapps.net i.ytimg.com login.commonspirit.org rtd-tm.everesttech.net s3.amazonaws.com static.cognitoforms.com syndication.twitter.com twemoji.maxcdn.com use.typekit.net www.google.com www.googletagmanager.com; connect-src 'self' *.ase-usw1-shared-prd.p.azurewebsites.net *.ase-usw1-shared-prd.p.azurewebsites.net *.dignityhealth.org *.everesttech.net *.foresee.com *.google.com/pagead/ *.google.com/recaptcha/ *.googleadservices.com *.hellohumankindness.org *.mktoresp.com *.mktoutil.com *.omtrdc.net adobedc.demdex.net ajax.microsoft.com analytics.foresee.com analytics.google.com api.ipify.org apiprod.commonspirit.org assets.adobedtm.com bam.nr-data.net brain.foresee.com cdn.commonspirit.org cdn.cookielaw.org commonspirit.sc.omtrdc.net commonspirit.tt.omtrdc.net dc.services.visualstudio.com dpm.demdex.net fid.agkn.com fonts.googleapis.com happy-hill-0c4c4691e.azurestaticapps.net identity-api.commonspirit.org identity-func.commonspirit.org lasteventf-tm.everesttech.net login.commonspirit.org maps.googleapis.com readaloud.googleapis.com rxnav.nlm.nih.gov survey.foreseeresults.com telemetry.commonspirit.org translate.googleapis.com www.cognitoforms.com www.googletagmanager.com; default-src 'self' *.dignityhealth.org account.commonspirit.org cdn1.commonspirit.org commonspirit.demdex.net commonspirit.tt.omtrdc.net dc.services.visualstudio.com happy-hill-0c4c4691e.azurestaticapps.net identity-func.commonspirit.org login.commonspirit.org; font-src 'self' *.dignityhealth.org *.gstatic.com cdn.jorfor.ms cdn1.commonspirit.org data: gateway.foresee.com s3.amazonaws.com/assets.gyant.com/ use.typekit.net www.commonspirit.org www.slant.co; 3 frame-ancestors 'self' https://pages.sitecorecloud.io connect.aberdeeninvestments.com open.spotify.com connect-test.aberdeeninvestments.com connect-preprod.aberdeeninvestments.com; 3 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'none' 3 default-src 'self' profiauto.pl profiauto.de profiauto.co.at; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.profiauto.pl profiauto.pl profiauto.de profiauto.co.at *.cookie-script.com ssl.silnet.pl www.googletagmanager.com www.google-analytics.com www.googleadservices.com *.doubleclick.net *.google.com *.gstatic.com *.facebook.com *.facebook.net *.onesignal.com onesignal.com *.googleapis.com cdnjs.cloudflare.com cdn.ampproject.org cdn.datatables.net; style-src 'self' 'unsafe-inline' profiauto.pl profiauto.de profiauto.co.at fonts.googleapis.com ssl.silnet.pl onesignal.com cdnjs.cloudflare.com *.tagmanager.google.com tagmanager.google.com motoflota.pl cdn.datatables.net *.bootstrapcdn.com; img-src 'self' data: *.ggpht.com *.profiauto.pl profiauto.pl profiauto.de profiauto.co.at silnet.pl ssl.silnet.pl cdn.datatables.net *.doubleclick.net www.google-analytics.com *.google.com *.google.pl *.facebook.com *.gstatic.com *.googleapis.com cdnjs.cloudflare.com *.openstreetmap.org *.gravatar.com motoflota.pl; media-src 'self' profiauto.pl profiauto.de profiauto.co.at; font-src 'self' profiauto.pl profiauto.de profiauto.co.at fonts.gstatic.com *.bootstrapcdn.com; frame-src 'self' profiauto.pl profiauto.de profiauto.co.at *.google.com google.com *.facebook.com onesignal.com *.youtube.com linkedin.com *.linkedin.com kalkulator.raty.aliorbank.pl; connect-src 'self' *.googleapis.com googleapis.com *.profiauto.pl profiauto.pl profiauto.de profiauto.co.at onesignal.com *.google-analytics.com *.doubleclick.net *.google.com *.google.pl *.facebook.com 3 default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; form-action 'self' https://iface.core-networks.de; frame-ancestors 'none'; block-all-mixed-content 3 connect-src 'self' https://legal.dev.myptv.com https://api.privacy-center.org https://region1.google-analytics.com https://px.ads.linkedin.com https://legal.staging.myptv.com https://legal.myptv.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://api.myptv.com https://login.myptv.com https://login.staging.myptv.com https://gateway.myptv.com https://analytics.google.com https://collector.leadinfo.net https://api.leadinfo.com https://www.google.de https://www.google.it https://www.google.fr https://www.google.at https://www.google.nl https://www.google.es https://www.google.com https://www.google.com.au https://www.google.ru https://bat.bing.com https://*.omappapi.com https://forms-eu1.hsforms.com https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https://o.clarity.ms https://api.allbound.eu https://cdn.socket.io https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://curie-static.myptv.com https://fonts.gstatic.com https://fonts.chatbotbuilder.net; img-src 'self' blob: data: https://www.ptvgroup.com https://px.ads.linkedin.com https://s1398155824.t.eloqua.com https://blog.ptvlogistics.com https://gateway.myptv.com https://www.google.de https://www.google.it https://www.google.fr https://www.google.at https://www.google.nl https://www.google.es https://www.google.com https://www.google.com.au https://www.google.ru https://www.google.co.in https://www.google.sk https://www.google.lv https://widgets.kununu.com https://assets.kununu.com https://trck.ptvlogistics.com https://*.omappapi.com https://forms-eu1.hsforms.com https://ptvgroup.allbound.eu https://ptvlogistics.allbound.eu https://dlvkyia8i4zmz.cloudfront.net https://www.google-analytics.com https://www.googletagmanager.com; manifest-src 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com https://sdk.privacy-center.org https://*.omappapi.com https://widget.manychat.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://sdk.privacy-center.org https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://snap.licdn.com https://img03.en25.com https://googleads.g.doubleclick.net https://cdn.leadinfo.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://bat.bing.com https://cdn.jsdelivr.net https://get.smart-data-systems.com https://img.en25.com https://*.omappapi.com https://widget.manychat.com https://js-eu1.hsforms.net https://www.clarity.ms https://www.youtube.com https://ab-eu-prod-partner-locator.s3-eu-central-1.amazonaws.com https://herrmann24.chatbotbuilder.net https://cdn.socket.io cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://*.omappapi.com https://fonts.googleapis.com https://fonts.chatbotbuilder.net https://herrmann24.chatbotbuilder.net cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; worker-src 'self'; frame-ancestors * 3 frame-ancestors mechannext.nl mechanisatie.bmb-bruggeman.nl groenoordbv.nl www.tractors-and-machinery.com lmbdewith.nl csb-mechanisatie.nl www.vidbag.nl www.agrideals.nl unicomoost.nl favandervegt.nl geert-jandekok.com berhuynen.nl www.lmbgeertsema.nl www.kempmechanisatie.nl www.uildriksmechanisatie.nl www.farmstore.nl abekservice.nl vandeglindmechanisatie.nl westerinklandbouwmachines.nl www.peijnenburgmachines.nl www.robertusmechanisatie.nl lmbdebruin.nl marijsse.eu www.vandersluisbv.nl lmbdebruijn.nl www.roeleveld-mech.nl hbeekhof.nl pkriesels.nl www.kooijkervandieren.nl debruijn-zundert.nl www.lmbvermeulen.nl lmbvermeulen.nl www.koolslmb.nl www.lmbvandermeij.nl vandalmc.nl perdaems.com vismechanisatie.nl www.vismechanisatie.nl meekes-groenlo.nl dmservice.nl www.vanderwerfbv.nl www.hofstede-machinery.com www.roeszevenaar.nl dekruyf.nl vandermaar.eu www.boomsma-mechanisatie.nl www.wijha.nl frens.nl www.demminkmechanisatie.nl www.vantigchelt.be www.lthnijmeijer.nl www.dijkstramechanisatie.com www.boma-lmb.nl martienvisser.nl www.bomech.nl www.schoutenmechanisatie.nl www.gebrheemskerk.nl www.vosmechanisatie.nl www.lmbstemerdink.nl www.derooy-tractors.nl verburgwaarder.nl www.vanderweerdkampen.nl www.heuvelmansbv.nl www.markdebresser.nl dekruyf.nl sarinkelfrink.nl www.lmbvdlaan.nl hofmechanisatie.com www.hoekengamechanisatie.nl www.rutgersmechanisatie.nl www.lmbvorden.nl exalto-renswoude.nl www.bijkernijeveen.nl www.landbouwmechanisatiedenandel.nl www.bolexlexmond.nl mcv.nu mc-p.nl www.akkermanmechanisatie.nl www.joldersma.com veenstramechanisatie.nl wagricom.com lmbprins.nl www.wopamechanisatie.nl www.kortiermechanisatie.nl ezendamborne.nl www.evenhuis.nl kuperus.frl wasse.nl www.wasse.nl smb-genderen.nl agrotechniekoosterink.nl www.bemumarknesse.nl meerkerktraktoren.nl www.lmbdenotter.nl www.bmb-bruggeman.nl www.lmbwielink.nl www.rogo.nu www.weeversbv.nl www.groenewoud-tractoren.nl www.mechatec.nl www.weeversbv.nl www.betuwemechanisatie.nl suichies.nl www.rovadi.nl www.flierman-wilp.nl vdiauctions.com www.dijkstramechanisatie.nl www.grsmachines.nl www.mechanisatiehaarlemmermeer.nl www.lmbguusgiesen.nl www.hamoen-tractoren.nl www.lmb-oosterhof.nl vrielink-machinehandel.nl lmbvanlochem.nl blokmechanisatie.nl vanrossenberg.com lmb-deweertbakel.nl www.denekkerenelzinga.nl www.hofstede-machinery.com www.vdbergmastenbroek.nl www.lmbdenotter.nl hanssenagro.nl ebbersmechanisatie.nl zeelandtrac.nl veenma.nl www.vofbouwmeester.nl www.stolkmechanisatie.nl brienen-mechanisatie.nl www.peeters-vortum.nl www.firmatenberge.nl www.niensbv.nl kamminga-haarlo.nl www.lmbdoornbos.nl www.dikkemamachines.nl lmbdenengelsman.nl dijk-ureterp.nl schop-mechanisatie.nl vandenbergmechanisatie.nl rovem.com tuijtelaars.nl hollandsnoordkop.com www.lmbverkuijlen.com www.lmbschouten.nl www.agriservicegerarddebruijn.nl www.agroserviceoosterhof.nl peetersgroup.com vankalsbeek-gaast.nl www.vankalsbeek-gaast.nl peetersgroup.com www.bezooijen-schreuders.nl www.kleinnibbelink.nl www.magielselmb.nl toonsmink.nl aldenzeelmb.nl www.lmbhuurnink.nl veenstramechanisatie.nl berkerslandbouwmachines.nl ko-bo.nl oudealinktractoren.nl www.msholdenburger.nl www.seehoo.nl vd-riet.nl www.mhtractoren.nl www.evenboer.nl brakagro.nl www.vandersluis.nl www.bartagromechanisatie.nl www.goversmechanisatie.nl smederijhoekstra.nl rosiergreidanus.nl denboeragri.nl www.schouten.ws www.eissestechniek.nl lugtenberg.nl www.franspiek.nl www.lmbmegens.nl www.valkering-used-machines.com www.lmbw.nl smitenalles.nl www.smitenalles.nl www.agromachineryholland.com www.vlaming-groep.nl www.texelsunmechanisatie.nl www.kubota-gelderland.nl www.mechanisatiebedrijfhknoll.nl m.hoekengamechanisatie.nl everaardtechniek.nl postel.nl www.lesscher-lmb.nl www.bertverhoef.nl www.pater-deklomp.nl heijmansagroservice.nl www.vanderwerfbv.nl combiwestmechanisatie.nl www.holaras.com www.markdebresser.nl www.arjanvanlierop.nl www.rademakermachines.nl stefanruizmechanisatie.nl www.next-machinery.com multimachinery.nl kraakman.com basagriservice.eu ho-agrab.nl frakoolmb.nl www.haank.nl www.dehaaragri.nl www.agrotechniekflevoland.nl vanderveenlmb.frl www.thijskwakkenbos.nl www.hofstede-machinery.com simulator.tractors-and-machinery.nl www.henkslager.nl henkslager.nl damhuis-tractoren.nl www.damhuis-tractoren.nl lmbvandermeij.nl www.lmbvandermeij.nl giantknikladernoord.nl www.giantknikladernoord.nl www.abekservice.nl abekservice.nl www.schop-mechanisatie.nl schop-mechanisatie.nl agriservicebennovehof.nl www.agriservicebennovehof.nl grooten-euregiotrac.nl www.grooten-euregiotrac.nl kramerstart.nl www.kramerstart.nl versluismachinery.nl www.versluismachinery.nl langeslagtt.nl www.langeslagtt.nl nieuw.schop-mechanisatie.nl langeslagttnl.wordpress.com jagerlmb.nl www.jagerlmb.nl heymsmechanisatie.nl www.heymsmechanisatie.nl www.zetor.nl zetor.nl zetrac.nl www.zetrac.nl beilen.kampsdewild.nl kampsdewild.nl www.kampsdewild.nl lemele.kampsdewild.nl broekland.kampsdewild.nl www.bandenservicereusel.nl; 3 frame-ancestors 'none'; base-uri 'none'; 3 frame-ancestors 'self' https://builder.io; 3 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss: 3 default-src 'self'; script-src 'self' 'nonce-2190c92d3ed4033be2de' hubspot-forms-static-embed.s3.amazonaws.com *.vimeo.com api.usercentrics.eu *.youtube.com *.hsforms.net *.hsforms.com *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hsleadflows.net *.google-analytics.com *.googletagmanager.com *.analytics.google.com www.google.com www.gstatic.com www2.123insight.com pages.123insight.com 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; style-src 'self' 'unsafe-inline' hubspot-forms-static-embed.s3.amazonaws.com *.vimeo.com api.usercentrics.eu *.youtube.com *.hsforms.net *.hsforms.com *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hsleadflows.net *.google-analytics.com *.googletagmanager.com *.analytics.google.com www.google.com www.gstatic.com www2.123insight.com pages.123insight.com a.omappapi.com fonts.googleapis.com; img-src * blob: data:; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; connect-src *; frame-src *; object-src 'none'; base-uri 'self'; frame-ancestors cms.forterro.com; block-all-mixed-content; upgrade-insecure-requests; media-src https://cms.forterro.com; 3 upgrade-insecure-requests 3 frame-ancestors 'self' https://questionpoint.org; 3 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: 'unsafe-inline'; 3 img-src * data:; 3 default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-src 'none' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'self'; frame-src https://oauth.telegram.org; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/v1/csp-report 3 object-src 'self' data: 3 frame-ancestors 'self' https://*.pt-x.com http://localhost:9999 https://*.emandates.co.uk https://*.paymode.com https://*.saas-n.com https://*.saas-p.com 3 default-src * 'self' data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 3 frame-ancestors 'self' frag-einen-anwalt.de *.frag-einen-anwalt.de 123recht.de *.123recht.de wohnungsboerse.net *.wohnungsboerse.net trauer.de *.trauer.de briefeguru.de *.briefeguru.de pflege-durch-angehoerige.de *.pflege-durch-angehoerige.de immobilienscout24.de *.immobilienscout24.de berlin.de *.berlin.de merkur-online.de *.merkur-online.de *.cdn.ampproject.org *.google.de *.google.com merkur-online.de *.merkur-online.de immoverkauf24.de *.immoverkauf24.de; report-uri /include/cspreport.asp 3 upgrade-insecure-requests; frame-ancestors 'self' http://localhost https://localhost https://aemstage1.assaabloyservices.com https://aemdev.hesinnovations.com https://assaconnect.azurewebsites.net https://assaconnect-qa.azurewebsites.net https://assaconnect-staging.azurewebsites.net https://connect.assaabloy.com https://edc.adamsrite.com https://egress-calculator-qa.azurewebsites.net https://egresscalc.assaabloy.com https://egress-calculator-prod.azurewebsites.net https://eac-dev.aa-bts.com https://eac-qa.aa-bts.com https://eacconfig.assaabloy.com; default-src * data: 'self' 'unsafe-eval' 'unsafe-inline' blob: https: http:; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https: http:; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' blob: https: http:; worker-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https: http:; child-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https: http:; base-uri 'self'; 3 frame-ancestors 'self' shopmetrics.com *.shopmetrics.com gigspot.com *.gigspot.com *.velocity.online; object-src 'self'; 3 default-src 'self'; img-src 'self' data:; 3 default-src https: data: 'unsafe-inline' blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.gstatic.com https://*.googleusercontent.com https://*.googlesyndication.com https://js-agent.newrelic.com https://*.nr-data.net https://connect.facebook.com https://connect.facebook.net https://bat.bing.com https://js.stripe.com https://api.mapbox.com https://*.sentry-cdn.com https://o4507096105549824.ingest.de.sentry.io https://cdn.jsdelivr.net/npm/chart.js@4/ https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://*.crisp.chat; img-src 'self' https://*.google.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.gstatic.com https://*.googleusercontent.com https://*.googlesyndication.com https://*.babysits.com https://*.babysits.net https://bat.bing.com https://www.facebook.com https://www.facebook.net https://chart.googleapis.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://*.crisp.chat data: blob: ; connect-src 'self' https://*.google.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.gstatic.com https://*.googleusercontent.com https://*.googlesyndication.com https://*.babysits.com https://*.staging.babysits.net https://*.babysits.com.development.babysits.net https://www.facebook.com https://api.stripe.com https://*.nr-data.net https://o4507096105549824.ingest.de.sentry.io https://cdn.liveness.rekognition.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com wss://streaming-rekognition.eu-west-1.amazonaws.com/start-face-liveness-session-websocket https://unpkg.com/@rive-app/ https://cdn.jsdelivr.net/npm/@rive-app/ https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://*.crisp.chat wss://*.crisp.chat; frame-src 'self' bytedance: sslocal: https://*.google.com https://td.doubleclick.net https://*.googletagmanager.com https://bid.g.doubleclick.net https://www.facebook.com https://js.stripe.com https://hooks.stripe.com https://www.youtube-nocookie.com https://*.crisp.chat; worker-src blob: 'self'; child-src blob: ; font-src https://cdn.babysits.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://client.crisp.chat; frame-ancestors 'self'; object-src 'none'; base-uri 'none'; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://client.crisp.chat; 3 default-src https: http: blob: 'unsafe-inline' moz-extension: mediastream: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' cspv2.1 ; script-src https: http: blob: 'unsafe-inline' 'unsafe-eval' ; connect-src https: http: blob: 'unsafe-inline' data: ws: wss: ; frame-src https: http: blob: 'unsafe-inline' data: ; style-src https: http: blob: 'unsafe-inline' data: ; font-src https: http: blob: 'unsafe-inline' data: ; img-src https: http: blob: 'unsafe-inline' data: ; frame-ancestors https: http: blob: data: ; 3 frame-ancestors 'self' https://portal.uskinned.net 3 frame-ancestors 'self' *.livguard.com *.livguardsolar.com solculator.livguardsolar.com partner.mylivserv.com 3 object-src 'none'; script-src * 'unsafe-eval' 'unsafe-inline' blob: data:; base-uri 'self' 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' ; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-cookieyes.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://js-eu1.hsforms.net https://*.hsforms.net https://*.hsforms.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://zisson.com https://www.zisson.com data: https://www.google.com https://www.google.fi https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn-cookieyes.com https://*.hsforms.net https://*.hsforms.net https://*.hsforms.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://dc.services.visualstudio.com https://log.cookieyes.com https://cdn-cookieyes.com https://www.google.com https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hubapi.com; frame-src 'self' https://form.socialboards.com https://faq.socialboards.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com; worker-src 'self' blob:; 3 default-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; img-src * data: blob:; font-src * data:; frame-ancestors *; 3 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: http:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: http: blob:; style-src 'self' data: 'unsafe-inline' https: http:; img-src 'self' data: https: http: blob:; font-src 'self' data: https: http: https://fonts.gstatic.com; connect-src 'self' https: http: wss: ws: ws://127.0.0.1:9834 ws://localhost:9834 wss://onlyoffice.coquan.vn blob:; media-src 'self' data: https: http: blob:; object-src 'self' https: http:; child-src 'self' https: http: data: blob:; form-action 'self' https: http:; frame-ancestors 'self' https: http:; 3 connect-src 'self' *.luigisbox.com *.luigisbox.tech *.google.com *.google.cz *.google.sk *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.googlesyndication.com skoda-dily-db3 *.doubleclick.net *.mail-komplet.cz *.boldem.cz *.groovehq.com *.europa.eu *.deepl.com *.jquery.com *.heureka.cz *.heureka.sk *.facebook.net *.jquery.com 3 frame-ancestors https://*.global2000.at https://*.acolono.dev https://*.acolono.net https://*.wwf.at 3 child-src 'self' blob: *.somfy.fr *.bambuser.com lcx-widgets-eu.bambuser.com gum.criteo.com analytics.tiktok.com *.pinterest.com tr.snapchat.com sc-static.net static.ads-twitter.com https://*.tagcommander.com *.tagcommander.com optimize.google.com gateway.euronext.com forms.logiforms.com https://*.iadvize.com *.iadvize.com *.trustedshops.com aax-eu.amazon-adsystem.com *.trustcommander.net *.overkiz.com *.somfy.com *.somfysystems.pl e.issuu.com projects.perfoweb.fr www.tahomalink.com boutique.somfy.fr www.youtube.com www.googletagmanager.com static.addtoany.com client.alwaysupport.com *.doubleclick.net static.olark.com 212.203.79.55 somfykorea.linux.gabiauser.com shop.somfy.de shop.somfy.es shop.somfy.it easyshop.somfypro.fr tv.connexoon.de tvaktion.connexoon.de tv-at.connexoon.de *.addthis.com *.disqus.com disqus.com www.google.com webdev.abastra.com kartor.eniro.se http://kartor.eniro.se www.somfy-smart.de api.soundcloud.com w.soundcloud.com www.lespetitespierres.org https://giphy.com/upload https://hearthis.at https://soundcloud.com https://www.youtube.com https://www.lespetitespierres.org *.rlets.com https://giphy.com https://www.franceinter.fr *.zohopublic.com *.smartrecruiters.com https://subscriptions.smartrecruiters.com marketing.net.elogia.net www.facebook.com https://www.facebook.com https://www.youtube-nocookie.com www.123formbuilder.com https://c.imedia.cz player.ina.fr https://*.hotjar.com https://*.tfaforms.net *.tfaforms.net www.ausschreiben.de cdn.thinglink.me *.thinglink.com form.123formbuilder.com https://form.123formbuilder.com https://px.ads.linkedin.com *.px.ads.linkedin.com https://www.linkedin.com *.linkedin.com https://d6tizftlrpuof.cloudfront.net player.teester.com landings.somfy.co.il my.matterport.com *.myfeelback.com *.kameleoon.com *.kameleoon.eu https://somfyicebucket.com actorssl-5637.kxcdn.com actor.cxr.skeepers.io *.skeepers.io *.smart-tribune.com cdnjs.cloudflare.com polyfill.io secure.livechatinc.com *.test.somfy.com *.ppr.somfy.com *.usabilla.com https://sbxp.somfysystems.com mfb.li https://mfb.li; frame-ancestors 'self' https://*.somfy.com https://*.batchgeo.com 3 default-src 'self' https:; style-src-elem 'self' 'unsafe-inline' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: 'wasm-unsafe-eval'; img-src 'self' data: https:; style-src-attr 'unsafe-inline'; font-src 'self' data: https:; frame-ancestors https://audi-admin.porsche-holding.com; connect-src 'self' https: wss: ws: data:; manifest-src 'self' https:; media-src 'self' https: data:; frame-src 'self' https:; upgrade-insecure-requests 3 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' *.loket.com *.loket.id; 3 default-src 'self'; frame-ancestors 'none'; 3 default-src * data:; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; font-src 'self' data: https:; frame-ancestors 'self' https://www.google.com https://*.google.com 3 object-src 'none'; frame-ancestors 'self'; block-all-mixed-content; 3 'self' https://ajax.googleapis.com 3 default-src 'self'; script-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdn.datatables.net code.jquery.com cdnjs.cloudflare.com static.cloudflareinsights.com atendentes.club use.fontawesome.com kit.fontawesome.com cloudflareinsights.com *.cloudflareinsights.com www.googletagmanager.com connect.facebook.net *.virtualcontrol.club; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdn.datatables.net cdnjs.cloudflare.com https://fonts.googleapis.com use.fontawesome.com kit.fontawesome.com atendentes.club; img-src 'self' data: https:; font-src 'self' data: cdnjs.cloudflare.com https://fonts.gstatic.com use.fontawesome.com kit.fontawesome.com db.onlinewebfonts.com; connect-src 'self' atendentes.club wss://atendentes.club cdn.jsdelivr.net cdnjs.cloudflare.com https://video.espelhado.com:* https://video2.espelhado.com:* wss://video.espelhado.com:* wss://video2.espelhado.com:* https://*.virtualcontrol.club wss://*.virtualcontrol.club https://vaivaiapi.fourbet.vip https://virtualapi.facefamiy.com cloudflareinsights.com *.cloudflareinsights.com www.googletagmanager.com www.google-analytics.com connect.facebook.net www.facebook.com; frame-src 'self' https://video.espelhado.com:* https://video2.espelhado.com:*; frame-ancestors 'self'; object-src 'none'; media-src 'self' data: atendentes.club; base-uri 'self'; 3 base-uri 'self'; script-src 'report-sample' 'unsafe-eval' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' 'sha256-8hfDTWqu8k9HvHzrkzt+xhtPpKaUxiTKKafbnLtHZCs=' 'sha256-SMUeP6E2pMrxXZ8/eWo6OvoLUN6jMLYb5qEUgHaaDrA=' 'sha256-EUBEF5WvTGqk0hm+1BG7zR6I+6+DGb6OOh8cyLSJhBk=' 'sha256-EVfbJoCaYvQGy63aF4IaFkCgygoCP13tlf39WBoqnmQ=' 'sha256-XnNQECY9o+nIv2Qgcd1A39YarwxTm10rhdzegH/JBxY=' 'sha256-0XMgg4rqcxPYJ6gk7kILQRAbBe9xK3+Ik6iWqGJcYWg=' 'sha256-g8iVyamDwt3OeOKt7rpBJ01H71OFT38TNW31YoDqtg4=' 'sha256-L0DnDaq26Adb1CiOJaNeUyPd9e4qJm+x6Ywtoa+S3+4=' 'sha256-U7KwF5KvWsJaK9Am2TfiRzMq4/MU6CWFj0mfRqtZkfA=' 'sha256-910MBH4o0XYmt2KdyUfPUnjODdvSFGgoCIXR7njrfSw=' 'sha256-nwrPrPUzetXBOU2PA9lEiV0YlyEa2u1K1E9PzmP4iY8=' 'sha256-mjdgHR9aXy+6OwAGlNS/XgNcYG1Uhd2U4pl8vi7+XCY=' 'sha256-/bm28XTHBk/2+8w4OK5Z3PKsnHRjh6YGqEZrDmAzpxo=' 'sha256-un4Od7TXS3yFrOZTtMAVbkJ1wXe6c2+09LvfoBl4jh4=' 'sha256-fe+DmxUPcLoM27k80UR5jvvr4aLfF0rSHKV5SemJPzg=' 'sha256-qo1RuSBojC8D1TICoE4IFgVurx/k8U1oZK9MRDE/KlE=' 'sha256-mRKioI8+U/Z6IlUernsYX+VQ/+1ZmIz0Exd6vI7EZNY=' 'sha256-hRyOf0WLnTNjcFQ90fQeHumVAWjriqpnqRUaI6h1vj0=' 'sha256-8W8281SYt1k0eR9Y0z66gdPlhw9xO1U+Pwx9xjYYfwo=' 'sha256-q5qXN11uZHDKvdYtrAbOosaCyKbZxuxxNck525tOrsk=' 'sha256-PGwKPKtgIFR7BBaTEzRxRl4FWV1uufjCt5TVa6TI12k=' 'sha256-W0QY3aFcPnZSSetdi5gTeKy2IQMi3eCafbIVKAa20Zg=' 'sha256-aroGK3JMjlNu/zPuSeivrWD3UC/3tMaU+UuxKWdimpM=' 'sha256-ky6kwALluZeYIOUb67vYvNIm+6GYo9ZIpE5+6fUAbiU=' 'sha256-hMbRFabSSL7CIDsoqw8tkSvYtzZ1NeJqQyhGZdSdnxQ=' 'sha256-ceLZobD9Q86jstPOfW76BNTxXlZ7mTw0PF66debOnx4=' 'sha256-X2HVLVOvP9Opbf0ClAql73Fbwflss+KO544zddICf4U=' 'sha256-aZTZsmwqKP8HIwXU9SL0uRZWX9soMifegql0XmccYEw=' 'sha256-1rN3TBB70ehRoaiW/CvP3GHTNFr593iDXloGmle9JiY=' 'sha256-x1FQfFjfHqekbV7feKwmQ6gSdooZVGPGLXw1OK5YdiI=' 'sha256-yri+yF9cdn4VkD2uOCWeqlkqpeFZ/SmhDMhon/fQzEc=' 'sha256-XjcRVp58oyAqZCEyhIdbxI6UjLqnQdmi6PBfRy1+BgA=' 'sha256-Gjk/4NYwu3CbqK8Gj2MWMzyS9v/i8sLwf6xwP/oH5M8=' 'sha256-bQXNx2wNfK+Khvyw++rw7cScVp1Eo8GHhINrXBvF2Kc=' 'sha256-Kqjmds221Sxp42v6MMfVXhclGVC7fCZX4ESjxL3gVLw=' 'sha256-mK2LcNpqkDcXTppsyMqneuE6GEJ5j+7REt0lTsRKUUU=' 'sha256-fCl5PYrISg7MPsnIeZ+T6npnLgyi68m9NcGT5ONA6pI=' 'sha256-H50ABvo0XriiYrFw1nag3drPHQoIE34FfOWFzlCHy3E=' 'sha256-wE+KqdimW+7MWcIE1UdqfODsz8hgcsyd2YuAQ4gVmTY=' 'sha256-MaUq5Wt30Bl8clIlW7/zvNPuKmnZdlAxopQigKrPLso=' 'sha256-I3J1LKXta0FJ/3+aa+dBNCE5dV3fjcG7p7ulnbtcMp0=' 'sha256-zpqVdE6ttrmhTiPbjKj6s39iaE9RMfzNp6aF7UKwtBY=' 'sha256-8kotGhRmEBiesu8MHsrDeRTEpj3SSDokReILPbeA37I=' 'sha256-OyfHFA4tRzHfTynnYncdFb31ISeCD7Am01txqn+O4ys=' 'sha256-DMT61jx96o8Zt4O6NPLDbLFDtyQSPa4zNGgdA8jCqF4=' 'sha256-cdJLDgaTPPJz9rqWbXcX70modqLshn8Wti8X7csGKLs=' 'sha256-Ubpp3UAuqVQ2aqrQydRcFipkEq08tYYEskh9QC1G50Q=' 'sha256-savpz652hUrFSTNoRdzTuvttLoQ8UN1p2KhaqZs4RFo=' 'sha256-d7o/iD0TcPtTf9pAbqA9aa2qsmdqPtbqxI3YMwTtrrA=' 'sha256-vKTtXqBsPdGS4/zx94PM36gvdxCJ/Ax00pQQzPjQipM=' 'sha256-JX/B96MKyLyvkF8KBl3WNnl4E4qTPbCHIVjK18Wsrv4=' 'sha256-dC/jD1PLk3u5eHvMjPSU2sn/MZtS9SvfrUHfM/0ljNg=' 'sha256-2SogunjLOxlI7Wg4N9b3QeLMc6iMRcqBOb+GKaaTRms=' 'sha256-F9WIjqwVFa6OdXSzHYNoMqL8JLBqUXo1Pi7efWcW6Hc=' 'sha256-f43zB0nOsgPWXfe3o5rddAbhDW/vcFrzBSDkk4HjcqI=' 'sha256-X2KwazXyKFvTF732X/K2aV1GfPZfEs0LxZqe2fVEgbQ=' 'sha256-JD3QNZMrcbKEHx/fiFA48Q4qfUSRVJzNY0ddMrIDldw=' 'sha256-a0LCXoGMhTbJbdBhYjYs9SWYUfLEQOK28ScGPz95OGU=' 'sha256-VYS39htFWvCvYYrTQn4ez8xMVDSeicx8R1U9gHHa/L4=' 'sha256-1FUf92d8M0aWiFhHusEbrbvKvdlvOfIDUWvDuHX7azY=' 'sha256-sqW8524g0j12xbmtKsHgQfe51jDLhz9YvpU9qyQxiI4=' 'sha256-ucwtwaqudZNf484xeYY9MAAbU75rmfC+aTIMIPnp/+M=' 'sha256-Uvlvy3XrvGXoY8a4WJaccSsOMYUSSDNVuYrCwhdjRaI=' 'sha256-ggF3Z9jBqMPxGPityfkV9E558XJj0BGF7bRPYSRxvYg=' 'sha256-G2W56+HI8YW0yBfWuIi5fakga6Hw1OaYMlUSmfwKRy4=' 'sha256-fG+z3bJX8GErBobrq5IcgZH1jziKt62NK9Vy2ObcCi0=' 'sha256-xN4H0ViE8M+RMyRZPfMyMRy2wFZYHX+IFgVE6m2I+a4=' 'sha256-/3xzND3I9GGOPkKYPsJGxn1+UqqlAuSoAKtjyJdmbzE=' 'sha256-qAPZ3JbexhkbwJLAiSazw/M9WtpIILZ2SRRJjPuZaZw=' 'self' www.linkedin.com/autofill/js/autofill.js js.navattic.com/sdk.js static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com content.linkedin.com snap.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com sjs.bizographics.com/insight.min.js *.salesforceliveagent.com linkedin.sc.omtrdc.net/b/ss/lnkdprod/ bat.bing.com cdn.walkme.com gist.github.com embedr.flickr.com www.googletagmanager.com/gtag/js www.googletagmanager.com/gtag/destination googleads.g.doubleclick.net/pagead/viewthroughconversion/; worker-src 'none'; frame-ancestors 'self' *.linkedin.com experience.adobe.com; frame-src blob: lnkd-communities: voyager: * 'self' *.licdn.com *.fls.doubleclick.net www.googletagmanager.com td.doubleclick.net; connect-src wss: blob: data: * 'self' *.licdn.com www.google.com google.com adservice.google.com pagead2.googlesyndication.com td.doubleclick.net www.googletagmanager.com www.googleadservices.com ad.doubleclick.net googleads.g.doubleclick.net; img-src blob: data: android-webview-video-poster: * 'self' *.licdn.com; media-src blob: data: * 'self' *.licdn.com; style-src 'unsafe-inline' * 'self' *.licdn.com; form-action 'self' *.linkedin.com linkedin.secure.force.com linkedinresearch.qualtrics.com webmarketing.qualtrics.com *.salesforceliveagent.com linkedin.my.salesforce-sites.com; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=m 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://js.stripe.com https://challenges.cloudflare.com https://browser.sentry-cdn.com https://*.parksy.com https://static.cloudflareinsights.com https://load.gtm.parksy.com https://bat.bing.com https://*.clarity.ms https://cdn.mxpnl.com https://analytics.ahrefs.com https://*.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://*.r2.cloudflarestorage.com https://api.stripe.com https://*.parksy.com https://*.sentry.io https://*.ingest.us.sentry.io https://*.googletagmanager.com https://load.gtm.parksy.com https://maps.googleapis.com https://maps.gstatic.com https://*.google-analytics.com https://analytics.google.com https://bat.bing.com https://*.bing.com https://*.clarity.ms https://*.mixpanel.com https://analytics.ahrefs.com https://www.google.com https://*.doubleclick.net https://www.googleadservices.com https://bat.bing.net https://connect.facebook.net https://www.facebook.com; frame-src 'self' https://challenges.cloudflare.com https://js.stripe.com https://hooks.stripe.com https://www.youtube.com https://www.youtube-nocookie.com https://load.gtm.parksy.com https://gtm.parksy.com https://www.google.com https://*.doubleclick.net; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://hooks.stripe.com https://checkout.stripe.com; object-src 'none'; report-uri https://www.parksy.com/csp-report; report-to csp-endpoint; 3 img-src 'self' data: blob: services.bsi-software.com res.bsi-software.com res.riskine.com storage.googleapis.com cdn.bsi.mndnw.sh cdn.usefathom.com; font-src 'self' services.bsi-software.com res.bsi-software.com res.riskine.com cdn.bsi.mndnw.sh fonts.google.com; child-src *; style-src 'self' 'unsafe-inline' services.bsi-software.com res.riskine.com res.bsi-software.com cdn.bsi.mndnw.sh; script-src 'self' 'unsafe-inline' 'unsafe-eval' services.bsi-software.com res.bsi-software.com res.riskine.com www.gstatic.com www.google.com maps.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.bsi.mndnw.sh cdn.usefathom.com; connect-src 'self' bsi-beinvolved-production-api.mndnw.sh www.bsi-software.com cdn.bsi.mndnw.sh services.bsi-software.com; default-src 'self' services.bsi-software.com cdn.bsi.mndnw.sh; manifest-src 'self' res.bsi-software.com res.riskine.com; report-uri csp-report-daf9d3b0-7dce-416a-b9c7-0af22f6583f8 3 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://*.baophutho.vn https://baophutho.vn https://*.baothanhhoa.vn https://baothanhhoa.vn https://*.eop.edu.vn https://eop.edu.vn https://*.vietlong.org https://vietlong.org; upgrade-insecure-requests 3 default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; connect-src 'self' *; img-src 'self' data: *; style-src 'self' 'unsafe-inline' *;base-uri 'self' *;form-action 'self' *; font-src * data:; 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: javascript: https://cdn.userway.org/ instagram.com https://public.tableau.com https://api.clientify.net wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app widget02.wolkvox.com d335luupugsy2.cloudfront.net wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app https://platform.bluemessaging.net checkout.wompi.co *app.sitp.gov.co *.firebaseio.com *.aldeamo.com *.bootstrapcdn.com *.cloudflare.com https://chat1-cls27.i6.inconcertcc.com https://webchat-cls27.i6.inconcertcc.com *.facebook.net *.fontawesome.com https://mas-spn.inconcertcc.com *.googleapis.com *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.hippochat.io *.hotjar.com *.jquery.com *.jsdelivr.net *.livechatinc.com *.snapengage.com *.twimg.com *.twitter.com *.uniquindio.edu.co unpkg.com *.ytimg.com *.youtube.com *.zendesk.com ; img-src 'self' blob: data: javascript: https://c.tile.openstreetmap.org/ https://a.tile.openstreetmap.org/ https://b.tile.openstreetmap.org/ https://www.google.com.co/ https://cdn.userway.org/ *.aldeamo.com *.amazonaws.com *.bluemessaging.net *.cool especiales.presidencia.gov.co *.facebook.com fuguchat.s3.ap-south-1.amazonaws.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.gstatic.com *.hippochat.io *.hotjar.com *.livechatinc.com sedeelectronica.com.co sellodeexcelencia.gov.co *.snapengage.com s-static.ak.facebook.com stats.g.doubleclick.net synersis.co:8442 smartlink.cool *.twimg.com *.twitter.com *.uniquindio.edu.co vozme.com *.youtube.com *.zendesk.com ; style-src 'self' 'unsafe-inline' https://cdn.userway.org/ https://apps.clientify.net wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app https://platform.bluemessaging.net *.aldeamo.com *.bootstrapcdn.com govco.sedeelectronica.com.co ton.twimg.com *.cali.gov.co https://mas-spn.inconcertcc.com https://cdn.jsdelivr.net *.cloudflare.com *.fontawesome.com *.hippochat.io *.hotjar.com *.jquery.com *.nexura.com *.gstatic.com *.google.com *.googleapis.com sedeelectronica.com.co *.twitter.com *.uniquindio.edu.co *.zendesk.com ; font-src 'self' data: *.cali.gov.co https://cdn.userway.org/ https://mas-spn.inconcertcc.com govco.sedeelectronica.com.co sedeelectronica.com.co *.fontawesome.com *.hotjar.com *.bootstrapcdn.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.nexura.com sedeelectronica.com.co *.uniquindio.edu.co ; object-src 'self' data: ; frame-ancestors 'self' *.nexura.com *.uniquindio.edu.co ; media-src 'self' blob: https://c11.radioboss.fm:18054/stream *.radioboss.fm:18054/stream *.uniquindio.edu.co vozme.com smartlink.cool *.smartlink.cool ; 3 frame-ancestors 'self' *.localhost.test *.pages.dev *.tickettando.it tickettando.it *.casacinemanapoli.it; 3 script-src 'self' 'unsafe-inline' api.geevisit.com monitor.geetest.com api.geetest.com static.geetest.com res.wx.qq.com 'unsafe-eval'; object-src 'none'; style-src static.geetest.com 'self' 'unsafe-inline'; child-src https: 3 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://www.recaptcha.net https://www.gstatic.com/recaptcha https://siteimproveanalytics.com https://cdn.userway.org https://view.ceros.com https://cdn.fonts.net https://cdn.cookielaw.org https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://edge-platform.sitecorecloud.io https://cdn.fonts.net https://cdn.userway.org; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com https://cdn.fonts.net https://cdn.userway.org; connect-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://*.sitecorecloud.io https://*.sitecore.com https://api.userway.org https://cdn.cookielaw.org https://cdn.userway.org https://maps.googleapis.com https://geolocation.onetrust.com https://nominatim.openstreetmap.org https://analytics.google.com https://cdn77.api.userway.org https://privacyportal.onetrust.com https://stats.g.doubleclick.net; media-src 'self' https://edge.sitecorecloud.io https://ftp.firmseek.com https://embed.podcasts.apple.com; frame-src 'self' https://www.google.com https://www.recaptcha.net https://cdn.userway.org https://player.vimeo.com https://view.ceros.com https://www.youtube.com https://play.libsyn.com https://html5-player.libsyn.com https://embed.podcasts.apple.com blob: https://cdn.yoshki.com blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.sitecorecloud.io; upgrade-insecure-requests 3 frame-ancestors 'self' https://metrika.yandex.ru; 3 default-src 'self' https:;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://player.vimeo.com/api/player.js https://policy.app.cookieinformation.com https://www.youtube.com https://mktdplp102cdn.azureedge.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-eur.mkt.dynamics.com https://public-eur.mkt.dynamics.com https://cxppeur1rdrect01sa02cdn.blob.core.windows.net *.svc.dynamics.com/f *.svc.dynamics.com/t *.svc.dynamics.com/t/w https://dhigroup.matomo.cloud *.lfeeder.com *.leadfeeder.com https://cdn.matomo.cloud/dhigroup.matomo.cloud/container_HH5X4G0y.js https://cdn.matomo.cloud/dhigroup.matomo.cloud/matomo.js;style-src 'self' 'unsafe-inline' *.googletagmanager.com *.googleapis.com https:;font-src 'self' *.gstatic.com data: https:;img-src 'self' *.googletagmanager.com data: https:;object-src 'self' 'unsafe-inline' *;frame-ancestors 'none';base-uri 'self';form-action 'none'; 3 default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: blob: 'unsafe-inline' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.tj66789.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.tj66789.com; frame-ancestors 'self'; 3 upgrade-insecure-requests; default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob:; font-src * data:; connect-src *; frame-src *; frame-ancestors 'self' https://*.quorumsoftware.com; media-src * data: blob:; 3 style-src 'self' 'unsafe-inline' *.eunetic.com *.eunetic.com *.consentmanager.net *.tinymce.com *.tiny.cloud *.googleapis.com *.gstatic.com https://cdn.ckeditor.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://chat.copexa.net https://chat.webwide.de https://chat.eunetic.com https://googletagmanager.com https://tagmanager.google.com https://*.googleapis.com https://*.googletagmanager.com; script-src *.eunetic.com 'self' 'unsafe-inline' *.eunetic.com *.tinymce.com *.tiny.cloud *.googleapis.com *.hotjar.com *.hotjar.io https://onstats.de https://www.callexa.com https://cdn.ckeditor.com https://js.stripe.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://chat.copexa.net https://chat.webwide.de https://chat.eunetic.com *.google.com https://googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net *.consentmanager.net *.acsbapp.com; object-src 'self'; img-src 'self' *.eunetic.com *.consentmanager.net *.tinymce.com *.tiny.cloud *.googleapis.com cdn.ckeditor.com chat.copexa.net www.callexa.com onstats.de *.freepik.com pay.webwide.net https://googletagmanager.com https://*.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://googleads.g.doubleclick.net https://www.google.com https://google.com data: blob:; connect-src 'self' *.eunetic.com *.webwide.de *.tinymce.com *.tiny.cloud *.googleapis.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com https://onstats.de https://www.callexa.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de *.consentmanager.net *.acsbapp.com; worker-src 'self' blob:; font-src 'self' *.eunetic.com *.consentmanager.net *.tinymce.com *.tiny.cloud *.gstatic.com data: 3 default-src 'self' https://*.nanelo.com https://nanelo.com; style-src 'unsafe-inline' 'self' https://*.nanelo.com https://nanelo.com; img-src 'self' data: https:; object-src 'none'; script-src 'sha256-H/qD7Jl4/ZhYpH00aG9fel4uuqcGhnJ6mSFRqB7jn1I=' 'self' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https: blob: data:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 3 frame-ancestors 'self' https://ecpmarketer.com 3 frame-ancestors 'self' https://tippspiel.redbullsalzburg.at; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: blob:; 3 default-src https: data: 'unsafe-eval' 'unsafe-inline'; 3 frame-ancestors *; report-uri /report-csp-violation 3 default-src * 'unsafe-inline' 'unsafe-eval'; frame-ancestors *; font-src *; img-src * data:; connect-src * data:; 3 form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.visualwebsiteoptimizer.com app.vwo.com https://cdnjs.cloudflare.com https://browser.sentry-cdn.com *.azureedge.net https://client.prod.repmap.microsoft.com https://www.google.com https://www.google.nl https://www.google.be https://www.google.de https://www.google.fr https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.cookiebot.com https://www.youtube.com https://sc-static.net https://connect.facebook.net https://*.snapchat.com https://snap.licdn.com https://www.googleadservices.com analytics.tiktok.com https://static.hotjar.com https://script.hotjar.com https://*.googlesyndication.com https://*.dynamics.com https://*.azureedge.net https://exch.dehaagsehogeschool.nl https://exch.thuas.com https://bgmin.cdn.billygrace.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://*.visualwebsiteoptimizer.com app.vwo.com https://loyal-lyrebird.cloudvent.net https://*.typekit.net https://exch.dehaagsehogeschool.nl https://exch.thuas.com; img-src 'self' data: https://*.visualwebsiteoptimizer.com app.vwo.com https://picsum.photos https://*.picsum.photos https://*.cloudfront.net https://*.azureedge.net https://assets-eur.mkt.dynamics.com *.microsoft.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleusercontent.com/docsdf https://*.snapchat.com https://snap.licdn.com https://www.facebook.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.nl https://*.linkedin.com https://*.svc.dynamics.com https://*.cookiebot.com https://loyal-lyrebird.cloudvent.net https://exch.dehaagsehogeschool.nl https://exch.thuas.com; media-src 'self'; frame-src 'self' https://app.vwo.com https://www.youtube.com https://www.youtube-nocookie.com https://tourmkr.com *.svc.dynamics.com https://projects.ivorystudio.net https://open.spotify.com https://*.cookiebot.com https://docs.google.com https://*.snapchat.com https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://exch.dehaagsehogeschool.nl https://exch.thuas.com; font-src 'self' data: https://script.hotjar.com https://loyal-lyrebird.cloudvent.net https://*.typekit.net https://fonts.gstatic.com https://exch.dehaagsehogeschool.nl https://exch.thuas.com; connect-src 'self' https://sentry.netvlies.nl *.svc.dynamics.com https://*.visualwebsiteoptimizer.com app.vwo.com https://*.analytics.google.com https://*.cookiebot.com https://region1.google-analytics.com www.google-analytics.com analytics.tiktok.com stats.g.doubleclick.net https://*.snapchat.com https://snap.licdn.com https://cdn.linkedin.oribi.io https://vc.hotjar.io wss://ws.hotjar.com https://content.hotjar.io https://metrics.hotjar.io https://*.linkedin.com https://surveystats.hotjar.io https://ask.hotjar.io https://in.hotjar.com https://*.googlesyndication.com https://*.google.com https://analytics.google.com https://googleads.g.doubleclick.net https://*.dynamics.com https://*.azureedge.net https://exch.dehaagsehogeschool.nl https://exch.thuas.com https://www.googleadservices.com https://b.billypx.com https://sentry.netvlies.nl/api/106/store/ https://sentry.netvlies.nl/api/106/envelope/ 3 default-src 'self'; child-src blob:; media-src * 'self' data: https: blob:; style-src 'self' 'unsafe-inline' *.pricespider.com *; img-src * 'self' data: https: blob: *.pricespider.com; script-src * data: *.pricespider.com https://*.rudderlabs.com/ blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline' https://*.rudderstack.com/; font-src * data: https:; frame-src 'self' blob: https: *; 3 frame-ancestors 'self' https://rewards.theexcellencecollection.com https://tecloyalty.c5.stage.livecms.site; 3 default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://static.cloudflareinsights.com https://acsbapp.com https://js.stripe.com https://*.hcaptcha.com https://*.wistia.com https://*.wistia.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com blob: https://*.wistia.com; img-src 'self' data: blob: https://stream.co https://www.googletagmanager.com https://*.google-analytics.com https://*.stripe.com https://*.hsforms.com https://www.gravatar.com https://*.wistia.com https://*.wistia.net; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api2.wagestream.xyz https://api.wagestream.xyz https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://static.cloudflareinsights.com https://api.stripe.com https://api.hsforms.com https://api.trustpilot.com https://acsbapp.com https://cdn.acsbapp.com https://fonts.googleapis.com https://*.hcaptcha.com https://m.stripe.com https://*.wistia.com https://*.wistia.net; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://b.stripecdn.com https://*.hcaptcha.com https://pay.google.com https://m.stripe.com https://fast.wistia.com https://fast.wistia.net https://app-static.wagestream.co.uk; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'self'; object-src 'none'; media-src 'self' blob: https://*.wistia.com https://*.wistia.net; manifest-src 'self'; upgrade-insecure-requests 3 default-src 'self' https://css.page-source.com https://www.google-analytics.com https://analytics.google.com https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net 'unsafe-inline'; script-src-elem 'self' https://fonts.googleapis.com https://analytics.google.com https://www.gstatic.com https://ajax.googleapis.com http://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://webcdn.appice.io/ 'unsafe-inline'; style-src-elem 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net 'unsafe-inline'; upgrade-insecure-requests; connect-src 'self' https://idbiprodapi.appice.io/ https://analytics.google.com/ https://www.google-analytics.com/; img-src 'self' https://cdn.appice.io; 3 frame-src 'self' *.captcha-delivery.com *.optimizely.com *.doubleclick.net *.adsrvr.org *.bounceexchange.com *.amazon-adsystem.com *.owneriq.net *.google.com *.facebook.com *.facebook.net *.rokt.com *.amazon.com *.paypal.com *.payments-amazon.com *.sojern.com *.qantasloyalty.com *.qantas.com tag.yieldoptimizer.com img3.avis.com img3.budget.com img3.paylesscar.com *.youtube.com quantserv.com adnxs.com impactradius-event.com dgm-au.com everestjs.net everesttech.net yahoo.com xg4ken.com *.online-metrix.net *.uplift.com *.quantummetric.com api.securedvisit.com track.securedvisit.com content.securedvisit.com images.securedvisit.com track.sv.rkdms.com *.mypurecloud.com *.nagich.com cloudfront.net bing.com go.pardot.com sme.avis.co.nz sme.avis.com.au sme.budget.co.nz sme.budget.com.au *.salecycle.com abgnz.wufoo.com *.youtube-nocookie.com *.mypurecloud.com *.mypurecloud.com.au; worker-src 'self' blob:; 3 default-src 'self' blob: https://accounts.google.com https://telegram.org https://oauth.telegram.org https://challenges.cloudflare.com https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com https://at.alicdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://unpkg.com https://cdn.jsdelivr.net https://accounts.google.com https://static.cloudflareinsights.com https://telegram.org https://oauth.telegram.org https://challenges.cloudflare.com https://www.sexyai.top https://sexyai.top https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com https://at.alicdn.com; connect-src 'self' blob: https://unpkg.com https://cdn.jsdelivr.net https://accounts.google.com https://static.cloudflareinsights.com https://telegram.org https://oauth.telegram.org https://challenges.cloudflare.com https://www.sexyai.top https://sexyai.top https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com https://at.alicdn.com; img-src 'self' data: blob: https: https://telegram.org https://www.sexyai.top https://sexyai.top https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com https://at.alicdn.com; style-src 'self' 'unsafe-inline' https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com https://at.alicdn.com; font-src 'self' data: https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com https://at.alicdn.com; media-src 'self' https: https://www.sexyai.top https://sexyai.top https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com https://at.alicdn.com; object-src 'none'; base-uri 'none'; frame-ancestors https://telegram.org https://oauth.telegram.org https://challenges.cloudflare.com https://www.sexyai.top https://sexyai.top https://www.meimoai11.com https://meimoai11.com https://meimoduapp.com https://www.meimoduapp.com https://meimoai12.com https://www.meimoai12.com https://meimoai13.com https://www.meimoai13.com https://meimoai14.com https://www.meimoai14.com https://meimoai15.com https://www.meimoai15.com https://meimoaiimg.com; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' * data:; 3 base-uri 'self'; default-src https: data: 'self' https://mppp.gob.ve 'unsafe-inline'; style-src https: data: 'self' https://mppp.gob.ve 'unsafe-inline'; script-src https: data: 'self' https://mppp.gob.ve 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;img-src 'self' https://assets.elementor.com https://s.w.org https://secure.gravatar.com https://premiumaddons.com https://storage.googleapis.com https://ps.w.org https://s0.wp.com blob: data:;frame-src 'self' https://www.youtube.com https://leap13.github.io blob:;form-action 'self' https://mppp.gob.ve; upgrade-insecure-requests; 3 script-src 'unsafe-inline' 'self' data: *.cdn-apple.com links.perigeeapps.com deeplink.seven.app deeplink.cycles.app deeplink.halo.app cms.perigee.se dev.links.perigeeapps.com dev.deeplink.seven.app dev.deeplink.cycles.app dev.deeplink.halo.app dev.cms.perigee.se *.google-analytics.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com googletagmanager.com cdn.ckeditor.com; style-src 'unsafe-inline' 'self' data: *.cdn-apple.com links.perigeeapps.com deeplink.seven.app deeplink.cycles.app deeplink.halo.app cms.perigee.se dev.links.perigeeapps.com dev.deeplink.seven.app dev.deeplink.cycles.app dev.deeplink.halo.app dev.cms.perigee.se *.google-analytics.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com googletagmanager.com cdn.ckeditor.com; default-src 'unsafe-inline' 'self' data: *.cdn-apple.com links.perigeeapps.com deeplink.seven.app deeplink.cycles.app deeplink.halo.app cms.perigee.se dev.links.perigeeapps.com dev.deeplink.seven.app dev.deeplink.cycles.app dev.deeplink.halo.app dev.cms.perigee.se *.google-analytics.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com googletagmanager.com cdn.ckeditor.com; font-src 'unsafe-inline' 'self' data: *.cdn-apple.com links.perigeeapps.com deeplink.seven.app deeplink.cycles.app deeplink.halo.app cms.perigee.se dev.links.perigeeapps.com dev.deeplink.seven.app dev.deeplink.cycles.app dev.deeplink.halo.app dev.cms.perigee.se *.google-analytics.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com googletagmanager.com cdn.ckeditor.com; connect-src 'unsafe-inline' 'self' data: *.cdn-apple.com links.perigeeapps.com deeplink.seven.app deeplink.cycles.app deeplink.halo.app cms.perigee.se dev.links.perigeeapps.com dev.deeplink.seven.app dev.deeplink.cycles.app dev.deeplink.halo.app dev.cms.perigee.se region1.analytics.google.com *.google-analytics.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com www.googletagmanager.com googletagmanager.com cdn.ckeditor.com; frame-src 'self' seven.app cycles.app halo.app perigee.se dev.seven.app dev.cycles.app dev.halo.app dev.perigee.se deeplink.seven.app deeplink.cycles.app deeplink.halo.app dev.deeplink.seven.app dev.deeplink.cycles.app dev.deeplink.halo.app cms.perigee.se dev.cms.perigee.se; 3 default-src 'self';connect-src 'self' https://scarif.lyfter.nl https://maps.lyfter.nl https://google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.googleapis.com https://*.google.com https://*.google.nl https://*.gstatic.com https://*.doubleclick.net https://*.fontawesome.com https://cdn.plyr.io https://*.timeblockr.com https://*.timeblockr.cloud https://noembed.com https://*.tawk.to wss://*.tawk.to https://*.facebook.com https://*.facebook.net https://*.leadinfo.net https://*.leadinfo.com https://in.logtail.com https://*.browsealoud.com https://*.speechstream.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://cdn.linkedin.oribi.io https://*.visualstudio.com https://*.clarity.ms https://*.tiktok.com https://*.amazonaws.com https://*.recras.nl https://*.hubspot.com https://*.hubapi.com https://*.hs-banner.com https://*.hsforms.com https://*.hsforms.net https://*.hscollectedforms.net https://*.bing.com https://*.cookiebot.com https://*.cookiebot.eu https://*.elfsight.com https://*.trustedshops.com https://*.etrusted.com https://*.trustbadge.com https://*.linkedin.com https://*.googleadservices.com https://*.logs.betterstack.com data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cloudflare.com https://cdn.trustindex.io https://*.recras.nl https://dashboard.webwinkelkeur.nl https://polyfill.io https://*.hubspot.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.usemessages.com https://*.hs-banner.com https://*.hsleadflows.net https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.fontawesome.com https://connect.facebook.net https://*.amazonaws.com https://*.googleapis.com https://*.google.com https://*.google.ad https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.gstatic.com https://*.googleadservices.com https://*.googletagservices.com https://*.googleoptimize.com https://*.googlesyndication.com https://www.youtube.com https://*.vimeo.com https://vimeo.com https://*.timeblockr.com https://*.timeblockr.cloud https://*.tawk.to wss://*.tawk.to https://cdn.jsdelivr.net https://*.browsealoud.com https://*.mailplus.nl https://*.leadinfo.net https://chimpstatic.com https://*.cookiebot.com https://*.calendly.com https://*.activehosted.com https://*.typekit.net https://*.hotjar.com https://*.pinterest.com https://*.licdn.com https://*.tiktok.com https://*.bing.com https://*.clarity.ms https://*.redditstatic.com https://*.adsafeprotected.com https://*.elfsight.com https://*.lfeeder.com https://*.app-us1.com data: blob: https://*.eventix.io https://*.trustedshops.com https://*.mollie.com;style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com https://*.gstatic.com https://*.mailplus.nl https://cdn.plyr.io https://*.recras.nl https://*.timeblockr.com https://*.timeblockr.cloud https://*.hotjar.com https://*.cloudflare.com https://*.tawk.to https://*.leadinfo.net https://*.leadinfo.com https://*.googleapis.com https://www.googletagmanager.com https://fonts.bunny.net;font-src 'self' https://fonts.gstatic.com https://cdn.trustindex.io https://*.fontawesome.com https://dashboard.webwinkelkeur.nl https://*.typekit.net https://*.timeblockr.com https://*.timeblockr.cloud https://*.tawk.to https://*.hotjar.com https://*.cloudflare.com data: https://*.trustedshops.com https://*.leadinfo.net https://fonts.bunny.net;img-src 'self' https://secure.gravatar.com https://*.tawk.to https://*.timeblockr.com https://*.timeblockr.cloud https://*.typekit.net https://*.cloudflare.com https://*.google.at https://*.google.be https://*.google.ca https://*.google.ch https://*.google.ci https://*.google.com https://*.google.de https://*.google.es https://*.google.fi https://*.google.fr https://*.google.gr https://*.google.hu https://*.google.ie https://*.google.is https://*.google.lu https://*.google.lv https://*.google.nl https://*.google.no https://*.google.pt https://*.google.ro https://*.google.ru https://*.google.se https://*.google.sr https://*.google.tn https://*.google.com.bd https://*.google.com.bh https://*.google.com.eg https://*.google.com.et https://*.google.com.mt https://*.google.com.pa https://*.google.com.ph https://*.google.com.py https://*.google.com.tn https://*.google.com.tr https://*.google.com.ua https://*.google.com.vn https://*.google.co.by https://*.google.co.et https://*.google.co.id https://*.google.co.in https://*.google.co.jp https://*.google.co.uk https://*.google.co.za https://*.google-analytics.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.googleusercontent.com https://*.googleadservices.com https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://lh3.ggpht.com https://*.cdninstagram.com https://*.facebook.com https://cdn.trustindex.io https://*.hotjar.com https://*.linkedin.com https://*.bing.com https://*.trustedshops.com https://*.hubspot.com https://*.hubspotusercontent-na1.net https://*.hsforms.com https://*.clarity.ms https://*.reddit.com https://*.mailplus.nl https://i.ytimg.com https://*.lfeeder.com https://*.tiktok.com https://*.amazonaws.com https://cdn.jsdelivr.net data: https://*.leadinfo.net https://*.leadinfo.com https://*.cookiebot.com https://*.usercentrics.eu https://woo.com https://*.mollie.com;media-src 'self' https://vimeo.com https://*.vimeocdn.com https://player.vimeo.com https://*.akamaized.net blob:;frame-src 'self' https://www.youtube.com https://youtu.be https://*.youtube-nocookie.com https://youtube-nocookie.com https://player.vimeo.com https://calendly.com https://*.google.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.doubleclick.net https://dashboard.webwinkelkeur.nl https://*.facebook.com https://consentcdn.cookiebot.com https://*.hubspot.com https://*.hsforms.com https://*.hs-sites.com https://*.klantenvertellen.nl https://open.spotify.com https://*.recras.nl https://*.stager.nl https://*.stager.co blob: https://*.mollie.com;frame-ancestors 'self';form-action 'self' https://*.facebook.com https://*.make.com https://*.hsforms.com https://*.hubspot.com https://*.mailplus.nl https://*.mollie.com https://*.ideal.nl; 3 default-src 'self'; script-src * 'unsafe-eval' 'unsafe-inline'; object-src *; style-src * 'unsafe-inline'; img-src * data:;frame-src *;font-src * data:;connect-src * blob:;media-src * blob:;worker-src * blob:; 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; frame-ancestors 'self'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 3 frame-ancestors 'self' www.ellipsizdss.com keysight.lookbookhq.com keysight.pathfactory.com next.brella.io online-events.keysight.com *.keysight.com *.keysight.com.cn 3 default-src 'self'; script-src 'self' https://* 'unsafe-inline' 'unsafe-eval' * ; style-src 'self' https://* 'unsafe-inline' ; img-src 'self' data: https://*; font-src 'self' data: https://*; connect-src 'self' https://*; frame-src 'self' https://*; 3 frame-ancestors 'self' *.dkv.com *.ergo-reiseversicherung.de *.ergo:* *.ergo.com:* *.ergo.de *.ergocarbon.com *.ergodirekt.de:*; report-uri https://csp-reporting.ergo.com/csp-reports?tenant=erv; report-to csp-endpoint; 3 base-uri 'none'; font-src 'self' https: data:; form-action 'self' https: 'self' https:; frame-ancestors 'self'; img-src 'self' data: https: 'self' data: https:; object-src 'self' https: 'self' https:; script-src-attr 'self' https: 'self' https:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 'self' https: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-src 'self' https: 'self' https:; media-src 'self' https: 'self' https:; worker-src 'self' blob:; 3 default-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.bing.com https://*.clarity.ms https://*.wistia.com https://*.wistia.net; script-src-elem 'report-sample' 'unsafe-inline' blob: https://*.usercentrics.eu https://app.usercentrics.eu https://static.cloudflareinsights.com https://cdn.jsdelivr.net https://*.amazonaws.com https://www.redditstatic.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://js.zi-scripts.com https://tags.clickagy.com https://snap.licdn.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://cdn.dreamdata.cloud https://cdn.drda.io https://cdn.dreamdata.cloud https://browser.sentry-cdn.com/9.6.1/bundle.min.js https://*.hotjar.com maps.googleapis.com https://maps.googleapis.com/maps/api/js https://cdn.leandata.com/js-snippet/ld-book-v2.js https://cdn1.leandata.com/js-snippet/ld-book-popup.js https://*.clarity.ms https://*.bing.com https://elfsightcdn.com/platform.js https://*.rib-software.com https://cdn.livechatinc.com/tracking.js https://*.wistia.com https://*.wistia.net https://src.litix.io https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://api.livechatinc.com/ https://connect.facebook.net/ https://www.facebook.com/ https://region1.google-analytics.com/ https://www.youtube.com/ https://api.ipify.org/ https://ipapi.co https://ipapi.co/json/ https://www.youtube.com/api/stats/atr https://www.youtube.com/iframe_api https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://region1.analytics.google.com/ https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net/ https://www.google-analytics.com/ https://www.gstatic.com/ https://code.jquery.com/ https://www.youtube.com/s/player/704f0391/www-widgetapi.vflset/www-widgetapi.js https://play.google.com/log https://www.youtube.com/youtubei/v1/log_event https://snap.licdn.com/li.lms-analytics/insight.min.js https://tragwerksplanung.rib-software.com/ https://static.elfsight.com/platform/platform.js https://universe-static.elfsightcdn.com/ https://tr.capterra.com/static/wp.js https://www.google.com/ccm/collect https://px.ads.linkedin.com/collect https://*.bing.com https://tr.capterra.com/static/vcvr.js https://api.ipapi.com https://*.oktopost.com https://okt.to https://techweb-staging.rib-international.com; connect-src 'self' https://www.rib-software.com https://www.rib-software.com/* https://*.usercentrics.eu https://cloudflareinsights.com https://static.cloudflareinsights.com https://ws.zoominfo.com https://alb.reddit.com https://js.zi-scripts.com https://events.reddit.com https://maps.googleapis.com https://*.googleapis.com https://*.gstatic.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://cdn.dreamdata.cloud https://aorta.clickagy.com https://hemsync.clickagy.com https://*.clarity.ms https://bat.bing.com https://www.facebook.com https://connect.facebook.net https://*.wistia.com https://*.wistia.net https://tr.capterra.com/static/sp.js.map https://techweb-staging.rib-international.com https://px.ads.linkedin.com https://region1.google-analytics.com https://region1.analytics.google.com https://ipapi.co https://ipapi.co/* https://api.ipify.org https://www.youtube.com https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.gstatic.com https://www.google.com/ccm/collect https://*.google-analytics.com https://*.analytics.google.com https://fonts.googleapis.com https://stats.g.doubleclick.net https://analytics.google.com https://play.google.com/log https://www.youtube.com/youtubei/v1/log_event https://snap.licdn.com https://tragwerksplanung.rib-software.com https://tr.capterra.com/events/ https://app.leandata.com/routeFromFormInput https://app.leandata.com/* https://api.ipapi.com https://ipapi.co/latlong https://ipapi.co https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io; style-src 'self' 'report-sample' 'unsafe-inline' https://*.usercentrics.eu https://cdnjs.cloudflare.com https://fast.wistia.com https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; font-src 'self' data: https://cdnjs.cloudflare.com https://*.hotjar.com https://*.wistia.com https://go.rib-software.com https://*.rib-software.com/ https://fast.wistia.net https://*.rib-software.com https://fonts.gstatic.com https://www.youtube.com/s/player/704f0391/www-widgetapi.vflset/www-widgetapi.js https://cdn1.leandata.com/OpenSans-Light.ttf https://cdn1.leandata.com/OpenSans-Regular.ttf https://cdn1.leandata.com/OpenSans-SemiBold.ttf https://cdn1.leandata.com/OpenSans-Bold.ttf; frame-src 'self' data: https://www.rib-software.com https://www.rib-software.com/* https://*.usercentrics.eu https://rib-software.my.leandata.com https://hemsync.clickagy.com https://go.rib-software.com https://*.rib-software.com https://fast.wistia.com https://fast.wistia.net https://www.meinauftrag.rib.de https://www.rib-software.com/* https://go.pardot.com/* https://go.pardot.com https://api.ipify.org https://secure.livechatinc.com https://td.doubleclick.net https://www.byggeweb.dk https://posimyththemes.com https://region1.analytics.google.com https://go.rib-software.com https://tragwerksplanung.rib-software.com https://www.rib-tragwerksplanung.com https://player.vimeo.com https://bid.g.doubleclick.net https://www.google.com https://wistia.com https://wistia.net https://www.youtube.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google.com/ccm/collect https://px.ads.linkedin.com/collect; frame-ancestors 'self' https://go.rib-software.com/* https://go.rib-software.com/ https://*.rib-software.com/*; img-src 'self' data: https://*.usercentrics.eu https://*.cloudflare.com https://cdnjs.cloudflare.com https://alb.reddit.com https://www.redditstatic.com https://pagead2.googlesyndication.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.clarity.ms https://*.bing.com https://*.wistia.com https://*.wistia.net https://www.facebook.com/ https://connect.facebook.net/ https://analytics.google.com/ https://i.ytimg.com/ https://px4.ads.linkedin.com/ https://www.google.de/ads/ga-audiences https://stats.g.doubleclick.net https://region1.analytics.google.com/ https://www.google.co.in https://www.googleadservices.com https://googleads.g.doubleclick.net https://i.vimeocdn.com/ https://www.linkedin.com/ https://px.ads.linkedin.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://brand-assets.capterra.com/badge/aaa52fe9-1c4f-40ab-b128-68d9d56b4881.svg https://brand-assets.capterra.com https://rib-software.com/app/uploads/2022/10/success.png https://cdn1.leandata.com/images/form-submit-confirmation.svg; manifest-src 'self'; media-src 'self' blob: https://www.rib-software.com https://*.wistia.com https://*.wistia.net; worker-src 'self' ; child-src https://www.youtube.com/ https://wistia.com https://wistia.net; report-uri https://65f14453bc57ae1120bf6fd9.endpoint.csper.io/?v=1; 3 img-src * data:; font-src * data:; connect-src *; form-action *; frame-ancestors 'self' http://*.antstudio.cz http://*.antstudio.eu https://*.antstudio.cz https://*.antstudio.eu; default-src 'self'; object-src *; media-src *; child-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * blob: 'unsafe-inline'; 3 default-src 'self'; script-src 'self' 'unsafe-eval' https://*.cookiebot.eu https://consentcdn.cookiebot.com https://consent.cookiebot.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.bidtheatre.com https://*.proact.co.uk https://*.proact.nl https://*.proact.de https://*.proact.se https://widget.datablocks.se https://*.hotjar.com https://player.vimeo.com https://yoast.com https://*.facebook.net/ https://www.google.com https://*.gstatic.com https://*.licdn.com/ https://*.yourwoo.com https://*.albacross.com https://*.cision.com https://*.pardot.com https://cdnjs.cloudflare.com/ajax/ https://*.cookiebot.com https://*.cookiebot.eu https://*.conoa.se https://*.proact.ee https://*.proact.no https://*.proact.eu https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://widget.datablocks.se https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://hub.mfn.se/ https://widget.datablocks.se wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://*.linkedin.com https://vimeo.com https://www.facebook.com https://cdn.linkedin.oribi.io https://*.albacross.com https://*.yoast.com https://*.cision.com https://consentcdn.cookiebot.com https://*.cookiebot.eu https://*.google.com https://*.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://proactcalculator.hut3staging.com https://www.google.com https://www.facebook.com https://*.cookiebot.eu https://consentcdn.cookiebot.com https://go.proact.eu https://player.vimeo.com; frame-ancestors 'self'; img-src 'self' data: https://storage.cdn.lyyti.events https://*.doubleclick.net https://*.adsrvr.org https://*.casalemedia.com https://*.adswizz.com https://*.adnxs.com https://*.adform.net https://*.pubmatic.com https://*.smartadserver.com https://*.bidtheatre.com https://*.rubiconproject.com https://*.stickyadstv.com https://*.smartclip.net https://storage.mfn.se https://widget.datablocks.se https://*.cookiebot.eu https://*.cookiebot.com https://*.facebook.com https://*.linkedin.com https://*.yourwoo.com https://*.albacross.com https://*.proact.eu https://*.cision.com https://i.vimeocdn.com https://s.w.org https://www.google-analytics.com www.google.com google.com www.google.de google.de www.google.se google.se www.google.co.uk google.co.uk www.google.nl google.nl https://www.googletagmanager.com; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; 3 frame-ancestors 'self' *.altafiber.com *.hawaiiantel.com *.cdn.amplitude.com *.region1.analytics.google.com 3 default-src 'self'; connect-src 'self' *; font-src 'self' data: *; frame-src 'self' *; frame-ancestors 'none'; img-src 'self' data: *; media-src 'self' *; object-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'self' 'unsafe-inline'; 3 frame-ancestors 'self' https://app.makeswift.com 3 frame-ancestors 'self' my.enboarder.com nine.enboarder.io; 3 frame-ancestors 'self' https://www.baylismediabookings.co.uk/ 3 font-src https: data:; img-src https: data:; 3 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com www.googletagmanager.com www.google.com www.gstatic.com use.fontawesome.com google-analytics.com connect.facebook.net static.ads-twitter.com polyfill.io *.posthog.com;object-src 'self';style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com;img-src 'self' https://cdn.eigpropertyauctions.co.uk https://www.eigpropertyauctions.co.uk maps.gstatic.com google-analytics.com *.google-analytics.com www.facebook.com analytics.twitter.com maps.googleapis.com t.co data: www.googletagmanager.com *.posthog.com;media-src 'self' blob: https://cdn.eigpropertyauctions.co.uk;frame-src 'self' www.youtube.com www.google.com www.facebook.com *.elavon.com *.sagepay.com *.eigroup.co.uk;font-src 'self' fonts.googleapis.com fonts.gstatic.com;connect-src 'self' https://cdn.eigpropertyauctions.co.uk www.google.com google.com maps.googleapis.com ipapi.co *.google-analytics.com www.facebook.com *.posthog.com livestream.eigpropertyauctions.co.uk https://bidding.eigpropertyauctions.co.uk wss://livestream-service.eigpropertyauctions.co.uk livestream-service.eigpropertyauctions.co.uk wss://eig-liveauctions-uks-prod.service.signalr.net eig-liveauctions-uks-prod.service.signalr.net wss://eig-ams-livestream-prod.service.signalr.net eig-ams-livestream-prod.service.signalr.net;base-uri 'self';child-src 'self';form-action 'self' www.facebook.com;frame-ancestors 'self' *;report-uri https://eigroup.report-uri.com/r/d/csp/enforce 3 default-src 'self' https://unpkg.com/ https://*.unpkg.com/ https://*.revtrax.com https://irxcm.com/ https://*.pg.com/ https://*.azureedge.net/ https://*.promosvcs.com/ https://*.doubleclick.net/ https://p192909-holiday-scale2-stage.azurewebsites.net/ https://*.goskope.com/ https://*.cpnscdn.com/ https://*.ctfassets.net/ https://*.googleadservices.com/ https://*.segmanta.com/ https://*.pggoodeveryday.com/ https://*.pgsvc.com/ https://*.adsrvr.org/ https://*.google-analytics.com/ https://*.cloudinary.com/ https://*.tiktok.com/ https://*.rpxnow.com/ https://*.googleapis.com/ https://*.cloudfront.net/ https://*.gstatic.com/ https://*.googletagmanager.com/ https://*.segment.com/ https://*.tapad.com/ https://xxredda.s3.amazonaws.com/ https://*.incentives.gcp.pgcloud.com/ https://*.crazyegg.com https://*.rbi-umbrella.com/ blob:; font-src 'self' https://*.gstatic.com/ data: *.abtasty.com; img-src * 'self' https://*.ctfassets.net/ https://*.cpnscdn.com/ https://*.incentives.gcp.pgcloud.com/ blob: data: https: *.abtasty.com; script-src 'strict-dynamic' 'nonce-UCZHR29vZEV2ZXJ5ZGF5Q1NQU2VjdXJpdHk=' 'unsafe-inline' 'unsafe-eval' 'self' https://*.unpkg.com/ https://*.revtrax.com/ https://*.pg.com/ https://*.azureedge.net/ https://*.promosvcs.com/ https://p192909-holiday-scale2-stage.azurewebsites.net/ https://*.goskope.com/ https://*.onetrust.com/ https://*.tiktok.com/ https://*.ipify.org/ https://*.instagram.com/ https://*.moatads.com/ https://*.pghub.io/ https://*.tp88trk.com/ https://*.cookielaw.org/ https://*.crazyegg.com/ https://*.pepperjam.com/ https://*.facebook.net/ https://*.gstatic.com/ https://*.google.com/ https://*.lytics.io/ https://*.youtube.com/ https://*.googletagmanager.com/ https://*.google-analytics.com/ https://*.cloudfront.net/ https://*.segment.com/ https://*.adsrvr.org/ https://*.doubleclick.net/ https://*.cognigy.ai/ https://*.pypestream.com/ https://*.launchdarkly.com/ https://*.incentives.gcp.pgcloud.com/ blob: *.abtasty.com; style-src 'self' 'unsafe-inline' https://*.lytics.io/ https://*.googleapis.com/ https://*.incentives.gcp.pgcloud.com/ https://*.crazyegg.com *.abtasty.com https://cdn.jsdelivr.net; frame-src 'self' https://p192942-amj-madetosave-stage-dwahece3dnbwfuf0.centralus-01.azurewebsites.net/ https://*.centralus-01.azurewebsites.net/cvs https://*.centralus-01.azurewebsites.net/dollar-general https://*.centralus-01.azurewebsites.net/instacart https://*.centralus-01.azurewebsites.net/price-chopper https://*.centralus-01.azurewebsites.net/shop-rite https://*.centralus-01.azurewebsites.net/walgreens https://irxcm.com/ https://*.rbi-umbrella.com/ https://*.pinterest.com/ https://*.quotient.com/ https://*.googletagmanager.com/ https://*.revtrax.com/ https://*.ltimindtree.com/ https://p192909-holiday-scale2-stage.azurewebsites.net/ https://p192918-pgge-amj-rebate.azurewebsites.net https://p192934-olay-stage.azurewebsites.net/ https://*.onetrust.com/ https://*.ipify.org/ https://*.adsrvr.org/ https://*.lightning.force.com/ https://*.salesforce-sites.com/ https://*.tapad.com/ https://*.pepperjamnetwork.com/ https://*.pg.promosvcs.com/ https://*.facebook.com/ https://*.doubleclick.net/ https://*.coupons.com/ https://*.smartsource.com/ https://*.segmanta.com/ https://*.youtube.com/ https://*.youtube-nocookie.com/ https://*.zscaler.net/ https://*.crazyegg.com/ https://*.incentives.gcp.pgcloud.com/ https://*.pypestream.com/ https://*.static.lightning.force.com https://xxredda.s3.amazonaws.com/ https://p192918-pgge-amj-rebate-stage.azurewebsites.net/ https://*.azurewebsites.net.rproxy.goskope.com/ https://*.pggoodeveryday.com https://*.pg.com/ https://*.jebbit.com https://*.pghub.io/ *.abtasty.com https://safe.menlosecurity.com/ https://*.menlosecurity.com/ https://analytics.pgbrandsaver.com https://*.pgbrandsaver.com https://192956-pgbs-holiday-stage-hbcfdvc2e0arardn.centralus-01.azurewebsites.net https://r192956.pg.promosvcs.com/ https://r192958-nfl-stage-hgabhvaxgafye5aw.centralus-01.azurewebsites.net https://r192958-nfl-stage-hgabhvaxgafye5aw.centralus-01.azurewebsites.net/walgreens https://r192958.pg.promosvcs.com/ https://r192958.pg.promosvcs.com/walgreens https://r192960.pg.promosvcs.com https://r192960.pg.promosvcs.com/walgreens https://r192960-pgbs-amj-stage-avg0f6dpdhf6dhcs.centralus-01.azurewebsites.net/en-US https://r192960-pgbs-amj-stage-avg0f6dpdhf6dhcs.centralus-01.azurewebsites.net/walgreens https://r192960-pgbs-amj-stage-avg0f6dpdhf6dhcs.centralus-01.azurewebsites.net https://r192962.pg.promosvcs.com/walgreens https://r192962.pg.promosvcs.com https://r192962-mls-stage-f4d4fggbdga8fmhu.centralus-01.azurewebsites.net/walgreens https://r192962-mls-stage-f4d4fggbdga8fmhu.centralus-01.azurewebsites.net/en-US https://r192962-mls-stage-f4d4fggbdga8fmhu.centralus-01.azurewebsites.net *.opendns.com *.sse.cisco.com *.ciscosecureaccess.cn gateway.id.swg.umbrella.com https://r192962-mls-stage-f4d4fggbdga8fmhu.centralus-01.azurewebsites.net/ https://r192963-pgbs-bts-stage-b2a9dwe8ekh5gcfw.centralus-01.azurewebsites.net https://r192963.pg.promosvcs.com https://r192963-pgbs-bts-stage-b2a9dwe8ekh5gcfw.centralus-01.azurewebsites.net/walgreens https://r192963.pg.promosvcs.com/walgreens http://api.segmanta.com/; object-src 'self'; connect-src 'self' https://*.bing.com/ https://bat.bing.com/p/conversions/c/i https://*.rudderstack.com https://cdn.rudderlabs.com https://*.pinterest.com/ https://*.pg.com/ https://*.revtrax.com/ https://*.irxcm.com/ https://*.google-analytics.com/ https://*.visualstudio.com/ https://*.azureedge.net/ https://*.doubleclick.net/ https://*.pg-campaigns.com/ https://*.launchdarkly.com/ https://*.pypestream.com/ wss://*.cognigy.ai/ https://*.onetrust.com/ https://*.ipify.org/ https://*.instagram.com/ https://*.coupon.pg.com/ https://*.zscaler.net/ https://*.contentful.com/ https://*.moatads.com/ https://*.cpnscdn.com/ https://*.ctfassets.net/ https://*.yahoo.com/ https://*.shophermedia.net/ https://*.pghub.io/ https://*.tp88trk.com/ https://*.pepperjam.com/ https://*.facebook.com/ https://*.onetrust.io/ https://*.crazyegg.com/ https://*.cookielaw.org/ https://*.youtube.com/ https://*.rubiconproject.com/ https://*.pg.com/ https://*.adsrvr.org/ https://*.gstatic.com/ https://*.amazon-adsystem.com/ https://*.lytics.io/ https://*.segment.io/ https://*.segment.com/ https://*.googleadservices.com/ https://*.segmanta.com/ https://*.pggoodeveryday.com/ https://*.pgsvc.com/ https://*.doubleclick.net/ https://*.cloudinary.com/ https://*.tiktok.com/ https://*.rpxnow.com/ https://*.cloudfront.net/ https://*.tapad.com/ https://*.google.com/ https://*.google.co.in/ https://xxredda.s3.amazonaws.com/ https://*.incentives.gcp.pgcloud.com/ https://*.addrexx10.com/ https://*.gcp.pgcloud.com https://*.reddit.com https://www.redditstatic.com https://*.tiktokw.us https://*.bing-int.com https://*.pgbrandsaver.com *.abtasty.com *.outbrain.com *.pinimg.com; frame-ancestors 'self' https://*.centralus-01.azurewebsites.net/ https://*.centralus-01.azurewebsites.net/cvs https://*.centralus-01.azurewebsites.net/dollar-general https://*.centralus-01.azurewebsites.net/instacart https://*.centralus-01.azurewebsites.net/price-chopper https://*.centralus-01.azurewebsites.net/shop-rite https://*.centralus-01.azurewebsites.net/walgreens https://*.pg.com/ https://p192942-amj-madetosave-stage-dwahece3dnbwfuf0.centralus-01.azurewebsites.net/ https://p192918-pgge-amj-rebate-stage.azurewebsites.net/ https://*.pg.promosvcs.com/ https://192956-pgbs-holiday-stage-hbcfdvc2e0arardn.centralus-01.azurewebsites.net https://r192956.pg.promosvcs.com/ https://r192958-nfl-stage-hgabhvaxgafye5aw.centralus-01.azurewebsites.net https://r192958-nfl-stage-hgabhvaxgafye5aw.centralus-01.azurewebsites.net/walgreens https://r192958.pg.promosvcs.com/ https://r192958.pg.promosvcs.com/walgreens https://r192960.pg.promosvcs.com https://r192960.pg.promosvcs.com/walgreens https://r192960-pgbs-amj-stage-avg0f6dpdhf6dhcs.centralus-01.azurewebsites.net/en-US https://r192960-pgbs-amj-stage-avg0f6dpdhf6dhcs.centralus-01.azurewebsites.net/walgreens https://r192962-mls-stage-f4d4fggbdga8fmhu.centralus-01.azurewebsites.net/en-US https://r192962-mls-stage-f4d4fggbdga8fmhu.centralus-01.azurewebsites.net/walgreens https://r192962.pg.promosvcs.com https://r192962.pg.promosvcs.com/walgreens https://r192962-mls-stage-f4d4fggbdga8fmhu.centralus-01.azurewebsites.net https://r192963-pgbs-bts-stage-b2a9dwe8ekh5gcfw.centralus-01.azurewebsites.net https://r192963-pgbs-bts-stage-b2a9dwe8ekh5gcfw.centralus-01.azurewebsites.net/walgreens https://r192963.pg.promosvcs.com https://r192963.pg.promosvcs.com/walgreens 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self'; worker-src 'self' blob:; upgrade-insecure-requests 3 default-src 'none'; base-uri 'self'; child-src https://www.youtube-nocookie.com/embed/; connect-src 'self' wss://nordicbytes.org https://api.themoviedb.org/; font-src 'self' data: https: fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https: image.tmdb.org via.placeholder.com/400x600; manifest-src 'self'; media-src 'self' data: https: https://www.youtube-nocookie.com/embed/; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https: gitcdn.xyz github.io *.github.io raw.githubusercontent.com github.com; worker-src 'self' blob:; block-all-mixed-content; upgrade-insecure-requests 3 default-src 'self'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.culturaldistrict.org *.typeform.com *.googleapis.com *.googletagmanager.com *.formstack.com *.pittsburghsymphony.org *.citytheatrecompany.org https://cdnjs.cloudflare.com *.unpkg.com *.typekit.net *.gbox.me *.addressy.com https://cdn.jsdelivr.net https://fonts.bunny.net; connect-src 'self' *.amazonaws.com *.tidio.co *.googlesyndication.com *.formstack.com *.addressy.com https://trustarts.queue-it.net https://analytics.tiktok.com *.purechat.com https://adservice.google.com https://analytics.google.com *.postcodeanywhere.co.uk https://stats.g.doubleclick.net *.facebook.com *.google-analytics.com *.googleapis.com https://online.anyflip.com https://checkoutshopper-live-us.adyen.com/ *.typeform.com *.datadome.co *.captcha-delivery.com https://rum.browser-intake-datadoghq.com https: wss:; img-src cdnjs.cloudflare.com https: data:; font-src 'self' *.culturaldistrict.org https://fonts.gstatic.com https://fonts.bunny.net *.tidiochat.com *.tidio.co *.formstack.com https://use.typekit.net; object-src 'none'; media-src 'self' *.tidiochat.com *.tidio.co *.culturaldistrict.org; frame-src 'self' *.googletagmanager.com *.approveforgood.com *.captcha-delivery.com *.applytojob.com *.doubleclick.net https://aa.trkn.us *.culturaldistrict.org *.formstack.com *.googlesyndication.com *.jotform.com *.pittsburghsymphony.org *.citytheatrecompany.org *.typeform.com *.youtube.com *.youtube-nocookie.com https://w.soundcloud.com *.issuu.com https://insight.adsrvr.org *.vimeo.com *.facebook.com *.google.com *.recaptcha.net https://online.anyflip.com *.albumizr.com https://checkoutshopper-live-us.adyen.com https://trustarts.queue-it.net; frame-ancestors 'self'; worker-src blob:; 3 default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' blob:; font-src 'self' data: https://*.gstatic.com/ https://fonts.googleapis.com/; img-src * data:; media-src 'self';object-src 'none'; base-uri 'self';frame-ancestors 'self' https://www.jobs-im-allgaeu.de;form-action 'self' https://*.tq-group.com https://*.facebook.com; 3 default-src 'self' data: blob: *.conac.cn *.gov.cn *.jiathis.com *.baidu.com *.bshare.cn *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 3 frame-ancestors 'self' https://www.sbb.ch 3 frame-ancestors https://*.wfscorp.com 'self'; report-uri /report-csp-violation; upgrade-insecure-requests 3 frame-ancestors 'self' *.xcatalyst.com *.authorize.net 3 default-src 'self' data: 'unsafe-inline' https://medien.bkm.bund.de https://piwik.itzbund.de https://matomo03.itzbund.de 3 base-uri 'self' https:; font-src 'self' 'unsafe-inline' https: data:; form-action 'self' https:; frame-ancestors 'self'; img-src 'self' 'unsafe-inline' data: blob: https:; object-src 'self' data: https:; script-src-attr 'self' 'unsafe-inline' https:; style-src 'self' https: 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: localhost:8085 *.cookieinformation.com *.googletagmanager.com *.googleapis.com *.ingest.de.sentry.io; upgrade-insecure-requests; frame-src 'self' data: https: https://hr-skyen.dk *.vimeo.com *.youtube.com; 3 default-src 'self' https: blob:; style-src 'self' 'unsafe-inline' *.ensemblevideo.com *.ntst.com *.marketo.net *.marketo.com *.typekit.net *.bootstrapcdn.com *.googleapis.com *.twitter.com *.twimg.com *.cdn-prod.securiti.ai *.securiti.ai *.app.securiti.ai *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' fast.wistia.net fast.wistia.com blob: *.marketo.net *.marketo.com *.mktoresp.com *.jquery.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.twitter.com *.twimg.com *.sounder.fm *.facebook.net *.ntst.com *.licdn.com dg0hgb42195s9.cloudfront.net *.google.com *.gstatic.com *.tagmanager.google.com *.pagead2.googlesyndication.com pagead2.googlesyndication.com googleads.g.doubleclick.net googletagmanager.com googleadservices.com google.com *.6sc.co *.6sense.com rlcdn.com js.driftt.com *.js.driftt.com *.log.api.drift.com js.zi-scripts.com ws.zoominfo.com cdn.cookielaw.org *.cdn.cookielaw.org geolocation.onestrust.org *.geolocation.onestrust.org geolocation.onetrust.com *.geolocation.onetrust.com privacyportal.onetrust.com browser.sentry-cdn.com tr.capterra.com; object-src 'self'; connect-src 'self' px.ads.linkedin.com stats.g.doubleclick.net analytics.google.com *.wistia.com *.litix.io *.ntst.com dg0hgb42195s9.cloudfront.net wss://a1kkx7muourfsi-ats.iot.us-east-1.amazonaws.com *.mktoutil.com *.mktoresp.com *.google-analytics.com *.googleapis.com *.gstatic.com fast.wistia.net *.fast.wistia.net *.googletagmanager.com *.analytics.google.com *.pagead2.googlesyndication.com pagead2.googlesyndication.com *.g.doubleclick.net *.google.com google.com googleads.g.doubleclick.net googletagmanager.com *.gartnerdigitalmarkets.com googleadservices.com *.6sc.co *.js.driftt.com *.log.api.drift.com js.zi-scripts.com ws.zoominfo.com cdn.cookielaw.org *.cdn.cookielaw.org geolocation.onestrust.org *.geolocation.onestrust.org geolocation.onetrust.com *.geolocation.onetrust.com privacyportal.onetrust.com *.onetrust.com browser.sentry-cdn.com secure.adnxs.com epsilon.6sense.com *.6sense.com tr.capterra.com data:; font-src 'self' *.bootstrapcdn.com *.typekit.net *.fonts.gstatic.com *.gstatic.com data:; img-src * *.jwpltx.com *.google-analytics.com *.googletagmanager.com *.ssl.gstatic.com *.g.doubleclick.net *.google.com *.pagead2.googlesyndication.com *.googleads.g.doubleclick.net googleadservices.com *.gartnerdigitalmarkets.com googleadservices.com google.com data:; frame-ancestors 'self' *.ensemblevideo.com *.marketo.com *.marketo.net netsmart.highspot.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://unpkg.com https://www.googletagmanager.com https://browser.sentry-cdn.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://cdn.onesignal.com https://*.onesignal.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://*.cdnshark.de https://www.googletagmanager.com https://*.google-analytics.com data:; connect-src 'self' https://eu.i.posthog.com https://eu-assets.i.posthog.com https://*.sentry.io https://onesignal.com https://*.onesignal.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com; media-src 'self' https://*.cdnshark.de; frame-src 'self' https://maps.google.com https://www.google.com 3 frame-ancestors 'self' *.bluecatnetworks.com bluecat.pathfactory.com bluecat.lookbookhq.com; 3 frame-ancestors 'self' https://*.prismic.io; 3 script-src https://avdonl-s-checkout-fe.azureedge.net/cdn/static/js/main.js https://avdonl-p-checkout-fe.azureedge.net/cdn/static/js/main.js https://checkout-cdn.avarda.com/cdn/static/js/main.js https://stage.checkout-cdn.avarda.com/cdn/static/js/main.js https://pay-frame.avarda.com/cdn/v2/pay-frame.js https://bat.bing.com https://*.clerk.io https://*.commerce-connector.com https://policy.app.cookieinformation.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.eu https://api.coolrunner.dk https://*.criteo.net https://*.criteo.com 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https://*.med24.dk/ blob: https://*.med24.no/ blob: https://*.med24.se/ https://ga.jspm.io/npm:es-module-shims@1.10.0/dist/es-module-shims.js https://connect.facebook.net https://*.getsitecontrol.com 'unsafe-eval' 'unsafe-inline' https://optimize.google.com/ https://www.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://translate.google.com https://tagmanager.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://googleads.g.doubleclick.net https://widget.intercom.io https://js.intercomcdn.com https://*.klarna.com https://*.klarnacdn.net https://*.playground.klarna.com https://*.playground.klarnaevt.com https://chimpstatic.com https://at.med24.dk https://at.med24.se https://at.med24.no https://matomo.med24.dk https://matomo.med24.se https://matomo.med24.no https://s.kk-resources.com https://*.fls.doubleclick.net https://*.crazyegg.com https://js.go2sdk.com/v2/tune.js https://*.mouseflow.com 'unsafe-eval' 'unsafe-inline' https://*.perfectcorp.com 'unsafe-eval' 'unsafe-inline' https://checkout.reepay.com https://*.sleeknote.com https://widget.trustpilot.com *.videoly.co *.videoly.net *.wistia.com *.wistia.net https://www.youtube.com/iframe_api https://www.youtube.com/s/player/5683fc5e/www-widgetapi.vflset/www-widgetapi.js *.ytimg.com *.youtube-nocookie.com *.youtube.com; font-src https://stage.checkout-cdn.avarda.com https://checkout-cdn.avarda.com https://avdonl-s-checkout-fe.azureedge.net/cdn/ https://avdonl-s-checkout-fe.azureedge.net/cdn/ 'self' data: https://*.getsitecontrol.com https://*.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com https://matomo.med24.dk https://matomo.med24.se https://matomo.med24.no https://*.mouseflow.com https://*.perfectcorp.com; img-src https://stage.checkout-cdn.avarda.com https://checkout-cdn.avarda.com https://avdonl-s-checkout-fe.azureedge.net/cdn/images/ https://avdonl-p-checkout-fe.azureedge.net/cdn/images/ https://avarda.com/media/ https://bat.bing.com https://*.commerce-connector.com https://*.criteo.net https://*.criteo.com 'self' data: https://www.facebook.com https://*.getsitecontrol.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://translate.google.com https://stats.g.doubleclick.net https://www.google.com https://www.google.dk https://www.google.se https://www.google.no https://www.google.de https://www.google.co.uk https://ade.googlesyndication.com https://*.analytics.google.com https://static.intercomassets.com https://js.intercomcdn.com https://gifs.intercomcdn.com https://downloads.intercomcdn.com https://*.klarna.com https://*.klarnacdn.net https://*.playground.klarnaevt.com https://s.kelkoogroup.net https://collect.med24.dk https://collect.med24.no https://collect.med24.se https://med24.dk https://med24.no https://med24.se https://www.med24.dk https://www.med24.no https://www.med24.se https://matomo.med24.dk https://matomo.med24.se https://matomo.med24.no https://miljoevenlig-pakning.dk https://*.doubleclick.net https://*.mouseflow.com https://www.partner-ads.com https://*.perfectcorp.com https://*.makeupar.com https://*.beautycircle.com https://*.sleeknote.com *.wistia.com *.wistia.net *.videoly.co https://i.ytimg.com; frame-src https://card-payment-frame.stage.avarda.com https://card-payment-frame.production.avarda.com https://*.commerce-connector.com https://policy.app.cookieinformation.com https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://*.criteo.net https://*.criteo.com 'self' https://www1.emarsys.net https://connect.facebook.net https://www.facebook.com https://*.getsitecontrol.com https://optimize.google.com/ https://www.google.com https://www.googletagmanager.com https://adservice.google.com/ https://*.klarna.com https://*.klarnacdn.net https://collect.med24.dk https://collect.med24.no https://collect.med24.se https://form.jotform.com https://submit.jotformeu.com https://*.fls.doubleclick.net https://*.doubleclick.net https://*.mouseflow.com https://*.netseidbroker.dk https://netseidbroker.pp.mitid.dk https://*.perfectcorp.com https://checkout.reepay.com https://*.sleeknote.com https://widget.trustpilot.com *.videoly.net *.wistia.com *.wistia.net https://www.youtube.com/ https://www.youtube-nocookie.com; default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://optimize.google.com/ https://*.googleapis.com https://tagmanager.google.com https://www.googletagmanager.com https://matomo.med24.dk https://matomo.med24.se https://matomo.med24.no https://*.sleeknote.com; connect-src 'self' https://*.getsitecontrol.com https: wss://*.intercom.io https://*.mouseflow.com https://*.perfectcorp.com https://*.typesense.net *.videoly.co; object-src 'self'; worker-src 'self'; media-src data: https://*.gstatic.com; child-src https://*.getsitecontrol.com https://*.mouseflow.com https://*.perfectcorp.com 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.facebook.net http://*.facebook.net https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.doubleclick.net https://slmc-it-chatbot-prod-1.web.app; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com; font-src 'self' data: https://*.gstatic.com; img-src 'self' data: https://*.facebook.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://*.google.com.sg https://*.google.com.ph https://*.doubleclick.net https://storage.googleapis.com https://slmc-it-chatbot-prod-1.web.app; frame-src 'self' https://*.google.com https://*.doubleclick.net; connect-src 'self' https://*.facebook.com https://*.google-analytics.com https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://identitytoolkit.googleapis.com https://backend-svc-230345953695.asia-southeast1.run.app https://chat-backend.stlukes.com.ph; 3 form-action 'self',frame-ancestors 'self' 3 default-src 'self' http: https: data: blob: 'unsafe-inline'; script-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 3 default-src 'self'; form-action 'self'; object-src 'none'; img-src 'self' https: data:; media-src 'self' https: data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget.taggbox.com https://cloud.taggbox.com; font-src 'self' https: data:; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' https:; connect-src 'self' https:; frame-ancestors https://v3-admin.porsche-holding.com; upgrade-insecure-requests; block-all-mixed-content; frame-src 'self' https://tr.snapchat.com https://*.youtube.com https://*.youtube-nocookie.com https://*.google.com https://*.gstatic.com https://td.doubleclick.net https://www.googletagmanager.com https://widget.taggbox.com https://www.instagram.com https://platform.twitter.com https://*.x.com https://*.facebook.com https://www.linkedin.com; 3 default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' 'report-sample' https://www.googletagmanager.com/gtm.js; style-src 'self' data: 'unsafe-inline' 'report-sample'; img-src 'self' data: https://content.bigbluedoor.net; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://content.bigbluedoor.net; media-src 'self'; object-src 'none'; frame-src 'self'; worker-src 'none'; base-uri 'self'; manifest-src 'self'; 3 frame-ancestors 'self' https://idee-shop.com https://www.idee-shop.com http://wolle-roedel.com https://www.wolle-roedel.com https://rico-design.com https://www.rico-design.com 3 object-src 'self'; frame-ancestors 'self' 3 default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval' https://www.youtube.com/iframe_api https://dec.azureedge.net/ https://munchkin.marketo.net https://js.hs-scripts.com https://js.hs-analytics.net https://contents-calculator.swintonassets.uk/ https://accident-map.swintonassets.uk/ https://api.tiles.mapbox.com https://burglary-map.swintonassets.uk https://crime-map.swintonassets.uk https://complaintsform.swintonassets.uk https://claimsform.swintonassets.uk https://oyd.swintonassets.uk https://quiz.tryinteract.com/ https://api.contents-calculator.swintonassets.uk https://infographic.swintonassets.uk https://flo.uri.sh/ https://www.youtube.com/ https://chat.atlantagroup.co.uk/ https://prod.respondselfserve.com https://www.google-analytics.com/ https://www.google.co.uk https://schema.org https://ict.infinity-tracking.net https://track.omguk.com https://googleleads.g.doubleclick.net https://9210165.fls.doubleclick.net https://secure.adnxs.com/px https://secure.quantserve.com/ https://rules.quantcount.com/ https://ppc.swintonassets.uk https://connect.facebook.net/ https://acsbap.com/apps/ https://acsbapp.com/apps/ https://secure.servicetick.com/ https://widget.trustpilot.com https://register.feefo.com/ https://bat.bing.com/ https://script.infinity-tracking.com https://googleads.g.doubleclick.net https://edge.quantserve.com https://cdn-launching.servicetick.com https://ad.doubleclick.net https://rules.quantcount.com https://pixel.quantserve.com https://pagead2.googlesyndication.com https://ppc-v3.swintonassets.uk https://ppc-v2.swintonassets.uk https://code.jquery.com https://almanac.jaywing.com https://mazda.almanac.jaywing.com https://*.civiccomputing.com https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://*.googlesyndication.com https://www.clarity.ms https://static.hotjar.com https://script.hotjar.com https://compare.defaqto.com/ https://www.youtube-nocookie.com https://swintonchat.widget.custhelp.com https://dqm.crownpeak.com https://swintonchat.custhelp.com https://www.googleanalytics.com https://www.googleoptimize.com https://optimize.google.com https://www.rnengage.com https://snippet.maze.co/ *.carolenash.com *.carolenash.ie *.swinton.co.uk *.wearemarmalade.co.uk *.autonetinsurance.co.uk *.safeguarduk.co.uk *.scenicinsurance.co.uk *.entirecoverinsurance.co.uk *.insurance4carhire.com *.bewiser.co.uk *.mackenziehodgson.co.uk *.expressbikeinsurance.com *.paymentshield.co.uk *.insurance.harley-davidson.uk *.insurancefactory.co.uk *.lloydlatchford.co.uk *.atlantagroup.co.uk *.wisedriving.com *.igo4.com https://dynamic.criteo.com https://dynamic.criteo.net https://smct.co https://js.smct.co https://smct.io https://js.smct.io *.bmw-motorrad-insurance.com https://*.bmw-motorrad-insurance.ie/ https://stapecdn.com https://cdnjs.cloudflare.com https://webchat.helpshift.com https://*.webchat.helpshift.com *.healthy-pets.co.uk https://lptag.liveperson.net https://cdn.lpsnmedia.net https://accdn.lpsnmedia.net https://lpcdn.lpsnmedia.net https://lo.v.liveperson.net https://*.youtube.com https://static.zdassets.com https://api.eu-1.smooch.io *.googletagmanager.com www.googletagmanager.com https://region1.google-analytics.com https://www.tiktok.com/embed.js https://www.opinionstage.com https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/falcon/embed/embed_v1.0.12.js https://iframely.net/files/tiktok-embed.js https://maps.googleapis.com https://maps.gstatic.com https://cdn.prod.uk.five9.net/ https://assets.adobedtm.com https://app.five9.eu *.cginsurance.com https://*.clarity.ms https://c.bing.com https://ccaip-test-brok-swdofud.ew2.ccaiplatform.com https://ccaip-broking-tcvrly5.ew2.ccaiplatform.com https://equote2staging.appliedequoteuat.com/integration/scripts/iframeResizer.min.js https://equote2staging.appliedequoteuat.com/integration/scripts/equote-iframe.min.js https://equote2.appliedequote.com/integration/scripts/iframeResizer.min.js https://equote2.appliedequote.com/integration/scripts/equote-iframe.min.js https://websdk.ujet.co/v3/widget.js 'self' https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js ; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://*.googleapis.com https://*.gstatic.com https://*.googlesyndication.com https://use.fontawesome.com https://fast.fonts.net https://cdn-launching.servicetick.com https://ppc-v3.swintonassets.uk https://optimize.google.com https://fonts.googleapis.com https://swintonchat.widget.custhelp.com https://accident-map.swintonassets.uk https://complaintsform.swintonassets.uk https://ppc-v2.swintonassets.uk https://ppc.swintonassets.uk https://claimsform.swintonassets.uk https://oyd.swintonassets.uk https://contents-calculator.swintonassets.uk https://api.contents-calculator.swintonassets.uk https://burglary-map.swintonassets.uk https://infographic.swintonassets.uk https://crime-map.swintonassets.uk https://api.tiles.mapbox.com https://maxcdn.bootstrapcdn.com/ https://snippet.maze.co/ *.carolenash.com *.carolenash.ie *.swinton.co.uk *.wearemarmalade.co.uk *.safeguarduk.co.uk *.scenicinsurance.co.uk *.entirecoverinsurance.co.uk *.insurance4carhire.com *.bewiser.co.uk *.mackenziehodgson.co.uk *.expressbikeinsurance.com *.paymentshield.co.uk *.insurance.harley-davidson.uk *.insurancefactory.co.uk *.lloydlatchford.co.uk *.atlantagroup.co.uk *.autonetinsurance.co.uk *.bmw-motorrad-insurance.com *.wisedriving.com *.igo4.com https://cdnjs.cloudflare.com *.healthy-pets.co.uk https://lptag.liveperson.net https://cdn.lpsnmedia.net https://accdn.lpsnmedia.net https://lpcdn.lpsnmedia.net https://lo.v.liveperson.net *.googletagmanager.com www.googletagmanager.com https://region1.google-analytics.com https://www.opinionstage.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.prod.uk.five9.net/ https://app.five9.eu *.cginsurance.com https://*.clarity.ms https://c.bing.com https://equote2staging.appliedequoteuat.com/integration/css/equote-iframe.min.css https://equote2.appliedequote.com/integration/css/equote-iframe.min.css https://widget.trustpilot.com 'self' https://cdn.insight.sitefinity.com 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com https://*.dec.sitefinity.com https://*.google.com https://*.google.co.uk https://*.doubleclickbygoogle.com https://*.doubleclick.com https://*.doubleclick.net https://*.googleads.g.doubleblick.net https://*.googleadservices.com https://*.googletagservices.com https://*.googlesyndication.com https://*.app-measurement.com *.eloqua.com https://track.hubspot.com https://bat.bing.com https://secure.adnxs.com https://ad.doubleclick.net https://pxl.qccerttest.com https://pixel.quantserve.com https://cm.g.doubleclick.net https://ib.adnxs.com https://us-u.openx.net https://stags.bluekai.com https://dpm.demdex.net https://idsync.rlcdn.com https://ups.analytics.yahoo.com https://dsum-sec.casalemedia.com https://ce.lijit.com https://x.bidswitch.net https://beacon.krxd.net https://rtb-csync.smartadserver.com https://sync.search.spotxchange.com https://aa.agkn.com https://e1.emxdgt.com https://sync.crwdcntrl.net https://eb2.3lift.com https://sync.1rx.io https://cs.lkqd.net https://sync.taboola.com https://quantcast.partners.tremorhub.com https://sync.teads.tv https://sync.outbrain.com https://router.infolinks.com https://cms.quantserve.com https://ad.yieldlab.net https://web1.acsbapp.com https://adservice.google.com *.entirecoverinsurance.co.uk https://script.hotjar.com https://www.hotjar.com https://www.google-analytics.com https://optimize.google.com https://track.omguk.com https://www.rnengage.com https://www.carolenash.com https://public.flourish.studio *.just-motorcycleinsurance.com *.autonetinsurance.co.uk *.carolenash.com *.carolenash.ie *.swinton.co.uk *.wearemarmalade.co.uk *.safeguarduk.co.uk *.scenicinsurance.co.uk *.insurance4carhire.com *.bewiser.co.uk *.mackenziehodgson.co.uk *.expressbikeinsurance.com *.paymentshield.co.uk *.insurance.harley-davidson.uk *.insurancefactory.co.uk *.lloydlatchford.co.uk *.atlantagroup.co.uk *.wisedriving.com *.igo4.com https://googletagmanager.com https://google.com https://google.co.uk https://dai.google.com https://adsense.google.com https://adsense.google.co.uk https://region1.app-measurement.com https://eu.app-measurement.com https://static.hotjar.com https://accident-map.swintonassets.uk https://complaintsform.swintonassets.uk https://ppc-v3.swintonassets.uk https://ppc-v2.swintonassets.uk https://ppc.swintonassets.uk https://claimsform.swintonassets.uk https://oyd.swintonassets.uk https://contents-calculator.swintonassets.uk https://api.contents-calculator.swintonassets.uk https://burglary-map.swintonassets.uk https://infographic.swintonassets.uk https://crime-map.swintonassets.uk https://api.tiles.mapbox.com https://maxcdn.bootstrapcdn.com/ 'unsafe-inline' https://dynamic.criteo.com https://dynamic.criteo.net https://smct.co https://cdn.smct.co https://smct.io https://cdn.smct.io https://px.smct.co https://px.smct.io https://ep.smct.co https://ep.smct.io https://snippet.maze.co/ *.bmw-motorrad-insurance.com *.healthy-pets.co.uk https://atlantagroup.zendesk.com www.google.com *.googletagmanager.com www.googletagmanager.com https://region1.google-analytics.com https://www.opinionstage.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.lpsnmedia.net https://cdn.prod.uk.five9.net/ https://dpm.demdex.net/ https://*.scene7.com/is/image/Targetbglgroup/ https://bisil.sc.omtrdc.net/ https://app.five9.eu *.cginsurance.com https://*.clarity.ms https://c.bing.com https://equote2staging.appliedequoteuat.com https://equote2.appliedequote.com https://ccaip-test-brok-swdofud.ew2.ccaiplatform.com https://ccaip-broking-tcvrly5.ew2.ccaiplatform.com https://widget.trustpilot.com 'self' https://cdn.insight.sitefinity.com ; font-src 'self' kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://use.fontawesome.com https://acsbapp.com https://script.hotjar.com https://fast.fonts.net https://fonts.gstatic.com https://flo.uri.sh/ *.carolenash.com *.carolenash.ie *.swinton.co.uk *.wearemarmalade.co.uk *.safeguarduk.co.uk *.scenicinsurance.co.uk *.entirecoverinsurance.co.uk *.insurance4carhire.com *.bewiser.co.uk *.mackenziehodgson.co.uk *.expressbikeinsurance.com *.paymentshield.co.uk *.insurance.harley-davidson.uk *.insurancefactory.co.uk *.lloydlatchford.co.uk *.atlantagroup.co.uk *.wisedriving.com *.igo4.com https://maxcdn.bootstrapcdn.com/ *.autonetinsurance.co.uk https://fonts.smct.co https://fonts.smct.io https://snippet.maze.co/ *.bmw-motorrad-insurance.com *.healthy-pets.co.uk https://www.opinionstage.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.prod.uk.five9.net/ https://app.five9.eu *.cginsurance.com https://*.clarity.ms https://c.bing.com https://widget.trustpilot.com; frame-src https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://widget.trustpilot.com https://prod.respondselfserve.com https://*.doubleclick.com https://*.doubleclick.net https://*.googlesyndication.com https://www.youtube.com https://www.facebook.com https://compare.defaqto.com/ https://webchat.helpshift.com https://*.webchat.helpshift.com https://player.vimeo.com https://optimize.google.com https://datawrapper.dwcdn.net https://flo.uri.sh/ *.carolenash.com *.carolenash.ie *.swinton.co.uk *.wearemarmalade.co.uk *.safeguarduk.co.uk *.scenicinsurance.co.uk *.entirecoverinsurance.co.uk *.insurance4carhire.com *.bewiser.co.uk *.mackenziehodgson.co.uk *.expressbikeinsurance.com *.paymentshield.co.uk *.insurance.harley-davidson.uk *.insurancefactory.co.uk *.lloydlatchford.co.uk *.atlantagroup.co.uk *.wisedriving.com *.igo4.com https://static.hotjar.com https://script.hotjar.com https://accident-map.swintonassets.uk https://complaintsform.swintonassets.uk https://ppc-v3.swintonassets.uk https://ppc-v2.swintonassets.uk https://ppc.swintonassets.uk https://claimsform.swintonassets.uk https://oyd.swintonassets.uk https://contents-calculator.swintonassets.uk https://api.contents-calculator.swintonassets.uk https://burglary-map.swintonassets.uk https://infographic.swintonassets.uk https://crime-map.swintonassets.uk https://maxcdn.bootstrapcdn.com/ *.autonetinsurance.co.uk https://dynamic.criteo.com https://dynamic.criteo.net https://smct.co https://smct.io https://ls.smct.co https://ls.smct.io https://d2d7do8qaecbru.cloudfront.net https://www.veed.io/ *.bmw-motorrad-insurance.com *.healthy-pets.co.uk https://cdn.lpsnmedia.net https://lpcdn.lpsnmedia.net https://lo.idp.liveperson.net https://lo.msg.liveperson.net https://lo.msghist.liveperson.net https://lo.tokenizer.liveperson.net https://lo.shiftstatus.liveperson.net https://*.youtube.com https://t.maze.co/ https://www.opinionstage.com https://www.google.com https://cdn.prod.uk.five9.net/ https://bisil.demdex.net https://app.five9.eu *.cginsurance.com https://*.clarity.ms https://c.bing.com https://ccaip-test-brok-swdofud.ew2.ccaiplatform.com https://ccaip-broking-tcvrly5.ew2.ccaiplatform.com https://websdk.ujet.co/ https://www.googletagmanager.com https://equote2staging.appliedequoteuat.com https://equote2.appliedequote.com 'self'; connect-src accounts.google.com *.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com/ 'unsafe-inline' 'unsafe-eval' chat.atlantagroup.co.uk https://cdn.acsbapp.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://web.lon.infinity-tracking.com https://nas.lon.infinity-tracking.com https://ict.infinity-tracking.net https://googleads4.g.doubleclick.net *.mackenziehodgson.co.uk *.expressbikeinsurance.com *.insurance.harley-davidson.uk *.carolenash.com *.carolenash.ie *.atlantagroup.co.uk *.safeguarduk.co.uk *.scenicinsurance.co.uk *.swinton.co.uk *.insurance4carhire.com *.comparemybikeinsurance.com *.kdbmedicals.co.uk *.insurancefactory.co.uk *.lloydlatchford.co.uk *.igo4.com https://nas.lon.infinity-tracking.net https://*.civiccomputing.com https://*.google.com https://*.google.co.uk https://*.doubleclickbygoogle.com https://*.doubleclick.com https://*.doubleclick.net https://*.googleadservices.com https://*.googletagservices.com https://*.app-measurement.com https://*.googlesyndication.com https://a.clarity.ms https://vc.hotjar.io https://pixel.quantcount.com https://api.crownpeak.net *.entirecoverinsurance.co.uk https://surveystats.hotjar.io https://content.hotjar.io wss://wsp27.hotjar.com wss://ws.hotjar.com https://analytics.paymentshield.co.uk *.autonetinsurance.co.uk *.paymentshield.co.uk *.wearemarmalade.co.uk *.bewiser.co.uk *.wisedriving.com https://doubleclick.net https://dai.google.com https://adsense.google.com https://adsense.google.co.uk https://region1.app-measurement.com https://eu.app-measurement.com https://accident-map.swintonassets.uk https://complaintsform.swintonassets.uk https://ppc-v3.swintonassets.uk https://ppc-v2.swintonassets.uk https://ppc.swintonassets.uk https://claimsform.swintonassets.uk https://oyd.swintonassets.uk https://contents-calculator.swintonassets.uk https://burglary-map.swintonassets.uk https://infographic.swintonassets.uk https://crime-map.swintonassets.uk https://script.hotjar.com https://hotjar.io https://api.contents-calculator.swintonassets.uk https://smct.co https://js.smct.co https://smct.io https://js.smct.io https://ipb.smct.co https://ipb.smct.io https://cfg.smct.co https://cfg.smct.io https://ep.smct.co https://ep.smct.io https://cognito-identity.eu-west-1.amazonaws.com https://firehose.eu-west-1.amazonaws.com https://acsbapp.com https://acsbap.com https://api.maze.co/ https://prompts.maze.co/ *.bmw-motorrad-insurance.com *.healthy-pets.co.uk wss://lo.msg.liveperson.net https://cdn.lpsnmedia.net https://lpcdn.lpsnmedia.net https://ekr.zdassets.com https://mml1.zendesk.com https://bat.bing.com wss://api.eu-1.smooch.io www.google.com *.googletagmanager.com www.googletagmanager.com https://region1.google-analytics.com https://www.opinionstage.com https://accdn.liveperson.net http://cfg.smct.io https://cdn.prod.uk.five9.net/ https://bisil.sc.omtrdc.net/ https://dpm.demdex.net/ https://bisil.tt.omtrdc.net https://app.five9.eu *.cginsurance.com https://*.clarity.ms https://c.bing.com wss://tsock.us1.twilio.com/v3/wsconnect https://widget.trustpilot.com 'self' https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: https://player.vimeo.com https://cdn.lpsnmedia.net https://lpcdn.lpsnmedia.net https://cdn.prod.uk.five9.net/ https://websdk.ujet.co/v3/ping.mp3; child-src blob: https://www.google.com https://cdn.prod.uk.five9.net/ 'self' 3 default-src 'self';connect-src 'self' https://sgtm.allwyn.com https://www.googletagmanager.com *.elfsight.com *.googlesyndication.com *.google-analytics.com *.cookiebot.com *.google.com *.doubleclick.net *.facebook.com https://analytics.tiktok.com https://*.linkedin.com;font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:;style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com;img-src 'self' https://fonts.gstatic.com https://www.googletagmanager.com *.elfsightcdn.com *.googlesyndication.com *.google-analytics.com https://cdn.allwyn.com https://i.ytimg.com *.cookiebot.com *.facebook.com https://*.linkedin.com data:;script-src 'self' 'unsafe-inline' https://static.elfsight.com *.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com *.cookiebot.com https://www.youtube.com https://connect.facebook.net https://analytics.tiktok.com https://*.licdn.com;frame-src https://www.facebook.com https://allwyn-puck-race.web.app https://www.youtube.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com *.cookiebot.com *.doubleclick.net;media-src https://cdn.allwyn.com 3 default-src https: blob: data: wss: 'unsafe-inline' 'unsafe-eval' 3 block-all-mixed-content; upgrade-insecure-requests; frame-ancestors 'self' https://myconnect.bhhsmi.com/ https://unpkg.com; 3 base-uri 'self'; connect-src 'self' *.ingest.sentry.io *.ingest.us.sentry.io https://log.ablyft.com https://log.ablyft.com/ wss://api.deepgram.com https://api.deepgram.com https://com-tourlane-main.collector.snplow.net https://cfa-api-production.fly.dev https://kiwi-cdn.tlservers.com https://images.ctfassets.net https://user-images.trustpilot.com https://cm.tourlane.com https://api.iconify.design https://api.unisvg.com https://tr.outbrain.com https://amplify.outbrain.com https://paid.outbrain.com https://bat.bing.com https://bat.bing.net https://measurement-api.criteo.com https://sslwidget.criteo.com https://psb.taboola.com https://trc-events.taboola.com https://trc.taboola.com https://www.googleadservices.com https://ad.doubleclick.net https://*.ads-twitter.com https://*.clarity.ms https://js.go2sdk.com https://wellput.go2cloud.org https://ingesteer.services-prod.nsvcs.net https://sdk.fra-02.braze.eu https://api.simplevisag.com https://identification-api.sovondus.com https://www.wepowerconnections.com https://thesciencebehindcommerce.com https://api.simplesvg.com https://the.sciencebehindecommerce.com cfa-api-production.fly.dev https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://ampcid.google.com https://www.facebook.com https://region1.google-analytics.com https://region1.analytics.google.com https://pagead2.googlesyndication.com https://www.google.com https://server-side-tagging-708064772359.europe-west3.run.app https://com-tourlane-prod1.mini.snplow.net https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/sp.min.js https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/sp.js.map https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/index.umd.min.js.map https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/index.umd.min.js https://api.privacy-center.org https://sdk.privacy-center.org https://*.google.com https://*.googleapis.com https://*.gstatic.com data: blob: https://*.instagram.com https://instagram.com https://*.typeform.com; default-src 'none'; font-src 'self' https://www.vinci.com https://fonts.gstatic.com data: https://use.fontawesome.com https://ka-p.fontawesome.com; form-action 'self'; frame-src https://tourlane.com https://tourlane.de https://tourlane.fr https://gum.criteo.com https://gumi.criteo.com https://www.awin1.com https://fatcoupon.com https://link.fatcoupon.com https://redirect.partner.fatcoupon.com https://datawrapper.dwcdn.net https://static.criteo.net https://www.sovondus-connect.com https://www.awint.com https://adnx.de https://oponas.com https://bcsgsrv.com https://www.googletagmanager.com https://www.google.com https://bid.g.doubleclick.net https://www.youtube.com https://www.facebook.com https://server-side-tagging-708064772359.europe-west3.run.app https://*.google.com https://www.google.com/maps/embed/ https://www.google.com/maps/preview/ https://*.instagram.com https://instagram.com https://*.typeform.com; img-src 'self' https: blob: https://tourlane-dm-images.imgix.net https://tourlane-crm-assets.imgix.net https://tourlane-ui.imgix.net https://kiwi-cdn.tlservers.com https://tourlane-experts.imgix.net https://images.ctfassets.net https://user-images.trustpilot.com https://sslwidget.criteo.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.de https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.gstatic.com https://ssl.gstatic.com https://www.facebook.com https://server-side-tagging-708064772359.europe-west3.run.app data: https://sdk.privacy-center.org https://*.googleapis.com https://maps.googleapis.com https://*.gstatic.com https://maps.gstatic.com https://khms0.googleapis.com https://khms1.googleapis.com https://streetviewpixels-pa.googleapis.com https://*.google.com https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' https://tourlane-dm-images.imgix.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ablyft.com cdnjs.cloudflare.com/ajax/libs/lottie-web/ https://reise.tourlane.de https://voyage.tourlane.fr https://www.tourlane.fr https://amplify.outbrain.com https://wave.outbrain.com https://tr.outbrain.com https://bat.bing.com https://sslwidget.criteo.com https://dynamic.criteo.com https://cdn.taboola.com https://trc.taboola.com https://connect.facebook.net https://*.ads-twitter.com https://*.clarity.ms https://www.awin1.com https://www.dwin1.com https://lantern.roeyecdn.com https://js.go2sdk.com https://js.appboycdn.com https://api.sovondus.com https://thesciencebehindcommerce.com https://the.sciencebehindecommerce.com https://rialto-gms.s3.amazonaws.com https://www.googletagmanager.com https://tagmanager.google.com https://ssl.gstatic.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://www.youtube.com https://www.gstatic.com https://accounts.google.com https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/sp.min.js https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/index.umd.min.js https://unpkg.com/web-vitals@3/dist/web-vitals.iife.js https://sdk.privacy-center.org https://maps.googleapis.com https://maps.google.com https://maps.gstatic.com blob: https://*.instagram.com https://instagram.com https://*.typeform.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' cdn.ablyft.com cdnjs.cloudflare.com/ajax/libs/lottie-web/ https://reise.tourlane.de https://voyage.tourlane.fr https://www.tourlane.fr https://amplify.outbrain.com https://wave.outbrain.com https://tr.outbrain.com https://bat.bing.com https://sslwidget.criteo.com https://dynamic.criteo.com https://cdn.taboola.com https://trc.taboola.com https://connect.facebook.net https://*.ads-twitter.com https://*.clarity.ms https://www.awin1.com https://www.dwin1.com https://lantern.roeyecdn.com https://js.go2sdk.com https://js.appboycdn.com https://thesciencebehindcommerce.com https://the.sciencebehindecommerce.com https://rialto-gms.s3.amazonaws.com https://www.googletagmanager.com https://tagmanager.google.com https://ssl.gstatic.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://www.youtube.com https://www.gstatic.com https://accounts.google.com https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/sp.min.js https://d1v1f48xjw0b9w.cloudfront.net/3.24.1/index.umd.min.js https://unpkg.com/web-vitals@3/dist/web-vitals.iife.js https://sdk.privacy-center.org https://*.google.com https://*.googleapis.com https://*.gstatic.com blob: https://*.instagram.com https://instagram.com https://*.typeform.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://www.gstatic.com https://use.fontawesome.com https://ka-p.fontawesome.com https://maps.googleapis.com https://*.instagram.com https://instagram.com https://*.typeform.com; style-src-elem 'self' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://www.gstatic.com https://use.fontawesome.com https://ka-p.fontawesome.com https://*.instagram.com https://instagram.com https://*.typeform.com; worker-src 'self' blob: 3 default-src 'self' 'unsafe-eval' 'unsafe-inline' analytics-ipv6.tiktokw.us pvh-brands.imgix.net *.cfjump.com prreqcroab.icu static.shopback.com api.fillr.com m.cmpgn.page c.bing.com pvhba-m2prod-maintenance.s3-ap-southeast-2.amazonaws.com applepay.cdn-apple.com *.abtasty.com *.adyen.com *.afterpay.com *.analytics.yahoo.com *.bazaarvoice.com *.calvinklein.com *.clarity.ms *.contentsquare.com *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.google.com.au *.google.co.nz *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.imgix.net *.magefan.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.klarnaservices.com *.paypal.com *.pinterest.com *.pmnts-sandbox.io *.pmnts.io ads-engagement.presage.io *.teads.tv *.vimeo.com *.vimeocdn.com *.youtube.com *.zdassets.com *.zipmoney.com.au analytics.tiktok.com bat.bing.com bat.bing.net/action/0 blob: d3nocrch4qti4v.cloudfront.net data: df45ay5pw60dy.cloudfront.net duuytoqss3gu4.cloudfront.net ecomm-cdn.trurating.com *.quantserve.com player.vimeo.com prreqcroab.icu pvhba-imgix-calvin-klein-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-cms-content-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-ck-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-th-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-vh-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-tommy-hilfiger-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-van-heusen-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-m2prod-maintenance.s3.ap-southeast-2.amazonaws.com pvhba-imgix-global-th-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-global-ck-m2prod.s3.ap-southeast-2.amazonaws.com *.zendesk.com sandbox.zipmoney.com.au sc-static.net static.zipmoney.com.au tommyau.zendesk.com tr.snapchat.com v2assets.zopim.io wss://*.zopim.com wss://*.zendesk.com www.googleadservices.com www.paypalobjects.com zendesk-eu.my.sentry.io *.zip.co zip.co zipmoney.com.au ; connect-src 'self' data: cdn.evgnet.com *.pinimg.com analytics.tiktok.com vimeo.com www.pvhbrandsaustralia.com.au *.sentry.io pvhba-imgix-calvin-klein-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-cms-content-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-ck-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-th-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-vh-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-tommy-hilfiger-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-van-heusen-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-m2prod-maintenance.s3.ap-southeast-2.amazonaws.com pvhba-imgix-global-th-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-global-ck-m2prod.s3.ap-southeast-2.amazonaws.com connect.facebook.net rum.hlx.page mpc2-prod-27-is5qnl632q-uk.a.run.app *.conversionsapigateway.com *.abtasty.com *.adyen.com *.afterpay.com analytics-ipv6.tiktokw.us *.attraqt.io *.bazaarvoice.com *.braintree-api.com *.cardinalcommerce.com *.clearpay.co.uk *.contentsquare.com *.contentsquare.net *.doubleclick.net *.evergage.com *.google-analytics.com *.google.com *.google.com.au *.googleadservices.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.klarnaservices.com *.nr-data.net *.particularaudience.com *.paypal.com *.pinterest.com *.quantserve.com *.snapchat.com *.stockinstore.net *.teads.tv *.tiktok.com *.tiktokcdn.com *.trurating.com *.vimeo.com *.vimeocdn.com *.yimg.com *.zendesk.com *.zip.co *.zipmoney.com.au bat.bing.com bat.bing.net *.zdassets.com *.clarity.ms applepay.cdn-apple.com clarity.ms dmw2pzbenclyd.cloudfront.net d3mewz86hy02zo.cloudfront.net dpe0djwch8671.cloudfront.net *.google.co.nz google.com imgix-pvhba-m2prod.s3.ap-southeast-2.amazonaws.com m1.openfpcdn.io/fingerprintjs pixel.quantcount.com prreqcroab.icu pvh-brands.imgix.net pvhba-imgix-calvin-klein-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-cms-content-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-ck-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-th-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-mondo-vh-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-tommy-hilfiger-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-imgix-van-heusen-m2prod.s3.ap-southeast-2.amazonaws.com pvhba-m2prod-maintenance.s3.ap-southeast-2.amazonaws.com stockinstore.net wss://*.zendesk.com wss://*.zopim.com www.facebook.com www.googletagmanager.com www.paypalobjects.com zip.co *.forter.com wss://cdn0.forter.com d2o5idwacg3gyw.cloudfront.net dz8rit8v72mig.cloudfront.net db7q4jg5rkhk8.cloudfront.net 1.1.1.1 d94qwxh6czci4.cloudfront.net dr6vcclmzwk74.cloudfront.net wtp.siteperformancetest.net d6wfl40rgh70w.cloudfront.net siteperformancetest.net d6rak4b14t5gp.cloudfront.net d3k4bt74u9esq1.cloudfront.net d1ezzflfzltk6e.cloudfront.net d3nocrch4qti4v.cloudfront.net duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d1yz9u4jf6oqub.cloudfront.net d3banl4fzuxsjl.cloudfront.net; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' rum.hlx.page cfjump.calvinklein.com.au applepay.cdn-apple.com *.abtasty.com *.afterpay.com *.attraqt.io *.bazaarvoice.com *.braintreegateway.com *.cardinalcommerce.com *.cfjump.com cfjump.calvinklein.co.nz cfjump.tommy.com cfjump.vanheusen.com.au *.contentsquare.com *.contentsquare.net *.doubleclick.net *.facebook.net *.google-analytics.com *.google.com *.google.com.au *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.klarna.app *.klarna.com *.klarnacdn.net *.klarnaservices.com *.magento-ds.com *.newrelic.com *.nr-data.net *.particularaudience.com *.paypal.com *.paypalobjects.com *.pinimg.com *.pmnts-sandbox.io *.pmnts.io *.stockinstore.net *.teads.tv *.tiktok.com *.tiktokcdn.com *.trurating.com *.vimeo.com *.vimeocdn.com *.yimg.com *.zdassets.com *.zendesk.com *.zipmoney.com.au api.braintreegateway.com *.zip.co cdn.attraqt.io cdn.evgnet.com cdnjs.cloudflare.com ct.pinterest.com d94qwxh6czci4.cloudfront.net ecommwidget.trurating.com gateway.pmnts-sandbox.io gateway.pmnts.io bat.bing.com *.forter.com d2nww8zpyj5pk0.cloudfront.net dlthst9q2beh8.cloudfront.net d2w2nqfk3z9hdt.cloudfront.net js.afterpay.com js.sandbox.afterpay.com js.squarecdn.com/square-marketplace.js portal.afterpay.com portal.clearpay.co.uk portal.sandbox.afterpay.com portal.sandbox.clearpay.co.uk static.afterpay.com *.clarity.ms mpsnare.iesnare.com rules.quantcount.com sc-static.net secure.quantserve.com static.zipmoney.com.au tr.snapchat.com vimeo.com www.google-analytics.com www.google.com zip.co *.wlp-acs.com emvacs.bkm.com.tr acs.hu.bpcbt.com forisasia-vbv.mycardplace.com 3dsecuredebit.klikbca.com acs.edb.com acs1.edb.com 3dsecure.cgbchina.com.cn sv.creditcard.ecitic.com debitc2.3debspay.boc.cn webauthen.nccc.com.tw emv3ds-acs.nccc.com.tw family.ctbcbank.com www.acs3d.fisc.com.tw 3dsecure.klikbca.com 3ds1.nexigroup.com emvacs.2c2p.com secure-acs2ui gbemv3dsecure.garanti.com.tr 3ds.seglan.com sandbox.src.mastercard.com sandbox-assets.secure.checkout.visa.com ; form-action 'self' *.cardinalcommerce.com *.facebook.com api.bazaarvoice.com ct.pinterest.com stg.api.bazaarvoice.com; 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: yastatic.net cse.google.com ajax.googleapis.com php.pdc.nl www.google.com www.gstatic.com translate.googleapis.com translate.google.com maps.google.com maps.googleapis.com api.microsofttranslator.com; report-uri /cspreport 3 frame-ancestors 'self' https://*.usb.ch https://*.uhbs.ch 3 frame-ancestors 'self' *.thebarrelroom *.dx.commercecloud.salesforce.com *.authorize.net https://drive.google.com 3 frame-ancestors https://*.builder.io https://builder.io 3 upgrade-insecure-requests;frame-ancestors 'self' 3 frame-ancestors 'self'; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://sdk.dcmn.io https://www.facebook.com https://sibautomation.com https://ad4m.at https://hal9000.redintelligence.net https://*.ad-srv.net https://googleanalytics.com https://google-analytics.com https://googleoptimize.com https://*.googletagmanager.com https://optimize.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://widget.trustpilot.com https://*.studentbeans.com https://ct.pinterest.com https://*.cdn.optimizely.com https://just-russel.campaign.playable.com https://*.doubleclick.net https://*.clarity.ms https://*.justrussel.com https://*.justrussel.nl https://*.justrussel.be https://*.justrussel.de https://*.justrussel.fr 3 Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https: maps.googleapis.com ekr.zdassets.com zendesk.com *.zendesk.com; style-src 'self' 'unsafe-inline' https: maps.googleapis.com ekr.zdassets.com zendesk.com *.zendesk.com; img-src 'self' data: https: maps.googleapis.com ekr.zdassets.com zendesk.com *.zendesk.com; font-src 'self' data: https: maps.googleapis.com ekr.zdassets.com zendesk.com *.zendesk.com; frame-src 'self' https: maps.googleapis.com ekr.zdassets.com zendesk.com *.zendesk.com; 3 frame-ancestors 'self' https://showroom.alh.de https://www.hallesche.de https://www.alte-leipziger.de https://hallesche.de https://alte-leipziger.de https://vermittlerportal.al-h-konzern.de https://vermittlerportal.de 3 frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: dlswbr.baidu.com *.map.baidu.com *.bdimg.com bdimg.share.baidu.com res.wx.qq.com pucha.kaipuyun.cn dcs.conac.cn webservice.coolwei.com www.gov.cn zfwzgl.www.gov.cn *.powereasy.net; object-src 'self' 3 frame-ancestors 'self' *.cms.snakeware.nl *.snakeware.nl *.snakeware.cloud *.snakeware.test *.snakeware.local 3 policy 3 frame-ancestors https://www.valk.com https://www.vandervalk.de https://www.valk.be https://app.storyblok.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://prismic.io/prismic-toolbar/4.1.1/toolbar.js https://js.hsforms.net https://static.cdn.prismic.io https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.cookielaw.org https://www.recaptcha.net https://www.gstatic.com https://js.zi-scripts.com https://prismic.io https://www.google.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://static.cdn.prismic.io https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.cookielaw.org https://www.recaptcha.net https://www.gstatic.com https://www.google.com https://js.hsforms.net https://js.zi-scripts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' https://images.prismic.io https://prismic-io.s3.amazonaws.com https://forms-na1.hubspot.com https://forms-na1.hsforms.com https://i.ytimg.com https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google.co.in https://*.google.com https://www.google.nl https://www.google.pt; frame-src 'self' https://www.youtube.com https://forms.hsforms.com https://www.youtube-nocookie.com https://aa-holding-corp-conv-website.prismic.io https://www.recaptcha.net https://td.doubleclick.net https://www.google.com; connect-src 'self' https://forms.hsforms.com https://forms-na1.hubspot.com https://aa-holding-corp-conv-website.cdn.prismic.io https://cdn.cookielaw.org https://privacyportal-eu.onetrust.com https://region1.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://www.google.co.in https://www.google.com https://www.recaptcha.net https://geolocation.onetrust.com; child-src 'self' https://www.google.com https://www.recaptcha.net https://recaptcha.google.com; worker-src 'self' blob:; frame-ancestors 'self' 3 frame-ancestors 'self' https://*.teemill.com teemill.com 3 default-src 'self' data:;font-src 'self' data: fonts.gstatic.com;connect-src 'self' localhost *.doubleclick.net *.clarity.ms *.fg.cz *.google-analytics.com *.analytics.google.com www.google.com www.google.cz requestor.bezpecnostnicentrum.cz maps.googleapis.com translate.googleapis.com translate-pa.googleapis.com *.facebook.com *.googlesyndication.com *.cloudfront.net ct.leady.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.clarity.ms www.youtube.com;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.googletagmanager.com *.clarity.ms www.youtube.com recaptcha.net *.fg.cz www.google.com www.gstatic.com *.google-analytics.com requestor.bezpecnostnicentrum.cz maps.googleapis.com translate.google.com translate.googleapis.com translate-pa.googleapis.com connect.facebook.net *.cloudfront.net ct.leady.com;form-action 'self' *.facebook.com *.facebook.net;frame-src 'self' *.doubleclick.net www.youtube.com www.youtube-nocookie.com recaptcha.net www.google.com www.googletagmanager.com requestor.bezpecnostnicentrum.cz online.fliphtml5.com;worker-src 'self' blob: www.youtube.com *.doubleclick.net;frame-ancestors 'self' localhost test-edee-jablotron.fg.cz edee.jablotron.com;img-src 'self' data: blob: *.fg.cz *.doubleclick.net *.clarity.ms *.youtube.com *.ytimg.com *.openstreetmap.org *.google.cn *.google.com *.google.cz http://www.google.com maps.gstatic.com maps.googleapis.com fonts.gstatic.com www.gstatic.com translate.googleapis.com *.bing.com *.googletagmanager.com *.facebook.com mapsresources-pa.googleapis.com *.cloudfront.net;style-src 'self' 'unsafe-inline' requestor.bezpecnostnicentrum.cz fonts.googleapis.com www.gstatic.com *.googletagmanager.com;object-src self;media-src 'self' localhost *.fg.cz edee.jablotron.com 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https: blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none'; worker-src 'self' blob: 3 default-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.oni.nl; img-src 'self' data: https://*.oni.nl; connect-src 'self' https://*.oni.nl 3 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https: http:; font-src 'self' https: data:; connect-src 'self' https: wss: ws: data: http://127.0.0.1:11100; frame-src 'self' https: blob:; object-src 'none'; base-uri 'self'; media-src 'self' blob: https:; 3 default-src *; script-src * 'unsafe-inline'; style-src * 'unsafe-inline'; font-src * data:; img-src * data: https://*.cloudinary.com https://*.apple-mapkit.com; connect-src 'self' identity.tinajs.io identity-v2.tinajs.io content.tinajs.io assets.tinajs.io us.i.posthog.com us-assets.i.posthog.com analytics.google.com www.google-analytics.com *.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.cloudinary.com https://api.cloudinary.com https://cdn.apple-mapkit.com https://*.apple-mapkit.com https://cognito-idp.us-east-1.amazonaws.com https://boards-api.greenhouse.io; worker-src 'self' blob:; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://*.pardot.com https://*.netlify.app https://*.google.com https://*.gstatic.com https://widget.cloudinary.com; frame-ancestors 'self' https://create.netlify.com; 3 default-src https: 'unsafe-inline' 'unsafe-eval' mczbf.com kdukvh.com emjcd.com cj.dotomi.com members.cj.com googletagmanager.com google.com google.cz seznam.cz wss: websocket-visitors.smartsupp.com rec.smartlook.com googletagmanager.com heureka.cz imedia.cz data: 3 default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.bizzdesign.com pi.pardot.com www.google.com www.gstatic.com www.googletagmanager.com cdn.jsdelivr.net www.google-analytics.com *.googleadservices.com www.youtube.com *.wistia.com browser.sentry-cdn.com bizzdesign.chilipiper.com *.alfabetcloud.com cdn-cookieyes.com *.bing.com *.licdn.com *.oktopost.com js.zi-scripts.com tag.aticdn.net www.redditstatic.com a.quora.com bizzdesign.chilipiper.com fast.wistia.net api.ipify.org moderate.cleantalk.org fd.cleantalk.org dywrfp5ctng3l.cloudfront.net cdn.intellimize.co *.unify.cloud cdn.dreamdata.cloud eu1.ironcladapp.com blob: ; object-src 'self' *.bizzdesign.com; style-src 'unsafe-inline' 'self' *.bizzdesign.com cdn.jsdelivr.net dywrfp5ctng3l.cloudfront.net eu1.ironcladapp.com; img-src data: 'self' *.bizzdesign.com *.bing.com cdn-cookieyes.com *.linkedin.com *.bing.com cdn-cookieyes.com www.googletagmanager.com *.google.com *.google.fr *.google.be *.google.de *.google.nl *.google.co.uk *.google.es q.quora.com alb.reddit.com bizzdesign.chilipiper.com stats.g.doubleclick.net *.wistia.com; media-src data: 'self' *.bizzdesign.com blob:; frame-src 'self' td.doubleclick.net www.googletagmanager.com www.youtube.com *.bizzdesign.com bizzdesign.chilipiper.com splunk-prod.alfabetcloud.com fast.wistia.net www.google.com fast.wistia.net eu1.ironcladapp.com; frame-ancestors 'self' *.bizzdesign.com enablement.bizzdesign.com engagement.bizzdesign.com admin.mindtickle.com bizzdesign.mindtickle.com browser.sentry-cdn.com ; child-src 'self' *.bizzdesign.com ; font-src 'self' *.bizzdesign.com fonts.gstatic.com *.wistia.com; connect-src 'self' *.bizzdesign.com px.ads.linkedin.com *.clarity.ms bat.bing.net js.zi-scripts.com google.com *.google.com ws.zoominfo.com bat.bing.com www.google-analytics.com *.doubleclick.net scout.salesloft.com *.googlesyndication.com *.google-analytics.com *.googleadservices.com *.hotjar.io wss://ws.hotjar.com *.cookieyes.com cdn-cookieyes.com gjzbjmh.pa-cd.com pixel-config.reddit.com www.redditstatic.com cdn.jsdelivr.net bizzdesign.chilipiper.com pipedream.wistia.com fast.wistia.net fd.cleantalk.org bizzdesign.pinpointhq.com *.wistia.com browser.sentry-cdn.com *.intellimize.co *.unify.cloud cdn.dreamdata.cloud eu1.ironcladapp.com *.cleantalk.org; report-uri /policies/privacy-policy; upgrade-insecure-requests 3 default-src 'self' www.chatbase.co *.etracker.de *.labor-limbach-hannover.de *.labor-limbach-lehrte.de limbachgruppe.ftapi.com *.laborpublisher.de api.newsletter2go.com maps.googleapis.com *.google-analytics.com cmill.de *.cmill.de prime-psf.2b-advice.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' www.chatbase.co limbachgruppe.ftapi.com *.laborpublisher.de static.newsletter2go.com maps.googleapis.com 2badvice-cdn.azureedge.net prime-psf.2b-advice.com *.etracker.com *.etracker.de *.labor-limbach-hannover.de *.labor-limbach-lehrte.de *.googletagmanager.com *.regio-tv.de; img-src * data: *.etracker.com *.etracker.de; style-src 'self' 'unsafe-inline' 2badvice-cdn.azureedge.net *.etracker.com; frame-ancestors 'self'; frame-src 'self' www.chatbase.co www.youtube-nocookie.com youtube.com player.vimeo.com vimeo.com cmill.de *.cmill.de termin.samedi.de lv.dialoglabor.de *.etracker.com *.regio-tv.de; font-src 'self' data: fonts.gstatic.com 3 default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *; object-src 'none'; base-uri 'self'; connect-src https: wss://*.hotjar.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://*.hotjar.com *.doubleclick.net; img-src https: data:; manifest-src 'self'; media-src https:; worker-src 'self'; 3 default-src 'self' *.garmin.com *.garmin.com.tw *.garmin.com.sg *.garmin.co.in *.garmin.co.jp *.garmin.co.th *.garmin.co.kr *.garmin.co.id *.garmin.com.hk *.garmin.com.my *.garmin.com.vn *.garmin.com.cn *.garmin.cn https://static.garmincdn.com; style-src 'self' 'unsafe-inline' *.garmin.com *.garmin.com.tw *.garmin.com.sg *.garmin.co.in *.garmin.co.jp *.garmin.co.th *.garmin.co.kr *.garmin.co.id *.garmin.com.hk *.garmin.com.my *.garmin.com.vn *.garmin.com.cn *.garmin.cn https://static.garmincdn.com https://fonts.googleapis.com https://*.hotjar.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'unsafe-eval' 'unsafe-inline' https://*.klarnaservices.com https://*.klarnacdn.net https://static.garmincdn.com/support-chat-widget/chatWidget-v1.3.1.js https://product-gallery.cloudinary.com https://res.cloudinary.com https://*.pinimg.com https://*.linksynergy.com https://*.googlesyndication.com 'self' *.garmin.com *.garmin.com.tw *.garmin.com.sg *.garmin.co.in *.garmin.co.jp *.garmin.co.th *.garmin.co.kr *.garmin.co.id *.garmin.com.hk *.garmin.com.my *.garmin.com.vn *.garmin.com.cn *.garmin.cn *.trustarc.com *.truste.com https://ajax.googleapis.com https://static.garmincdn.com https://www.google.com https://cdn.appdynamics.com https://www.gstatic.com https://prefmgr-cookie.truste-svc.net https://tags.tiqcdn.com https://*.tealiumiq.com https://deploytealium.com https://analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.cloudflare.com https://connect.facebook.net https://www.googleadservices.com https://*.doubleclick.net https://static.criteo.net https://*.criteo.com https://bat.bing.com https://*.adform.net https://intljs.rmtag.com https://www.googletagmanager.com https://*.google-analytics.com https://static.cloudflareinsights.com *.hotjar.com *.hotjar.io https://www.googletagmanager.com https://optimize.google.com https://*.googleapis.com https://cse.google.com https://www.youtube.com https://www.instagram.com https://browser.sentry-cdn.com; connect-src 'self' *.garmin.com *.garmin.com.tw *.garmin.com.sg *.garmin.co.in *.garmin.co.jp *.garmin.co.th *.garmin.co.kr *.garmin.co.id *.garmin.com.hk *.garmin.com.my *.garmin.com.vn *.garmin.com.cn *.garmin.cn https://static.garmincdn.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://stats.g.doubleclick.net https://analytics.google.com https://www.google-analytics.com https://*.googleapis.com https://*.google.com https://csp.withgoogle.com https://analytics-api-s.cloudinary.com https://pagead2.googlesyndication.com https://*.algolia.net https://*.algolianet.com https://*.trustarc.com https://browser.sentry-cdn.com https://ad.doubleclick.net; font-src 'self' data: *.garmin.com *.garmin.com.tw *.garmin.com.sg *.garmin.co.in *.garmin.co.jp *.garmin.co.th *.garmin.co.kr *.garmin.co.id *.garmin.com.hk *.garmin.com.my *.garmin.com.vn *.garmin.com.cn *.garmin.cn *.trustarc.com *.truste.com https://static.garmincdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.hotjar.com; img-src https://connect.facebook.net https://www.googleadservices.com https://*.doubleclick.net https://static.criteo.net https://*.criteo.com https://bat.bing.com https://*.adform.net https://intljs.rmtag.com https://www.googletagmanager.com https://*.google-analytics.com https://stats.g.doubleclick.net https://i.ytimg.com 'self' data: *.garmin.com *.garmin.com.tw *.garmin.com.sg *.garmin.co.in *.garmin.co.jp *.garmin.co.th *.garmin.co.kr *.garmin.co.id *.garmin.com.hk *.garmin.com.my *.garmin.com.vn *.garmin.com.cn *.garmin.cn *.trustarc.com *.truste.com https://static.garmincdn.com https://www.google.com https://www.google.co.uk https://prefmgr-cookie.truste-svc.net https://res.cloudinary.com https://*.hotjar.com https://www.google.com.tw https://tr.line.me https://www.facebook.com https://*.gstatic.com https://*.googleapis.com https://*.google.com; frame-src https://www.youtube.com https://*.doubleclick.net *.garmin.com *.garmin.com.tw *.garmin.com.sg *.garmin.co.in *.garmin.co.jp *.garmin.co.th *.garmin.co.kr *.garmin.co.id *.garmin.com.hk *.garmin.com.my *.garmin.com.vn *.garmin.com.cn *.garmin.cn *.trustarc.com *.truste.com https://static.garmincdn.com https://www.google.com https://vars.hotjar.com https://prefmgr-cookie.truste-svc.net https://my.tealiumiq.com https://www.youtube-nocookie.com https://gum.criteo.com https://static.criteo.net https://www.facebook.com https://cse.google.com https://web.facebook.com https://www.instagram.com; object-src 'none'; upgrade-insecure-requests; 3 frame-ancestors 'self' https://*.qualified.com https://*.qualified-preview.com; 3 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: 3 default-src https: wss: blob: data: 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com account.psplugin.com commondatastorage.googleapis.com omni.teleperformance.se static.hotjar.com bat.bing.com track.adform.net *.doubleclick.net www.googleadservices.com www.googletagmanager.com connect.facebook.net test-allentetest.lekane.net allente.lekane.net tango-churn.viasat.dk *.vo.msecnd.net assets.adobedtm.com dl.episerver.net canaldigital.d3.sc.omtrdc.net fast.canaldigital.demdex.net dpm.demdex.net cm.everesttech.net cd-static.telenorcdn.net canaldigital.demdex.net a4560576362315776.cdn.optimizely.com a4560576362315776.cdn-pci.optimizely.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com; frame-ancestors 'self' www.elkjop.no elkjop.no www.power.no power.no logon.canaldigital.com ssotest.api-canaldigital.com ssostage.api-canaldigital.com localhost app.optimizely.com www.viaplaysportnews.dk; 3 default-src https: data: wss://*.hotjar.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; 3 default-src 'self'; object-src data:; script-src 'self' 'unsafe-inline' *.googletagmanager.com *.google-analytics.com cookiehub.net static.cookiehub.com plausible.io *.google.com *.gstatic.com isavia.atlassian.net *.infogram.com *.cookiebot.eu ucarecdn.com siteimproveanalytics.com *.facebook.net *.sojern.com *.doubleclick.net *.adnxs.com *.adsrvr.org *.klaviyo.com vercel.live *.hotjar.com *.mappedin.com 'unsafe-eval'; img-src 'self' data: blob: i.vimeocdn.com *.contentstack.com i.ytimg.com *.siteimproveanalytics.io *.usercentrics.eu *.facebook.com *.google.com *.google.is *.googletagmanager.com *.mappedin.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cookiehub.net static.cookiehub.com p.typekit.net *.mappedin.com; font-src 'self' fonts.gstatic.com use.typekit.net d1p5cqqchvbqmy.cloudfront.net *.mappedin.com; frame-src www.youtube-nocookie.com www.youtube.com player.vimeo.com *.google.com *.contentstack.com isavia.atlassian.net *.infogram.com consentcdn.cookiebot.eu *.doubleclick.net maps.kefairport.is maps.kefairport.com app.taktikal.is www.googletagmanager.com vercel.live w.soundcloud.com; media-src 'self' *.contentstack.com *.youtube.com; worker-src 'self' blob:; child-src 'self' blob:; connect-src 'self' ws: wss: data: vimeo.com plausible.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com ds.cookiehub.net cookiehub.net *.botpoison.com *.contentstack.com api.worldweatheronline.com submit-form.com *.uploadcare.com *.cookiebot.eu *.doubleclick.net *.google.com *.sojern.com *.facebook.com *.hotjar.com *.hotjar.io *.google.is *.mappedin.com; 3 default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com https://securepubads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://cdn.ampproject.org https://*.ampproject.org https://cdn.234doo.com https://*.234doo.com https://*.teads.tv https://js.ad-score.com https://*.ad-score.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://*.ampproject.org https://*.gstatic.com https://*.234doo.com https://*.teads.tv https://*.ad-score.com https://vitals.vercel-insights.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://*.doubleclick.net https://*.googlesyndication.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://www.google.com https://*.234doo.com https://*.teads.tv; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 3 frame-ancestors 'self' https://s1-eu.ariba.com/ 3 img-src * data: blob:; upgrade-insecure-requests; 3 default-src * data: 'unsafe-inline' 'unsafe-eval'; 3 img-src *.commercecloud.salesforce.com *.demandware.net https://cdnjs.cloudflare.com *.signifyd.com *.online-metrix.net *.hornblower.com https://my.hornblower.com data: *.salesforce.com *.salesforce-sites.com *.statuecitycruises.com *.niagaracitycruises.com *.alcatrazcitycruises.com *.citycruises.com *.cityexperiences.com *.mobify-storefront.com *.facebook.com www.facebook.com *.bing.com bat.bing.com c.bing.com *.googlesyndication.com *.google.com www.google.com *.googletagmanager.com www.googletagmanager.com *.doubleclick.net *.gstatic.com *.cookielaw.org cdn.cookielaw.org *.clarity.ms c.clarity.ms *.tealiumiq.com my.tealiumiq.com collect.tealiumiq.com tr.brand-display.com 'self';script-src 'unsafe-inline' storage.googleapis.com blob: tags.tiqcdn.com *.tiqcdn.com *.googletagmanager.com *.google-analytics.com *.google.com google.com pay.google.com *.signifyd.com *.gstatic.com *.online-metrix.net hornblowergroup.my.salesforce-sites.com *.salesforce.com *.salesforce-sites.com *.force.com *.site.com *.mobify-storefront.com *.doubleclick.net googleads.g.doubleclick.net *.cartstack.com api.cartstack.com *.cookielaw.org cdn.cookielaw.org bat.bing.com connect.facebook.net *.clarity.ms www.clarity.ms *.medallia.com *.decibelinsight.net applepay.cdn-apple.com *.applepay.cdn-apple.com *.audioeye.com *.audioeye-services.com static.cloudflareinsights.com cdn.brand-display.com cdn.attn.tv https://hornblowergroup.tfaforms.net/* *.tfaforms.net 'self' 'unsafe-eval' https://runtime.commercecloud.com;frame-src https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://youtube-nocookie.com *.signifyd.com *.online-metrix.net *.salesforce.com *.salesforce-sites.com *.force.com *.site.com *.my.site.com hornblowergroup.my.site.com *.mobify-storefront.com *.googletagmanager.com www.googletagmanager.com *.google.com google.com pay.google.com https://*.doubleclick.net *.doubleclick.net *.medallia.com *.digital-cloud-smf1.medallia.com *.decibelinsight.net applepay.cdn-apple.com *.applepay.cdn-apple.com cdn.brand-display.com creatives.attn.tv;connect-src api.cquotient.com *.c360a.salesforce.com https://devshop.hornblower.com/graphql https://ccen5ixglzftnezy3m3seqgkqe.appsync-api.us-west-2.amazonaws.com/graphql https://my.cityexperiences.com/graphql *.cityexperiences.com cityexperiences.com *.hornblower.com preferences.hornblower.com https://preferences.hornblower.com https://statue-static-content.s3.us-east-1.amazonaws.com/ https://hornblowergroup.tfaforms.net/api_v2/workflow/processor https://hornblowergroup.tfaforms.net *.tfaforms.net *.tiqcdn.com *.tealium.com *.tealiumiq.com collect.tealiumiq.com my.tealiumiq.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.google.com google.com www.google.com *.doubleclick.net *.signifyd.com *.online-metrix.net *.salesforce.com *.salesforce-sites.com *.salesforce-scrt.com *.force.com *.site.com *.salesforceliveagent.com *.mobify-storefront.com *.audioeye.com *.audioeye-services.com *.cartstack.com api.cartstack.com *.cookielaw.org cdn.cookielaw.org *.googlesyndication.com connect.facebook.net *.facebook.com www.facebook.com bat.bing.com https://www.clarity.ms *.clarity.ms s.clarity.ms *.onetrust.com geolocation.onetrust.com *.onetrust.io *.medallia.com *.digital-cloud-smf1.medallia.com *.decibelinsight.net wss://*.decibelinsight.net applepay.cdn-apple.com *.applepay.cdn-apple.com https://api-dev-ol.hornblower.com/api/v1 cruises-us.attn.tv events.attentivemobile.com 'self' https://runtime.commercecloud.com;worker-src blob: 'self';default-src 'self';base-uri 'self';font-src 'self' https: data:;frame-ancestors 'self' https://runtime.commercecloud.com;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 3 frame-ancestors 'self' https://cms.vistry.co.uk/ *.vistry.co.uk 3 frame-ancestors 'self' *.cmegroup.com *.quikstrike.net commodex.co.il openexchange.community.cmegroup.com https://www.home.saxo https://blueeditsitecore.sys.dom https://bluesitecore.sys.dom https://sitecoredev.orange.saxobank.com https://sitecoredev-nocache.orange.saxobank.com https://sitecoredevedit.orange.tst2.dom https://www.investing.com https://*.benzinga.com https://bz.zingbot.bz https://www.zingbot.bz https://gdcdyn.interactivebrokers.com https://www.interactivebrokers.com https://zingbot.bz https://m.zingbot.bz https://dev.futuresfirstacademy.com https://uat.futuresfirstacademy.com https://futuresfirstacademy.com http://stage.barchart.com http://www.barchart.com https://www.infinityfutures.com https://kilofutures.com https://m.cqg.com https://mdemo.cqg.com *.chicago.cme.com:7822 https://uatm.cqg.com https://local.zingbot.bz https://www.gulfbondsukuk.org www.kgieworld.sg https://www.propex24.wpcomstaging.com https://www.propex24.com https://*.kapcoclients.com https://kapcoclients.com https://*.wallstreetbound.org https://wallstreetbound.org https://cofcointl.plateau.com https://rise.articulate.com https://members.tradeday.com http://blf-django.herokuapp.com www.bluelinefutures.com www.bluelinefutures.live www.bluelinefutures.trade bluelinefutures.com https://login.chicago.cme.com https://loginnr.chicago.cme.com https://logincert.chicago.cme.com https://login-ny.chicago.cme.com https://ampfutures.com https://cme.ampfutures.com advantagefutures.com *.advantagefutures.com https://*.e-futures.com https://*.etrade.com https://*.gffbrokers.com https://infinityfutures-cn.com https://sweetfutures.com https://*.tradovate.com https://home.saxo https://*.directa.it *.big.pt https://big.pt https://*.tradestation-international.com http://tradinglessons.com https://tradinglessons.com *.ibroker.it *.ibroker.es *.cornertrader.ch *.whselfinvest.com *.ameritrade.com *.sweetfutures.com *.danielstrading.com *.gainfutures.com gainfutures.com *.futuresonline.com *.tdainc.com *.lsvp.com *.schwab.com *.schwab.co.uk *.us.global.schwab.com *.dev.schwab.com *.cmegroupfoundation.org news.cqg.com https://www.gulfcapitalmarket.org https://www.kqmarkets.co.uk https://dev.kqmarkets.co.uk https://www.kqmarkets.de https://dev.kqmarkets.de https://dev.kqmarkets.com https://kqmarketportal.24livehost.com *.trendspider.com trendspider.com fxpronode12template.azurewebsites.net uat-fxpro-website.azurewebsites.net fxpro.com *.youfinance.it *.traderlink.it paradigmfutures.net www.e-mini.com www.e-futures.com www.cannontrading.com *.gcs-web.com www.rjobrien.com www.fxpro.com *.rjobrien.com acmfutures.com *.acmfutures.com www.directaccessusa.com *.topsteptrader.com *.progoldtrader.com https://progoldtrader.com adssgroup.sharepoint.com *.mandaracapital.com *.sidwellstrategies.com sidwellstrategies.com app.melver.com.br dev-phillipcapital-main.pantheonsite.io *.phillipcapital.com *.livesquawk.com *.webull.com *.webull.hk *.webull.sg *.webull.co.jp *.webull.au *.webull.co.za *.webull-uk.com *.comdinheiro.com.br *.invest.academy invest.academy *.nelogica.com.br *.vectorcrypto.com blackarrowtrading.com *.theniba.com *.wpenginepowered.com *.apmcapital.ae *.finanzen.ch apm-capital.webflow.io *.gocharting.com gocharting.com *.thearmchairtrader.com stonexone.com *.stonexone.com stonex.com *.stonex.com *.lynxbroker.de *.avafutures.com unusualwhales.com *.phillip.com.sg *.poems.com.sg *.phillipcapital.us *.qe.com.qa *.dxp.qe.qa straitsfinancial.com *.straitsfinancial.com appdev3.wixstudio.io *.straitsfinancial.gate39tech.com *.sitagri.com *.financeagri.com piqsuite.com *.piqsuite.com *.ironbeam.com insigniafutures.com *.tickmill.com *.cannontrading.com beta.mfpawards.com *.gigatrade.io gigatrade.io *.metrotrade.com metrotrade.com *.tradeday.com *.webullbroker.com *.webullapp.com.my *.schwab.tech *.laohu8.com laohu8.com ttmgoal.com sbisec.co.jp advisor.kgif.com.tw henghua.hk capitalfutures.com.tw *.directaccess.com.hk *.directaccess.com.sg login.prod.gcp.cme.com login.uat.gcp.cme.com login-cert.uat.gcp.cme.com login.cert.gcp.cme.com lunaro.com *.aem.live *.aem.page *.aem.reviews portal.tradezero.com tradezero.com *.fndl.dev *.fndlint.net *.fanduel.com piqedge.com *.piqedge.com avatrade.com *.avatrade.com aralyx.com *.aralyx.com piqmarkets.com *.piqmarkets.com; 3 default-src 'none'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.clarity.ms *.telebalance.tv *.my-probance.one *.privacy-center.org *.cloudflareinsights.com *.criteo.com *.googlesyndication.com *.snapchat.com *.r66net.net *.amazon-adsystem.com *.paa-reporting-advertising.amazon sc-static.net *.adform.net rules.quantcount.com secure.quantserve.com js.adsrvr.org mpsnare.iesnare.com libs.hipay.com mpsnare.iesnare.com/time.mp3 cdn.sticky.io marketing.hachette-partworks.com cdn.wishpond.net/connect.js u.videostep.com analytics.tiktok.com www.clarity.ms static.r66net.com k.r66net.com ks.invibes.com www.paypalobjects.com tag.aticdn.net cdn3.actito.com/legacy/actito-goal/goal.js www.awin1.com www.dwin1.com www.paypal.com geolocation.onetrust.com fevoki.wejekihota.com apis.google.com cdn.cookielaw.org www.googletagmanager.com connect.facebook.net ws1.postescanada-canadapost.ca cdnjs.cloudflare.com cdn.doofinder.com cdn.hachette-collections.com www.google-analytics.com *.google.com script.hotjar.com googleads.g.doubleclick.net www.googleadservices.com static.hotjar.com autroliner.com cilkonlay.com bat.bing.com s.pinimg.com sp.analytics.yahoo.com s.yimg.com www.redditstatic.com www3.actito.com widget.trustpilot.com invitejs.trustpilot.com *.gstatic.com *.youtube.com; style-src 'self' 'unsafe-inline' libs.hipay.com www.hachette-collections.com www.googletagmanager.com fonts.googleapis.com ws1.postescanada-canadapost.ca cdn.hachette-collections.com hachettepartworks.com www.hachettecollections.com *.hachettecollections.com mpsnare.iesnare.com mpsnare.iesnare.com/time.mp3 cdnjs.cloudflare.com; img-src 'self' data: *.my-probance.one *.facebook.net engagedata.go2cloud.org tracking.acba.pl *.privacy-center.org *.invibes.com *.b26net.com *.snapchat.com *.r66net.net *.amazon-adsystem.com *.paa-reporting-advertising.amazon sc-static.net *.google.pl adservice.google.com *.googlesyndication.com ad.doubleclick.net pixel.quantserve.com *.bing.com *.xiti.com *.clarity.ms fonts.gstatic.com www.paypalobjects.com analytics.tiktok.com s.videostep.com ks.b26net.com ks.invibes.com tbs.tradedoubler.com tbl.tradedoubler.com t.paypal.com www.hachette-collections.com cdn.cookielaw.org www.google.co.il www.facebook.com ws1.postescanada-canadapost.ca hachettepartworks.com www.hachettecollections.com cdn.hachette-collections.com bat.bing.com *.google.be *.google.com www.gstatic.com *.google.fr www.google-analytics.com *.google.ca autroliner.com www.googletagmanager.com *.google.ch ct.pinterest.com *.google.de www.google.co.uk *.google.lu *.google.it *.google.pt www.google.co.ma *.cdninstagram.com alb.reddit.com googleads.g.doubleclick.net *.google.dk info.hachette-collections.com *.google.gr *.google.tn *.quantserve.com libs.hipay.com *.hachettecollections.com blob: mpsnare.iesnare.com mpsnare.iesnare.com/time.mp3; font-src 'self' www.hachette-collections.com fonts.gstatic.com cdn.hachette-collections.com static3.avast.com mpsnare.iesnare.com mpsnare.iesnare.com/time.mp3 libs.hipay.com; media-src 'self' data: mpsnare.iesnare.com cdn.hachette-collections.com www.hachette-collections.com hachettepartworks.com www.hachettecollections.com *.hachettecollections.com mpsnare.iesnare.com/time.mp3; connect-src 'self' wss://mpsnare.iesnare.com *.pa-cd.com *.tiktokw.us *.criteo.com *.privacy-center.org *.trustpilot.com *.googletagmanager.com www.hachette-collections.com analytics-ipv6.tiktokw.us privacyportal-de.onetrust.com *.googleadservices.com *.snapchat.com *.r66net.net *.r66net.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon sc-static.net *.kolekcja-poezja.pl *.yottacapi.pl *.google.pl data.hipay.com mpsnare.iesnare.com *.doubleclick.net *.googlesyndication.com *.redditstatic.com *.reddit.com adservice.google.com pixel.quantcount.com google.com secure-gateway.hipay-tpp.com hachettepartworks.sticky.io marketing.hachette-partworks.com *.xiti.com *.google.fr *.analytics.google.com content.hotjar.io *.google-analytics.com *.hotjar.com *.clarity.ms *.invibes.com/ analytics.tiktok.com region1.google-analytics.com geolocation.onetrust.com www.sandbox.paypal.com www.paypal.com privacyportal-eu.onetrust.com privacyportal-fr.onetrust.com *.cdn77.org cdn.cookielaw.org ws1.postescanada-canadapost.ca *.doofinder.com secure2-vault.hipay-tpp.com bat.bing.com in.hotjar.com www.google-analytics.com stats.g.doubleclick.net *.google.com ct.pinterest.com s.yimg.com vc.hotjar.io www.facebook.com *.a.run.app *.on.aws *.hachette-collections.com libs.hipay.com mpsnare.iesnare.com/time.mp3; frame-src 'self' *.criteo.com *.snapchat.com *.saferpay.com *.psp-solutions.com *.googletagmanager.com *.doubleclick.net td.doubleclick.net ad.doubleclick.net cdn.sticky.io cdn.wishpond.net libs.hipay.com www.paypalobjects.com www.facebook.com tbs.tradedoubler.com www.pinterest.fr www.pinterest.com www.sandbox.paypal.com www.paypal.com checkout.slimpay.net checkout.preprod.slimpay.com accounts.google.com www.youtube.com *.moneris.com *.sticky.io w.soundcloud.com vars.hotjar.com bid.g.doubleclick.net *.amazon-adsystem.com widget.trustpilot.com mpsnare.iesnare.com mpsnare.iesnare.com/time.mp3 *.hachette-collections.com; frame-ancestors 'self' *.hachette-collections.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /report.php 3 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://www.googletagmanager.com/ https://*.googletagmanager.com/ https://www.google-analytics.com/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://connect.facebook.net/ https://js.stripe.com/ https://vercel.live/ https://widget.intercom.io https://js.intercomcdn.com; connect-src 'self' https://*.sanity.io/ https://*.api.sanity.io/ wss://*.sanity.io https://formspree.io/ https://consentcdn.cookiebot.com/ https://www.googletagmanager.com/ https://*.googletagmanager.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://*.analytics.google.com/ https://www.googleadservices.com/ https://www.google.com/ https://stats.g.doubleclick.net/ https://*.g.doubleclick.net/ https://td.doubleclick.net/ https://connect.facebook.net/ https://www.facebook.com/ https://*.facebook.com/ https://api.dev.glorify-app.com/ https://api.staging.glorify-app.com/ https://api.glorify-app.com/ https://*.data.glorify-appdev.com/ https://*.data.glorify-app.com/ https://js.stripe.com/ https://*.stripe.com/ https://vercel.live/ wss://*.pusher.com/ https://*.cloudfront.net/ https://*.supabase.co https://dpqeolwewraasqccqcfl.supabase.co https://srbwzcesydbehpgubqqm.supabase.co wss://*.supabase.co wss://dpqeolwewraasqccqcfl.supabase.co wss://srbwzcesydbehpgubqqm.supabase.co https://us.i.posthog.com https://eu.i.posthog.com https://*.posthog.com https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com; style-src-elem 'self' 'unsafe-inline' https://typekit.net/ https://*.typekit.net/ https://*.intercomcdn.com; style-src 'self' 'unsafe-inline' https://typekit.net/ https://*.intercomcdn.com; img-src 'self' blob: data: https://cdn.sanity.io https://imgsct.cookiebot.com/ https://*.googleusercontent.com https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://www.googleadservices.com/ https://www.google.com/ https://*.g.doubleclick.net/ https://td.doubleclick.net/ https://www.facebook.com/ https://*.facebook.com/ https://*.supabase.co https://dpqeolwewraasqccqcfl.supabase.co https://srbwzcesydbehpgubqqm.supabase.co https://i.ytimg.com https://*.ytimg.com https://images.unsplash.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomcdn.com https://gifs.intercomcdn.com https://*.intercomcdn.com; media-src 'self' blob: https://*.supabase.co https://dpqeolwewraasqccqcfl.supabase.co https://srbwzcesydbehpgubqqm.supabase.co https://js.intercomcdn.com https://downloads.intercomcdn.com; font-src 'self' https://typekit.net/ https://*.typekit.net/ https://js.intercomcdn.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-src 'self' https://consentcdn.cookiebot.com/ https://www.google.com/ https://*.g.doubleclick.net/ https://td.doubleclick.net/ https://js.stripe.com/ https://hooks.stripe.com/ https://www.youtube.com https://www.youtube-nocookie.com https://vercel.live https://widget.intercom.io https://*.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com; frame-ancestors 'self' https://*.sanity.io https://sanity.io https://*.sanity.studio; 3 default-src 'self' https://*.zdassets.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://web.cmp.usercentrics.eu https://customer.cludo.com https://d21oefkcnoen8i.cloudfront.net https://s2.adform.net https://track.adform.net https://connect.facebook.net https://api.eu1.exponea.com *.mouseflow.com https://bat.bing.com *.taboola.com https://*.playable.com https://static.readpeak.com https://*.zdassets.com https://*.zendesk.com https://*.exponea.com https://*.zopim.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hsforms.net https://*.usemessages.com https://*.mida.so; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://d21oefkcnoen8i.cloudfront.net https://*.zdassets.com https://*.zendesk.com https://*.playable.com https://*.zopim.com https://*.zopim.io; img-src 'self' blob: data: https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/ccm/collect https://glowing-diamond-8e6a677fa4.media.strapiapp.com https://thankful-art-9f1f254843.media.strapiapp.com https://complete-harmony-41d693229b.media.strapiapp.com https://picsum.photos https://cmxsapnc.cloudimg.io https://app.usercentrics.eu https://customer.cludo.com https://image-transformer-api.tjek.com https://www.facebook.com https://connect.facebook.net https://uct.service.usercentrics.eu *.mouseflow.com bat.bing.com https://google.com https://www.google.dk https://www.google.se https://www.google.de https://www.google.co.uk https://www.google.pl https://www.google.nl *.doubleclick.net https://*.zendesk.com https://*.zdassets.com https://*.playable.com https://*.zopim.com https://*.zopim.io https://*.hubspot.com https://*.hsforms.com https://*.mida.so; font-src 'self' *.mouseflow.com *.googlesyndication.com https://*.zdassets.com https://*.playable.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com *.google.com *.doubleclick.net *.googleadservices.com https://www.googletagmanager.com https://www.google.com/ccm/collect https://google.com https://google.dk https://google.se https://google.de https://google.co.uk https://google.pl https://google.nl https://v1.api.service.cmp.usercentrics.eu https://glowing-diamond-8e6a677fa4.media.strapiapp.com https://thankful-art-9f1f254843.media.strapiapp.com https://complete-harmony-41d693229b.media.strapiapp.com https://customer.cludo.com https://api.cludo.com https://d21oefkcnoen8i.cloudfront.net https://squid-api.tjek.com https://wolf-api.tjek.com https://graphql.usercentrics.eu *.exponea.com https://consent-api.service.consent.usercentrics.eu https://pagead2.googlesyndication.com https://www.facebook.com *.mouseflow.com bat.bing.com bat.bing.net *.taboola.com https://ads.realizeperformance.com https://*.zendesk.com https://*.zdassets.com https://*.playable.com wss://*.zendesk.com wss://*.zopim.com https://*.zopim.com https://*.zopim.io https://*.hubapi.com https://*.hubspot.com https://*.hsforms.com https://*.mida.so; frame-src https://www.youtube.com https://web.cmp.usercentrics.eu https://sclrouteplanner.azurewebsites.net https://www.googletagmanager.com *.mouseflow.com pa.taboola.com https://*.playable.com https://www.game.bordershop.com https://game.scandlines.com https://*.zendesk.com https://*.mida.so; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://glowing-diamond-8e6a677fa4.strapiapp.com https://thankful-art-9f1f254843.strapiapp.com http://complete-harmony-41d693229b.strapiapp.com; upgrade-insecure-requests; media-src 'self' blob: data: https://glowing-diamond-8e6a677fa4.media.strapiapp.com https://thankful-art-9f1f254843.media.strapiapp.com https://complete-harmony-41d693229b.media.strapiapp.com; 3 frame-ancestors 'self' ;upgrade-insecure-requests; 3 font-src www.paypalobjects.com vbn.hyvatest.vivara.com www.vogelbeschermingshop.nl 'self' 'self' data: https://fonts.gstatic.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors vivara.hyvatest.vivara.com *.hyvatest.vivara.com self https: 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.xlcdn.com *.sz.xlcdn.com *.jetstre.am takeoff.jetstre.am www.googletagmanager.com 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com https://open.spotify.com https://*.facebook.com https://connect.facebook.net https://*.awin1.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ js.mollie.com *.trustpilot.com 'self' 'unsafe-inline'; img-src webcdn.vivara.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://images.unsplash.com https://test.pim-vivara.emico.nl *.googleapis.com webcdn.vbn.hyvatest.vivara.com vbn.hyvatest.vivara.com www.google.nl www.google.com webcdn.vogelbeschermingshop.nl www.vogelbeschermingshop.nl 'self' https://*.omappapi.com https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://googletagmanager.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://ssl.gstatic.com https://*.gstatic.com https://*.facebook.com https://*.facebook.net https://*.awin1.com magefan.com cm.magefan.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com *.disqus.com https://img.youtube.com https://www.mollie.com data: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://maps.googleapis.com https://player.vimeo.com vbn.hyvatest.vivara.com www.googletagmanager.com www.google-analytics.com www.youtube.com googleads.g.doubleclick.net www.vogelbeschermingshop.nl js.mollie.com maps.googleapis.com assets.exatom.io *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://www.clarity.ms https://www.dwin1.com https://a.omappapi.com https://*.omappapi.com https://squeezely.tech https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.doubleclick.net https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.yieldify.com https://connect.facebook.net www.facebook.com https://*.roeyecdn.com https://*.clarity.ms https://www.awin1.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://cdn.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com vbn.hyvatest.vivara.com www.vogelbeschermingshop.nl 'self' 'unsafe-inline' https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.exatom.io region1.analytics.google.com www.google-analytics.com www.google.com www.vogelbeschermingshop.nl maps.googleapis.com vbn.hyvatest.vivara.com 'self' https://*.google-analytics.com shadowpixel-api-vivara-503839668312.europe-west4.run.app https://bat.bing.com https://bat.bing.net https://*.doubleclick.net https://googleadservices.com https://*.omappapi.com https://squeezely.tech https://pagead2.googlesyndication.com https://www.google.com https://*.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://connect.facebook.net https://*.facebook.com https://*.roeyecdn.com https://*.clarity.ms https://*.awin1.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src vbn.hyvatest.vivara.com www.vogelbeschermingshop.nl www.google.com 'self' https://*.omappapi.com https://*.clarity.ms https://c.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3 default-src 'self' http: https: data: blob: 'unsafe-inline'; connect-src 'self' https://*.rambler.ru https://yandex.ru https://*.yandex.ru https://*.yandex.net https://yastatic.net wss://mc.yandex.ru https://mc.yandex.ru https://smi2.ru https://*.smi2.ru https://cdn.onesignal.com 3 upgrade-insecure-requests; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; 3 object-src 'none'; frame-src *; frame-ancestors 'self' X-Frame-Options: SAMEORIGIN 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' blob: data: https:; font-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https: wss:; frame-src *; worker-src 'self' blob: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 3 referrer no-referrer 3 frame-ancestors 'self' https://app.agilitycms.com; 3 base-uri 'none'; frame-src 'self' 'unsafe-inline' *.youtube.com https://docs.bareos.org; connect-src 'self' https://matomo.bareos.com/matomo.php https://ga2.getresponse.com https://popups1-show.getresponse.com https://popups1-s.getresponse.com https://ts.getresponse.pl; font-src 'self' data: https://fonts.googleapis.com https://fonts.bunny.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://matomo.bareos.com/matomo.js https://an.gr-wcon.com https://us-an.gr-cdn.com https://us-wbe.gr-cdn.com; style-src 'self' 'unsafe-inline' https://fonts.bunny.net https://fonts.googleapis.com; img-src 'self' data: https://stamen-tiles-a.a.ssl.fastly.net https://stamen-tiles-b.a.ssl.fastly.net https://stamen-tiles-c.a.ssl.fastly.net https://tiles.stadiamaps.com https://us-ms.gr-cdn.com; object-src 'none'; form-action 'self' data:; frame-ancestors 'self'; default-src 'none' 3 default-src *; img-src * 'self' data: https://*; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; 3 default-src https: blob: data: 'self'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' ; img-src https: data: ; media-src https: blob: ; upgrade-insecure-requests; block-all-mixed-content; connect-src https: wss://*.hotjar.com; 3 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; frame-src https:; connect-src 'self' https:; object-src 'none'; 3 frame-ancestors 'self' *.logo.pt *.force.com *.tranquilidade.cst *.tranquilidade.pt *.generalitranquilidade.pt *.t-vida.pt *.tranquilidade.co.ao *.tranquilidadeseguros.co.mz *.facebook.net *.facebook.com *.advancecare.pt *.vitorinos.pt 3 default-src 'self'; style-src 'self' 'unsafe-inline' *.bazaarvoice.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.salesforce-scrt.com/ *.pixeltrack.it/ https://staging-danone.pixeltrack.it/ *.google.co.in/ *.danoneskyr.co.uk/ *.google.mk/ *.googletagmanager.com/ *.paypalobjects.com/ *.paypal.com/ *.adsrvr.org/ *.applicationinsights.io/ *.adyen.com/ *.teads.tv/ *.hotjar.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.adobeaemcloud.com/ *.hotjar.io/ *.visualstudio.com/ *.bootstrapcdn.com/ *.briteverify.com/ *.channelsight.com/ *.chargebee.com/ https://app.retention.chargebee.com/ *.commander1.com/ *.force.com/ *.google.com/ *.googleapis.com/ *.gstatic.com/ *.live2support.com/ *.lpsnmedia.net/ *.mopinion.com/ *.myfonts.net/ *.onetrust.com/ *.pinterest.com/ *.salesforce-sites.com/ *.scene7.com/ *.sharethis.com/ *.tagcommander.com/ *.teads.tv/ *.visualstudio.com/ *.youtube.com/ *.zencdn.net/ *.visualwebsiteoptimizer.com app.vwo.com use.typekit.net p.typekit.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://digital-health-services-eu.danone.com/ *.bazaarvoice.com/ *.salesforce-scrt.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.pixeltrack.it/ https://staging-danone.pixeltrack.it/ *.danoneskyr.co.uk/ *.google.co.in/ *.google.mk/ *.googletagmanager.com/ *.paypalobjects.com/ *.paypal.com/ *.applicationinsights.io/ *.cloudfront.net/ *.adsrvr.org/ *.amazon-adsystem.com/ blob: https://js-agent.newrelic.com/ *.algolia.net/ *.algolia.io/ *.addthis.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.teads.tv/ *.adobeaemcloud.com/ *.hotjar.com/ *.hotjar.io/ *.visualstudio.com/ *.addthisedge.com/ *.adobedtm.com/ *.ads-twitter.com/ *.adyen.com/ *.aptaclub.co.uk/ *.aptashop.co.uk/ *.bing.com/ *.candgshop.co.uk/ *.cgbabyclub.co.uk/ *.channelsight.com/ *.chargebee.com/ https://app.retention.chargebee.com/ *.commander1.com/ *.constant.co/ *.danone-dtc.net/ *.digital4danone.com/ *.doubleclick.net/ *.everestjs.net/ *.facebook.net/ *.force.com/ *.gbqofs.com/ *.gigya.com/ *.google-analytics.com/ *.google.co.uk/ *.google.com/ *.googleadservices.com/ *.googleapis.com/ *.googletagmanager.com/ *.gstatic.com/ *.live2support.com/ *.liveperson.net/ *.lpsnmedia.net/ *.monitor.azure.com/ *.mopinion.com/ *.onetrust.com/ *.outbrain.com/ *.pinterest.com/ *.postcodeanywhere.co.uk/ *.salesforce-sites.com/ *.salesforce.com/ *.salesforceliveagent.com/ *.scene7.com/ *.sharethis.com *.tagcommander.com/ *.teads.tv/ *.theadex.com *.trustcommander.net/ *.trustpilot.com/ *.twitter.com *.visualstudio.com/ *.ytimg.com/ ct.captcha-delivery.com http://*.hotjar.com http://*.hotjar.io http://danone.d3.sc.omtrdc.net/ https://*.hotjar.com https://*.hotjar.io https://live2support.com/ https://s.pinimg.com/ https://sc-static.net/ js.datadome.co www.youtube.com/ *.tiktok.com/ *.jsdelivr.net/ *.visualwebsiteoptimizer.com app.vwo.com use.typekit.net; img-src 'self' data: *.bazaarvoice.com/ *.pixeltrack.it/ *.salesforce-scrt.com/ *.paypalobjects.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ https://staging-danone.pixeltrack.it/ *.google.co.in/ *.google.mk/ *.googletagmanager.com/ *.paypal.com/ https://www.aptaclub.co.uk/ *.applicationinsights.io/ *.adsrvr.org/ *.adition.com/ *.danoneskyr.co.uk/ *.hotjar.com/ *.hotjar.io/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.teads.tv/ *.adobeaemcloud.com/ *.visualstudio.com/ *.adnxs.com/ *.adyen.com/ *.analytics.google.com/ *.assetsadobe.com/ *.assetsadobe2.com/ *.bing.com/ *.channelsight.com/ *.commander1.com/ *.cx.atdmt.com/ *.danone-dtc.net/ *.danone.com/ *.demdex.net/ *.digital4danone.com/ *.doubleclick.net/ *.everesttech.net/ *.facebook.com/ *.google-analytics.com/ *.google.co.uk/ *.google.com/ *.google.ie/ *.googleapis.com/ *.googletagmanager.com/ *.gstatic.com/ *.hotjar.com *.hotjar.io *.live2support.com/ *.lpsnmedia.net/ *.mookie1.com/ *.omtrdc.net/ *.onetrust.com/ *.outbrain.com/ *.postcodeanywhere.co.uk/ *.salesforce-sites.com/ *.scene7.com/ *.sharethis.com/ *.tagcommander.com/ *.teads.tv/ *.theadex.com/ *.trustcommander.net/ *.twitter.com/ *.visualstudio.com/ *.w3.org/ *.ytimg.com/ http://danonegroup-stage.neolane.net/ http://t.co/ https://ca-live.adyen.com/ https://cscoreproweustor.blob.core.windows.net/ https://ct.pinterest.com/ https://www.google.fr/ https://www.google.nl/ *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io p.typekit.net; frame-src 'self' *.bazaarvoice.com/ *.pixeltrack.it/ https://staging-danone.pixeltrack.it/ *.salesforce-scrt.com/ *.salesforce.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.google.co.in/ *.google.mk/ *.googletagmanager.com/ *.paypalobjects.com/ *.paypal.com/ *.algolia.net/ *.applicationinsights.io/ *.algolia.io/ *.addthis.com *.adsrvr.org/ *.adyen.com/ *.danoneskyr.co.uk/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.teads.tv/ *.adobeaemcloud.com/ *.hotjar.com/ *.hotjar.io/ *.visualstudio.com/ *.amazon-adsystem.com/ *.briteverify.com *.channelsight.com/ *.chargebee.com/ https://app.retention.chargebee.com/ *.cloudfront.net/ *.commander1.com/ *.constant.co/ *.demdex.net/ *.doubleclick.net/ *.facebook.com/ *.flockler.com/ *.force.com/ *.gigya.com/ *.google.com/ *.googleapis.com/ *.live2support.com/ *.liveperson.net/ *.lpsnmedia.net/ *.nutridrink.com.br/onde-encontrar/ *.onetrust.com/ *.proprofs.com/ *.salesforce-sites.com/ *.scene7.com/ *.sharethis.com/ *.danone-dtc.net/ *.spotify.com/ *.tagcommander.com/ *.teads.tv/ *.theadex.com/ *.tohklom.com/ *.trustcommander.net/ *.trustpilot.com *.vimeo.com/ *.visualstudio.com/ *.youtube.com geo.captcha-delivery.com http://*.hotjar.io https://*.hotjar.com https://*.hotjar.io https://aax-eu.amazon-adsystem.com/ https://ketchapi.co.uk/ https://tr.snapchat.com/ www.youtube.com *.visualwebsiteoptimizer.com app.vwo.com; connect-src 'self' *.bazaarvoice.com/ *.pixeltrack.it/ https://staging-danone.pixeltrack.it/ *.salesforce-scrt.com/ *.salesforce.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.google.co.in/ *.danoneskyr.co.uk/ *.google.mk/ *.googletagmanager.com/ *.paypalobjects.com/ *.paypal.com/ *.amazonaws.com/ *.adsrvr.org/ *.applicationinsights.io/ *.example.com/ *.paa-reporting-advertising.amazon/ *.tapad.com/ *.azure.com/ *.amazon-adsystem.com/ https://bam.eu01.nr-data.net/ *.algolia.net/ *.algolia.io/ *.addthis.com/ *.adyen.com/ *.teads.tv/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.analytics.google.com/ *.adobeaemcloud.com/ *.hotjar.com/ *.hotjar.io/ *.visualstudio.com/ *.aptaclub.co.uk/ *.aptashop.co.uk/ *.bing.com/ *.briteverify.com/ *.candgshop.co.uk/ *.cgbabyclub.co.uk/ *.channelsight.com/ *.commercetools.com/ *.danone-dtc.net/ *.demdex.net/ *.digital4danone.com/ *.doubleclick.net/ *.facebook.com/ *.force.com/ *.gbqofs.io/ *.google-analytics.com *.google-analytics.com/ *.googleapis.com/ *.live2support.com/ *.mopinion.com/ *.omtrdc.net/ *.onetrust.com/ *.privacy.trustcommander.net/ *.salesforce-sites.com/ *.scene7.com/ *.sentry.io/ *.sharethis.com/ *.snapchat.com/ *.teads.tv/ *.visualstudio.com/ *.youtube.com/ api-js.datadome.co http://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.com:* https://*.hotjar.io https://api.sphere.io/ https://ct.pinterest.com/ https://lasteventf-tm.everesttech.net/ https://privacy.trustcommander.net/ https://services.postcodeanywhere.co.uk/ wss://*.hotjar.com *.tiktok.com/ *.google.com/ https://*.algolianet.com *.visualwebsiteoptimizer.com app.vwo.com performance.typekit.net *.trustpilot.com *.googleadservices.com https://unpkg.com https://cdn.jsdelivr.net/ https://digital-health-services-eu.danone.com/; font-src 'self' data: *.bazaarvoice.com/ *.pixeltrack.it/ https://staging-danone.pixeltrack.it/ *.salesforce-scrt.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.paypalobjects.com/ *.danoneskyr.co.uk/ *.google.co.in/ *.google.mk/ *.googletagmanager.com/ *.paypal.com/ *.adsrvr.org/ *.adyen.com/ *.applicationinsights.io/ *.channelsight.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.teads.tv/ *.danone-dtc.net/ *.adobeaemcloud.com/ *.hotjar.com/ *.hotjar.io/ *.visualstudio.com/ *.googleapis.com/ *.gstatic.com/ *.gstatic.mopinion.com/ *.live2support.com/ *.onetrust.com/ *.pinterest.com/ *.salesforce-sites.com/ *.scene7.com/ *.teads.tv/ *.visualstudio.com/ http://*.hotjar.com http://*.hotjar.io https://*.hotjar.com https://*.hotjar.io https://gstatic.mopinion.com/ https://vjs.zencdn.net/ *.google.com/ use.typekit.net; media-src 'self' *.bazaarvoice.com/ *.pixeltrack.it/ https://staging-danone.pixeltrack.it/ *.salesforce-scrt.com/ https://danone--uat.sandbox.my.site.com/ https://danone.my.site.com/ https://danone--devrun.sandbox.my.salesforce.com/ *.paypalobjects.com/ *.danoneskyr.co.uk/ *.google.co.in/ *.google.mk/ *.googletagmanager.com/ *.paypal.com/ *.adsrvr.org/ *.briteverify.com/ *.applicationinsights.io/ *.channelsight.com/ *.digital4danone.com/ *.aemcs.digital4danone.com/ *.linkedin.com/ *.licdn.com/ *.teads.tv/ *.googleapis.com/ *.adobeaemcloud.com/ *.hotjar.com/ *.hotjar.io/ *.visualstudio.com/ *.lpsnmedia.net/ *.onetrust.com/ *.pinterest.com/ *.salesforce-sites.com/ *.scene7.com/ *.teads.tv/ *.visualstudio.com/ *.youtube.com/ *.google.com/ 3 report-to csp-report-endpoint; report-uri /logger/info/csp-report; frame-ancestors 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: wss: blob: 3 default-src 'self'; child-src blob:; media-src * 'self' data: https: blob:; style-src 'self' 'unsafe-inline' *.pricespider.com *; img-src * 'self' data: https: blob: *.pricespider.com; script-src * data: *.pricespider.com https://*.rudderlabs.com/ blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline' https://*.rudderstack.com/; font-src * data: https:; frame-src *; 3 script-src * 'unsafe-eval' 'unsafe-inline'; worker-src data: blob: * 3 default-src 'self'; frame-src 'self' blob: data: application/pdf *.vimeo.com *.fnb.co.za *.ebucks.com authentication.cardinalcommerce.com *.fnbbotswana.co.bw *.doubleclick.net *.fnbconnect.co.za *.rmb.co.za:10443 *.fnbswaziland.co.sz:10443 *.fnbzambia.co.zm:10443 *.firstnationalbank.com.gh:10443 *.fnb.co.ls:10443 *.fnbci.co.uk:10443 *.fnbnamibia.com.na:10443 *.rmbprivatebank.com:10443 *.fnb.co.za:10443 *.rmb.co.za *.fnbswaziland.co.sz *.google.com *.gstatic.com *.fnbzambia.co.zm msgfnb.bankserv.co.za *.firstnationalbank.com.gh *.fnb.co.ls *.fnbci.co.uk *.fnbnamibia.com.na *.id.opendns.com *.rmbprivatebank.com https://*.googletagmanager.com; frame-ancestors 'self' *.fnb.co.za *.doubleclick.net https://*.fnbnamibia.com.na https://*.firstrand.co.za https://*.fnb.co.ls https://*.fnbbotswana.co.bw https://*.fnbswaziland.co.sz https://*.fnbzambia.co.zm *.rmb.co.za https://*.rmbprivatebank.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.gstatic.com https://*.googletagmanager.com https://*.googleapis.com https://*.google-analytics.com https://*.googleadservices.com https://connect.facebook.net https://*.doubleclick.net https://*.fnb.co.za https://*.google.com https://*.google.co.za; worker-src 'self'; style-src 'self' 'unsafe-inline' https://*.googleapis.com; object-src 'self'; img-src 'self' https://*.google.com https://*.google.co.za https://www.facebook.com https://*.google-analytics.com *.doubleclick.net https://*.fnb.co.za https://*.fnbnamibia.com.na https://*.firstrand.co.za https://*.fnb.co.ls https://*.fnbbotswana.co.bw https://*.fnbswaziland.co.sz https://*.vimeocdn.com https://*.vimeo.com https://*.fnbzambia.co.zm *.rmb.co.za https://*.rmbprivatebank.com blob: data: https://*.google.co.za https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://media.tenor.com https://media.giphy.com https://*.googlesyndication.com; media-src 'self' blob: data: https://*.fnb.co.za https://*.fnbnamibia.com.na https://*.firstrand.co.za https://*.fnb.co.ls https://*.fnbbotswana.co.bw https://*.fnbswaziland.co.sz https://*.fnbzambia.co.zm *.rmb.co.za https://*.rmbprivatebank.com https://*.cloudfront.net https://download-video.akamaized.net https://*.vimeo.com https://*.googleapis.com; font-src 'self' https://*.gstatic.com; connect-src 'self' https://*.fnbconnect.co.za https://eu.whatfix.com https://*.gstatic.com https://*.fnbwealthandinvestments.co.za wss://*.fnbconnect.co.za:* https://*.googleapis.com https://media.tenor.com https://media.giphy.com https://*.fnb.co.za https://*.fnbnamibia.com.na https://*.firstrand.co.za https://*.fnb.co.ls https://*.fnbbotswana.co.bw https://*.fnbswaziland.co.sz https://*.fnbzambia.co.zm *.rmb.co.za https://*.rmbprivatebank.com https://*.google.com https://*.google.co.za https://*.google-analytics.com https://*.googlesyndication.com https://qa-sgtm-kdhtvzc.uc.r.appspot.com https://fnb-za-sgtm-km7z7r4k.ey.r.appspot.com *.doubleclick.net; form-action 'self' https://*.fnb.co.za https://*.fnbwealthandinvestments.co.za https://*.fnbnamibia.com.na https://*.firstrand.co.za https://*.fnbci.co.uk https://*.fnb.co.ls https://*.fnbbotswana.co.bw https://*.fnbswaziland.co.sz https://*.fnbzambia.co.zm *.rmb.co.za https://*.rmbprivatebank.com; 3 frame-ancestors 'self' https://webcake.io https://staging.webcake.io; img-src 'self' https://*.pancake.vn https://img.youtube.com https://lh3.googleusercontent.com https://www.facebook.com https://www.google.com https://www.google.com.vn https://platform-lookaside.fbsbx.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://fonts.gstatic.com https://www.pngrepo.com https://*.mgid.com https://mgid.com https://www.googleadservices.com https://imgur.com https://log.adtimaserver.vn https://contineljs.com https://amcdn.vn https://lg1.logging.admicro.vn https://cityads.gotrackier.io https://*.mocdecor99.com data: blob: 3 script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.unica.vn www.googletagmanager.com connect.facebook.net web.facebook.com www.facebook.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.gstatic.com onesignal.com tpc.googlesyndication.com webpush.vn cdnjs.cloudflare.com accounts.google.com www.google.com www.youtube.com zoom.us source.zoom.us cdn.jsdelivr.net unpkg.com npmcdn.com translate.google.com sp.zalo.me analytics.tiktok.com w.ladicdn.com salekit.io za.zdn.vn embed.tawk.to cdn.tailwindcss.com ipinfo.io *.googleapis.com apis.google.com *.edubit.vn www.wiris.net edubit.live www.pdftron.com fchat.vn cdn.fchat.vn embed.ybai.me salekit.page player.vimeo.com livechat.fpt.ai www.misa.vn a.pancake.vn api.webcake.io zigzag.vn yoga.vn app.chatbiz.vn player.vdocipher.com chatgpt.com sf-cdn.coze.com rc-help.pagefly.io *.chative.io ahachat.com app.ahachat.com app.preny.ai cdn.mathjax.org *.salekit.com hcaptcha.com *.hcaptcha.com esm.sh; worker-src blob: https:; 3 connect-src 'self' wss: ws: consentcdn.cookiebot.eu consent.cookiebot.com urkwvzhzpc.execute-api.eu-west-1.amazonaws.com *.doubleclick.net *.googlesyndication.com *.klaviyo.com *.klarnacdn.net *.cookiebot.com *.termly.io cloudflareinsights.com *.facebook.com *.dojo.tech *.salesfire.co.uk *.onlinesizing.bike *.tawk.to cdn-cookieyes.com *.cookieyes.com *.klaviyo.com *.appspot-preview.com *.bing.com *.clarity.ms *.fontawesome.com *.google-analytics.com *.google.com google.com pay.google.com *.google.co.uk *.googleapis.com *.googletagmanager.com *.hotjar.com *.iubenda.com *.klarna.com *.klarnaservices.com *.luckyorange.com *.luckyorange.net *.nr-data.net *.paymentsense.cloud *.pushsales.app *.salesfire.co.uk *.sharethis.com *.smartlook.cloud *.visitors.live api.getaddress.io bat.bing.com content.hotjar.io eu.klarnaevt.com js.klarna.com live.smartmetrics.co.uk manager.eu.smartlook.cloud maps.googleapis.com metrics.hotjar.io na.klarnaevt.com stats.g.doubleclick.net vc.hotjar.io www.google.se centinelapi.cardinalcommerce.com *.outfindo.com outfindo.com *.promofeatures.com js.stripe.com *.sandbox.paypal.com *.paypal.com consentprotect.com *.accounts.google.com *.googleadservices.com *.google.com *.adyen.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com checkout-test.adyen.com checkout-live.adyen.com applepay.cdn-apple.com *.apple.com apple.com; default-src 'self' *.klaviyo.com *.dojo.tech *.salesfire.co.uk *.googleapis.com *.trustpilot.com; font-src 'self' *.klaviyo.com *.dojo.tech *.pushsales.app *.tawk.to *.salesfire.co.uk *.klaviyo.com fonts.gstatic.com *.cloudflare.com *.fontawesome.com *.typekit.net x.klarnacdn.net js.stripe.com *.sandbox.paypal.com *.paypal.com consent.cookiebot.com; form-action 'self' *.list-manage.com translate.googleapis.com pay.realexpayments.com *.klaviyo.com *.dojo.tech *.facebook.com *.paypal.com *.sagepay.com *.worldpay.com eu-library.klarnaservices.com gateway.cardstream.com live.opayo.eu.elavon.com mdepayments.epdq.co.uk test.opayo.eu.elavon.com js.stripe.com *.sandbox.paypal.com *.paypal.com *.accounts.google.com; frame-ancestors 'self'; frame-src *.cookiebot.eu *.outfindo.com youtu.be *.klaviyo.com hubtiger.com app.bikerentalmanager.com connect.garmin.com widgets.sociablekit.com *.paypalobjects.com www.googletagmanager.com bikesizing.cube.eu www.paypal.com bookings.hubtiger.com challenges.cloudflare.com *.onlinesizing.bike consentcdn.cookiebot.com *.termly.io *.doubleclick.net *.facebook.com *.google.com google.com pay.google.com *.google.co.uk *.greencommuteinitiative.uk greencommuteinitiative.uk *.instagram.com *.paymentsense.cloud *.sharethis.com *.strava.com *.trustpilot.com *.vimeo.com *.youtube-nocookie.com *.youtube.com www.komoot.com cdn.salesfire.co.uk jejames.checkfront.co.uk js.klarna.com td.doubleclick.net www.cyclescheme.co.uk osm.klarnaservices.com *.webmaps.co.uk centinelapi.cardinalcommerce.com js.stripe.com forms.office.com ridewithgps.com platform.twitter.com *.webgains.com *.recaptcha.net *.sandbox.paypal.com *.paypal.com consentprotect.com *.accounts.google.com consent.cookiebot.com *.googleadservices.com *.adyen.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com *.worldpay.com try.access.worldpay.com access.worldpay.com applepay.cdn-apple.com *.apple.com; img-src 'self' 'unsafe-inline' data: https: *.klaviyo.com *.dojo.tech *.google-analytics.com *.googletagmanager.com *.gravatar.com 0.gravatar.com l.sharethis.com www.gravatar.com www.specialized.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' player.vimeo.com platform.twitter.com *.consentprotect.com www.googletagmanager.com www.youtube.com *.livechatinc.com *.kaspersky-labs.com *.googlesyndication.com analytics.tiktok.com *.googleadservices.com *.paypal.com widget.privy.com *.list-manage.com *.amazonaws.com *.mailchimp.com *.klaviyo.com *.checkfront.co.uk *.klarnacdn.net *.pushsales.co.uk challenges.cloudflare.com static.cloudflareinsights.com ajax.cloudflare.com *.dojo.tech *.cube.eu *.klarnaservices.com *.clarity.ms *.hotjar.com *.bing.com *.salesfire.co.uk js.klarna.com *.onlinesizing.bike *.clarity.ms *.tawk.to *.avln.me *.bing.com *.webgains.io *.klaviyo.com cdn-cookieyes.com *.chimpstatic.com chimpstatic.com *.googleapis.com *.getaddress.io *.iubenda.com *.addthis.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.facebook.net *.google-analytics.com *.google.com pay.google.com *.googletagmanager.com *.gstatic.com *.instagram.com *.klarna.com *.klarnaservices.com *.luckyorange.com *.newrelic.com *.nr-data.net *.paymentsense.cloud *.pushsales.app *.salesfire.co.uk *.sharethis.com *.trustpilot.com *.typekit.net *.vimeo.com cdn.jsdelivr.net cdn.salesfire.co.uk cdnjs.cloudflare.com code.jquery.com *.cookiebot.com *.termly.io hit.salesfire.co.uk js.klarna.com kit.fontawesome.com maps.googleapis.com polyfill-fastly.io script.hotjar.com *.elfsight.com static.hotjar.com unpkg.com web-sdk.smartlook.com www.google.com www.gstatic.com x.klarnacdn.net osm.klarnaservices.com *.webmaps.co.uk centinelapi.cardinalcommerce.com *.outfindo.com outfindo.com *.promofeatures.com js.stripe.com *.sandbox.paypal.com *.paypal.com consentprotect.com *.accounts.google.com consent.cookiebot.com *.googleadservices.com *.adyen.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com *.worldpay.com try.access.worldpay.com access.worldpay.com applepay.cdn-apple.com *.apple.com; style-src 'self' 'unsafe-inline' *.google.com www.google.com *.mailchimp.com *.klaviyo.com *.dojo.tech *.paymentsense.cloud *.tawk.to *.salesfire.co.uk *.klaviyo.com *.getaddress.io *.googleapis.com *.pushsales.app *.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com npkg.com x.klarnacdn.net js.stripe.com *.sandbox.paypal.com *.paypal.com consentprotect.com *.accounts.google.com *.adyen.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com; report-to csp-endpoint; 3 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; 3 default-src 'self'; script-src 'self' 'unsafe-inline' *.googletagmanager.com *.google.com *.gstatic.com *.visualwebsiteoptimizer.com *.ahrefs.com *.vwo.com; worker-src blob: 'self'; frame-src 'self' *.youtube.com *.google.com slotslaunch.com *.visualwebsiteoptimizer.com *.vwo.com; img-src * data:; style-src 'self' 'unsafe-inline' *.gstatic.com *.googleapis.com *.visualwebsiteoptimizer.com *.vwo.com; connect-src *; font-src 'self' *.gstatic.com 3 default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.sdp.vic.gov.au chatbot.digital.vic.gov.au *.chatbot.digital.vic.gov.au usercheck.vgso.vic.gov.au cdnjs.cloudflare.com *.googletagmanager.com tagmanager.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com *.monsido.com connect.facebook.net *.cloudfront.net media.twiliocdn.com *.youtube.com ytimg.com *.ytimg.com public.tableau.com *.openforms.com *.serving-sys.com player.vimeo.com spreadsheets.google.com cdn.storerocket.io cdn.jsdelivr.net *.mapbox.com *.googleadservices.com drive.google.com *.googleusercontent.com docs.google.com web-messenger.ingenious.ai *.smooch.io maps.googleapis.com sc-static.net ecodev.jotform.com snap.licdn.com *.clarity.ms challenges.cloudflare.com *.salesforceliveagent.com *.freshworks.com *.freshdesk.com google.com www.google.com www.gstatic.com *.reciteme.com *.niceincontact.com; style-src 'self' 'unsafe-inline' www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.sdp.vic.gov.au ui.chatbot.digital.vic.gov.au fonts.googleapis.com tagmanager.google.com fast.fonts.net *.openforms.com fontlibrary.org *.googletagmanager.com web-messenger.ingenious.ai *.smooch.io drwgdblqzrfiz.cloudfront.net *.freshworks.com *.freshdesk.com *.reciteme.com *.niceincontact.com; img-src 'self' *.amazee.io *.analytics.google.com *.content.vic.gov.au *.doubleclick.net *.fastly.net *.google-analytics.com *.google.com *.google.com.au *.gravatar.com *.gstatic.com *.hotjar.com *.hotjar.io *.ingenious.ai *.sdp.vic.gov.au *.smooch.io *.www.vic.gov.au api.mapbox.com assets.storerocket.io au-gmtdmp.mookie1.com base.maps.vic.gov.au blob: cdn.storerocket.io content.vic.gov.au data: dhhs.vic.gov.au drwgdblqzrfiz.cloudfront.net i.ytimg.com lh3.googleusercontent.com maps.googleapis.com maps.gstatic.com secure.adnxs.com tracking.monsido.com vic-bot.netlify.app wss://*.hotjar.com www.dhhs.vic.gov.au www.facebook.com www.google.co.id www.google.co.jp www.google.co.uk www.google.co.za www.google.com www.google.com.bo www.google.com.br www.google.com.co www.google.com.eg www.google.com.mx www.google.com.na www.google.com.om www.google.com.pk www.google.com.sg www.google.com.tr www.google.com.ua www.google.fr www.google.gr www.google.hr www.google.ie www.google.it www.google.lk www.google.nl www.google.rs www.googletagmanager.com *.clarity.ms *.linkedin.com c.bing.com *.freshworks.com *.freshdesk.com www.vic.gov.au plan-gis.mapshare.vic.gov.au *.reciteme.com *.niceincontact.com *.vic.gov.au; font-src 'self' data: www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.sdp.vic.gov.au fonts.gstatic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com fontlibrary.org *.smooch.io *.ingenious.ai *.reciteme.com *.niceincontact.com; frame-src 'self' www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.sdp.vic.gov.au *.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com *.vimeo.com vimeo.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com batchgeo.com www.google.com app.powerbi.com macuport.com dhhs.carto.com public.tableau.com *.libsyn.com *.soundcloud.com *.openforms.com *.serving-sys.com tour.cite360.com.au *.doubleclick.net livestream.com flo.uri.sh zingtree.com control.5stream.com *.podbean.com lgi-complaint-form-uat.powerappsportals.com www.kuula.co s3-ap-southeast-2.amazonaws.com e.issuu.com deakin.h5p.com padlet.com e.infogram.com fuse.education.vic.gov.au *.arcgis.com ecodev.jotform.com app.vision6.com.au *.formsite.com digitaltender.alstom.com urldefense.com app4.vision6.com.au dhhschange.syd1.qualtrics.com *.clarity.ms datawrapper.dwcdn.net cite360.tours open.spotify.com enterprise.mapshare.vic.gov.au forms.zohopublic.com.au www.googletagmanager.com confirmsubscription.com childcare-calc-apps.shinyapps.io *.freshdesk.com challenges.cloudflare.com teamcreativekuula.viewin360.co *.niceincontact.com vgccc-calculator.fly.dev *.canvas-user-content.com widgets.sociablekit.com; manifest-src 'self' data:; media-src 'self' *.ingenious.ai *.reciteme.com; connect-src 'self' *.analytics.google.com *.api.go.vic.gov.au *.arcgis.com *.au.ingenious.ai *.chatbot.digital.vic.gov.au *.content.vic.gov.au *.doubleclick.net *.fastly.net *.google-analytics.com *.hotjar.com *.hotjar.io *.mapbox.com *.myvictoria.vic.gov.au *.sdp.vic.gov.au *.smooch.io *.storerocket.io *.www.vic.gov.au analytics.google.com api.go.vic.gov.au api.ipify.org chatbot.digital.vic.gov.au content.vic.gov.au corp-geo.mapshare.vic.gov.au directory.data.vic.gov.au discover.data.vic.gov.au drwgdblqzrfiz.cloudfront.net flex-api.twilio.com iam.twilio.com maps.googleapis.com secure-ds.serving-sys.com stat.data.abs.gov.au storerocket.io tsock.us1.twilio.com web-messenger.ingenious.ai wss://*.hotjar.com wss://*.smooch.io wss://tsock.us1.twilio.com www.facebook.com www.google.com *.clarity.ms *.linkedin.com *.google.com *.freshworks.com *.freshdesk.com *.niceincontact.com wss://*.niceincontact.com www.vic.gov.au opendata.maps.vic.gov.au plan-gis.mapshare.vic.gov.au *.monsido.com enterprise.mapshare.vic.gov.au *.reciteme.com; frame-ancestors 'self' *.vic.gov.au *.shrine.org.au *.victorianveteranscouncil.org.au *.instructure.com; 3 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.go-mpulse.net https://*.vimeocdn.com https://*.doubleclick.net https://www.google.com https://www.google.nl https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://www.googleadservices.com https://*.cookieconsent.io https://*.my.site.com https://*.salesforce-scrt.com https://*.goinstore.com https://*.opentok.com https://*.hotjar.com https://*.adalyser.com https://s.pinimg.com https://ct.pinterest.com https://*.facebook.net https://*.facebook.com https://*.convertexperiments.com https://app.convert.com https://cdn.leadinfo.net https://*.typeform.com https://*.typeform.eu https://*.quooker.com https://*.quooker.ae https://*.quooker.at https://*.quooker.be https://*.quooker.ch https://*.quooker.es https://*.quooker.de https://*.quooker.fr https://*.quooker.ie https://*.quooker.it https://*.quooker.nl https://*.quooker.pl https://*.quooker.co.uk https://*.quooker.pt https://*.quooker.hk https://snap.licdn.com https://cdn.ldnfrpl.com https://*.bing.com https://*.amazon-adsystem.com https://*.bambuser.com https://*.amplifyapp.com https://*.cookiebot.com https://js.klarna.com https://*.cloudfront.net/ https://*.contentsquare.net https://*.heap-api.com https://heapanalytics.com https://*.heapanalytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googletagmanager.com https://*.cookieconsent.io https://*.my.site.com https://*.salesforce-scrt.com https://*.goinstore.com https://*.hotjar.com https://*.typeform.com https://*.typeform.eu https://*.quooker.com https://*.bambuser.com https://*.quooker.ae https://*.quooker.at https://*.quooker.be https://*.quooker.ch https://*.quooker.es https://*.quooker.de https://*.quooker.fr https://*.quooker.ie https://*.quooker.it https://*.quooker.nl https://*.quooker.pl https://*.quooker.co.uk https://*.quooker.pt https://*.quooker.hk https://*.amazon-adsystem.com https://*.amplifyapp.com https://*.cookiebot.com https://x.klarnacdn.net https://heapanalytics.com https://*.heapanalytics.com; img-src 'self' blob: data: content.quooker.com https://quooker.co.uk https://www.quooker.co.uk https://images.eu.ctfassets.net https://*.adalyser.com https://*.akstat.io https://*.cookieconsent.io https://*.ctfassets.net https://*.goinstore.com https://*.facebook.com https://*.facebook.net https://*.doubleclick.net https://www.google.com https://www.google.nl https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.ytimg.com https://*.typeform.com https://*.typeform.eu https://*.vimeocdn.com https://*.quooker.ae https://*.quooker.at https://*.quooker.be https://*.quooker.ch https://*.quooker.es https://*.quooker.de https://*.quooker.fr https://*.quooker.ie https://*.quooker.it https://*.quooker.nl https://*.quooker.pl https://*.quooker.co.uk https://*.quooker.pt https://*.quooker.hk https://adservice.google.com https://stats.g.doubleclick.net https://*.linkedin.com https://*.bambuser.com https://*.amazon-adsystem.com https://*.amplifyapp.com https://*.cookiebot.com https://*.podscribe.com/ https://*.pdscrb.com/ https://*.tapad.com/ https://*.contentsquare.net https://heapanalytics.com https://*.heapanalytics.com; connect-src 'self' data: https://*.adyen.link https://*.akstat.io https://*.go-mpulse.net https://*.akamaihd.net https://*.vimeocdn.com https://*.cookieconsent.io https://*.my.site.com https://*.salesforce-scrt.com https://*.goinstore.com https://*.tokbox.com wss://*.tokbox.com https://*.opentok.com https://*.loggly.com https://*.doubleclick.net https://www.google.com https://www.google.nl https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://ct.pinterest.com https://*.facebook.net https://*.facebook.com https://*.convertexperiments.com https://app.convert.com https://*.typeform.com https://*.typeform.eu https://*.leadinfo.net https://*.leadinfo.com https://*.quooker.com https://*.bambuser.com https://*.quooker.ae https://*.quooker.at https://*.quooker.be https://*.quooker.ch https://*.quooker.es https://*.quooker.de https://*.quooker.fr https://*.quooker.ie https://*.quooker.it https://*.quooker.nl https://*.quooker.pl https://*.quooker.co.uk https://*.quooker.pt https://*.quooker.hk https://*.pinimg.com https://*.ldnfrpl.com https://*.linkedin.com https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://*.amplifyapp.com https://*.cookiebot.com https://*.klarna.com https://*.klarnaevt.com https://*.podscribe.com/ https://*.pdscrb.com/ https://*.tapad.com/ https://*.contentsquare.net https://*.contentsquare.com https://*.heap-api.com https://heapanalytics.com https://*.heapanalytics.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://e.issuu.com https://calendly.com https://*.my.site.com https://*.salesforce-scrt.com https://stonly.com https://projects.ivorystudio.net https://*.goinstore.com https://www.googletagmanager.com https://www.google.com https://ct.pinterest.com https://*.facebook.net https://*.facebook.com https://*.typeform.com https://*.typeform.eu https://forms.office.com https://projects.zoomworks.nl https://*.quooker.com https://*.bambuser.com https://*.quooker.ae https://*.quooker.at https://*.quooker.be https://*.quooker.ch https://*.quooker.es https://*.quooker.de https://*.quooker.fr https://*.quooker.ie https://*.quooker.it https://*.quooker.nl https://*.quooker.pl https://*.quooker.co.uk https://*.quooker.pt https://*.quooker.hk https://*.amazon-adsystem.com https://*.amplifyapp.com https://*.cookiebot.com https://osm.klarnaservices.com https://csxd.contentsquare.net; font-src 'self' https://*.gstatic.com https://*.hotjar.com https://*.goinstore.com https://*.typeform.com https://*.typeform.eu https://*.bambuser.com https://x.klarnacdn.net https://heapanalytics.com https://*.heapanalytics.com; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' ; frame-ancestors 'self' https://app.contentful.com https://app.eu.contentful.com https://form.eu.typeform.com https://app.convert.com; upgrade-insecure-requests; 3 default-src 'self' cdn.webrtc-experiment.com https:; script-src 'self' 'unsafe-inline' cdn.webrtc-experiment.com https://cdn.webrtc-experiment.com https://www.google.com https://www.gstatic.com https:; script-src-elem 'self' 'unsafe-inline' cdn.webrtc-experiment.com https://cdn.webrtc-experiment.com https://www.google.com https://www.gstatic.com https:; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' *; worker-src 'self' blob:; media-src 'self'; frame-ancestors 'self' https:; 3 frame-ancestors 'none'; object-src 'none'; base-uri 'self' 3 default-src 'self' data: wss: 'unsafe-eval' 'unsafe-inline' blob: *.applicationinsights.azure.com *.applicationinsights.microsoft.com *.azure.com *.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cardinaltrusted.com *.doubleclick.net *.ewaypayments.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.com.au *.googleapis.com *.googletagmanager.com *.gstatic.com *.instagram.com *.jotform.com *.movingstory.com.au *.paypal.com *.report-uri.com *.tiktok.com *.ttwstatic.com *.typekit.net *.youtube.com az416426.vo.msecnd.net cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com google.com js.monitor.azure.com unpkg.com payments.sandbox.braintree-api.com; object-src 'none'; img-src 'self' https: data:;upgrade-insecure-requests;report-uri 3 \ 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 3 default-src *.bazaarvoice.com mpsnare.iesnare.com *.emmi-caffelatte.com *.emmi-kaltbach.com *.emmi.com ssgtm.derscharfemaxx.com ssgtm.kaeserei-studer.ch newsletter.chaesbueb.ch *.kaiku.es *.baumann-kaese.ch *.gstatic.com fonts.googleapis.com *.google.com *.googleadservices.com content.googleapis.com ajax.googleapis.com www.googletagmanager.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com www.youtube.com youtu.be www.facebook.com connect.facebook.net ct.pinterest.com tr6.snapchat.com export.highcharts.com intocities.com *.pipedrive.email analytics.tiktok.com issuu.com sc-static.net/scevent.min.js tr.snapchat.com emmilangnau.us3.list-manage.com eepurl.com dialog.scoutsss.com business.dialogify.io static.dialogify.io business.scoutsss.com s.pinimg.com *.freizeitplan.net *.eqs.com *.hana.ondemand.com *.equitystory.com siteimproveanalytics.com *.prospective.ch *.hotjar.com wss://*.hotjar.com *.typekit.net *.mookie1.com fonts.bunny.net cdn.polyfill.io emmi-chatbot.smack.build js.frubil.info ga-dev-tools.appspot.com player.vimeo.com charts3.equitystory.com webservices.newsbox.ch live.solique.ch e3.marco.ch embed.eventfrog.ch *.spotify.com spotify.com *.issuu.com *.tiqcdn.com *.tiqcdn.cn *.tealiumiq.com emmi-luzerner-farm-auslastung.vercel.app cdnjs.cloudflare.com *.clarity.ms *.adnxs.com *.acsbapp.com acsbapp.com hubspot-forms-static-embed-eu1.s3.amazonaws.com forms-eu1.hsforms.com hlc7l6v5w6.execute-api.us-west-2.amazonaws.com lets.shop maxmind.destinilocators.com geocode.arcgis.com cdn.acsbapp.com widget.freshworks.com emmiroth.freshdesk.com *.hsforms.com *.arcgis.com *.adsrvr.org *.yimg.com *.amazon-adsystem.com ara.paa-reporting-advertising.amazon 'self' 'unsafe-inline' 'unsafe-eval'; script-src *.bazaarvoice.com mpsnare.iesnare.com edge.curalate.com uk.cdn-net.com six.cdn-net.com *.emmi-caffelatte.com *.emmi-kaltbach.com *.kaiku.es www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com *.googleadservices.com googletagmanager.com www.youtube.com connect.facebook.net tags.tiqcdn.com siteimproveanalytics.com sc-static.net tr.snapchat.com *.clarity.ms *.adnxs.com destinilocators.com code.jquery.com js-eu1.hsforms.net lets.shop js.arcgis.com acsbapp.com widget.freshworks.com *.instagram.com *.hsforms.net *.hsforms.com https://emmi-chatbot.smack.build *.adsrvr.org *.yimg.com *.amazon-adsystem.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.bazaarvoice.com fonts.bunny.net *.typekit.net fonts.googleapis.com widget.freshworks.com *.arcgis.com 'self' 'unsafe-inline' 'unsafe-eval'; font-src *.bazaarvoice.com fonts.gstatic.com *.typekit.net fonts.bunny.net data: fonts.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; frame-src *.bazaarvoice.com uk.cdn-net.com jobs.emmi.com newsletter.chaesbueb.ch newsletter.baumann-kaese.ch ssgtm.kaeserei-studer.ch www.google.com youtu.be www.googletagmanager.com *.doubleclick.net www.youtube.com 'self' tr.snapchat.com charts3.equitystory.com export.highcharts.com e.issuu.com embed.eventfrog.ch irpages2.eqs.com forms.office.com td.doubleclick.net ohws.prospective.ch destinilocators.com panorama.nautilusstudios.ch player.vimeo.com *.instagram.com *.hsforms.net *.hsforms.com nautilusstudios.ch https://*.elf.site https://verdecampo.pertinhodemim.com *.adsrvr.org *.amazon-adsystem.com forms.cloud.microsoft 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; img-src *.bazaarvoice.com ssgtm.kaeserei-studer.ch *.google-analytics.com ssl.gstatic.com www.gstatic.com *.google.com *.google.at *.googleadservices.com www.google.ch www.google.de stats.g.doubleclick.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com www.facebook.com ct.pinterest.com s3.eu-west-1.amazonaws.com business.scoutsss.com *.eqs.com *.siteimproveanalytics.io emmi-chatbot.smack.build *.mookie1.com *.adnxs.com embed.eventfrog.ch c.clarity.ms data: forms-eu1.hsforms.com cdn.destinilocators.com lets.shop *.hsforms.net *.hsforms.com *.arcgis.com *.adswizz.com *.yahoo.com 'self' 'unsafe-inline' 'unsafe-eval' 3 default-src 'self'; connect-src 'self' https://*.ospito.nl https://*.googleapis.com https://*.gstatic.com https://app.greenweb.org data:; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' https://*.google.com blob:; img-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://app.greenweb.org https://s3.nl-ams.scw.cloud data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; worker-src 'self' blob:; 3 frame-ancestors 'self' https://sitehd.joinf.com https://*.site.joinf.com; 3 default-src 'none'; child-src https://online.flippingbook.com https://www.googletagmanager.com https://mc.yandex.ru; frame-src 'self' https://online.flippingbook.com https://www.googletagmanager.com https://mc.yandex.ru https://smartcaptcha.cloud.yandex.ru; worker-src data:; connect-src 'self' https://mc.yandex.ru wss://mc.yandex.ru https://log.api-maps.yandex.ru https://*.jivosite.com wss://*.jivosite.com https://*.jivo.ru wss://*.jivo.ru https://api-maps.yandex.ru https://core-renderer-tiles.maps.yandex.net https://www.1c-bitrix.ru https://partners.1c-bitrix.ru https://rap.skcrtxr.com https://web-static.s.mindbox.ru https://bobid-ip.hybrid.ai https://fpf.hybrid.ai https://track.firstdata.io https://api.s.mindbox.ru https://eye.targetads.io; font-src 'self' data:; img-src 'self' blob: data: https://core-renderer-tiles.maps.yandex.net https://top-fwz1.mail.ru https://dss.hybrid.ai; manifest-src 'none'; media-src 'self' https://code.jivosite.com; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://top-fwz1.mail.ru https://mc.yandex.ru https://rap.skcrtxr.com https://dss.hybrid.ai https://emd.hybrid.ai https://code.jivosite.com https://www.googletagmanager.com https://api-maps.yandex.ru https://yastatic.net; script-src-elem 'unsafe-inline' 'self' https://top-fwz1.mail.ru https://mc.yandex.ru https://rap.skcrtxr.com https://dss.hybrid.ai https://emd.hybrid.ai https://code.jivosite.com https://code.jivo.ru https://www.googletagmanager.com https://api-maps.yandex.ru https://yastatic.net https://smartcaptcha.cloud.yandex.ru https://api.s.mindbox.ru https://web-static.s.mindbox.ru https://track.firstdata.io https://store-b2b.ru https://st.hybrid.ai https://fp.hybrid.ai https://cdn.targetads.io; script-src-attr 'unsafe-inline'; style-src 'unsafe-inline' 'self' https://code.jivosite.com; style-src-elem 'unsafe-inline' 'self' https://code.jivosite.com https://code.jivo.ru https://yastatic.net; style-src-attr 'unsafe-inline'; base-uri 'none'; form-action 'self' https://partners.1c-bitrix.ru; frame-ancestors 'self' 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.value-domain.com www.xrea.com www2.xrea.com www.coreserver.jp www2.coreserver.jp www.value-server.com www2.value-server.com www.google-analytics.com *.googlesyndication.com *.doubleclick.net www.google.com;img-src *; 3 default-src http: https: 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self' http://www.podcastics.com; img-src data: http: https: 'self' ; media-src blob: data: http: https: 'self'; 3 frame-ancestors 'self' *.storedemo.vn *.storedemo.vn *.botcake.io *.pancake.vn *.storecake.net 3 default-src 'self' https: data:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 3 'self'.model-t.cc.commerce.ondemand.com:443 *.ynk.cl:443 3 base-uri 'self' *.messe-friedrichshafen.de/;default-src 'self' *.messe-friedrichshafen.de/;form-action 'self' *.messe-friedrichshafen.de/;frame-ancestors 'self' https://cms.messe-friedrichshafen.de;img-src 'self' *.platformsh.site/ *.messe-friedrichshafen.de/ *.google-analytics.com/ *.usercentrics.eu/ *.vimeocdn.com/ *.googlesyndication.com/ *.googletagmanager.com/ *.google.de/ *.google.com/ *.doubleclick.net/ *.cloudfront.net/ *.messe-fn.de/ *.youtube.com/ *.ytimg.com/ *.mapsindoors.com/ *.facebook.com/ *.lfeeder.com/ *.leadfeeder.com/ *.linkedin.com/ *.adtrafficquality.google/ *.clarity.ms/ data: blob:;script-src 'self' 'unsafe-eval' blob: *.messe-friedrichshafen.de/;script-src-elem 'self' 'unsafe-inline' *.platformsh.site/ *.messe-friedrichshafen.de/ *.google-analytics.com/ *.usercentrics.eu/ *.googletagmanager.com/ *.doubleclick.net/ *.googlesyndication.com/ *.googletagservices.com/ *.googleadservices.com/ *.google.com/recaptcha/ *.gstatic.com/ *.calendly.com/ *.mapbox.com/ *.mapsindoors.com/ *.surveyhero.com/ *.facebook.net/ *.instagram.com/ *.lfeeder.com/ *.leadfeeder.com/ *.cloudflare.com/ *.licdn.com/ unpkg.com/ *.tiktok.com/ *.youtube.com/ *.adtrafficquality.google/ stapecdn.com/ *.stapecdn.com/ *.clarity.ms/ blob:;script-src-attr 'self' 'unsafe-inline' *.messe-friedrichshafen.de/;style-src 'self' *.mapbox.com/ *.mapsindoors.com/ *.messe-friedrichshafen.de/;style-src-elem 'self' 'unsafe-inline' *.platformsh.site/ *.mapbox.com/ *.mapsindoors.com/ *.messe-friedrichshafen.de/ *.googletagmanager.com/ *.cloudflare.com/;style-src-attr 'self' 'unsafe-inline' *.messe-friedrichshafen.de/;font-src 'self' data: *.messe-friedrichshafen.de/;media-src 'self' *.messe-friedrichshafen.de/;frame-src 'self' *.messe-friedrichshafen.de/ *.vimeo.com/ *.youtube.com/ *.youtube-nocookie.com/ *.usercentrics.eu/ *.doubleclick.net/ *.googlesyndication.com/ *.google.com/ *.google.de/ *.googletagmanager.com/ *.issuu.com/ *.presslive.de/ calendly.com/ *.umfrageonline.com/ *.instagram.com/ *.wirblickennachvorne-presslive.de/ wirblickennachvorne-presslive.de/ *.yumpu.com/ *.wowza.com/ open.spotify.com/ *.camperpay.com/ *.frcapi.com/ *.stapecdn.com/ *.adtrafficquality.google/ *.clarity.ms/;connect-src 'self' *.messe-friedrichshafen.de/ privacy.aero-expo.de/ privacy.tuningworldbodensee.de/ *.google-analytics.com/ *.googletagmanager.com/ *.google.com/ *.google.de/ *.facebook.com/ *.usercentrics.eu/ *.doubleclick.net/ *.googlesyndication.com/ *.googleadservices.com/ *.mapbox.com/ *.mapsindoors.com/ *.linkedin.com/ *.conversionsapigateway.com/ *.a.run.app/ *.stape.io/ *.tiktok.com/ *.tiktokw.us/ *.adtrafficquality.google/ *.clarity.ms/ 3 frame-ancestors https://damascus.prod.evqt.net https://damascus.staging.evqt.net 3 upgrade-insecure-requests; default-src * 'unsafe-eval' 'unsafe-inline' blob: data:; 3 frame-ancestors 'self' https://lts1pre.webguruetravel.com https://mspirit.madebyomnis.com https://mspirit.co.il/ https://guide.flyeast.co.il/; 3 frame-ancestors 'self' https://*.ariba.com https://*.in8suite.com https://*.extforms.netsuite.com https://*.jm.com https://*.na.jm.com:44300 https://solutions.sciquest.com https://*.na.jm.com:50001 3 frame-ancestors self; report-uri /cspvr 3 frame-src 'self' consentcdn.cookiebot.com gvb-quiz.vercel.app www.facebook.com gvb.demdex.net www.youtube.com www.tiktok.com *.google.com newassets.hcaptcha.com form.typeform.com typeform.com www.typeform.com bid.g.doubleclick.net activitymap.adobe.com vars.hotjar.com gvb.ch gvb-privatversicherungen.ch hausinfo.ch wetteralarm.ch alarmemeteo.ch allarmemeteo.ch *.doubleclick.net *.demdex.net outlook.office365.com moneypark.ch embed.eventfrog.ch dev-webgis.gvb.ch webgis.gvb.ch www.googletagmanager.com calendly.com propertyowners.digitalpath.pt https://www.propertyowner.ch feedback.echonovum.com login.dev.gvb.ch login.test.gvb.ch login.gvb.ch *.wetteralarm.ch www.myky.ch embed.fillout.com mailto: tel: js-eu1.hsforms.net ; child-src blob:; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' gvb-quiz.vercel.app gvbdev.b-cdn.net gvbtest.b-cdn.net gvb.b-cdn.net gvba.b-cdn.net consent.cookiebot.com consentcdn.cookiebot.com hcaptcha.com newassets.hcaptcha.com js.hcaptcha.com plugins.flockler.com dpm.demdex.net www.googletagmanager.com www.facebook.com connect.facebook.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com embed.typeform.com activitymap.adobe.com www.youtube.com www.tiktok.com www.googleoptimize.com static.hotjar.com script.hotjar.com *.google.com snap.licdn.com *.fusedeck.net *.demdex.net cm.everesttech.net assets.adobedtm.com moneypark.ch static.elfsight.com universe-static.elfsightcdn.com elfsightcdn.com/platform.js embed.eventfrog.ch assets.calendly.com gvb.imgix.net code.createjs.com *.adform.net cdnjs.cloudflare.com bat.bing.com www.myky.ch widget.wetteralarm.ch widgets.gekomene.cyon.site *.hsadspixel.net *.hs-analytics.net *.hubapi.com js.hscta.net js-eu1.hscta.net *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspotusercontent.net *.hubspot.net play.hubspotvideo.com play-eu1.hubspotvideo.com cdn2.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com feedback-eu1.hubapi.com hubs.ly hubspotpagebuilder.com survey.hsforms.com share.hsforms.com js.hscollectedforms.net bf06.eu1.hubspotemail.net *.eu1.hubspotemail.net https://d30tvz04.eu1.hubspotlinks.com *.eu1.hubspotlinks.com optin.eu1.hubspotemail.net transactional.eu1.hubspotemail.net server.fillout.com 'unsafe-inline'; frame-ancestors 'self' wetterhuette.ch ; 3 default-src 'self'; connect-src *; font-src * data:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src * 3 default-src 'self' https:; font-src 'self' https: data: https://fonts.google.com; img-src 'self' https: data: https://eventpower.cloudinary.com; object-src 'none'; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline' 3 frame-ancestors 'self'; form-action 'self'; object-src 'none'; 3 default-src 'self' https: data: blob:; connect-src 'self' https: wss:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; 3 default-src 'self'; base-uri 'self'; connect-src 'self' https://*.fontawesome.com https://www.facebook.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.openstreetmap.org https://analytics1.wpmudev.com https://cdn.ampproject.org https://www.googletagmanager.com https://yoast.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://*.fontawesome.com https://use.typekit.net; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://*.google.com https://*.salesforce-sites.com https://issgmt.focalscope.com https://player.vimeo.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' data: https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.tile.openstreetmap.org https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://i.vimeocdn.com https://issgmt.focalscope.com https://secure.gravatar.com https://storage.crisp.chat https://wpmudev.com https://www.facebook.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self' https://player.vimeo.com; object-src 'none'; report-uri /wp-json/csp/v1/report; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.google-analytics.com https://ajax.googleapis.com https://analytics.wpmucdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://connect.facebook.net https://issgmt.focalscope.com https://kit.fontawesome.com https://unpkg.com https://use.typekit.net https://*.wpmucdn.com; style-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://cdn.jsdelivr.net https://code.jquery.com https://fonts.bunny.net https://*.fontawesome.com https://fonts.googleapis.com https://issgmt.focalscope.com https://unpkg.com https://www.gstatic.com; upgrade-insecure-requests; worker-src 'self' blob:; 3 script-src 'self'; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https: http:; font-src 'self' https: http: data:; img-src 'self' data: https: http: blob:; media-src 'self' https: http: blob:; connect-src 'self' https: http: ws: wss:; frame-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self' 3 default-src https: wss:;style-src https: data: 'unsafe-inline';script-src https: 'unsafe-inline' 'unsafe-eval';img-src https: blob: data: 'unsafe-inline';connect-src https: wss: feed: 3 default-src 'self'; connect-src *;font-src * data:;img-src * data:; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' *; frame-src * 3 connect-src *;default-src 'self' https://*.cardsdirect.com https://contactpro.taylor.com https://static.zdassets.com https://www.google.com; frame-src 'self' https://copilotstudio.microsoft.com https://gleam.io https://ct.pinterest.com https://td.doubleclick.net https://*.sharethis.com https://*.criteo.com https://*.secure.orders.com https://secure.orders.com https://static.criteo.net https://*.cardsdirect.com https://www.google.com https://widget.trustpilot.com https://www.facebook.com https://www.youtube.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: * blob:; font-src 'self' https://*.wpengine.com https://cdn.icomoon.io https://cdn.openshareweb.com https://fonts.gstatic.com https://d1azc1qln24ryf.cloudfront.net; object-src 'none'; script-src-elem 'self' 'unsafe-inline' * 3 default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https:; img-src 'unsafe-inline' https: data: blob:; font-src 'unsafe-inline' https: data:; media-src 'unsafe-inline' blob: https:; worker-src blob:; frame-src 'unsafe-inline' https: data:; frame-ancestors https: data:; 3 frame-ancestors 'self' https://jacksonprofessional.com https://jacksontools.com 3 default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'self' 3 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: *; style-src * 'unsafe-inline'; img-src * data: blob:; font-src * data:; connect-src * data: blob:; frame-src * blob: data:; object-src * blob:; base-uri 'self'; form-action 'self' https://centinelapi.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://www.facebook.com https://3dsacs.placetopay.com https://geo.cardinalcommerce.com https://authentication.cardinalcommerce.com; media-src * blob:; frame-ancestors 'self'; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ajax.googleapis.com https://js.stripe.com https://www.paypal.com https://www.paypalobjects.com https://*.paypal.com https://embed.tawk.to https://*.tawk.to https://www.clarity.ms https://*.clarity.ms https://cdn.tailwindcss.com https://static.cloudflareinsights.com; worker-src 'self' blob: https://*.tawk.to; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://embed.tawk.to https://*.tawk.to; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://embed.tawk.to https://*.tawk.to; img-src 'self' data: https: http:; frame-src 'self' https://js.stripe.com https://www.paypal.com https://*.paypal.com https://www.sandbox.paypal.com https://www.google.com https://*.tawk.to; connect-src 'self' https://www.google-analytics.com https://www.clarity.ms https://*.clarity.ms https://*.tawk.to wss://*.tawk.to https://www.paypal.com https://*.paypal.com https://www.paypalobjects.com https://*.jsdeliver.net https://cloudflareinsights.com; 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; form-action *; frame-ancestors *; frame-src * data: blob: ; img-src * data: blob: 'unsafe-inline'; object-src *; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; report-to default 3 default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' 3 default-src blob: https: wss: 'unsafe-eval' 'unsafe-inline' 'self'; style-src https: 'unsafe-inline'; frame-ancestors https://*.facebook.com https://*.youtube.com https://*.twitter.com https://*.x.com https://*.hotjar.com https://*.marketica.com https://*.sharethis.com https://*.widergy.com https://*.amplifyapp.com https://*.botframework.com https://*.doubleclick.net 'self'; frame-src https://*.facebook.com https://*.youtube.com https://*.twitter.com https://*.x.com https://*.hotjar.com https://*.marketica.com https://*.sharethis.com https://*.widergy.com https://*.amplifyapp.com https://*.botframework.com https://*.google.com https://*.doubleclick.net 'self'; object-src 'none'; font-src https: data:; img-src https: data:; 3 default-src https: 'unsafe-eval' 'unsafe-inline'; object-src https: ; child-src https: platform.twitter.com; img-src https: data:; font-src 'self' data: https:; 3 frame-ancestors 'self'; default-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval' ;script-src * 'unsafe-inline' 'unsafe-eval';img-src data: https: 3 default-src https: data: https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline' 'unsafe-eval' 3 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' https://sharingsocials.s3.us-east-2.amazonaws.com https://d2w1dwwvunqlnt.cloudfront.net; font-src 'self'; connect-src 'self' https://get.geojs.io https://sharingsocials.s3.us-east-2.amazonaws.com https://d2w1dwwvunqlnt.cloudfront.net https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://*.analytics.google.com; frame-src 'self' https://app.onlyfansapi.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 3 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self'; frame-src 'none'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' 3 frame-ancestors https://*.gov.cn http://*.gov.cn http://zwfw.cq.gov.cn http://wmcs.devdemo.trs.net.cn http://www.ceirp.com:8888 http://183.64.111.243:28080 http://znwd.cqgxqzwzx.com:9090 http://mzj.cq12349.cn https://www.sczwfw.gov.cn https://cqjjqzwzx.cn https://ggfw.rlsbj.cq.gov.cn http://cq.12348.gov.cn/ http://gsxt.scjgj.cq.gov.cn/ 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com cdnjs.cloudflare.com d1aqhv4sn5kxtx.cloudfront.net https://profile.ngpvan.com *.ngpvan.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js; style-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: *; font-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://dc.services.visualstudio.com/v2/track https://www.google-analytics.com https://profile.ngpvan.com https://profile.ngpvan.com; 3 connect-src 'self' *.nrw.de; default-src 'self' *.nrw.de; font-src data: *; frame-ancestors 'self' *.nrw.de; frame-src 'self' *.nrw.de; img-src data: *; media-src *; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de; style-src 'self' 'unsafe-inline' *.nrw.de; worker-src 'self' *.nrw.de; upgrade-insecure-requests; 3 default-src *.tradehq.com *.tradehq.co.uk *.tradehq.com.au https://*.amazonaws.com/public.tradehq.com/ 'self'; script-src https://www.google.com/recaptcha/api.js https://www.gstatic.com/ https://cdnjs.cloudflare.com https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://*.raygun.io https://*.jsdelivr.net https://*.googleapis.com 'unsafe-inline' 'unsafe-eval' 'self'; connect-src https://maps.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.amazonaws.com/attachments.tradehq.com/ https://*.amazonaws.com/public.tradehq.com/ https://*.raygun.io https://*.tradehq.com https://*.tradehq.com.au https://*.tradehq.co.uk https://tradehq.com https://tradehq.com.au https://tradehq.co.uk 'self'; img-src https://*.amazonaws.com/public.tradehq.com/ https://www.google-analytics.com https://*.tradehq.com https://*.tradehq.com.au https://*.tradehq.co.uk https://tradehq.com https://tradehq.com.au https://tradehq.co.uk 'self' blob: https://maps.gstatic.com data: https://maps.googleapis.com; font-src https://tradehq.com https://tradehq.co.uk https://tradehq.com.au fonts.gstatic.com *.fontawesome.com https://*.tradehq.com https://*.tradehq.com.au https://*.tradehq.co.uk 'self' https://cdn.jsdelivr.net; style-src *.fontawesome.com fonts.googleapis.com *.tradehq.com *.tradehq.co.uk *.tradehq.com.au tradehq.com 'unsafe-inline' 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; base-uri 'self'; form-action 'self'; frame-src https://www.google.com https://*.tradifyhq.com https://js.stripe.com https://*.amazonaws.com/public.tradehq.com/ https://*.amazonaws.com/attachments.tradehq.com/ https://*.tradehq.com https://*.tradehq.com.au https://*.tradehq.co.uk 'self'; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://unpkg.com https://esm.sh https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://tpc.googlesyndication.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://t.lnx.fi https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; connect-src 'self' https://*.trippi.app https://t.lnx.fi https://esm.sh https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://csi.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com; media-src 'self' https://*.dzcdn.net; worker-src 'self' blob:; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://www.google.com https://ep2.adtrafficquality.google; frame-ancestors 'self' 3 frame-ancestors 'self' *.refox.fi 3 upgrade-insecure-requests;report-to default; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://*.iexpressmyopinion.com; img-src https: data:; object-src 'self'; worker-src blob: 3 default-src * blob: data:; script-src 'sha256-0EzT5rjCdQIs7Zb99eHUlAOmKUanRXRrJoqJ+VYepto=' 'sha256-5CxqAdDXlHviOy7zxeRpMobzRK/JNpLvkS+k8Zj3L3A=' 'sha256-FIBGC/wl1Qfnh2Fb5NPFHmRty7BHJdDpWW1FZ8egppI=' 'sha256-UXYprBCAtnqoL5acf14iemip/+HI+gDFh92yyXkM3XI=' 'sha256-dKn2nAtwgzaaXC8ZM58hhldxNyeuu4qrzW4H9//9YMA=' 'sha256-i9nAf5M9USb+lB7ZtayKdAWymLU1MCklCTdsyXbMgCs=' 'sha256-wjUSvXYNfPUUTPZYrn4pOEcf2ecDdjd3N9Av3GDSwZw=' 'sha256-yAAlWuem9ue55JEvxkWhcWWA1Zu0p6cgbYtDWJjsdvs=' blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp 3 base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests 3 frame-ancestors 'self' https://app.pardux.com https://sandbox.pardux.dev 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net https://connect.facebook.net https://*.facebook.com https://embed.tawk.to https://static.cloudflareinsights.com https://va.tawk.to https://*.tawk.to; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://res.cloudinary.com https://images.unsplash.com https://*.discordapp.net https://cdn.t4b.top https://img.t4b.top https://lh3.googleusercontent.com https://*.facebook.com https://*.tawk.to; connect-src 'self' https://api.garenabd.com https://us.i.posthog.com https://embed.tawk.to https://va.tawk.to https://static.cloudflareinsights.com https://*.facebook.com https://*.tawk.to wss://*.tawk.to https://chat.gliders.dev; frame-src 'self' https://www.youtube.com https://youtube.com https://*.tawk.to https://chat.gliders.dev; 3 default-src * 'self' 'unsafe-inline' 'unsafe-eval' cdn.kustomerapp.com ; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.azurewebsites.net:* https://connect.facebook.net:* https://cdn.userway.org:* https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: https://connect.facebook.net/en_US/fbevents.js https://script.hotjar.com:* https://cdn.gtranslate.net:* https://static.hotjar.com:* https://www.googletagmanager.com/gtag/js https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js https://rawgit.com/RobinHerbots/Inputmask/4.x/dist/jquery.inputmask.bundle.js https://wchat.freshchat.com/js/widget.js https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js https://code.jquery.com/ui/1.11.0/jquery-ui.js https://rawgit.com/RobinHerbots/Inputmask/4.x/dist/inputmask/phone-codes/phone.js *.google.com *.gstatic.com https://code.jquery.com/jquery-1.8.3.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.9.0/jquery-ui.min.js https://www.google-analytics.com/analytics.js *.googletagmanager.com cdn.kustomerapp.com ; style-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' blob: https://fonts.googleapis.com *.bootstrapcdn.com:* *.fonts.googleapis.com:* https://kit-free.fontawesome.com https://netdna.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://rawgit.com https://code.jquery.com/ui/1.11.0/themes/smoothness/jquery-ui.css https://code.jquery.com/ui/1.11.0/themes/smoothness/jquery-ui.css https://www.gstatic.com/charts/51/css/core/tooltip.css https://www.gstatic.com/charts/51/css/util/util.css cdn.kustomerapp.com https://*.gstatic.com:* https://cdn.userway.org:*; object-src 'self' cdn.kustomerapp.com ; base-uri 'self' cdn.kustomerapp.com ; connect-src * 'self' data: cdn.kustomerapp.com https://*.googleapis.com *.google.com https://*.gstatic.com data: blob:; font-src 'self' https://script.hotjar.com:* https://fonts.gstatic.com https://kit-free.fontawesome.com https://netdna.bootstrapcdn.com https://maxcdn.bootstrapcdn.com cdn.kustomerapp.com https://cdn.userway.org:*; frame-src * 'self' https://vars.hotjar.com https://maps.google.com/ https://app.powerbi.com/ https://www.youtube.com/ cdn.kustomerapp.com *.google.com; img-src 'self' https://cdn.userway.org:* cdn.kustomerhostedcontent.com https://www.google-analytics.com:* https://cdn.gtranslate.net:* https://www.facebook.com:* https://connect.facebook.net:* https://script.hotjar.com:* data: cdn.kustomerapp.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data:; manifest-src 'self' cdn.kustomerapp.com https://cdn.userway.org:*; media-src * 'self' 3 default-src 'self' blob: wss: data: https:; img-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https:; style-src 'self' 'unsafe-inline' data: https:; 3 default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.clarity.ms https://scripts.clarity.ms https://static.ads-twitter.com https://analytics.tiktok.com https://apis.google.com https://maps.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://www.gstatic.com https://sc-static.net https://tr.snapchat.com https://i.clarity.ms https://cdn.jsdelivr.net https://onesignal.com https://*.onesignal.com https://*.dengage.com https://*.firebasedatabase.app https://t.contentsquare.net https://*.contentsquare.net https://*.contentsquare.com 'unsafe-inline' ; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://onesignal.com https://*.onesignal.com; font-src 'self' https://*.indolj.io https://fonts.gstatic.com; media-src 'self' blob: data: https: https://assets.indolj.io https://console.indolj.io https://admin.indolj.io https://menu.indolj.pk https://menu.indolj.io https://staging.indolj.io https://uat-system.indolj.io https://*.indolj.io https://*.indolj.pk; img-src 'self' data: https: https://assets.indolj.io https://console.indolj.io https://admin.indolj.io https://menu.indolj.pk https://menu.indolj.io https://staging.indolj.io https://carddiscounts.californiapizza.com.pk https://cdn1.iconfinder.com https://uat-system.indolj.io https://www.sliderrevolution.com https://sliderrevolution.com https://www.facebook.com https://analytics.tiktok.com https://stats.g.doubleclick.net https://www.google.com https://googleads.g.doubleclick.net https://cloud.symits.com https://www.clarity.ms https://sc-static.net https://i.clarity.ms https://eu-pcdn.dengage.com https://*.contentsquare.net https://*.contentsquare.com https://tr.snapchat.com; connect-src 'self' https://*.indolj.pk https://www.googletagmanager.com https://apis.google.com https://t.contentsquare.net https://*.contentsquare.net https://tcvsapi.contentsquare.com https://*.contentsquare.com https://analytics.google.com https://stats.g.doubleclick.net https://analytics.tiktok.com https://graph.facebook.com https://www.clarity.ms https://scripts.clarity.ms https://sc-static.net https://www.google.com https://www.google.com.pk https://maps.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://tr.snapchat.com https://i.clarity.ms https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://identitytoolkit.googleapis.com https://cloud.symits.com https://onesignal.com https://*.dengage.com https://*.firebasedatabase.app wss://*.firebasedatabase.app https://*.google-analytics.com https://*.onesignal.com https://*.indolj.io https://*.easypaisa.com.pk; frame-src https://apis.google.com https://accounts.google.com https://www.google.com https://maps.google.com https://www.googletagmanager.com https://td.doubleclick.net https://cloud.symits.com https://*.contentsquare.net https://*.contentsquare.com https://*.firebasedatabase.app; frame-ancestors 'self' https://*.indolj.io https://*.easypaisa.com.pk; object-src 'none'; base-uri 'self'; form-action 'self' https://*.easypaisa.com.pk; 3 frame-ancestors 'self' https://akademy.kereisformation.com 3 script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com *.tawk.to *.jsdelivr.net *.tidio.co *.facebook.net *.facebook.com static.cloudflareinsights.com www.gstatic.com e2b4c6d8f0g1h3i5j7k9l2m4n6o8p0q1r3s5t.speed-cdn.com mbua2w451amrhahmjxkkrw7odh.speed-cdn.com ano3vz3t0ljyh1lfx5c1tglt6z.speed-cdn.com;script-src-attr 'unsafe-inline';img-src 'self' data: i.imgur.com www.google-analytics.com tawk.link *.tawk.to *.tawk.link *.amazonaws.com *.jsdelivr.net *.databrain.com *.ibb.co.com *.facebook.com www.googletagmanager.com e2b4c6d8f0g1h3i5j7k9l2m4n6o8p0q1r3s5t.speed-cdn.com mbua2w451amrhahmjxkkrw7odh.speed-cdn.com ano3vz3t0ljyh1lfx5c1tglt6z.speed-cdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.tawk.to *.jsdelivr.net e2b4c6d8f0g1h3i5j7k9l2m4n6o8p0q1r3s5t.speed-cdn.com mbua2w451amrhahmjxkkrw7odh.speed-cdn.com ano3vz3t0ljyh1lfx5c1tglt6z.speed-cdn.com;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.tawk.to *.jsdelivr.net *.googletagmanager.com e2b4c6d8f0g1h3i5j7k9l2m4n6o8p0q1r3s5t.speed-cdn.com mbua2w451amrhahmjxkkrw7odh.speed-cdn.com ano3vz3t0ljyh1lfx5c1tglt6z.speed-cdn.com;form-action 'self' *.facebook.com;frame-src static.goolec.com www.youtube.com youtube.com *.facebook.com *.prophyderling.com;connect-src 'self' tickers.playtech.com www.google-analytics.com *.googleapis.com *.tawk.to wss://*.tawk.to tracker.databrain.com *.facebook.com e2b4c6d8f0g1h3i5j7k9l2m4n6o8p0q1r3s5t.speed-cdn.com mbua2w451amrhahmjxkkrw7odh.speed-cdn.com ano3vz3t0ljyh1lfx5c1tglt6z.speed-cdn.com;media-src e2b4c6d8f0g1h3i5j7k9l2m4n6o8p0q1r3s5t.speed-cdn.com mbua2w451amrhahmjxkkrw7odh.speed-cdn.com ano3vz3t0ljyh1lfx5c1tglt6z.speed-cdn.com;upgrade-insecure-requests;default-src 'self';base-uri 'self';frame-ancestors 'self';object-src 'none' 3 default-src * data: blob: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://*.inchcapedigital.com 3 frame-ancestors 'self' https://*.funeraltechonline.com https://*.tributecenteronline.com https://*.funeraltechweb.com https://*.funeraltechweb2.com https://*.ogdenfuneralhome.com https://ogdenfuneralhome.com https://www.ogdenfuneralhome.com https://hiddenvalleyfunerals.com https://www.archerandsons.com.au http://macarthurfh.com http://www.macarthurfh.com http://haugheymemorials.com http://www.haugheymemorials.com https://www.hslm.ca http://dev.fullmooncreative.com https://neshamajfs.com http://neshamajfs.com http://howelllussi.com https://howelllussi.com http://prod-site.arbormemorial.ca/en.html https://prod-site.arbormemorial.ca/en.html http://www.arbormemorial.ca/en/ https://www.arbormemorial.ca/en/ http://www.calgarycrematorium.com https://www.calgarycrematorium.com http://calgarycrematorium.com https://calgarycrematorium.com; object-src 'none'; 3 frame-ancestors 'self' *.label789.com 3 script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com *.tawk.to *.jsdelivr.net *.tidio.co *.facebook.net *.facebook.com static.cloudflareinsights.com www.gstatic.com h7i9j1k3l5m7n9o1p3q5r7s9t1u3v5w7x9y.speed-cdn.com 421ab65dd5bf4d8ba68319b057db9f26.speed-cdn.com 6d1a8cd73ca041a1bbbad207c7b5be66.speed-cdn.com;script-src-attr 'unsafe-inline';img-src 'self' data: i.imgur.com www.google-analytics.com tawk.link *.tawk.to *.tawk.link *.amazonaws.com *.jsdelivr.net *.databrain.com *.ibb.co.com *.facebook.com www.googletagmanager.com h7i9j1k3l5m7n9o1p3q5r7s9t1u3v5w7x9y.speed-cdn.com 421ab65dd5bf4d8ba68319b057db9f26.speed-cdn.com 6d1a8cd73ca041a1bbbad207c7b5be66.speed-cdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.tawk.to *.jsdelivr.net h7i9j1k3l5m7n9o1p3q5r7s9t1u3v5w7x9y.speed-cdn.com 421ab65dd5bf4d8ba68319b057db9f26.speed-cdn.com 6d1a8cd73ca041a1bbbad207c7b5be66.speed-cdn.com;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.tawk.to *.jsdelivr.net *.googletagmanager.com h7i9j1k3l5m7n9o1p3q5r7s9t1u3v5w7x9y.speed-cdn.com 421ab65dd5bf4d8ba68319b057db9f26.speed-cdn.com 6d1a8cd73ca041a1bbbad207c7b5be66.speed-cdn.com;form-action 'self' *.facebook.com;frame-src static.goolec.com www.youtube.com youtube.com *.facebook.com *.prophyderling.com;connect-src 'self' tickers.playtech.com www.google-analytics.com *.googleapis.com *.tawk.to wss://*.tawk.to tracker.databrain.com *.facebook.com h7i9j1k3l5m7n9o1p3q5r7s9t1u3v5w7x9y.speed-cdn.com 421ab65dd5bf4d8ba68319b057db9f26.speed-cdn.com 6d1a8cd73ca041a1bbbad207c7b5be66.speed-cdn.com;media-src h7i9j1k3l5m7n9o1p3q5r7s9t1u3v5w7x9y.speed-cdn.com 421ab65dd5bf4d8ba68319b057db9f26.speed-cdn.com 6d1a8cd73ca041a1bbbad207c7b5be66.speed-cdn.com;upgrade-insecure-requests;default-src 'self';base-uri 'self';frame-ancestors 'self';object-src 'none' 3 default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self' 3 script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com *.tawk.to *.jsdelivr.net *.tidio.co *.facebook.net *.facebook.com static.cloudflareinsights.com www.gstatic.com f9a1b3c5d7e9f1g3h5i7j9k1l3m5n7o9p1q3r.speed-cdn.com swmo7mkzlg3nher6s82n5i2zi2.speed-cdn.com zhecgyj5b2o377ebbkvpe2zodk.speed-cdn.com;script-src-attr 'unsafe-inline';img-src 'self' data: i.imgur.com www.google-analytics.com tawk.link *.tawk.to *.tawk.link *.amazonaws.com *.jsdelivr.net *.databrain.com *.ibb.co.com *.facebook.com www.googletagmanager.com f9a1b3c5d7e9f1g3h5i7j9k1l3m5n7o9p1q3r.speed-cdn.com swmo7mkzlg3nher6s82n5i2zi2.speed-cdn.com zhecgyj5b2o377ebbkvpe2zodk.speed-cdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.tawk.to *.jsdelivr.net f9a1b3c5d7e9f1g3h5i7j9k1l3m5n7o9p1q3r.speed-cdn.com swmo7mkzlg3nher6s82n5i2zi2.speed-cdn.com zhecgyj5b2o377ebbkvpe2zodk.speed-cdn.com;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.tawk.to *.jsdelivr.net *.googletagmanager.com f9a1b3c5d7e9f1g3h5i7j9k1l3m5n7o9p1q3r.speed-cdn.com swmo7mkzlg3nher6s82n5i2zi2.speed-cdn.com zhecgyj5b2o377ebbkvpe2zodk.speed-cdn.com;form-action 'self' *.facebook.com;frame-src static.goolec.com www.youtube.com youtube.com *.facebook.com *.prophyderling.com;connect-src 'self' tickers.playtech.com www.google-analytics.com *.googleapis.com *.tawk.to wss://*.tawk.to tracker.databrain.com *.facebook.com f9a1b3c5d7e9f1g3h5i7j9k1l3m5n7o9p1q3r.speed-cdn.com swmo7mkzlg3nher6s82n5i2zi2.speed-cdn.com zhecgyj5b2o377ebbkvpe2zodk.speed-cdn.com;media-src f9a1b3c5d7e9f1g3h5i7j9k1l3m5n7o9p1q3r.speed-cdn.com swmo7mkzlg3nher6s82n5i2zi2.speed-cdn.com zhecgyj5b2o377ebbkvpe2zodk.speed-cdn.com;upgrade-insecure-requests;default-src 'self';base-uri 'self';frame-ancestors 'self';object-src 'none' 3 frame-ancestors 'self' https://www.einpresswire.com 3 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; 3 default-src 'self' https://survey.alchemer.com/ https://watershedlrs.com/ https://experience.instilled.com https://watershedlrs.instilled.com https://www.facebook.com https://watershed-studio.netlify.app https://watershedlrs.kzoplatform.com https://w.soundcloud.com http://www.ltgplc.com https://go.ltgplc.com https://go.watershedlrs.com https://www.youtube.com https://player.vimeo.com https://go.pardot.com https://www.canva.com https://td.doubleclick.net https://ob.buzzfighter.com https://obs.buzzfighter.com https://www.googletagmanager.com https://*.buzzfufighter.com https://www.clarity.ms https://pi.pardot.com;script-src-elem 'self' 'unsafe-inline' https://snap.licdn.com https://widget.aggregage.com/ https://connect.facebook.net https://s.ytimg.com https://www.youtube.com https://w.soundcloud.com https://go.watershedlrs.com/ https://www.googletagmanager.com https://tagmanager.google.com https://sjs.bizographics.com https://static.ads-twitter.com https://www.googleadservices.com https://bat.bing.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://go.ltgplc.com https://analytics.twitter.com https://player.vimeo.com/ https://www.clickcease.com https://*.buzzfighter.com https://ob.buzzfighter.com https://obs.buzzfighter.com https://*.buzzfufighter.com https://*.clarity.ms https://pi.pardot.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com https://www.youtube.com https://cdn.inspectlet.com https://sjs.bizographics.com https://analytics.twitter.com https://static.ads-twitter.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://tagmanager.google.com https://www.google-analytics.com https://www.googletagmanager.com https://go.watershedlrs.com https://go.ltgplc.com https://go.watershedlrs.com https://player.vimeo.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.clickcease.com https://*.buzzfighter.com https://ob.buzzfighter.com https://obs.buzzfighter.com https://www.watershedlrs.com https://*.buzzfufighter.com https://*.clarity.ms https://pi.pardot.com;font-src 'self' data: https://fonts.gstatic.com;style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://tagmanager.google.com https://fonts.googleapis.com https://tagmanager.google.com;img-src 'self' data: https://www.googletagmanager.com https://t.co https://cdn.sanity.io https://www.google-analytics.com https://stats.g.doubleclick.net https://linkedin.com https://www.linkedin.com https://px.ads.linkedin.com https://bat.bing.com https://ssl.gstatic.com https://www.gstatic.com https://analytics.twitter.com https://px4.ads.linkedin.com https://*.google-analytics.com https://*.analytics.google.com https://*.buzzfighter.com https://*.buzzfufighter.com https://*.clarity.ms https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat;media-src 'self' data: https://cdn.sanity.io;connect-src 'self' https://nosafynr.api.sanity.io https://s.ytimg.com wss://ws.inspectlet.com https://www.googleadservices.com https://sjs.bizographics.com https://static.ads-twitter.com https://go.watershedlrs.com https://use.typekit.net/ https://www.google-analytics.com https://stats.g.doubleclick.net https://hn.inspectlet.com https://cdn.sanity.io https://vimeo.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.buzzfighter.com https://ob.buzzfighter.com https://obs.buzzfighter.com https://*.buzzfufighter.com https://www.canva.com https://*.clarity.ms;prefetch-src 'self' https://go.watershedlrs.com https://www.googletagmanager.com https://www.google-analytics.com;frame-ancestors 'self' https://watershed-studio.netlify.app https://watershedlrs.com https://watershedlrs.com https://staging.watershedlrs.com/ https://studio.watershedlrs.com/ https://ob.buzzfighter.com https://obs.buzzfighter.com https://*.buzzfufighter.com https://www.canva.com https://*.clarity.ms 3 img-src 'self' blob: data: icloud.com *.icloud.com *.apple.com *.cdn-apple.com *.icloud-content.com *.icloud-content.com.cn *.apple-mapkit.com *.mzstatic.com; media-src 'self' blob: data: *.icloud.com *.apple.com *.cdn-apple.com *.icloud-content.com *.icloud-content.com.cn; font-src 'self' blob: data: icloud.com *.icloud.com *.apple.com *.cdn-apple.com; connect-src blob: 'self' data: icloud.com *.icloud.com *.apple.com *.cdn-apple.com *.icloud-content.com *.icloud-content.com.cn *.apple-mapkit.com wss://*.push.apple.com; frame-src 'self' blob: mailto: sms: tel: *.icloud.com *.apple.com *.icloud-sandbox.com *.icloud-content.com *.icloud-content.com.cn; frame-ancestors 'self' *.icloud.com *.apple.com; form-action 'self' *.icloud.com *.apple.com; child-src blob: 'self'; base-uri 'self' *.icloud.com *.cdn-apple.com; report-uri https://feedbackws.icloud.com/reportRaw 2 default-src 'none'; script-src 'self' 'unsafe-inline' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net https://piwik.avm.de https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net; img-src 'self' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net https://piwik.avm.de data: ; font-src 'self' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net; connect-src 'self' https://sso.myfritz.net https://gateway.myfritz.net wss://gateway.myfritz.net https://piwik.avm.de; frame-src 'self' https://sso.myfritz.net https://www.google.com/recaptcha/; media-src 'none'; object-src 'none'; worker-src 'none'; manifest-src https://www.myfritz.net/static/manifest.json https://sso.myfritz.net/static/manifest.json; frame-ancestors https://sso.myfritz.net https://www.myfritz.net; form-action 'self' https://www.myfritz.net 2 default-src 'none'; script-src 'self' 'sha256-qcMXZ/ErgDG9p2Htysz9era6iflv8JXya41zOY0slSc=' 'sha256-ydM8qJ+T0Nd7adK8t34/cs0GvvCG0JBujCWzV3uML8E=' 'sha256-TzTXRDJBcbY1qVQheGb/4iSGqKPqCg6XVoerYf5BYMY=' embed.cloudflarestream.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data:; font-src fonts.gstatic.com; connect-src 'self' 1.1.1.1 1.0.0.1 *.cloudflare-dns.com *.help.every1dns.net; frame-src embed.cloudflarestream.com; manifest-src 'self' 2 frame-ancestors 'self' https://*.t-online.de; 2 default-src 'self'; img-src data: blob: *; script-src-elem 'self' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com dev.visualwebsiteoptimizer.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com w.usabilla.com munchkin.marketo.net serve.nrich.ai ml314.com scout-cdn.salesloft.com snippet.maze.co www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com *.googlesyndication.com js.stripe.com d3js.org www.brighttalk.com cdnjs.cloudflare.com static.ads-twitter.com *.cdn.digitaloceanspaces.com www.redditstatic.com snap.licdn.com connect.facebook.net jspm.dev cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com api.usabilla.com *.cloudfront.net cdn.jsdelivr.net *.g.doubleclick.net extend.vimeocdn.com tracking-api.g2.com 'unsafe-inline'; font-src 'self' assets.ubuntu.com cdn.livechatinc.com secure.livechatinc.com fonts.google.com; script-src 'self' blob: *.livechatinc.com *.youtube.com *.google.com *.livechat-static.com 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline'; connect-src 'self' *.googlesyndication.com www.google.com ubuntu.com analytics.google.com www.googletagmanager.com sentry.is.canonical.com www.google-analytics.com *.crazyegg.com scout.salesloft.com *.g.doubleclick.net js.zi-scripts.com *.mktoresp.com prompts.maze.co *.google-analytics.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com fonts.google.com api.text.com raw.githubusercontent.com *.analytics.google.com *.g.doubleclick.net ad.doubleclick.net www.googleadservices.com www.facebook.com *.livechatinc.com *.text.com *.youtube.com *.google.com; frame-src 'self' *.doubleclick.net www.youtube.com/ asciinema.org player.vimeo.com js.stripe.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com *.cloudfront.net app3.trueability.com app.trueability.com pay.stripe.com; style-src *.cloudfront.net cdn.jsdelivr.net 'self' *.livechatinc.com *.youtube.com *.google.com 'unsafe-inline'; media-src 'self' res.cloudinary.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com images.zenhubusercontent.com assets.ubuntu.com *.livechatinc.com *.youtube.com *.google.com *.livechat-static.com ubuntu.com; child-src api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com youtube.com google.com fonts.google.com 'self' *.livechatinc.com *.youtube.com *.google.com blob:; object-src 'self' *.livechatinc.com *.youtube.com *.google.com; frame-ancestors https://edge-billing.stripe.com https://edge-connect.stripe.com https://edge-dashboard-admin.stripe.com https://edge-dashboard.stripe.com https://edge-docs.stripe.com https://edge-marketplace.stripe.com https://edge-support.stripe.com https://billing.stripe.com https://connect.stripe.com https://dashboard-admin.stripe.com https://dashboard.stripe.com https://docs.stripe.com https://edge-support-conversations.stripe.com https://edge.stripe.com https://marketplace.stripe.com https://stripe.com https://support-admin.corp.stripe.com https://support-conversations.stripe.com https://support.stripe.com; 2 default-src temu: *.temu.com *.kwcdn.com *.temucdn.com wss://*.temu.com *.paypal.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com *.googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net *.cash.app *.forter.com www.paypalobjects.com *.braintree-api.com *.braintreegateway.com cash-f.squarecdn.com api.squareup.com api.lab.amplitude.com *.paidy.com *.cardinalcommerce.com *.stripe.com d3nocrch4qti4v.cloudfront.net duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d2o5idwacg3gyw.cloudfront.net d3lqotgbn3npr.cloudfront.net d6rak4b14t5gp.cloudfront.net dlthst9q2beh8.cloudfront.net o160250.ingest.sentry.io *.pagoefectivo.pe wauth.teledit.com *.smartropay.co.kr *.mobilians.co.kr applepay.cdn-apple.com codigoqr.pagoefectivolatam.com identify.idscan.cloud blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval'; report-uri /api/sec-csp/110000006/enforce 2 connect-src 'self' https://search.brave.com https://newsletter.brave.app https://analytics.brave.com; default-src 'none'; media-src 'self'; font-src 'self'; frame-ancestors 'self' https://ads.brave.com https://ads.bravesoftware.com; frame-src 'self' https://blocksurvey.io https://survey.brave.app https://contact.ads.brave.com https://html5-player.libsyn.com https://player.vimeo.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://www.youtube-nocookie.com https://app.boostr.com/; img-src 'self' data: https://imgs.search.brave.com https://analytics.brave.com https://boards.greenhouse.io https://job-boards.greenhouse.io; script-src 'self' https://boards.greenhouse.io https://job-boards.greenhouse.io; style-src 'self' 'unsafe-inline'; object-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; 2 frame-ancestors 'self' *.cnbc.com https://cnbc.zendesk.com; 2 report-uri https://mon.capcutapi.us/monitor_browser/collect/batch/security/?bid=cc_web_compliance&ev_type=csp&p=dQ8Gt5CJDptaV9zKWoMFsV&v=12&s=650&b=custom; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.us.capcut.com *.adtrafficquality.google *.bing.com *.bing.net *.capcutapi.us *.capcutcdn-us.com *.capcutw.us *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.giphy.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.tiktokcdn-us.com *.tiktokv.us *.tiktokw.us *.ttcdn-us.com *.us.capcut.com appleid.cdn-apple.com dreamina.capcut.com www.somehow.ai ep2.adtrafficquality.google facebook.com google.com login-row.www.capcut.com www.capcut.com www.tiktok.com *.hypiccdn.us; base-uri 'none'; connect-src 'self' blob: bytedance: data: http://localhost:* https://localhost:* wss://*.us.capcut.com *.adtrafficquality.google *.bing.com *.bing.net *.capcutapi.us *.capcutcdn-us.com *.capcutw.us *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.pipopay.com *.pipopayment.com *.pipopayment.us *.run.app *.tiktokcdn-us.com *.tiktokv.us *.tiktokw.us *.twitter.com *.us.capcut.com dreamina.capcut.com www.somehow.ai login-row.www.capcut.com www.capcut.com www.tiktok.com *.pinterest.com macan-native.com us.tiktok.com *.countain.com open.tiktokapis.com; frame-ancestors 'self' bytedance: dreamina.capcut.com www.somehow.ai www.capcut.com www.pippit.ai www.capcut.net; frame-src 'self' bytedance: *.capcutw.us *.facebook.com *.google.com *.googletagmanager.com *.instagram.com *.x.com *.youtube.com h5.capcut.net capcut-yt.onelink.me dreamina.capcut.com www.somehow.ai ep2.adtrafficquality.google googleads.g.doubleclick.net media-evercloud.capcutapi.us td.doubleclick.net www.capcut.com www.tiktok.com *.pinterest.com; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-eval' 'inline-speculation-rules' 'wasm-unsafe-eval' *.bing.com *.capcutcdn-us.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.googlesyndication.com *.googletagmanager.com *.tiktokcdn-us.com appleid.cdn-apple.com ep2.adtrafficquality.google googleads.g.doubleclick.net scripts.clarity.ms www.clarity.ms www.gstatic.com *.pinimg.com *.pinterest.com macan-native.com; worker-src 'self' 2 default-src 'self';connect-src 'self' ws: https://*.google-analytics.com https://s3-eu-west-1.amazonaws.com;img-src 'self' https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com/ data: https://*.google-analytics.com https://*.doubleclick.net https://s3.amazonaws.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googleapis.com https://js-agent.newrelic.com/nr-1044.min.js https://www.google.com https://www.gstatic.com https://*.google-analytics.com http://*.getclicky.com;style-src 'self' 'unsafe-inline' http://maxcdn.bootstrapcdn.com https://*.googleapis.com https://www.gstatic.com;font-src 'self' https://www.gstatic.com https://*.gstatic.com http://maxcdn.bootstrapcdn.com;frame-src 'self' https://www.google.com https://*.s3.amazonaws.com;report-uri /csp; 2 frame-ancestors 'self' *.intranet *.uolinc.com; 2 default-src 'self' https://*.extole.io; connect-src 'self' http://ad.doubleclick.net https://*.analytics.google.com https://*.botframework.com https://*.c360a.salesforce.com https://*.capterra.com https://*.clarity.ms https://*.clickagy.com https://*.demandbase.com https://*.demdex.net https://*.eset.com https://*.events.ubembed.com https://*.extole.io https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io https://*.ingest.sentry.io https://*.optimonk.com https://*.quora.com https://*.tawk.to https://*.tt.omtrdc.net https://*.zoominfo.com https://acsbapp.com https://ads.reddit.com https://adservice.google.com https://analytics.google.com https://analytics.tiktok.com https://analytics.twitter.com https://aorta.clickagy.com https://api.cloudsponge.com https://api.company-target.com https://assets.ubembed.com https://bat.bing.com https://bat.bing.net https://bzr.openai.com https://c.go-mpulse.net https://cdn.acsbapp.com https://cdn.cookielaw.org https://cdn.linkedin.oribi.io https://cdn1.esetstatic.com https://collect.cloudsponge.com https://conversions-config.reddit.com https://cookies-data.onetrust.io https://ct.pinterest.com https://ekr.zdassets.com https://ep.smct.co https://eset.tt.omtrdc.net https://eset2nd--uat.sandbox.my.salesforce-scrt.com https://eset2nd--uat.sandbox.my.site.com https://eset2nd.my.salesforce-scrt.com https://eset2nd.my.salesforce-sites.com https://eset2nd.my.site.com https://esetclientes.zendesk.com https://fapi.eset.cz https://front.optimonk.com https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://grsm.io https://ipb.smct.co https://ipb.smct.io https://js.smct.co https://js.smct.io https://js.zi-scripts.com https://link.technologyadvice.com https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://mgln.ai https://partnerlinks.io https://pixel-config.reddit.com https://privacyportal.onetrust.com https://process.acsbapp.com https://px.ads.linkedin.com https://region1.google-analytics.com https://replay.uxtweak.com https://s.yimg.com https://scout.salesloft.com https://script.crazyegg.com https://segments.company-target.com https://sentry.io https://smct.co https://stats.g.doubleclick.net https://t.co https://tracker.clickguard.com https://tracking-api.g2.com https://web1.acsbapp.com https://www.facebook.com https://www.google-analytics.com https://www.google.by https://www.google.co.uk https://www.google.co.uz https://www.google.com https://www.google.es https://www.google.ie https://www.google.kg https://www.google.kz https://www.google.lt https://www.google.lv https://www.google.ru https://www.googleadservices.com https://www.googletagmanager.com https://www.mczbf.com https://www.redditstatic.com wss://*.botframework.com wss://*.eset.com wss://*.hotjar.com wss://*.tawk.to wss://*.zendesk.com wss://*.zopim.com; font-src 'self' data: https://*.eset.com https://*.extole.io https://*.gstatic.com https://*.optimonk.com https://*.web-assets.eset.com https://acsbapp.com https://api.cloudsponge.com https://cdn.acsbapp.com https://cdn.esetstatic.com https://cf.xtlo.net https://content.powerapps.com https://embed.tawk.to https://fonts.smct.co https://fonts.smct.io https://forms.powerappsportals.com https://origin.xtlo.net https://script.hotjar.com; form-action 'self' https://*.eset-la.com https://*.eset.com https://*.form.eset.com https://*.tienda.eset-la.com https://s1069307879.t.eloqua.com https://webto.salesforce.com https://www.facebook.com; frame-ancestors 'self' https://*.eset.com https://forms.powerappsportals.com; frame-src 'self' https://*.eset.com https://*.fls.doubleclick.net https://*.sgtm.eset.com https://4144895.extforms.netsuite.com https://8117415.fls.doubleclick.net https://bid.g.doubleclick.net https://cj.dotomi.com https://embed.tawk.to https://eset.demdex.net https://eset2nd--uat.sandbox.my.site.com https://eset2nd.my.site.com https://forms.powerappsportals.com https://hemsync.clickagy.com https://int.form.eset.com https://js.smct.io https://ls.smct.co https://s.company-target.com https://smct.co https://survey.eset.com https://td.doubleclick.net https://tpc.googlesyndication.com https://tr.snapchat.com https://unity.survey-solutions.cloud https://vars.hotjar.com https://widget.trustpilot.com https://www.brighttalk.com https://www.buzzsprout.com https://www.emjcd.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.paperturn-view.com https://www.riddle.com https://www.youtube-nocookie.com https://www.youtube.com; img-src 'self' blob: data: http://ad.doubleclick.net https://*.adform.net https://*.ads.linkedin.com https://*.capterra.com https://*.eset.com https://*.extole.io https://*.gstatic.com https://*.hotjar.com https://*.krxd.net https://*.optimonk.com https://*.rlcdn.com https://*.salesloft.com https://*.tawk.to https://*.yahoo.co.jp https://*.zdusercontent.com https://*.zendesk.com https://aa.agkn.com https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://adservice.google.de https://alb.reddit.com https://analytics.google.com https://analytics.twitter.com https://aorta.clickagy.com https://api.cloudsponge.com https://bat.bing.com https://bat.bing.net https://bzr.openai.com https://c.bing.com https://c.clarity.ms https://cdn.acsbapp.com https://cdn.cookielaw.org https://cdn.esetstatic.com https://cdn.jsdelivr.net https://cdn.smct.co https://cdn.smct.io https://cdn1.esetstatic.com https://cf.xtlo.net https://cj.dotomi.com https://cm.everesttech.net https://cm.g.doubleclick.net https://connect.facebook.net https://content.powerapps.com https://dc.ads.linkedin.com https://dpm.demdex.net https://dsum-sec.casalemedia.com https://events.smct.co https://fapi.eset.cz https://forms.powerappsportals.com https://googleads.g.doubleclick.net https://i.ytimg.com https://images.g2crowd.com https://img.youtube.com https://insight.adsrvr.org https://maps.googleapis.com https://match.adsrvr.org https://mgln.ai https://origin.xtlo.net https://p.veritone-ce.com https://pagead2.googlesyndication.com https://pixel-sync.sitescout.com https://pixel.rubiconproject.com https://proeesweufesto01.blob.core.windows.net https://proeeswusfesto01.blob.core.windows.net https://pubads.g.doubleclick.net https://px.ads.linkedin.com https://px.steelhousemedia.com https://q.quora.com https://region1.analytics.google.com https://region1.google-analytics.com https://s1069307879.t.eloqua.com https://s786665.t.eloqua.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://t.co https://tags.bluekai.com https://tags.w55c.net https://tawk.link https://tribl.io https://trk.crozdesk.com https://us-u.openx.net https://usermatch.krxd.net https://web-assets.esetstatic.com https://web1.acsbapp.com https://www.emjcd.com https://www.facebook.com https://www.google-analytics.com https://www.google.at https://www.google.ca https://www.google.ch https://www.google.co.in https://www.google.co.jp https://www.google.co.uk https://www.google.co.za https://www.google.com https://www.google.com.au https://www.google.com.br https://www.google.com.mx https://www.google.com.sg https://www.google.cz https://www.google.de https://www.google.es https://www.google.fr https://www.google.it https://www.google.nl https://www.google.pl https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.linkedin.com https://www.mczbf.com; manifest-src 'self' https://*.eset.com https://*.web-assets.eset.com; media-src 'self' https://*.eset.com https://*.web-assets.eset.com https://content.powerapps.com https://embed.tawk.to https://eset.zendesk.com https://esetclientes.zendesk.com https://static.zdassets.com https://web1.acsbapp.com; object-src 'self' https://*.eset.com https://*.web-assets.eset.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.capterra.com https://*.cookielaw.org https://*.eset.com https://*.extole.io https://*.js.ubembed.com https://*.mountain.com https://*.my.salesforce.com https://*.optimonk.com https://*.replay.uxtweak.com https://*.salesforceliveagent.com https://*.ubembed.com https://*.web-assets.eset.com https://*.xtlo.net https://*.zendesk.com https://a.quora.com https://acsbap.com https://acsbapp.com https://analytics.tiktok.com https://api.cloudsponge.com https://assets.esetstatic.com https://bat.bing.com https://bzrcdn.openai.com https://cdn.botframework.com https://cdn.c360a.salesforce.com https://cdn.esetstatic.com https://cdn.jsdelivr.net https://cdn.linkedin.oribi.io https://cdn.mgln.ai https://cdn1.esetstatic.com https://cdnjs.cloudflare.com https://connect.facebook.net https://content.powerapps.com https://d.la1-c2-cdg.salesforceliveagent.com https://d3pkntwtp2ukl5.cloudfront.net https://embed.playbuzz.com https://embed.tawk.to https://embed.typeform.com https://eset2nd--uat.sandbox.my.salesforce-scrt.com https://eset2nd--uat.sandbox.my.site.com https://eset2nd.my.salesforce-sites.com https://eset2nd.my.site.com https://fapi.eset.cz https://gleam.io https://googleads.g.doubleclick.net https://img.en25.com https://img06.en25.com https://invitejs.trustpilot.com https://js.gleam.io https://js.partnerstack.com https://js.smct.co https://js.smct.io https://js.zi-scripts.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://platform.twitter.com https://s786665.t.eloqua.com https://scout-cdn.salesloft.com https://script.hotjar.com https://scripts.clarity.ms https://smct.co https://snap.licdn.com https://ssl.google-analytics.com https://static.ads-twitter.com https://static.hotjar.com https://static.zdassets.com https://tag.demandbase.com https://tags.clickagy.com https://tpc.googlesyndication.com https://tracking-api.g2.com https://tribl.io https://trk.crozdesk.com https://visitor.technologyadvice.com https://widget.trustpilot.com https://ws.zoominfo.com https://www.brighttalk.com https://www.buzzsprout.com https://www.clarity.ms https://www.emjcd.com https://www.google-analytics.com https://www.google.ae https://www.google.am https://www.google.be https://www.google.bg https://www.google.bs https://www.google.by https://www.google.cg https://www.google.ci https://www.google.cl https://www.google.cm https://www.google.co.id https://www.google.co.il https://www.google.co.jp https://www.google.co.ke https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.zw https://www.google.com https://www.google.dj https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.ge https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.kg https://www.google.kz https://www.google.lk https://www.google.lt https://www.google.md https://www.google.me https://www.google.mk https://www.google.ps https://www.google.pt https://www.google.ro https://www.google.ru https://www.google.se https://www.google.si https://www.google.tn https://www.googleadservices.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.gstatic.com https://www.mczbf.com https://www.paperturn-view.com https://www.redditstatic.com https://www.riddle.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.eset.com https://*.extole.io https://*.hotjar.com https://*.optimonk.com https://*.tawk.to https://*.web-assets.eset.com https://api.cloudsponge.com https://cdn.esetstatic.com https://cdn.jsdelivr.net https://content.powerapps.com https://eset2nd--uat.sandbox.my.site.com https://eset2nd.my.salesforce-sites.com https://eset2nd.my.site.com https://fonts.googleapis.com https://fonts.smct.co https://fonts.smct.io https://forms.powerappsportals.com; worker-src 'self' https://*.eset.com; report-uri https://www-eset-com.api.cspconsole.eset.com/v1/reports; report-to csp-endpoint; 2 frame-ancestors 'self' *.grammarly.com 2 block-all-mixed-content; default-src https://loc.gov/ https://*.loc.gov/ ; media-src https://loc.gov/ https://*.loc.gov/ https://*.readspeaker.com/ https://*.arcgis.com/ https://*.arcgisonline.com/ https://webapps-cdn.esri.com/ blob:; worker-src https://loc.gov/ https://*.loc.gov/ blob:; font-src https://loc.gov/ https://*.loc.gov/ https://*.arcgis.com/ https://*.arcgisonline.com/ https://webapps-cdn.esri.com/ https://ssl.p.jwpcdn.com/ data:; img-src https://loc.gov/ https://*.loc.gov/ https://congress.gov/ https://*.congress.gov/ https://*.readspeaker.com/ https://*.arcgis.com/ https://*.arcgisonline.com/ https://webapps-cdn.esri.com/ https://*.ssa.gov/ https://dpm.demdex.net/ https://cm.everesttech.net/ https://*.amazonaws.com data: blob:; connect-src https://loc.gov/ https://*.loc.gov/ https://*.arcgis.com/ https://*.arcgisonline.com/ https://webapps-cdn.esri.com/ https://chat-us.libanswers.com/ https://thelibraryofcongress.tt.omtrdc.net/ https://dpm.demdex.net/ https://d3c605m4lmznjl.cloudfront.net/ https://*.s3.us-east-1.amazonaws.com/; style-src https://loc.gov/ https://*.loc.gov/ https://*.readspeaker.com/ https://*.arcgis.com/ https://*.arcgisonline.com/ https://webapps-cdn.esri.com/ https://ssl.p.jwpcdn.com/ https://assets.adobedtm.com/ https://*.ssa.gov/ 'unsafe-inline' blob:; script-src https://loc.gov/ https://*.loc.gov/ https://*.readspeaker.com/ https://*.arcgis.com/ https://*.arcgisonline.com/ https://webapps-cdn.esri.com/ https://cdn.jsdelivr.net https://ssl.p.jwpcdn.com/ https://assets.adobedtm.com/ https://*.blackbaudcdn.net/ https://*.blackbaud.com/ https://ajax.googleapis.com/ajax/libs/jquery/ https://*.ssa.gov/ https://s.ytimg.com/ 'unsafe-inline' 'unsafe-eval'; frame-src https://loc.gov/ https://*.loc.gov/ https://*.readspeaker.com/ https://*.blackbaudcdn.net/ https://*.blackbaud.com/ https://www.nlstalkingbooks.org/ https://unitedstateslibraryofcongress.demdex.net https://www.youtube-nocookie.com/; frame-ancestors https://loc.gov/ https://*.loc.gov/ https://*.blackbaudcdn.net/ https://*.blackbaud.com/ https://loc.libwizard.com/; report-uri https://errorlogging.loc.gov/api/51/security/?sentry_key=2176ae0b9acd4cd59297edc0e064cc95&sentry_environment=production ; 2 frame-ancestors 'self' *.nike.com *.nikecloud.com *.nikedev.com 2 default-src https: 'unsafe-inline' data: blob:; frame-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline'; media-src https: 'unsafe-inline' data: blob:; img-src https: http: data: blob:; frame-ancestors https: 2 frame-ancestors https://*.conviva.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.intellimize.co https://cdnjs.cloudflare.com https://d3e54v103j8qbb.cloudfront.net https://cdn.prod.website-files.com https://hubspotonwebflow.com https://www.googletagmanager.com https://a-cdn.anthropic.com https://connect.facebook.net https://www.youtube.com https://cdn.jsdelivr.net https://cdn.finsweet.com https://maps.googleapis.com https://js.hsforms.net https://player.vimeo.com; style-src 'self' 'unsafe-inline' https://cdn.prod.website-files.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https://cdn.sanity.io https://www-cdn.anthropic.com https://cdn.prod.website-files.com https://img.youtube.com https://i.ytimg.com https://www.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://forms-na1.hsforms.com; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://cdn.embedly.com https://assets.claude.ai https://*.intellimizeio.com https://anthropic.swoogo.com https://*.hsforms.com https://*.hubspot.com; connect-src 'self' blob: https://cdn.intellimize.co https://api.intellimize.co https://log.intellimize.co https://cdn.sanity.io https://links.iterable.com https://a-cdn.anthropic.com https://a-api.anthropic.com https://www.facebook.com https://www.google-analytics.com https://cdn.prod.website-files.com https://hubspotonwebflow.com https://maps.googleapis.com https://vimeo.com https://www.googletagmanager.com https://code.claude.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com; media-src 'self' https://cdn.sanity.io; worker-src 'self' blob:; font-src 'self' data: https://cdn.prod.website-files.com https://fonts.gstatic.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self' 2 default-src 'none'; script-src 'self' 'unsafe-inline' *.wps.com *.wpscdn.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://firebase.googleapis.com https://dev.visualwebsiteoptimizer.com https://connect.facebook.net https://*.clarity.ms https://www.google.com https://apis.google.com https://www.gstatic.com https://www.googleadservices.com https://cse.google.com https://assets-cli.udeskglobal.com https://*.udeskglobal.com https://*.udesk.cn https://js.stripe.com https://*.bing.com https://bat.r.msn.com; style-src 'self' 'unsafe-inline' *.wpscdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://*.udeskglobal.com https://*.udesk.cn; img-src 'self' data: *.wps.com *.wpscdn.com *.qwps.com https://*.qwps.com *.googleusercontent.com https://www.googletagmanager.com https://i.ytimg.com https://www.google.com https://www.google.co.uk https://ads.google.com https://ssl.gstatic.com https://www.google-analytics.com https://region1.analytics.google.com https://*.clarity.ms https://*.doubleclick.net https://www.googleadservices.com https://cse.google.com https://*.googlesyndication.com https://*.udeskglobal.com https://*.udesk.cn https://*.bing.com https://bat.r.msn.com; connect-src 'self' *.wps.com *.wpscdn.com *.4wps.net https://api-wps-param-us-test.4wps.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://firebase.googleapis.com https://fcmregistrations.googleapis.com https://firebaseinstallations.googleapis.com https://firebaselogging-pa.googleapis.com https://firebaseperf-pa.googleapis.com https://firebaseremoteconfig.googleapis.com https://fonts.googleapis.com https://s3.us-west-2.amazonaws.com https://website-prod.cache.wpscdn.com https://www.google.com https://www.google.co.uk https://*.clarity.ms wss://*.clarity.ms https://apis.google.com https://www.gstatic.com https://*.doubleclick.net https://www.googleadservices.com https://*.log.aliyuncs.com https://aegis.qq.com https://rumt-sg.com https://*.udeskglobal.com https://*.udesk.cn wss://*.udeskglobal.com wss://*.udesk.cn https://api.stripe.com https://*.bing.com https://bat.r.msn.com https://cse.google.com https://*.googletagmanager.com https://*.analytics.google.com https://play.google.com https://clients1.google.com https://clients2.google.com https://clients3.google.com https://clients4.google.com; font-src 'self' fonts.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-src 'self' *.wpscdn.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://account.wps.com https://www.youtube.com ksoqing: https://bid.g.doubleclick.net https://*.udeskglobal.com https://*.udesk.cn https://js.stripe.com https://hooks.stripe.com; media-src 'self'; object-src 'none'; child-src 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests 2 frame-ancestors 'self' https://cms.apnews.com/ 2 frame-ancestors https://platform.theverge.com https://*.theverge.com https://platform.theverge.com https://*.theverge.com 'self' 2 default-src 'self' https://*.mixpanel.com https://cdn.mxpnl.com https://cdn-dev.mxpnl.com https://*.zdassets.com https://ekr.zendesk.com wss://mixpanelsupport.zendesk.com https://framerusercontent.com https://mixpanel.com https://*.mixpanel.com https://*.qualified.com https://thesignalprod.wpenginepowered.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.mxpnl.com https://cdn-dev.mxpnl.com https://cdn.rollbar.com https://js.stripe.com https://*.zdassets.com https://*.zopim.com https://assets.zendesk.com https://widget.usepylon.com https://www.google.com https://www.gstatic.com https://widget.kapa.ai https://www.youtube.com/embed/ https://connect.facebook.net https://apis.google.com https://accounts.google.com https://cdp.customer.io https://assets.customer.io https://customerioforms.com https://code.gist.build https://*.sendbird.com 'unsafe-eval' https://*.6sc.co https://static.addtoany.com https://*.adroll.com https://cdn-assets-prod.s3.amazonaws.com https://optimizely.s3.amazonaws.com https://*.bing.com https://cdn.bizible.com https://*.clarity.ms https://cdnjs.cloudflare.com d2wy8f7a9ursnm.cloudfront.net dnf20ypvrc856.cloudfront.net https://*.doubleclick.net https://framer.com https://*.framer.com https://app.framerstatic.com https://framerusercontent.com https://*.google.com https://*.google-analytics.com https://*.googleadservices.com https://*.googlesyndication.com https://www.googletagmanager.com https://*.gstatic.cn https://*.gstatic.com https://*.g2crowd.com https://app.leandata.com https://cdn.leandata.com https://cdn1.leandata.com https://snap.licdn.com https://mixpanel.com https://*.mixpanel.com https://bzrcdn.openai.com https://*.optimizely.com https://*.pinimg.com https://ct.pinterest.com https://*.qualified.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://recaptcha.net https://*.recaptcha.net https://www.redditstatic.com/ads/ https://browser.sentry-cdn.com https://js.sentry-cdn.com https://*.singular.net https://*.smartnews-ads.com https://*.trustarc.com https://*.ads-twitter.com https://*.typeform.com https://use.typekit.net https://mxpnlcms.wpengine.com https://s.yimg.jp https://*.youtube.com https://*.youtube-nocookie.com https://*.zoominfo.com https://d3e54v103j8qbb.cloudfront.net https://53f7ny.csb.app https://*.53f7ny.csp.app https://cdn.jsdelivr.net/npm/swiper@12/ https://cdn.prod.website-files.com/69d882f034f244f0e1ec2d16/; connect-src 'self' blob: data: wss://api.liveblocks.io https://api.liveblocks.io https://cdn.jsdelivr.net https://*.mixpanel.com https://cdn.mxpnl.com https://cdn-dev.mxpnl.com https://*.sentry.io https://api.honeycomb.io https://api.rollbar.com https://api.sprig.com https://*.zdassets.com https://mixpanelsupport.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.usepylon.com wss://*.pusher.com https://www.google.com https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app https://proxy.kapa.ai https://storage.googleapis.com https://*.facebook.com https://cdp.customer.io https://track.customer.io https://customerioforms.com https://*.api.gist.build https://*.cloud.gist.build https://*.sendbird.com https://*.amazonaws.com ws://*.sendbird.com https://*.6sc.co https://*.adnxs.com https://*.adroll.com https://cdn-assets-prod.s3.amazonaws.com https://*.bing.com https://*.bugsnag.com https://*.clarity.ms https://cdnjs.cloudflare.com https://*.doubleclick.net https://framer.com https://*.framer.com https://app.framerstatic.com https://framerusercontent.com https://google.com https://*.google.com https://*.google-analytics.com https://*.googlesyndication.com https://tracking-api.g2.com https://*.g2crowd.com https://app.leandata.com https://*.linkedin.com https://mixpanel.com https://*.mixpanel.com https://bzrcdn.openai.com https://bzr.openai.com https://*.optimizely.com https://cdn.linkedin.oribi.io https://*.pinimg.com https://ct.pinterest.com https://*.qualified.com wss://*.qualified.com https://*.recaptcha.net https://*.reddit.com https://www.redditstatic.com/ads/ https://unpkg.com/@rive-app/canvas@1.2.4/rive.wasm https://unpkg.com/@rive-app/webgl2@2.27.5/rive.wasm https://public.rive.app https://*.singular.net https://*.smartnews-ads.com https://*.trustarc.com https://mxpnlcms.wpengine.com https://thesignalprod.wpenginepowered.com https://*.zoominfo.com; img-src 'self' blob: data: https://api.liveblocks.io https://cdn.mxpnl.com https://cdn-dev.mxpnl.com https://*.zdassets.com https://*.zopim.com https://v2assets.zopim.io https://v2uploads.zopim.io https://*.usepylon.com https://d3vl36l12sfx26.cloudfront.net https://avatars.slack-edge.com https://storage.googleapis.com https://*.facebook.com https://*.gravatar.com https://*.wp.com https://track.customer.io https://*.sendbird.com https://*.amazonaws.com ws://*.sendbird.com https://*.3lift.com https://*.33across.com https://*.6sc.co https://*.adnxs.com https://*.adroll.com https://*.bidswitch.net https://*.bing.com https://cdn.bizible.com https://cdn.bizibly.com https://*.bugsnag.com https://ct.capterra.com https://*.casalemedia.com https://*.clarity.ms https://res.cloudinary.com https://*.crwdcntrl.net https://*.doubleclick.net https://*.exelator.com https://framerusercontent.com https://*.google-analytics.com https://*.googlesyndication.com https://www.googletagmanager.com https://*.googleusercontent.com https://*.imrworldwide.com https://cdn.leandata.com https://cdn1.leandata.com https://*.linkedin.com https://mixpanel.com https://*.mixpanel.com https://ml314.com https://*.openx.net https://*.optimizely.com https://sync.outbrain.com https://*.pubmatic.com https://*.qualified.com https://*.reddit.com https://idsync.rlcdn.com https://*.rubiconproject.com https://*.smartnews-ads.com https://pixel.sitescout.com/ https://sync.taboola.com https://pixel.tapad.com/ https://*.trustarc.com https://*.truste.com https://*.turn.com/ https://t.co/ https://analytics.twitter.com https://beacon.walmart.com https://*.wpengine.com https://mxpnlcms.wpengine.com https://mxpnlcms.wpenginepowered.com https://thesignalprod.wpenginepowered.com https://*.analytics.yahoo.com https://*.ytimg.com https://d3e54v103j8qbb.cloudfront.net https://cdn.prod.website-files.com/69d882f034f244f0e1ec2d16/ https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat; style-src 'self' 'unsafe-inline' https://cdn.mxpnl.com https://cdn-dev.mxpnl.com https://*.usepylon.com https://code.gist.build https://*.google.com https://fonts.googleapis.com https://mixpanel.com https://*.mixpanel.com https://hello.myfonts.net https://*.qualified.com https://cdn.jsdelivr.net/npm/swiper@12/ https://cdn.prod.website-files.com/69d882f034f244f0e1ec2d16/; font-src 'self' data: https://cdn.mxpnl.com https://cdn-dev.mxpnl.com https://*.usepylon.com https://framerusercontent.com https://*.gstatic.com https://cdn.leandata.com https://cdn1.leandata.com https://mixpanel.com https://*.mixpanel.com https://*.qualified.com https://*.trustarc.com https://cdn.prod.website-files.com/69d882f034f244f0e1ec2d16/; frame-src 'self' https://cdn.mxpnl.com/static/ https://js.stripe.com https://www.google.com https://www.loom.com/embed/ https://player.vimeo.com/video/ https://www.youtube.com/embed/ https://*.facebook.com https://accounts.google.com https://code.gist.build https://renderer.gist.build https://static.addtoany.com https://*.bing.com dta8euw1l8gvs.cloudfront.net https://*.doubleclick.net https://framer.com https://*.framer.com https://*.google.com https://www.googletagmanager.com https://mixpanel.my.leandata.com https://mixpanel.com https://*.mixpanel.com https://capture.navattic.com/ https://*.cdn.optimizely.com https://*.cdn-pci.optimizely.com https://ct.pinterest.com https://*.qualified.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://recaptcha.net https://*.recaptcha.net https://rive.app https://my.spline.design/ https://*.trustarc.com https://*.typeform.com https://*.youtube-nocookie.com; worker-src 'self' blob:; 2 default-src 'self' *.crazyegg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cloudinary.com *.cloudinary.com *.googletagmanager.com www.google-analytics.com *.google.com cdnjs.cloudflare.com unpkg.com cdn.jsdelivr.net stackpath.bootstrapcdn.com app-ab12.marketo.com snap.licdn.com connect.facebook.net munchkin.marketo.net consent.cookiebot.com vidassets.terminus.services googleads.g.doubleclick.net radar.cedexis.com www.googleadservices.com maps.googleapis.com *.fastcdn.co *.instapage.com *.instapagemetrics.com *.redditstatic.com *.gstatic.com *.crazyegg.com *.wp.com *.driftt.com script.mocky.com *.googleoptimize.com *.6sc.co ml314.com tags.srv.stackadapt.com *.convertexperiments.com *.infinigrow.com cdn.debugbear.com cdn.cookielaw.org *.onetrust.com js.zi-scripts.com ws-assets.zoominfo.com tracking-api.g2.com *.adroll.com cdn.cr-proxy.com ddzuuyx7zj81k.cloudfront.net cdn.parsely.com; script-src-elem 'self' 'unsafe-inline' cloudinary.com *.cloudinary.com code.jquery.com *.amazonaws.com cdn.jsdelivr.net cdn.parsely.com cdn.cr-proxy.com stackpath.bootstrapcdn.com *.googletagmanager.com www.google-analytics.com *.google.com cdn.omniconvert.com *.calibermind.com unpkg.com app-ab12.marketo.com snap.licdn.com connect.facebook.net munchkin.marketo.net consent.cookiebot.com vidassets.terminus.services googleads.g.doubleclick.net radar.cedexis.com www.googleadservices.com maps.googleapis.com *.fastcdn.co *.instapage.com *.instapagemetrics.com *.redditstatic.com *.gstatic.com *.crazyegg.com *.wp.com *.driftt.com script.mocky.com *.googleoptimize.com ml314.com *.6sc.co bat.bing.com static.ads-twitter.com www.clarity.ms tags.srv.stackadapt.com app.omniconvert.com web.omniconvert.com *.convertexperiments.com *.infinigrow.com ddzuuyx7zj81k.cloudfront.net dss6ntp5q2r0o.cloudfront.net cdnjs.cloudflare.com cdn.debugbear.com cdn.cookielaw.org *.onetrust.com js.zi-scripts.com ws-assets.zoominfo.com tracking-api.g2.com *.adroll.com app.convert.com cdn.cr-proxy.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net unpkg.com cdnjs.cloudflare.com app-ab12.marketo.com *.google.com *.cloudinary.com *.crazyegg.com *.wp.com *.driftt.com script.mocky.com *.googleoptimize.com tags.srv.stackadapt.com cdn.jsdelivr.net cdn.cookielaw.org *.googletagmanager.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com *.googletagmanager.com *.typekit.net unpkg.com cdnjs.cloudflare.com app-ab12.marketo.com *.google.com *.cloudinary.com *.crazyegg.com *.wp.com *.driftt.com script.mocky.com *.googleoptimize.com tags.srv.stackadapt.com cdn.jsdelivr.net cdn.cookielaw.org; img-src 'self' data: cloudinary.com *.cloudinary.com *.google.com www.google-analytics.com pagead2.googlesyndication.com cm.g.doubleclick.net www.google.co.uk www.google.de www.google.hr www.google.co.il *.google.com p1.parsely.com p1-irl.parsely.com pix.revjet.com sync.smartadserver.com sync.adstir.com sync.commander1.com ardrone.swoop.com tag.crsspxl.com segments.company-target.com ps.eyeota.net googleads.g.doubleclick.net secure.gravatar.com match.adsrvr.org wec-assets.terminus.services wec-assets-api.terminus.services px.ads.linkedin.com *.google.ca *.facebook.com benchmark.1e100cdn.net *.cedexis-test.com cedexis.pc.cdn.bitgravity.com ptcfc.com ubiquity.cedexis.us-east-1.prod.endpoints.ubiquity.aws.a2z.com media-akam.licdn.com *.citrix-itm-test.com ubiquity.cedexis.eu-west-1.prod.endpoints.ubiquity.aws.a2z.com direct.cedexis.us-east-1.prod.endpoints.ubiquity.aws.a2z.com a-cedexis.msedge.net 20059b.ha.azioncdn.net *.cedexis.fastlylb.net test.cedexis.gamma.endpoints.ubiquity.aws.a2z.com *.cdnvideo.ru essl-cdxs.edgekey.net direct.cedexis.ap-northeast-1.prod.endpoints.ubiquity.aws.a2z.com *.endpoints.ubiquity.aws.a2z.com level3ssl.optimicdn.com img-cedexis.mncdn.com cedexis-ssl.cdn.warpcache.net linkedin.com *.adsymptotic.com *.google.com www.googleapis.com *.gstatic.com maps.googleapis.com *.citrix.com cldmo.mo.cloudinary.net *.googletagmanager.com *.fastcdn.co *.instapage.com px4.ads.linkedin.com alb.reddit.com *.crazyegg.com *.mozilla.org *.imagecon.com script.mocky.com b.6sc.co bat.bing.com t.co analytics.twitter.com *.clarity.ms *.convertexperiments.com *.bing.com cdn.cookielaw.org dimensions-art.cloudinary.net n902wcigxi.execute-api.us-east-1.amazonaws.com *.adroll.com p28416.itm.cloud.com p118600.itm.cloud.com ml314.com x.bidswitch.net pixel.tapad.com dsum-sec.casalemedia.com sync.outbrain.com idsync.rlcdn.com pixel.rubiconproject.com image2.pubmatic.com us-u.openx.net sync.taboola.com eb2.3lift.com ib.adnxs.com *.reson8.com secure.adnxs.com dpm.demdex.net i.liadm.com; font-src 'self' 'unsafe-inline' data: fonts.gstatic.com cdnjs.cloudflare.com use.typekit.net bat.bing.com t.co analytics.twitter.com *.wp.com cdn.cookielaw.org; connect-src 'self' cloudinary.com *.cloudinary.com www.google-analytics.com pagead2.googlesyndication.com *.mktoutil.com *.doubleclick.net *.calibermind.com api.lever.co api.cr-proxy.com *.mktoresp.com *.init.cedexis-radar.net *.cedexis.com *.facebook.com a-cedexis.msedge.net *.cedexis.fastlylb.net *.netlify.app *.instapage.com *.instapagemetrics.com *.crazyegg.com script.mocky.com mocky.com *.google.com secure.adnxs.com c.6sc.co ipv6.6sc.co *.clarity.ms bat.bing.com tags.srv.stackadapt.com app.omniconvert.com *.convertexperiments.com *.metrics.convertexperiments.com logs.convertexperiments.com *.linkedin.com *.cookiebot.com *.infinigrow.com data.debugbear.com cdn.cookielaw.org epsilon.6sense.com *.6sc.co *.onetrust.com js.zi-scripts.com ws-assets.zoominfo.com ws.zoominfo.com tracking-api.g2.com n902wcigxi.execute-api.us-east-1.amazonaws.com *.algolia.net dss6ntp5q2r0o.cloudfront.net *.adroll.com cdn.jsdelivr.net; media-src 'self' cloudinary.com *.cloudinary.com blob:; worker-src 'self' blob:; frame-src stackblitz.com demo.arcade.software *.googletagmanager.com *.doubleclick.net *.productboard.com *.google.com jobs.lever.co app-ab12.marketo.com business.facebook.com consentcdn.cookiebot.com *.facebook.com *.cedexis-test.com cedexis.pc.cdn.bitgravity.com *.citrix-itm-test.com 20059b.ha.azioncdn.net essl-cdxs.edgekey.net *.cloudinary.com bid.g.doubleclick.net *.twitter.com cloudinary.com *.youtube.com *.driftt.com *.crazyegg.com *.wp.com p28416.itm.cloud.com p118600.itm.cloud.com app.convert.com; object-src 'none' 2 upgrade-insecure-requests; default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' 2 connect-src * 'self' *.garmin.com *.sentry.io https://static.garmincdn.com https://*.cloudinary.com https://www.gstatic.com https://*.doubleclick.net https://*.criteo.com https://*.linksynergy.com https://*.bing.com https://*.pinterest.com https://*.snapchat.com https://px.ads.linkedin.com https://c.seznam.cz https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.googlesyndication.com https://*.googlesyndication.com https://*.google.com https://*.naver.com https://akamai.tiqcdn.com https://*.akamaihd.net *.trustarc.com;script-src 'unsafe-inline' 'unsafe-eval' https://*.garmin.cn https://cdn.jsdelivr.net https://app.textrecruit.com 'self' *.garmin.com *.trustarc.com *.truste.com https://ajax.googleapis.com https://static.garmincdn.com https://www.google.com https://cdn.appdynamics.com https://www.gstatic.com https://prefmgr-cookie.truste-svc.net https://connect.facebook.net https://www.googleadservices.com https://*.doubleclick.net https://static.criteo.net https://*.criteo.com https://bat.bing.com https://*.adform.net https://intljs.rmtag.com https://www.googletagmanager.com https://*.realytics.io https://klear.com https://px.adentifi.com https://cdn-eu.realytics.net https://secure.adnxs.com https://p.teads.tv https://js.adsrvr.org https://tag.rmp.rakuten.com https://s.pinimg.com https://sc-static.net https://*.snapchat.com https://ct.pinterest.com https://snap.licdn.com https://px.ads.linkedin.com https://c.seznam.cz https://ssl.pstatic.net https://*.google-analytics.com https://static.cloudflareinsights.com https://static.hotjar.com https://script.hotjar.com https://optimize.google.com https://members.cj.com static-pages.fe.garmin.com https://*.naver.net http://tags.tiqcdn.com https://*.tealiumiq.com https://deploytealium.com;img-src https://secure.adnxs.com https://www.facebook.com https://*.garmin.cn 'self' data: *.garmin.com *.trustarc.com *.truste.com https://static.garmincdn.com https://www.google.com https://www.google.co.uk https://prefmgr-cookie.truste-svc.net https://res.cloudinary.com https://res.garmin.com https://*.criteo.com https://*.doubleclick.net https://www.googleadservices.com https://px.adentifi.com https://rtb.adentifi.com https://*.teads.tv https://www.googletagmanager.com https://bat.bing.com https://*.yahoo.com https://sync.outbrain.com https://c.seznam.cz https://*.google-analytics.com https://stats.g.doubleclick.net https://static.hotjar.com https://script.hotjar.com *.akamaihd.net https://*.tealiumiq.com https://deploytealium.com https://pixel.mediaiqdigital.com;frame-src https://my.tealiumiq.com https://www.youtube-nocookie.com https://player.youku.com https://player.bilibili.com https://gum.criteo.com https://static.criteo.net https://assets.textrecruit.com *.garmin.com *.trustarc.com *.truste.com https://static.garmincdn.com https://www.google.com https://prefmgr-cookie.truste-svc.net https://*.googletagmanager.com https://*.doubleclick.net https://*.criteo.com https://insight.adsrvr.org https://*.snapchat.com https://ct.pinterest.com;frame-ancestors https://pilotweb.garmin.com;default-src 'self' *.garmin.com https://static.garmincdn.com;style-src 'self' 'unsafe-inline' *.garmin.com https://static.garmincdn.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com;font-src 'self' data: *.garmin.com *.trustarc.com *.truste.com https://static.garmincdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://script.hotjar.com;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';script-src-attr 'none' 2 frame-ancestors 'self' https://as.com https://argentina.as.com https://chile.as.com https://colombia.as.com https://en.as.com https://mexico.as.com https://peru.as.com https://us.as.com https://apuestas.as.com 2 report-uri /csp;child-src 'self' 'self' blob:;connect-src *;default-src 'self';img-src 'self' data: blob: *.facebook.com https://wise.com https://wise-sandbox.com https://gtm.wise.com https://sst.wise.com https://tw-avatar.s3.eu-central-1.amazonaws.com https://tw-test-avatar-storage.s3.eu-west-1.amazonaws.com https://*.doubleclick.net https://www.googleadservices.com https://alb.reddit.com https://*.yahoo.co.jp https://bat.bing.com https://cx.atdmt.com https://daw291njkc3ao.cloudfront.net https://dq8dwmysp7hk1.cloudfront.net https://d2dgj1jjqgsb96.cloudfront.net https://help.wise.com/ https://platform-lookaside.fbsbx.com https://pixel.pointmediatracker.com https://cnv.event.prod.bidr.io https://q.quora.com https://s3-eu-west-1.amazonaws.com https://t.co https://wise.desk.com https://widgets.wise.com https://www.google-analytics.com https://www.gstatic.com https://i.ytimg.com https://px.ads.linkedin.com https://www.linkedin.com https://aax-eu.amazon-adsystem.com https://www.googletagmanager.com https://www.google.com https://www.google.com.au https://www.google.com.br https://www.google.com.sg https://www.google.com.ph https://www.google.com.my https://www.google.com.mx https://www.google.com.ua https://www.google.com.vn https://www.google.com.tr https://www.google.com.ar https://www.google.com.hk https://www.google.com.pk https://www.google.com.pe https://www.google.com.ng https://www.google.com.cy https://www.google.com.mt https://www.google.com.bd https://www.google.com.eg https://www.google.co.uk https://www.google.co.th https://www.google.co.jp https://www.google.co.nz https://www.google.co.id https://www.google.co.kr https://www.google.co.ve https://www.google.co.in https://www.google.co.il https://www.google.co.za https://www.google.de https://www.google.ca https://www.google.es https://www.google.pl https://www.google.ie https://www.google.ch https://www.google.pt https://www.google.nl https://www.google.it https://www.google.hu https://www.google.fr https://www.google.be https://www.google.ro https://www.google.fi https://www.google.cl https://www.google.cz https://www.google.ae https://www.google.lu https://www.google.se https://www.google.ru https://www.google.at https://www.google.bg https://www.google.ee https://www.google.dk https://www.google.no https://www.google.gr https://www.google.sk https://www.google.lt https://www.google.lv https://www.google.ge https://www.google.hr https://www.google.me *.googleusercontent.com *.analytics.google.com http://wi.se https://wi.se https://collector-20079.tvsquared.com https://analytics.twitter.com https://tr.line.me https://c5.adalyser.com https://c0.adalyser.com https://i.sng.link https://cdn.braze.eu https://pixel.pointmediatracker.com https://cnv.event.prod.bidr.io https://lux.speedcurve.com https://forms-eu1.hsforms.com/ https://analytics.google.com/g/s/collect;font-src 'self' data: https://fonts.gstatic.com https://widgets.wise.com/;object-src 'self';media-src 'self' 'self' data: https://wise.com/;manifest-src 'self' 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' 'self' https://wise.com https://wise-sandbox.com https://sst.wise.com https://gtm.wise.com https://*.singular.net https://i.sng.link https://js-agent.newrelic.com https://bam.nr-data.net/ https://ajax.cloudflare.com bat.bing.com https://s.yimg.jp https://*.yahoo.co.jp a.quora.com static.hotjar.com https://script.hotjar.com/ https://collector-20079.tvsquared.com https://d.line-scdn.net www.google.co.uk www.google.com www.googletagmanager.com/ tagmanager.google.com/ https://storage.googleapis.com https://ajax.googleapis.com/ https://microapps.google.com https://microapps-prod-tt.sandbox.google.com googleads.g.doubleclick.net www.google-analytics.com www.googleadservices.com static.ads-twitter.com analytics.twitter.com www.snapengage.com insitez.blob.core.windows.net sjs.bizographics.com *.mxpnl.com https://cdn.pdst.fm https://us-central1-adaptive-growth.cloudfunctions.net https://bidr.io https://d2dgj1jjqgsb96.cloudfront.net https://www.redditstatic.com/ads/pixel.js https://snap.licdn.com https://js.adsrvr.org https://c5.adalyser.com https://c0.adalyser.com https://c.amazon-adsystem.com https://js-eu1.hs-scripts.com https://js.appboycdn.com https://decagon.ai https://transferwise.com https://bidr.io https://cdn.speedcurve.com https://lux.speedcurve.com https://js-eu1.hsforms.net https://challenges.cloudflare.com https://www.youtube.com;style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com/css tagmanager.google.com/;frame-ancestors 'self' https://wiseturkiye.com.tr https://microapps.google.com https://microapps-prod-tt.sandbox.google.com;frame-src youtube.com www.youtube.com www.youtube-nocookie.com https://vars.hotjar.com https://bid.g.doubleclick.net https://www.googletagmanager.com https://insight.adsrvr.org https://match.adsrvr.org https://wise.com https://wise-sandbox.com https://gtm.wise.com https://dev-wi.se https://decagon.ai https://transferwise.com https://wise.navattic.com https://js-eu1.hsforms.net https://forms-eu1.hsforms.com/ https://challenges.cloudflare.com https://feedback.wise.com;worker-src 'self' blob:;form-action 'self' https://forms-eu1.hsforms.com/;base-uri 'self';script-src-attr 'none';upgrade-insecure-requests 2 frame-ancestors 'self' https://amd.pathfactory.com *.reachcm.com reachcm.com 2 frame-ancestors 'self' *.lanacion.com.ar; 2 upgrade-insecure-requests; frame-ancestors 'self' http://*.elconfidencial.com:* https://*.elconfidencial.com:* https://*.ecestaticos.com www.elconfidencial.com blogs.elconfidencial.com bc.marfeel.com *.google.es *.google.com *.cdn.ampproject.org player.h-cdn.com 2 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com https://optimize.google.com ; style-src data: 'unsafe-inline' https: https://optimize.google.com https://fonts.googleapis.com; img-src data: https: blob: android-webview-video-poster: https://www.google-analytics.com https://www.googletagmanager.com https://optimize.google.com; font-src data: https: https://fonts.gstatic.com; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors https://*.vnexpress.net https://vnexpress.net 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2mdn.net *.theoplayer.com *.youtube.com cdnjs.cloudflare.com vjs.zencdn.net static.tagboard.com *.minute.ly blob: *.flourish.studio fifa.eu.qualtrics.com *.fifa.com *.adnxs.com *.crwdcntrl.net *.doubleclick.net *.doubleclick.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.googleanalytics.com *.googlevideo.com *.tpcsyndication.com *.nice264.com *.npaw.com *.tealiumiq.com *.tiqcdn.cn *.tiqcdn.com *.youbora.com *.youborafds01.com *.youboranqs01.com *.youboranqs02.com *.gstatic.com adservice.google.cn adservice.google.co.uk adservice.google.com adservice.google.es analytics.twitter.com assets.adobedtm.com cdn.cookielaw.org connect.facebook.net dc.services.visualstudio.com dpm.demdex.net fifa.hb-api.omtrdc.net platform.twitter.com sc-static.net static.ads-twitter.com tr.snapchat.com *.conviva.com *.instagram.com *.tiktok.com *.ttwstatic.com *.tiktokcdn.com *.tiktokcdn-us.com *.2mdn.net *.fifa.gg api.pingone.eu walls.io *.minute.ly *.pingone.com *.pingone.eu *.x.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.google.ly *.appsflyer.com *.appsflyersdk.com *.usestoryteller.com;worker-src 'self' blob:;script-src-attr 'unsafe-inline';default-src 'unsafe-inline' blob:;manifest-src 'self' 'unsafe-inline' blob:;style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.ttwstatic.com *.usestoryteller.com;img-src 'self' 'unsafe-inline' data: blob: *;media-src 'self' 'unsafe-inline' data: blob: *;connect-src 'self' localhost:* cxm-dev-gl-afd-001-apis-fifa-bcfmhrbneqb6e0ee.z01.azurefd.net fifa-rewards-webapp-dev-acp-hwbta4bza3a7gyau.westeurope-01.azurewebsites.net cxm-dev-gl-afd-001-apis-fifa.azurefd.net cxm-uat-gl-afd-001-apis-fifa.azurefd.net *.cloudfront.net *.fifa.gg *.smartmedialabs.io apice.smartmediatech.io *.embedded.smartmedialabs.io *.embedded.smtwallet.app *.fifa.org *.mycujoo.tv *.mcls.live *.p5cdn.com *.theoplayer.com *.youtube.com *.uplynk.com *.minute.ly *.onetrust.com mycujoo-static-fastly.images.mcls.live cpt-services-fastly.images.mcls.live mycujoo-assets-fastly.images.mcls.live m-tv-fastly.images.mcls.live mycujoo-thumbs-fastly.images.mcls.live wss://mls-rt.mycujoo.tv *.flourish.studio cxm-dev-we-fas-001-search-api.azurewebsites.net cxm-uat-we-fas-001-search-api.azurewebsites.net fifa.eu.qualtrics.com gameday-uat.fifa.mangodev.co.uk gameday-prod.fifa.mangodev.co.uk *.fifa.com *.adnxs.com *.crwdcntrl.net *.doubleclick.net *.doubleclick.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.googleanalytics.com *.googlevideo.com *.tpcsyndication.com *.nice264.com *.npaw.com *.tealiumiq.com *.tiqcdn.cn *.tiqcdn.com *.youbora.com *.youborafds01.com *.youboranqs01.com *.youboranqs02.com *.gstatic.com adservice.google.cn adservice.google.co.uk adservice.google.com adservice.google.es analytics.twitter.com assets.adobedtm.com cdn.cookielaw.org connect.facebook.net dc.services.visualstudio.com dpm.demdex.net fifa.hb-api.omtrdc.net platform.twitter.com sc-static.net static.ads-twitter.com tr.snapchat.com *.conviva.com *.instagram.com *.tiktok.com *.ttwstatic.com *.tiktokcdn.com *.tiktokcdn-us.com *.2mdn.net *.fifa.gg api.pingone.eu walls.io *.minute.ly *.pingone.com *.pingone.eu *.x.com *.appsflyer.com *.appsflyersdk.com *.usestoryteller.com;frame-ancestors 'self' https://apps.monterosa.cloud https://mtsa-blog.fifa.com;frame-src 'self' *.fifa.com *.doubleclick.net *.googlesyndication.com *.googleapis.com *.theoplayer.com *.walls.io *.flourish.studio *.spotify.com *.usestoryteller.com https://flo.uri.sh/ https://www.fifa.gg/ https://fifa.demdex.net/ https://tags.crwdcntrl.net/ https://tr.snapchat.com/ https://www.facebook.com/ https://m.facebook.com/ https://www.google.com/ https://www.youtube.com/ https://platform.twitter.com/ https://www.instagram.com/ https://scontent.cdninstagram.com/ https://www.tiktok.com/ https://fifa-interest-page-dev-app.azurewebsites.net https://fifa-interest-page-qa-app.azurewebsites.net/ https://fifa-interest-page-prd-app.azurewebsites.net/ https://fifa-registration-of-interest-qa-app.azurewebsites.net/ https://fifa-registration-of-interest-prd-app.azurewebsites.net/ https://apps.monterosa.cloud https://mtsa-blog.fifa.com https://embed.tagboard.com https://fifa.eu.qualtrics.com https://embed.podcasts.apple.com https://connect.us.app.pam.co *.airbnb.ae *.airbnb.am *.airbnb.at *.airbnb.az *.airbnb.ba *.airbnb.be *.airbnb.ca *.airbnb.cat *.airbnb.ch *.airbnb.cl *.airbnb.cn *.airbnb.co.cr *.airbnb.co.id *.airbnb.co.in *.airbnb.co.kr *.airbnb.co.nz *.airbnb.co.uk *.airbnb.co.ve *.airbnb.co.za *.airbnb.com *.airbnb.com.ar *.airbnb.com.au *.airbnb.com.bo *.airbnb.com.br *.airbnb.com.bz *.airbnb.com.co *.airbnb.com.ec *.airbnb.com.ee *.airbnb.com.gt *.airbnb.com.hk *.airbnb.com.hn *.airbnb.com.mt *.airbnb.com.my *.airbnb.com.ni *.airbnb.com.pa *.airbnb.com.pe *.airbnb.com.ph *.airbnb.com.py *.airbnb.com.ro *.airbnb.com.sg *.airbnb.com.sv *.airbnb.com.tr *.airbnb.com.tw *.airbnb.com.ua *.airbnb.com.vn *.airbnb.cz *.airbnb.de *.airbnb.dk *.airbnb.es *.airbnb.fi *.airbnb.fr *.airbnb.gr *.airbnb.gy *.airbnb.hu *.airbnb.ie *.airbnb.is *.airbnb.it *.airbnb.jp *.airbnb.lt *.airbnb.lu *.airbnb.lv *.airbnb.me *.airbnb.mx *.airbnb.nl *.airbnb.no *.airbnb.pl *.airbnb.pt *.airbnb.rs *.airbnb.ru *.airbnb.se *.airbnb.si https://embedded.smartmedialabs.io/ https://embedded.smtwallet.app/ *.x.com;form-action 'self' https://tr.snapchat.com/ https://www.facebook.com/;base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';upgrade-insecure-requests 2 default-src https: blob: ; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' ; img-src https: data: ; media-src blob: https: ; upgrade-insecure-requests; block-all-mixed-content; connect-src https: wss://*.insurads.com wss://*.statscore.com wss://coral.sapo.pt; 2 upgrade-insecure-requests; frame-ancestors 'self'; report-uri https://www.argos.co.uk/logging-api/2/security 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://tabor.ru http://tabor.ru *.tabor.ru tabor.ru m.tabor.ru http://m.tabor.ru https://m.tabor.ru http: vk.com *.vk.com vk.me *.vk.me vk.me *.vk.me fbcdn.net *.fbcdn.net akamaihd.net *.akamaihd.net mycdn.me *.mycdn.me yandex.ru *.yandex.ru yadro.ru *.yadro.ru https: vk.com *.vk.com vk.me *.vk.me vk.me *.vk.me fbcdn.net *.fbcdn.net akamaihd.net *.akamaihd.net mycdn.me *.mycdn.me yandex.ru *.yandex.ru yadro.ru *.yadro.ru; img-src * 'self' blob: data:; connect-src * 'self' file: data: blob: filesystem:; frame-ancestors *.tabor.ru *.tabor.by *.tab33.com *.tabor.kz *.mintapp.org; 2 default-src 'self' *.kernel.org; img-src https: data: 2 frame-ancestors 'self' https://*.trontv.com https://rainberrytv.com; 2 default-src 'self' blob: wss: data: https:; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https:; style-src 'self' 'unsafe-inline' data: https:; 2 frame-ancestors 'self' v8.1c.ru metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr webvisor.com; script-src 'self' 1c.ru *.1c.ru mc.yandex.ru www.google-analytics.com www.google.com www.gstatic.com api-maps.yandex.ru yastatic.net *.maps.yandex.net vk.com code.jquery.com yandex.st app.chaport.com app.chaport.ru appcdn.chaport.ru call.chatra.io cdn-ru.bitrix24.ru 1csoft.bitrix24.ru www.googletagmanager.com www.youtube.com smartcaptcha.yandexcloud.net 'unsafe-inline' 'unsafe-eval'; 2 frame-ancestors 'self' http://*.almamedia.net https://*.almamedia.net https://app.powerbi.com 2 default-src 'self' akm-img-a-in.tosshub.com ads.pubmatic.com mab.chartbeat.com pagead2.googlesyndication.com recengine.aajtak.in https://embed.aajtak.in https://trc.taboola.com analytics.google.com feeds.aajtak.in adblock-tester.com securepubads.g.doubleclick.net c.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; font-src 'self' https://stackpath.bootstrapcdn.com akm-img-a-in.tosshub.com fonts.gstatic.com 'unsafe-inline' data:; script-src * blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; style-src 'self' * https://www.aajtak.in fonts.googleapis.com akm-img-a-in.tosshub.com instore-tosshub-com.s3.ap-south-1.amazonaws.com https://vidstat.taboola.com 'unsafe-inline'; frame-src *; media-src * blob: data:; connect-src * 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-inline' * blob:; 2 frame-src 'self' https://www.google.com https://www.youtube.com; 2 default-src 'self' *.gov.in *.digilocker.gov.in *.dl6.in *.digitallocker.gov.in *.api-setu.in *.apisetu.gov.in *.mybharat.gov.in *.myscheme.in *.wcd.gov.in *.youtube.com data:;connect-src 'self' *.gov.in *.digilocker.gov.in *.dl6.in *.digitallocker.gov.in *.api-setu.in *.apisetu.gov.in *.mybharat.gov.in *.myscheme.in *.wcd.gov.in *.youtube.com *.ux4g.gov.in data:;script-src 'self' 'unsafe-eval' *.gov.in *.digilocker.gov.in *.dl6.in *.digitallocker.gov.in *.api-setu.in *.apisetu.gov.in *.mybharat.gov.in *.myscheme.in *.wcd.gov.in *.ux4g.gov.in;style-src 'self' 'unsafe-inline' *.gov.in *.digilocker.gov.in *.dl6.in *.digitallocker.gov.in *.api-setu.in *.apisetu.gov.in *.mybharat.gov.in *.myscheme.in *.wcd.gov.in *.ux4g.gov.in;object-src 'self' data:;frame-src 'self' docs.google.com *.youtube.com *.youtube-nocookie.com *.gov.in *.digilocker.gov.in *.dl6.in *.digitallocker.gov.in *.api-setu.in *.apisetu.gov.in *.mybharat.gov.in *.myscheme.in *.wcd.gov.in *.ux4g.gov.in app.powerbi.com data:;frame-ancestors 'self' docs.google.com *.youtube.com *.youtube-nocookie.com *.gov.in *.digilocker.gov.in *.dl6.in *.digitallocker.gov.in *.api-setu.in *.apisetu.gov.in *.mybharat.gov.in *.myscheme.in *.wcd.gov.in app.powerbi.com data:; 2 frame-ancestors 'self' https://*.adroll.com https://app.mutinyhq.com; 2 frame-ancestors 'self' *.bbb.org 2 base-uri 'self'; connect-src * blob: data: *.crazyegg.com ; default-src 'self' *.meetup.com *.dev.meetup.com:8001 www.sjwoe.com *.crazyegg.com blob: ; font-src * data:; frame-ancestors 'self'; frame-src *; img-src * data: blob: *.crazyegg.com ;media-src *.meetup.com *.dev.meetup.com:8001 https://secure.meetupstatic.com www.sjwoe.com *.sendbird.com https://sendbird-us-3.s3.amazonaws.com; script-src * 'unsafe-eval' 'unsafe-inline' *.crazyegg.com; style-src * 'unsafe-inline' *.crazyegg.com ; object-src 'none' 2 default-src 'self' data: blob: *.mega.co.nz *.mega.nz *.mega.io http://*.mega.co.nz http://*.mega.nz http://*.mega.io wss://*.mega.co.nz wss://*.karere.mega.nz *.karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342; script-src 'self' 'wasm-unsafe-eval' *.mega.co.nz *.mega.nz *.mega.io data: blob:; style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz *.mega.io data: blob:; frame-src 'self' *.megapay.nz ad.mega.nz mega: *.megaad.nz https://mega.nz/ https://mega.io/; img-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob: mega.nz; connect-src 'self' *.mega.co.nz *.mega.nz *.mega.io *.megas4.com http://*.mega.co.nz http://*.mega.nz http://*.mega.io wss://*.mega.co.nz wss://*.karere.mega.nz *.karere.mega.nz:1380 blob: http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342 2 frame-ancestors 'self' https://*.sweb.ru https://webvisor.com http://webvisor.com ; 2 frame-ancestors https://www.evernote.com https://evernote.com https://stage.evernote.com https://app.preprod3.evernote.com https://evernote.prismic.io/ 'self' 2 default-src https://*.peacocktv.com; form-action https://*.force.com https://*.my.salesforce.com https://*.salesforce-sites.com https://tr.snapchat.com https://*.qualtrics.com https://*.paypal.com; font-src 'self' data: https://*.peacocktv.com https://braze-images.com https://*.optimizely.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.peacocktv.com https://core.spreedly.com https://browser.sentry-cdn.com https://*.salesforceliveagent.com https://*.force.com https://*.my.salesforce.com https://*.salesforce-sites.com https://*.optimizely.com https://nbcstreaming.sc.omtrdc.net https://connect.facebook.net https://static.ads-twitter.com https://analytics.twitter.com https://assets.adobedtm.com https://js.createsend1.com https://www.googletagmanager.com https://nbcuss.demdex.net https://jssdkcdns.mparticle.com https://www.google.com https://googleads.g.doubleclick.net https://platform.twitter.com https://www.googleadservices.com https://www.google-analytics.com https://t.contentsquare.net https://s.pinimg.com https://sc-static.net https://www.redditstatic.com https://analytics.tiktok.com https://pixelb.randi.adswizz.com https://imp.i305175.net https://www.ojrq.net https://logs-01.loggly.com https://peacock.sjv.io https://s0.ipstatp.com https://d.impactradius-event.com https://bid.g.doubleclick.net https://wsdk.rokt.com https://apps.rokt.com https://js.adsrvr.org https://insight.adsrvr.org https://cdn.cookielaw.org https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://bat.bing.com https://*.onetrust.com https://s.yimg.com https://sp.analytics.yahoo.com https://*.amazon-adsystem.com https://apps.rokt.com https://p.teads.tv https://a.teads.tv https://s8t.teads.tv https://tr.snapchat.com https://www.paypal.com https://www.clarity.ms https://ct.pinterest.com https://*.qualtrics.com https://www.youtube.com https://content.zenimpact.io https://hub2.zenimpact.io https://insight-api-kgw.zenimpact.io https://cys26963.jscrambler.com https://d-code.liadm.com https://idx.liadm.com https://edge.fullstory.com https://rs.fullstory.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https://*.ada.support https://applepay.cdn-apple.com; connect-src 'self' localhost:* ws://localhost:* https://*.campaign.adobe.com https://*.peacocktv.com https://core.spreedly.com https://*.force.com https://*.salesforce.com https://*.my.salesforce.com https://*.salesforce-sites.com https://graph.facebook.com https://nbcuss.demdex.net https://*.mparticle.com https://createsend.com https://www.createsend.com https://www.facebook.com https://*.ott.sky.com https://sas-apm-prod.telemetry.nbcuott.com https://0d15692193ba43a8a9384fed500b3a1d.apm.us-east-1.aws.cloud.es.io https://sdk.iad-03.appboy.com https://sdk.iad-03.braze.com https://rest.iad-03.braze.com https://*.contentsquare.net https://*.optimizely.com wss://*.optimizely.com https://ct.pinterest.com https://nbcstreaming.sc.omtrdc.net https://analytics.tiktok.com https://cdn.cookielaw.org https://*.onetrust.com https://bat.bing.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-us.adyen.com https://tr.snapchat.com https://www.google-analytics.com https://imp.i305175.net https://analytics.twitter.com https://dpm.demdex.net https://ad.doubleclick.net https://s.yimg.com https://sp.analytics.yahoo.com https://*.amazon-adsystem.com https://t.teads.tv https://cm.teads.tv https://*.paypal.com https://api.ipify.org https://www.redditstatic.com https://analytics.pangle-ads.com https://*.analytics.google.com https://stats.g.doubleclick.net https://tr6.snapchat.com https://*.clarity.ms https://*.qualtrics.com https://subscriber-incentives.pickaxe.ai https://content.zenimpact.io https://hub2.zenimpact.io https://idx.liadm.com https://rp.liadm.com https://rp4.liadm.com https://insight-api-kgw.zenimpact.io https://cys26963.jscrambler.com https://nbcu-ds-svr-side-tag-dev-001.ue.r.appspot.com https://edge.fullstory.com https://rs.fullstory.com https://browser-intake-datadoghq.com https://ara.paa-reporting-advertising.amazon https://www.google.com https://*.ravelin.click https://*.ada.support; img-src 'self' data: localhost:* blob: https://peacocktv.com https://*.peacocktv.com https://t.co https://www.facebook.com https://nbcstreaming.sc.omtrdc.net https://www.google.com https://www.google.co.uk https://us-gmtdmp.mookie1.com https://www.google-analytics.com https://*.contentsquare.net https://stats.g.doubleclick.net https://s.pinimg.com https://sc-static.net https://www.redditstatic.com https://analytics.tiktok.com https://pixelb.randi.adswizz.com https://imp.i305175.net https://www.ojrq.net https://logs-01.loggly.com https://peacock.sjv.io https://d.agkn.com https://s0.ipstatp.com https://alb.reddit.com https://ct.pinterest.com https://business.topbuzz.com https://bid.g.doubleclick.net https://wsdk.rokt.com https://apps.rokt.com https://js.adsrvr.org https://insight.adsrvr.org https://cdn.cookielaw.org https://bat.bing.com https://*.adyen.com https://*.onetrust.com https://analytics.twitter.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://s.yimg.com https://sp.analytics.yahoo.com https://roost.nbcuni.com https://*.amazon-adsystem.com https://t.teads.tv https://cm.teads.tv https://a.teads.tv https://s8t.teads.tv https://www.paypalobjects.com https://*.scene7.com https://ad.doubleclick.net https://cm.everesttech.net https://*.qualtrics.com https://content.zenimpact.io https://hub2.zenimpact.io https://rp.liadm.com https://rp4.liadm.com https://cnv.event.prod.bidr.io https://rs.fullstory.com https://www.googletagmanager.com https://dpm.demdex.net https://cdn.optimizely.com https://braze-images.com https://*.ada.support https://applepay.cdn-apple.com; style-src 'self' 'unsafe-inline' https://*.peacocktv.com https://*.force.com https://*.salesforce-sites.com https://*.my.salesforce.com https://cdn.cookielaw.org https://*.onetrust.com https://content.zenimpact.io https://hub2.zenimpact.io https://*.optimizely.com https://*.ada.support; media-src 'self' data: blob: localhost:* https://peacocktv.com https://*.peacocktv.com https://roost.nbcuni.com https://content.zenimpact.io https://hub2.zenimpact.io; frame-src https://core.spreedly.com https://www.peacocktv.com/sas-3dsecure https://*.peacocktv.com https://nbcuss.demdex.net https://*.force.com https://*.my.salesforce.com https://*.salesforce-sites.com https://tr.snapchat.com https://*.fls.doubleclick.net https://td.doubleclick.net https://imp.i305175.net https://bid.g.doubleclick.net https://wsdk.rokt.com https://apps.rokt.com https://js.adsrvr.org https://insight.adsrvr.org https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://peacockprincess22.creativezing.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-us.adyen.com https://tr6.snapchat.com https://pinterest.com http://ct.pinterest.com https://match.adsrvr.org https://*.amazon-adsystem.com https://apps.rokt.com https://p.teads.tv https://a.teads.tv https://www.youtube.com https://*.paypal.com https://*.optimizely.com https://*.qualtrics.com https://open.spotify.com https://content.zenimpact.io https://hub2.zenimpact.io https://www.googletagmanager.com https://a18154240447.cdn.optimizely.com https://a18154240447.cdn-pci.optimizely.com https://*.ada.support https://applepay.cdn-apple.com; block-all-mixed-content; upgrade-insecure-requests; 2 frame-ancestors https://*.mintegral.com 2 frame-ancestors 'self' https://*.shopify.com https://*.myshopify.com 2 frame-ancestors 'none'; default-src https: data: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.scip.es *.paypal.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.osano.com https://*.posthog.com https://*.i.posthog.com https://scout-cdn.salesloft.com https://snap.licdn.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.hsforms.com https://*.inkeep.com https://*.linkedin.com https://*.osano.com https://*.posthog.com https://*.i.posthog.com https://*.segment.com https://*.segment.io https://api.unifyintent.com https://api.ashbyhq.com https://cdn.growthbook.io https://cdn.sanity.io https://hubspot-forms-static-embed.s3.amazonaws.com https://pagead2.googlesyndication.com https://scout.salesloft.com https://translate.googleapis.com; worker-src 'self' blob: https://*.osano.com; report-uri https://render.report-uri.com/r/t/csp/reportOnly; report-to wizard; 2 frame-ancestors 'self' https://afiliados.locaweb.com.br 2 upgrade-insecure-requests;frame-ancestors 'self' slate.com *.slate.com *.my.slate.com 2 frame-ancestors 'self' http://*.schwab.com https://*.schwab.com https://content.schwab.com https://client.schwab.com https://www.schwabcdn.com https://*.schwabinstitutional.com https://*.dev-schwab.acsitefactory.com https://*.test-schwab.acsitefactory.com https://*.train-schwab.acsitefactory.com https://*.schwab.acsitefactory.com https://*.schwab.co.uk https://*.schwab.com.hk https://*.schwab.com.sg https://*.schwab.com.au https://*.schwabcharitable.org https://*.schwabmoneywise.com https://*.schwabtrustbankcollectives.com 2 connect-src gmx.net *.gmx.net *.adition.com *.mam.dev *.netid.de *.server.lan *.ui-portal.de *.uicdn.com *.uimserv.net united-infos.net; style-src 'unsafe-inline' gmx.net *.gmx.net *.ui-portal.de *.uicdn.com *.gmx.net; script-src 'unsafe-inline' 'unsafe-eval' gmx.net *.gmx.net *.ui-portal.de *.uicdn.com *.uimserv.net united-infos.net; object-src 'none'; form-action *.gmx.at *.gmx.ch gmx.net *.gmx.net; frame-src *.gmx.at *.gmx.ch gmx.net *.gmx.net *.ergebnis-dienst.de *.ui-portal.de *.uimserv.net united-infos.net *.nativendo.de; sandbox allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts allow-top-navigation-by-user-activation; frame-ancestors 'self' www.united-internet-media.de adimg.uimserv.net advideo.uimserv.net; img-src * data:; default-src 'self'; font-src data: *.ui-portal.de 2 default-src 'none'; connect-src 'self' https://admin.hostpoint.ch https://hostpoint-static.ch https://*.google-analytics.com https://*.analytics.google.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.g.doubleclick.net https://www.googleadservices.com https://google.com https://ad.doubleclick.net https://*.google.com https://*.google.ch https://*.google.at https://*.google.de https://*.google.fr https://*.google.it https://*.google.li https://*.googleapis.com https://*.gstatic.com https://www.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://bat.bing.com https://*.clarity.ms https://hostpointag.recruitee.com https://analytics.twitter.com https://t.co https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com; font-src 'self' https://fonts.gstatic.com https://*.hotjar.com; form-action 'self' https://admin.hostpoint.ch https://www.facebook.com; frame-ancestors 'self' https://www.jobs.ch; frame-src 'self' https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://maps.google.com https://www.google.com https://www.facebook.com bytedance: sslocal:; img-src 'self' data: https://banner.hostpoint.ch https://hostpoint-static.ch https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ch https://*.google.at https://*.google.de https://*.google.fr https://*.google.it https://*.google.li https://*.fls.doubleclick.net https://ad.doubleclick.net https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://google.com https://www.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://www.facebook.com https://*.hotjar.com https://*.ads.linkedin.com https://bat.bing.com https://analytics.twitter.com https://t.co https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com; media-src 'self' https://hostpoint-static.ch; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.google-analytics.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://connect.facebook.net https://*.hotjar.com https://px.ads.linkedin.com https://snap.licdn.com https://www.linkedin.com https://sjs.bizographics.com https://bat.bing.com https://*.clarity.ms https://analytics.twitter.com https://static.ads-twitter.com https://twitter.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://*.hotjar.com; block-all-mixed-content; report-uri https://hostpoint.uriports.com/reports/report; report-to default; 2 default-src 'none'; script-src 'self' cdn.robinhood.com cdn.pdst.fm/ping.min.js 'unsafe-inline' *.google-analytics.com *.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ tagmanager.google.com connect.facebook.net sc-static.net d.impactradius-event.com www.redditstatic.com analytics.tiktok.com boards.greenhouse.io bat.bing.com www.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com web-sdk-cdn.singular.net/singular-gtm-interface/latest/singular-gtm-interface.js web-sdk-cdn.singular.net/singular-sdk/latest/singular-sdk.js static.ads-twitter.com s.yimg.com *.usercentrics.eu snap.licdn.com collector-47804.us.tvsquared.com/tv2track.js js.stripe.com 'wasm-unsafe-eval' https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js ; worker-src 'self' blob: ; frame-src www.google.com/recaptcha/ www.youtube.com/iframe_api/ www.youtube.com/embed/ www.googletagmanager.com boards.greenhouse.io tr6.snapchat.com tr.snapchat.com fcm.quick1fr.com js.stripe.com *.usercentrics.eu https://preview.widgets.ninetailed.io/ https://*.fls.doubleclick.net/ https://widget.trustpilot.com ; style-src 'self' 'unsafe-inline' cdn.robinhood.com tagmanager.google.com fonts.googleapis.com ; font-src 'self' cdn.robinhood.com js.stripe.com data: ; media-src 'self' cdn.robinhood.com *.usercentrics.eu videos.ctfassets.net/ilblxxee70tt/ videos.ctfassets.net/1hpl803w8xsv/ data: ; img-src 'self' images.robinhood.com px4.ads.linkedin.com cdn.robinhood.com *.google-analytics.com *.g.doubleclick.net i.ytimg.com/vi/ images.ctfassets.net downloads.ctfassets.net *.googletagmanager.com ssl.gstatic.com www.gstatic.com www.facebook.com www.google.com google.com pagead2.googlesyndication.com www.google.ca www.google.co.uk www.google.de www.google.fr www.google.es www.google.it www.google.nl www.google.be www.google.at www.google.ie www.google.pt www.google.pl www.google.se www.google.dk www.google.fi www.google.com.au www.google.co.jp www.googleadservices.com ade.googlesyndication.com adservice.google.com tr.snapchat.com tr6.snapchat.com bat.bing.com ad.doubleclick.net pixel.pointmediatracker.com cnv.event.prod.bidr.io/log/cnv data: alb.reddit.com analytics.twitter.com t.co sp.analytics.yahoo.com *.usercentrics.eu cdn.blisspointmedia.com/assets/img/ px.ads.linkedin.com collector-47804.us.tvsquared.com/tv2track.php images.ctfassets.net/ilblxxee70tt/ images.ctfassets.net/1hpl803w8xsv/ https://lh7-us.googleusercontent.com https://lh7-rt.googleusercontent.com blob: ; frame-ancestors 'self' https://app.contentful.com ; manifest-src 'self' cdn.robinhood.com ; connect-src 'self' robinhood.com *.robinhood.com *.x1creditcard.com *.apollo.rhinternal.net *.staging.rhinternal.net ak.sail-horizon.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net bat.bing.com/actionp/ bat.bing.com/p/conversions/ us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink sentry.io o62437.ingest.sentry.io *.googletagmanager.com tagmanager.google.com www.google.com/ccm/collect www.google.com/gmp/conversion www.google.com/pagead/1p-conversion/ www.google.com/rmkt/collect/ www.google.com/recaptcha/ www.googleadservices.com/pagead/conversion/ google.com pagead2.googlesyndication.com www.google.ca www.google.co.uk www.google.de www.google.fr www.google.es www.google.it www.google.nl www.google.be www.google.at www.google.ie www.google.pt www.google.pl www.google.se www.google.dk www.google.fi www.google.com.au www.google.co.jp www.facebook.com/privacy_sandbox/topics/registration/ ad.doubleclick.net www.redditstatic.com/ads/conversions-config/v1/pixel/config/ pixel-config.reddit.com/pixels/ conversions-config.reddit.com/v1/pixel/ analytics.tiktok.com sdk-api-v1.singular.net/api/v1/event boards-api.greenhouse.io preview.contentful.com cdn.contentful.com experience.ninetailed.co s.yimg.com *.usercentrics.eu api.instagram.com/ px.ads.linkedin.com assets.ctfassets.net/ilblxxee70tt/ assets.ctfassets.net/1hpl803w8xsv/ https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js.map https://ingest.insights.ninetailed.co js.stripe.com ; upgrade-insecure-requests; block-all-mixed-content; report-uri https://o62437.ingest.sentry.io/api/1336410/security/?sentry_key=dadc326d25814a55b5486cb04f439a29; base-uri 'self' 2 frame-ancestors 'self' *.adobe.com; default-src blob: https: data: *.sprinklr.com wss://*.sprinklr.com *.liveperson.net wss://*.liveperson.net 'unsafe-inline' 'unsafe-eval'; 2 default-src 'self'; font-src 'self' data: *.raif.v305.tmphost.ru cdn.megabonus.com fonts.gstatic.com kaplife.ru *.kaplife.ru raiffeisen-capital.ru *.raiffeisen-capital.ru raiffeisen-life.ru *.raiffeisen-life.ru raiffeisen-media.ru *.raiffeisen-media.ru raiffeisen.ru *.raiffeisen.ru rbinternational.com *.rbinternational.com www.gstatic.com yastatic.net; style-src 'self' 'unsafe-inline' *.raif.v305.tmphost.ru cdn.jsdelivr.net kaplife.ru *.kaplife.ru raiffeisen-capital.ru *.raiffeisen-capital.ru raiffeisen-life.ru *.raiffeisen-life.ru raiffeisen-media.ru *.raiffeisen-media.ru raiffeisen.ru *.raiffeisen.ru rbinternational.com *.rbinternational.com www.gstatic.com yastatic.net *.yastatic.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.insapp.ru *.kaspersky-labs.com widget.oval.life polyfill.io code.jquery.com edge.fullstory.com connect.facebook.net *.googleoptimize.com *.tmweb.ru unpkg.com platform.twitter.com *.rutarget.ru *.hybrid.ai snap.licdn.com *.kirarock.space *.mail.ru *.raif.v305.tmphost.ru *.vk.com *.yandexcloud.net analytics.tiktok.com cdn.jsdelivr.net google-analytics.com *.google-analytics.com google.com *.google.com kaplife.ru *.kaplife.ru raiffeisen-capital.ru *.raiffeisen-capital.ru raiffeisen-life.ru *.raiffeisen-life.ru raiffeisen-media.ru *.raiffeisen-media.ru raiffeisen.agentapp.ru raiffeisen.ru *.raiffeisen.ru rbinternational.com *.rbinternational.com ru.id.facct.ru ru.id.group-ib.com statad.ru vk.com www.googletagmanager.com www.gstatic.com yandex.ru *.yandex.ru *.yandex.com *.yandex.by *.yandex.md *.yandex.kz *.yandex.net yastatic.net yastatic.net *.yastatic.net; frame-src *.doubleclick.net *.insapp.ru *.raif.v305.tmphost.ru *.vk.com *.yandexcloud.net captcha-api.yandex.ru google.com *.google.com kaplife.ru *.kaplife.ru mc.yandex.ru raiffeisen-life.ru *.raiffeisen-life.ru raiffeisen.agentapp.ru raiffeisen.ru *.raiffeisen.ru ru.id.facct.ru ru.id.group-ib.com sync.1dmp.io vk.com zettains.ru securepaymentway.ru *.sbrf.ru securepaymentgateway.ru securecardpayment.ru *.sberbank.ru mafin.ru raif.ponimau.com www.youtube.com; connect-src 'self' *.doubleclick.net *.insapp.ru *.kirarock.space *.mail.ru *.trackjs.com *.upravel.com *.vk.com analytics.tiktok.com dadata.ru *.dadata.ru google-analytics.com *.google-analytics.com kaplife.ru *.kaplife.ru lottiefiles.com *.lottiefiles.com mc.yandex.ru raiffeisen-capital.ru *.raiffeisen-capital.ru raiffeisen-life.ru *.raiffeisen-life.ru raiffeisen-media.ru *.raiffeisen-media.ru raiffeisen.ru *.raiffeisen.ru rbinternational.com *.rbinternational.com ru.id.facct.ru vk.com wss://*.raiffeisen.ru raiffeisen.cpeople.ru sentry.b2bpolis.ru sbbe.group-ib.ru *.fp.kaspersky-labs.com *.amplitude.com ymetrica1.com wss://mc.yandex.ru www.googletagmanager.com yandex.ru *.yandex.ru *.yandex.com *.yandex.by *.yandex.md *.yandex.kz *.yandex.net; img-src 'self' blob: data: *.mail.ru *.trackjs.com *.upravel.com *.vk.com google-analytics.com *.google-analytics.com kaplife.ru *.kaplife.ru lottiefiles.com *.lottiefiles.com raiffeisen-capital.ru *.raiffeisen-capital.ru raiffeisen-life.ru *.raiffeisen-life.ru raiffeisen-media.ru *.raiffeisen-media.ru raiffeisen.ru *.raiffeisen.ru rbinternational.com *.rbinternational.com statad.ru sync.1dmp.io vk.com www.google.com www.google.ru *.google.com.tr www.gstatic.com www.welldonecode.com proxy-block.raiffeisen.ru:8002 hit.acstat.com yandex.ru *.yandex.ru *.yandex.com *.yandex.by *.yandex.md *.yandex.kz *.yandex.net yastatic.net *.yastatic.net; media-src blob: data: audiocdn.lingualeo.com api.lingvolive.com raiffeisen.ru *.raiffeisen.ru; form-action 'self'; frame-ancestors 'self' raiffeisen.ru *.raiffeisen.ru; 2 default-src 'self' 'unsafe-inline' rudderstack.com *.rudderstack.com rs-temp-landing-pages.vercel.app *.rs-temp-landing-pages.vercel.app bugsnag.com *.bugsnag.com usebasin.com *.usebasin.com sanity.io *.sanity.io www.sanity.io *.www.sanity.io rudderstack.sanity.studio *.rudderstack.sanity.studio arcade.software *.arcade.software demo.arcade.software *.demo.arcade.software youtube.com *.youtube.com algolianet.com *.algolianet.com algolia.net *.algolia.net run.app *.run.app google.com *.google.com google-analytics.com *.google-analytics.com pusher.com *.pusher.com jsdelivr.net *.jsdelivr.net adnxs.com *.adnxs.com reddit.com *.reddit.com redditstatic.com *.redditstatic.com qualified.com *.qualified.com 6sc.co *.6sc.co g2.com *.g2.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com githubusercontent.com *.githubusercontent.com t.co *.t.co twitter.com *.twitter.com vercel.com *.vercel.com vercel.live *.vercel.live hotjar.com *.hotjar.com hotjar.io *.hotjar.io speedcurve.com *.speedcurve.com ytimg.com *.ytimg.com fontawesome.com *.fontawesome.com wss://ws.hotjar.com wss://ws-us3.pusher.com wss://ws.qualified.com website-files.com *.website-files.com img.shields.io *.img.shields.io hex.tech *.hex.tech linkedin.com *.linkedin.com hockeystack.com *.hockeystack.com clarity.ms *.clarity.ms assets.calendly.com *.assets.calendly.com quora.com *.quora.com q.quora.com *.q.quora.com bat.bing.net *.bat.bing.net posthog.com *.posthog.com i.posthog.com *.i.posthog.com us-assets.i.posthog.com *.us-assets.i.posthog.com getseam.ai *.getseam.ai api.cr-relay.com *.api.cr-relay.com ip-api.com *.ip-api.com api.vector.co *.api.vector.co mutinyhq.com *.mutinyhq.com mutinyhq.io *.mutinyhq.io mutinycdn.com *.mutinycdn.com claydar.com *.claydar.com ketch.com *.ketch.com ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com sy-d.io *.sy-d.io snitcher.com *.snitcher.com blob: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' rudderstack.com *.rudderstack.com rs-temp-landing-pages.vercel.app *.rs-temp-landing-pages.vercel.app jsdelivr.net *.jsdelivr.net rudderlabs.com *.rudderlabs.com vercel-scripts.com *.vercel-scripts.com licdn.com *.licdn.com ads-twitter.com *.ads-twitter.com cloudfront.net *.cloudfront.net googletagmanager.com *.googletagmanager.com bing.com *.bing.com quora.com *.quora.com google.com *.google.com google-analytics.com *.google-analytics.com clarity.ms *.clarity.ms doubleclick.net *.doubleclick.net bugsnag.com *.bugsnag.com jquery.com *.jquery.com kapa.ai *.kapa.ai skypack.dev *.skypack.dev g2crowd.com *.g2crowd.com adnxs.com *.adnxs.com qualified.com *.qualified.com 6sc.co *.6sc.co redditstatic.com *.redditstatic.com vercel.live *.vercel.live gstatic.com *.gstatic.com hotjar.com *.hotjar.com fullstory.com *.fullstory.com speedcurve.com *.speedcurve.com googleapis.com *.googleapis.com clarity.ms *.clarity.ms calendly.com *.calendly.com youtube.com *.youtube.com demo.arcade.software *.demo.arcade.software usebasin.com *.usebasin.com hackerone.com *.hackerone.com posthog.com *.posthog.com i.posthog.com *.i.posthog.com us-assets.i.posthog.com *.us-assets.i.posthog.com seamintent.ai *.seamintent.ai cr-relay.com *.cr-relay.com vector.co *.vector.co liadm.com *.liadm.com mutinyhq.com *.mutinyhq.com mutinyhq.io *.mutinyhq.io mutinycdn.com *.mutinycdn.com claydar.com *.claydar.com ketch.com *.ketch.com ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com sy-d.io *.sy-d.io snitcher.com *.snitcher.com; connect-src 'self' rudderstack.com *.rudderstack.com rs-temp-landing-pages.vercel.app *.rs-temp-landing-pages.vercel.app bugsnag.com *.bugsnag.com usebasin.com *.usebasin.com sanity.io *.sanity.io www.sanity.io *.www.sanity.io rudderstack.sanity.studio *.rudderstack.sanity.studio arcade.software *.arcade.software demo.arcade.software *.demo.arcade.software youtube.com *.youtube.com algolianet.com *.algolianet.com algolia.net *.algolia.net run.app *.run.app google.com *.google.com google-analytics.com *.google-analytics.com pusher.com *.pusher.com jsdelivr.net *.jsdelivr.net adnxs.com *.adnxs.com reddit.com *.reddit.com redditstatic.com *.redditstatic.com qualified.com *.qualified.com 6sc.co *.6sc.co g2.com *.g2.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com githubusercontent.com *.githubusercontent.com t.co *.t.co twitter.com *.twitter.com vercel.com *.vercel.com vercel.live *.vercel.live hotjar.com *.hotjar.com hotjar.io *.hotjar.io speedcurve.com *.speedcurve.com ytimg.com *.ytimg.com fontawesome.com *.fontawesome.com wss://ws.hotjar.com wss://ws-us3.pusher.com wss://ws.qualified.com website-files.com *.website-files.com img.shields.io *.img.shields.io hex.tech *.hex.tech linkedin.com *.linkedin.com hockeystack.com *.hockeystack.com clarity.ms *.clarity.ms assets.calendly.com *.assets.calendly.com quora.com *.quora.com q.quora.com *.q.quora.com bat.bing.net *.bat.bing.net posthog.com *.posthog.com i.posthog.com *.i.posthog.com us-assets.i.posthog.com *.us-assets.i.posthog.com getseam.ai *.getseam.ai api.cr-relay.com *.api.cr-relay.com ip-api.com *.ip-api.com api.vector.co *.api.vector.co mutinyhq.com *.mutinyhq.com mutinyhq.io *.mutinyhq.io mutinycdn.com *.mutinycdn.com claydar.com *.claydar.com ketch.com *.ketch.com ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com sy-d.io *.sy-d.io snitcher.com *.snitcher.com rs-temp-landing-pages.vercel.app *.rs-temp-landing-pages.vercel.app jsdelivr.net *.jsdelivr.net rudderlabs.com *.rudderlabs.com vercel-scripts.com *.vercel-scripts.com licdn.com *.licdn.com ads-twitter.com *.ads-twitter.com cloudfront.net *.cloudfront.net googletagmanager.com *.googletagmanager.com bing.com *.bing.com quora.com *.quora.com google.com *.google.com google-analytics.com *.google-analytics.com clarity.ms *.clarity.ms doubleclick.net *.doubleclick.net bugsnag.com *.bugsnag.com jquery.com *.jquery.com kapa.ai *.kapa.ai skypack.dev *.skypack.dev g2crowd.com *.g2crowd.com adnxs.com *.adnxs.com qualified.com *.qualified.com 6sc.co *.6sc.co redditstatic.com *.redditstatic.com vercel.live *.vercel.live gstatic.com *.gstatic.com hotjar.com *.hotjar.com fullstory.com *.fullstory.com speedcurve.com *.speedcurve.com googleapis.com *.googleapis.com clarity.ms *.clarity.ms calendly.com *.calendly.com youtube.com *.youtube.com demo.arcade.software *.demo.arcade.software usebasin.com *.usebasin.com hackerone.com *.hackerone.com posthog.com *.posthog.com i.posthog.com *.i.posthog.com us-assets.i.posthog.com *.us-assets.i.posthog.com seamintent.ai *.seamintent.ai cr-relay.com *.cr-relay.com vector.co *.vector.co liadm.com *.liadm.com mutinyhq.com *.mutinyhq.com mutinyhq.io *.mutinyhq.io mutinycdn.com *.mutinycdn.com claydar.com *.claydar.com ketch.com *.ketch.com ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com sy-d.io *.sy-d.io snitcher.com *.snitcher.com https: http:; frame-src 'self' rudderstack.com *.rudderstack.com rs-temp-landing-pages.vercel.app *.rs-temp-landing-pages.vercel.app jsdelivr.net *.jsdelivr.net rudderlabs.com *.rudderlabs.com vercel-scripts.com *.vercel-scripts.com licdn.com *.licdn.com ads-twitter.com *.ads-twitter.com cloudfront.net *.cloudfront.net googletagmanager.com *.googletagmanager.com bing.com *.bing.com quora.com *.quora.com google.com *.google.com google-analytics.com *.google-analytics.com clarity.ms *.clarity.ms doubleclick.net *.doubleclick.net bugsnag.com *.bugsnag.com jquery.com *.jquery.com kapa.ai *.kapa.ai skypack.dev *.skypack.dev g2crowd.com *.g2crowd.com adnxs.com *.adnxs.com qualified.com *.qualified.com 6sc.co *.6sc.co redditstatic.com *.redditstatic.com vercel.live *.vercel.live gstatic.com *.gstatic.com hotjar.com *.hotjar.com fullstory.com *.fullstory.com speedcurve.com *.speedcurve.com googleapis.com *.googleapis.com clarity.ms *.clarity.ms calendly.com *.calendly.com youtube.com *.youtube.com demo.arcade.software *.demo.arcade.software usebasin.com *.usebasin.com hackerone.com *.hackerone.com posthog.com *.posthog.com i.posthog.com *.i.posthog.com us-assets.i.posthog.com *.us-assets.i.posthog.com seamintent.ai *.seamintent.ai cr-relay.com *.cr-relay.com vector.co *.vector.co liadm.com *.liadm.com mutinyhq.com *.mutinyhq.com mutinyhq.io *.mutinyhq.io mutinycdn.com *.mutinycdn.com claydar.com *.claydar.com ketch.com *.ketch.com ketchcdn.com *.ketchcdn.com ketchjs.com *.ketchjs.com sy-d.io *.sy-d.io snitcher.com *.snitcher.com sanity.io *.sanity.io www.sanity.io *.www.sanity.io rudderstack.sanity.studio *.rudderstack.sanity.studio; img-src * http: https: blob: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' sanity.io *.sanity.io www.sanity.io *.www.sanity.io rudderstack.sanity.studio *.rudderstack.sanity.studio; upgrade-insecure-requests; 2 base-uri 'none'; form-action 'self'; img-src 'self' data:; script-src 'self'; default-src 'self'; frame-ancestors 'none' 2 default-src 'self' 'unsafe-inline' data:;;script-src 'self' 'unsafe-eval' 'unsafe-inline' players.brightcove.net vjs.zencdn.net *.contentsquare.net app.contentsquare.com;;script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' cdn.jsdelivr.net www.youtube.com snap.licdn.com siteintercept.qualtrics.com zn1ozcgbmcuc4phgv-allaccor.siteintercept.qualtrics.com cdn.cookielaw.org www.googletagmanager.com players.brightcove.net *.contentsquare.net;;style-src 'self' 'unsafe-inline' players.brightcove.net;;style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net;;img-src https: data: 'self' 'unsafe-inline' players.brightcove.net *.boltdns.net *.akamaihd.net *.contentsquare.net;;frame-src https://www.youtube-nocookie.com https://www.youtube.com https://global.frcapi.com https://www.google.com https://charts.symex.be https://players.brightcove.net https://allaccor.qualtrics.com;;connect-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.youtube.com https://px.ads.linkedin.com https://privacyportal-de.onetrust.com/ https://*.google-analytics.com https://cdn.cookielaw.org https://siteintercept.qualtrics.com https://rum-ingest.eu0.signalfx.com https://*.brightcovecdn.com https://manifest.prod.boltdns.net https://accor.symex.be https://*.algolia.net https://players.brightcove.net https://edge.api.brightcove.com *.contentsquare.net *.contentsquare.com;;media-src 'self' blob: *.brightcovecdn.com *.boltdns.net;;worker-src 'self' blob:;;child-src blob:; 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: ; style-src 'self' 'unsafe-inline' https: ; img-src 'self' blob: data: https: ; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' wss: https: ; media-src 'self' blob: data: https:; object-src 'self' blob: data:; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; frame-ancestors 'self' https://app.contentful.com https://www.google.com; frame-src 'self' https: ; ; 2 base-uri 'self'; connect-src 'self' https://api.github.com/repos/ https://api.github.com/search/issues https://gitlab.com/api/ https://analytics.python.org *.ethicalads.io https://api.pwnedpasswords.com https://cdn.jsdelivr.net/npm/mathjax@3.2.2/es5/sre/mathmaps/ https://2p66nmmycsj3.statuspage.io; default-src 'none'; font-src 'self'; form-action 'self' https://checkout.stripe.com https://billing.stripe.com; frame-ancestors 'none'; frame-src 'none'; img-src 'self' https://pypi-camo.freetls.fastly.net/ *.ethicalads.io ethicalads.blob.core.windows.net; script-src 'self' https://analytics.python.org *.ethicalads.io 'sha256-U3hKDidudIaxBDEzwGJApJgPEf2mWk6cfMWghrAa6i0=' https://cdn.jsdelivr.net/npm/mathjax@3.2.2/ 'sha256-1CldwzdEg2k1wTmf7s5RWVd7NMXI/7nxxjJM2C4DqII='; style-src 'self' *.ethicalads.io 'sha256-2YHqZokjiizkHi1Zt+6ar0XJ0OeEy/egBnlm+MDMtrM=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-JLEjeN9e5dGsz5475WyRaoA4eQOdNPxDIeUhclnJDCE=' 'sha256-mQyxHEuwZJqpxCw3SLmc4YOySNKXunyu2Oiz1r3/wAE=' 'sha256-OCf+kv5Asiwp++8PIevKBYSgnNLNUZvxAp4a7wMLuKA=' 'sha256-h5LOiLhk6wiJrGsG5ItM0KimwzWQH/yAcmoJDJL//bY=' 2 object-src 'none'; base-uri 'none'; frame-ancestors 'self' https://www.usa.philips.com https://*.philips.com https://*.usa.philips.com https://*.respirtech.com 2 frame-ancestors 'none'; font-src 'self' 2 default-src 'self' *.trafficjunky.com *.trafficjunky.net blob: ; script-src 'self' *.trafficjunky.com 'unsafe-inline' 'unsafe-eval' www.google.com www.googletagmanager.com *.gstatic.com *.pendo.io *.googleapis.com blob: unpkg.com connect.facebook.net snap.licdn.com cdn.debugbear.com *.anura.io *.redditstatic.com accounts.google.com www.googleapis.com static.trafficjunky.com ; connect-src 'self' *.trafficjunky.com mgpg2.probiller.com mgpg.stage.pbk8s.com www.facebook.com www.google.com maps.googleapis.com *.google-analytics.com *.googlesyndication.com *.linkedin.com *.pendo.io *.trafficjunky.net data.debugbear.com *.anura.io api.fpjs.io *.redditstatic.com pixel-config.reddit.com ads.reddit.com accounts.google.com www.googleapis.com ; img-src 'self' https: data: alb.reddit.com ; style-src 'self' *.trafficjunky.com 'unsafe-inline' *.googleapis.com *.pendo.io accounts.google.com ; font-src 'self' *.trafficjunky.com *.gstatic.com ; media-src 'self' https: ; frame-src 'self' *.trafficjunky.com *.trafficjunky.net static.trafficjunky.com www.google.com www.googletagmanager.com *.geekadm.net api.yoti.com www.youtube.com app.pendo.io accounts.google.com ; frame-ancestors none 2 frame-ancestors 'self' https://brightcove.prismic.io 2 base-uri 'self' *.adform.net https://cdn.justpremium.com; font-src 'self' https: data: *.taboola.com; form-action 'self'; frame-ancestors *; img-src 'self' https: data: *.testfaz.net *.faz.net *.taboola.com; object-src 'self'; script-src-attr 'unsafe-inline'; style-src https: 'unsafe-inline' 'self' *.testfaz.net *.faz.net *.taboola.com; script-src 'unsafe-inline' 'unsafe-eval' https: *; upgrade-insecure-requests; connect-src *; default-src 'self' https:; frame-src *; media-src 'self' https: data:; worker-src * blob:; 2 frame-ancestors 'self' https://*.webflow.com https://webflow.com https://app.intellimize.com; style-src 'self' 'unsafe-inline' https://webflow.com https://*.webflow.com https://d1otoma47x30pg.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://daks2k3a4ib2z.cloudfront.net https://dhygzobemt712.cloudfront.net https://accounts.google.com https://fonts.googleapis.com https://go.webflow.com https://app.pendo.io https://cdn.birdie.so https://cdn.jsdelivr.net https://cdn.pendo.io https://content-6312168775680000.static.pendo.io https://cdn.prod.website-files.com https://code-components.website-files.com https://transcend-cdn.com https://www.gstatic.com; img-src 'self' data: https://webflow.com https://*.webflow.com https://d1otoma47x30pg.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://daks2k3a4ib2z.cloudfront.net https://dhygzobemt712.cloudfront.net https://cdn.prod.website-files.com https://code-components.website-files.com https://connect.facebook.com https://*.ads.linkedin.com https://*.doubleclick.net https://www.facebook.com https://*.google.com https://webflow-assets.s3.us-east-1.amazonaws.com https://www.googleadservices.com https://www.google.ad https://www.google.ae https://www.google.al https://www.google.at https://www.google.az https://www.google.ba https://www.google.be https://www.google.bg https://www.google.bj https://www.google.by https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.za https://www.google.co.zm https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.ec https://www.google.com.eg https://www.google.com.gh https://www.google.com.hk https://www.google.com.kw https://www.google.com.mx https://www.google.com.ng https://www.google.com.np https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tj https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gl https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.kg https://www.google.kz https://www.google.lk https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.mg https://www.google.mk https://www.google.mu https://www.google.mw https://www.google.my https://www.google.nl https://www.google.no https://www.google.pe https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://www.google.tn https://webflow-assets-studio-temp-prod.s3.amazonaws.com https://*.webflow.com https://account-assets.knock.app https://alb.reddit.com https://analytics.twitter.com https://app.pendo.io https://b.6sc.co https://bat.bing.com https://bat.bing.net https://cdn.pendo.io https://content-6312168775680000.static.pendo.io https://data.pendo.io https://embed-ssl.wistia.com https://fast.wistia.com https://fonts.gstatic.com https://i.ytimg.com https://q.quora.com https://quickchart.io https://webflow.itsoffbrand.io https://www.googletagmanager.com 2 frame-ancestors 'self' https://*.tamu.edu 2 block-all-mixed-content; style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; connect-src 'self' https: data:; 2 default-src 'self'; connect-src 'self' https://*.grass.io https://*.getgrass.io https://*.ghost.io https://*.clarity.ms https://*.google-analytics.com https://*.grassfoundation.io https://*.convertexperiments.com https://*.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.clarity.ms https://*.googletagmanager.com https://*.youtube.com https://*.convertexperiments.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.net; style-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com; img-src 'self' https://cdn.jsdelivr.net https://*.ghost.io https://*.medium.com https://*.googletagmanager.com https://*.google.com https://*.google.com.ph https://*.googleusercontent.com https://*.doubleclick.net https://*.google-analytics.com https://*.pagead2.googlesyndication.com https://*.facebook.com https://i.ytimg.com blob: data:; font-src 'self' https://*.gstatic.com https://*.googleapis.com; media-src 'self' https://*.grass.io https://*.getgrass.io https://*.ghost.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; block-all-mixed-content; upgrade-insecure-requests; frame-src 'self' https://*.youtube.com https://*.convertexperiments.com https://*.googletagmanager.com; 2 frame-ancestors 'self' https://redis.io 2 upgrade-insecure-requests; block-all-mixed-content; default-src 'none'; img-src 'self'; style-src 'unsafe-inline' 'self'; form-action 'self'; frame-ancestors 'none'; require-trusted-types-for 'script'; 2 default-src 'self' *.starbucks.com *.starbucks.ca; child-src 'self' *.starbucks.com *.starbucks.ca *.doubleclick.net *.optimizely.com *.trustarc.com; connect-src 'self' *.starbucks.com *.starbucks.ca https://fonts.gstatic.com *.akamaihd.net *.akstat.io *.doubleclick.net *.go-mpulse.net *.google.com *.google-analytics.com *.googletagmanager.com *.googlevideo.com *.mparticle.com *.nr-data.net *.optimizely.com *.pinterest.com *.trustarc.com *.xg4ken.com; font-src 'self' *.starbucks.com *.starbucks.ca https://fonts.googleapis.com https://fonts.gstatic.com *.trustarc.com; img-src 'self' data: *.starbucks.com *.starbucks.ca https://*.gstatic.com *.adsrvr.org *.agkn.com *.akamaihd.net *.appcast.io *.bing.com *.doubleclick.net *.facebook.com *.ggpht.com *.google.com *.google-analytics.com *.googletagmanager.com *.mparticle.com *.nr-data.net *.pinterest.com *.snapchat.com *.trustarc.com *.truste.com *.videoamp.com *.xg4ken.com *.ytimg.com; manifest-src 'self' *.starbucks.com *.starbucks.ca; media-src 'self' blob: *.starbucks.com *.starbucks.ca *.youtube.com; frame-src 'self' *.googletagmanager.com *.optimizely.com *.trustarc.com *.youtube.com; frame-ancestors 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.starbucks.com *.starbucks.ca cdnjs.com *.appcast.io *.bing.com *.doubleclick.net *.facebook.net *.go-mpulse.net *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.mparticle.com *.optimizely.com *.pinimg.com *.sc-static.net *.snapchat.com *.trustarc.com *.xg4ken.com; style-src 'self' 'unsafe-inline' *.starbucks.com *.starbucks.ca https://fonts.googleapis.com; 2 default-src 'self' *.collegeboard.org; connect-src 'self' ws: *.collegeboard.org k625k2vrzvdo5g7ynbvtjejehi.appsync-api.us-east-1.amazonaws.com/graphql dgtkl2ep7natjmkbefhxflglie.appsync-api.us-east-1.amazonaws.com/graphql cdn.cookielaw.org geolocation.onetrust.com lambda.us-east-1.amazonaws.com bam.nr-data.net cdn.aimtell.io cognito-identity.us-east-1.amazonaws.com sts.us-east-1.amazonaws.com www.google.com privacyportal.onetrust.com apform.secure.force.com cdnm3.cdnservice.space/start5.json code.jquery.com api.trongrid.io/wallet/getnodeinfo dgtkl2ep7natjmkbefhxflglie.appsync-api.us-east-1.amazonaws.com dgtkl2ep7natjmkbefhxflglie.appsync-realtime-api.us-east-1.amazonaws.com analytics.aimtell.com sts.us-west-2.amazonaws.com cognito-identity.us-west-2.amazonaws.com d1ktxyteejjrbw.cloudfront.net full-apform.cs190.force.com yt3.ggpht.com collegeboard-full.my.salesforce.com i.ytimg.com cdn.ckeditor.com telemetry.wiris.net wiris-v7.hive-prod.collegeboard.org:80 wiris-v7.hive-nonprod.collegeboard.org:80 *.appcues.com *.appcues.net *.my.salesforce-sites.com ipapi.co 9frgh2i4b9.execute-api.us-east-1.amazonaws.com collegeboard--full.sandbox.my.salesforce-scrt.com collegeboard.my.salesforce-scrt.com signals.aimtell.com api.getambassador.com pagead2.googlesyndication.com *.googlevideo.com/videoplayback www.googleadservices.com google.com cs-chat.crmlms-prod.collegeboard.org; font-src 'self' *.collegeboard.org themes.googleusercontent.com fonts.gstatic.com data: moz-extension: use.fontawesome.com static3.avast.com at.alicdn.com cdn.loom.com/assets/fonts/ wiris-v7.hive-prod.collegeboard.org:80 wiris-v7.hive-nonprod.collegeboard.org:80 cdnjs.cloudflare.com/ajax/libs/mathjax/3.2.2/es5/output/chtml/fonts/woff-v2/; frame-src 'self' *.collegeboard.org service.force.com beacon.aimtell.com datacloudstat.com www.youtube.com ws-lmdc-app03.dhs.state.nj.us gateway.zscloud.net mozbar.moz.com *.id.opendns.com lsrelay-config-production.s3.amazonaws.com pg-sasscer-ckf04.pgcps.org static.deledao.com data: schools-blocked.s3-website-us-east-1.amazonaws.com calendly.com platform.twitter.com *.appcues.com credentialfinder.org apps.credentialengine.org *.webcasts.com td.doubleclick.net www.googletagmanager.com cb-zscaler-pages.s3.amazonaws.com us-east-1.quicksight.aws.amazon.com www.buzzsprout.com cdn.aimtell.com collegeboard--full.sandbox.my.site.com collegeboard.my.site.com; img-src 'self' *.collegeboard.org data: www.google.com googleads.g.doubleclick.net www.googletagmanager.com www.google.co.jp www.google.ca www.google.co www.google.jo translate.google.com d10lpsik1i8c69.cloudfront.net *.appcues.com res.cloudinary.com twemoji.maxcdn.com cdn.cookielaw.org signals.aimtell.com pagead2.googlesyndication.com www.googleadservices.com google.com img.youtube.com i.ytimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.collegeboard.org cdnjs.cloudflare.com sdk.amazonaws.com cdn.cookielaw.org www.googletagmanager.com googleads.g.doubleclick.net www.googleadservices.com connect.facebook.net www.youtube.com *.salesforceliveagent.com service.force.com ajax.cloudflare.com js-agent.newrelic.com bam.nr-data.net d10lpsik1i8c69.cloudfront.net s3.amazonaws.com/cdn.aimtell.com/ www.google.com static.lightning.force.com *.my.salesforce.com *.my.salesforce-sites.com apform.secure.force.com www.pagespeed-mod.com cdn.ckeditor.com cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.js assets.calendly.com platform.twitter.com *.appcues.com cb-zscaler-pages.s3.amazonaws.com www.buzzsprout.com cdn.jsdelivr.net/npm/js-cookie@3.0.5/dist/js.cookie.min.js collegeboard--full.sandbox.my.site.com collegeboard.my.site.com cdn.aimtell.com client.rum.us-east-1.amazonaws.com/1.0.2/cwr.js cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3.3.2/dist/fp.js pagead2.googlesyndication.com blue.mbsy.co https://athena.collegeboard.org/2.2.4/cbw-widgets.min.js https://atlas.collegeboard.org/apricot/prod/4.12.1/dx_profile.js https://atlas.collegeboard.org/apricot/prod/4.12.1/main.min.js https://bigfuture.collegeboard.org/widgets/v2/CollegeSearchAndSaveTypeahead.js https://cdn.jsdelivr.net/npm/html2canvas@1.3.2/dist/html2canvas.min.js https://cdn.jsdelivr.net/npm/js-cookie@3.0.5/dist/js.cookie.min.js https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.js https://cdnjs.cloudflare.com/ajax/libs/mathjax/3.2.2/es5/tex-mml-chtml.js https://github.com/mattfarina/farbtastic/blob/master/src/farbtastic.js; style-src 'self' 'unsafe-inline' *.collegeboard.org service.force.com translate.googleapis.com use.fontawesome.com apform.secure.force.com *.my.salesforce-sites.com d10lpsik1i8c69.cloudfront.net/css/reset.css fonts.googleapis.com cdn.ckeditor.com cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.css wiris-v7.hive-prod.collegeboard.org:80 wiris-v7.hive-nonprod.collegeboard.org:80 *.appcues.com fonts.google.com collegeboard--full.sandbox.my.site.com collegeboard.my.site.com cdn.cookielaw.org https://atlas.collegeboard.org/apricot/prod/4.11.5/athena.min.css https://atlas.collegeboard.org/apricot/prod/4.11.5/dx_ckeditor.min.css https://atlas.collegeboard.org/apricot/prod/4.11.5/org.css https://atlas.collegeboard.org/apricot/prod/4.12.1/dx_profile.css https://atlas.collegeboard.org/apricot/prod/4.12.1/illustrations.css https://atlas.collegeboard.org/apricot/prod/4.12.1/main.min.css https://atlas.collegeboard.org/apricot/prod/4.6.1/org.css https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.css; frame-ancestors 'self' credentialfinder.org; report-uri https://endpoint5.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV0RBARw3e7I1maofn0rkqtWoPBPNh0wBLdICmPwpVd0aV427YIAMoG3 2 default-src 'self';object-src 'none';manifest-src 'none';media-src 'self' blob: https://channel.sas.com https://service.sas.com *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com;script-src * 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.trustarc.com *.doubleclick.net *.sas.com assets.adobedtm.com ssl.google-analytics.com www.googletagmanager.com www.google-analytics.com bat.bing.com benchtag.co front.facetz.net *.facebook.net *.facebook.com www.googleadservices.com tb.juiceadv.com *.linkedin.com pixel.mathtag.com pixel.quantserve.com *.quora.com analytics.twitter.com tagmanager.google.com mc.yandex.ru static.ads-twitter.com snap.licdn.com *.bizographics.com *.visualwebsiteoptimizer.com app.vwo.com consent.truste.com s.yimg.com ssl.gstatic.com api.company-target.com script.crazyegg.com platform.twitter.com sp.analytics.yahoo.com x.bidswitch.net ad4.adfarm1.adition.com livestream.co *.brightcove.net track.adform.net www.vintom.com b92.yahoo.co.jp cdn.appdynamics.com execution-dscvrtraffic.cidev.sas.us *.mrpfd.com d3js.org https://web.cvent.com *.boltdns.net players.brightcove.net *.brightcove.com *.akamaihd.net *.brightcovecdn.com vjs.zencdn.net;style-src 'self' data: 'unsafe-inline' https://cdn.developer.sas.com https://player.interactivity.brightcove.com players.brightcove.net https://fonts.googleapis.com https://script.crazyegg.com *.visualwebsiteoptimizer.com app.vwo.com;img-src * 'self' blob: data: *.google-analytics.com *.doubleclick.net www.google.com www.googletagmanager.com *.sas.com front.facetz.net *.facebook.com www.googleadservices.com tb.juiceadv.com ext.ligatus.com bcp.crwdcntrl.net pixel.mathtag.com *.quora.com cdn.taboola.com analytics.twitter.com d.company-target.com mc.yandex.ru t.co px.ads.linkedin.com *.bizographics.com assets.adobedtm.com players.brightcove.net *.boltdns.net *.akamaihd.net *.brightcove.com *.brightcovecdn.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io;font-src 'self' data: https://www.sas.com https://cdn.developer.sas.com https://www.jmp.com https://fonts.gstatic.com https://player.interactivity.brightcove.com players.brightcove.net; connect-src * 'self' *.sas.com *.brightcove.com ma156-r.analytics.edgekey.net api.company-target.com livestream.com www.vintom.com *.doubleclick.net assets.adobedtm.com *.visualwebsiteoptimizer.com app.vwo.com;frame-src 'self' sas.navattic.com assets.adobedtm.com www.youtube.com *.twitter.com *.sas.com pixel.mathtag.com livestream.com ad4.adfarm1.adition.com www.vintom.com *.doubleclick.net *.facebook.net *.trustarc.com *.facebook.com *.linkedin.com *.chargebee.com *.sli.do *.logentries.com *.amuselabs.com amuselabs.com *.jmp.com *.outgrow.us *.service-now.com *.visualize-roi.com *.brightcove.com players.brightcove.net https://www.googletagmanager.com https://px.anteriad.com https://web.cvent.com https://event-guestside-app-pr50.cvent-production.cvent.cloud *.visualwebsiteoptimizer.com app.vwo.com;worker-src 'self' blob:;frame-ancestors *.sas.com *.jmp.com *.gatheriq.analytics; 2 frame-ancestors 'self' https://*.nzherald.co.nz https://*.apnnz.co.nz https://nzme.coral.coralproject.net/; 2 connect-src 'self' www.google-analytics.com stats.g.doubleclick.net ; default-src 'self' ; font-src 'self' fonts.googleapis.com fonts.gstatic.com data: ; frame-ancestors 'self' ; frame-src 'self' www.google.com feedback.googleusercontent.com www.googletagmanager.com scone-pa.clients6.google.com www.youtube.com player.vimeo.com ; img-src 'self' www.google.com www.google-analytics.com ssl.gstatic.com www.gstatic.com gstatic.com data: * ; object-src 'none' ; script-src 'self' 'sha256-n6OdwTrm52KqKm6aHYgD0TFUdMgww4a0GQlIAVrMzck=' 'sha256-4ryYrf7Y5daLOBv0CpYtyBIcJPZkRD2eBPdfqsN3r1M=' 'sha256-sVKX08+SqOmnWhiySYk3xC7RDUgKyAkmbXV2GWts4fo=' www.google.com apis.google.com www.gstatic.com gstatic.com support.google.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com tagmanager.google.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com feedback.googleusercontent.com www.gstatic.com gstatic.com tagmanager.google.com ; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' blob: https:; frame-src 'self' https:; worker-src 'self' blob: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hs-scripts.com js.hscta.net js.usemessages.com *.hubspot.com static.hsappstatic.net assets.trustworks.io gtnr.io va.vercel-scripts.com vitals.vercel-insights.com snap.licdn.com www.snac.licdn.com *.licdn.com sjs.bizographics.com 1.6sc.co v2.zlisthome.com connect.facebook.net v2.listenloop.com *.6sc.co home.integrate.com *.weni.ai cdn-cloud.weni.ai cdn.cloud.weni.ai weni-sp-integrations-production.s3.amazonaws.com cdn.tailwindcss.com cdn.newtail.com.br cdn.mouseflow.com www.clarity.ms ug-webapp-public-production.s3.amazonaws.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn-cloud.weni.ai cdn.cloud.weni.ai *.weni.ai cdn.tailwindcss.com; img-src 'self' data: blob: *.cloudfront.net *.hsforms.com *.hubspot.com *.hsappstatic.net *.hubspotusercontent-na1.net assets.trustworks.io *.manuscdn.com *.google-analytics.com *.googleadservices.com *.doubleclick.net www.google.com www.googletagmanager.com hubspot-forms-static-embed.s3.amazonaws.com px.ads.linkedin.com www.facebook.com *.6sc.co *.public.blob.vercel-storage.com *.weni.ai cdn-cloud.weni.ai cdn.cloud.weni.ai *.supabase.co; font-src 'self' data: *.hsappstatic.net *.hubspotusercontent-na1.net fonts.googleapis.com fonts.gstatic.com cdn-cloud.weni.ai cdn.cloud.weni.ai *.weni.ai; media-src 'self' *.public.blob.vercel-storage.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.hubspot.com *.hsforms.com *.hsforms.net *.hs-analytics.net *.hubapi.com static.hsappstatic.net hubspot-forms-static-embed.s3.amazonaws.com api.trustworks.io assets.trustworks.io gtnr.io vitals.vercel-insights.com va.vercel-scripts.com sheets.googleapis.com drive.googleapis.com oauth2.googleapis.com js.hs-banner.com pagead2.googlesyndication.com px.ads.linkedin.com sjs.bizographics.com *.facebook.com *.6sc.co *.weni.ai cdn-cloud.weni.ai cdn.cloud.weni.ai wss://*.weni.ai wss://websocket.weni.ai weni-sp-integrations-production.s3.amazonaws.com cdn.mouseflow.com *.mouseflow.com www.clarity.ms epsilon.6sense.com ug-webapp-public-production.s3.amazonaws.com cdn.newtail.com.br siportal.vtex.com *.supabase.co; frame-src www.youtube.com *.hubspot.com *.hsforms.com *.hsforms.net *.hs-sites.com *.googletagmanager.com *.doubleclick.net job-boards.greenhouse.io secure.ethicspoint.com assets.trustworks.io www.facebook.com *.weni.ai cdn-cloud.weni.ai cdn.cloud.weni.ai cdn.newtail.com.br; object-src 'none'; base-uri 'self'; form-action 'self' *.hubspot.com *.hsforms.com www.facebook.com; upgrade-insecure-requests 2 frame-ancestors https://*.phoenix.razer.com https://www.razer.com; object-src 'none'; worker-src 'self' blob:;base-uri 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.phoenix.razer.com https://maps.googleapis.com https://s3.amazonaws.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://sso-static.razer.com https://*.abtasty.com https://*.razerzone.com http://ee.channels.ocs.oraclecloud.com https://www.clarity.ms https://token.razerdata.com https://scripts.clarity.ms https://*.clarity.ms https://*.affirm.com https://*.affirm.ca https://*.cdn4.forter.com https://*.forter.com https://cdn-cookieyes.com https://www.paypal.com https://*.klarna.com https://*.worldpay.com https://applepay.cdn-apple.com https://*.paypal.com https://gethatch.com https://pay.google.com https://www.youtube.com http://*.oraclecloud.com https://bat.bing.com https://www.redditstatic.com https://*.licdn.com https://*.taboola.com https://*.teads.tv https://*.yimg.com https://*.cardinalcommerce.com https://*.apple.com https://*.igodigital.com https://googleads.g.doubleclick.net https://connect.facebook.net https://secure.quantserve.com https://analytics.tiktok.com https://static.ads-twitter.com https://sc-static.net https://rules.quantcount.com https://tr.snapchat.com https://ajax.googleapis.com https://c.amazon-adsystem.com https://d.impactradius-event.com https://cdnjs.cloudflare.com https://*.mysupport.razer.com https://mysupport.razer.com https://x.klarnacdn.net https://elfsightcdn.com https://widget.gleamjs.io https://tags.srv.stackadapt.com https://razer-assets2.s3.us-west-1.amazonaws.com https://api.soreto.com https://*.cloudfront.net https://server-side-tagging-aikuysmm4a-uc.a.run.app https://www.google.com https://www.gstatic.com https://*.baqend.com https://bzrcdn.openai.com https://bzr.openai.com https://universe-static.elfsightcdn.com; block-all-mixed-content; upgrade-insecure-requests; 2 script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' *.cdn.office.net *.public.onecdn.static.microsoft *.office.com aadcdn.msauth.net aadcdn.msftauth.net blob: https: https://a-ring.msedge.net https://amcdn.msauth.net https://amcdn.msftauth.net https://b-ring.msedge.net https://graph.microsoft.com https://gtm-dyn-direct.office365.com https://js.monitor.azure.com https://k-ring.msedge.net https://outlook.live.com https://outlook.office.com https://ow1.res.office365.com https://partner.dev.oasis.microsoft.com https://r4.res.office365.com https://s-ring.msedge.net https://web.vortex.data.microsoft.com https://webshell.suite.office.com https://webshell.suite.officeppe.com res.cdn.office.net;style-src 'report-sample' 'self' 'unsafe-inline' *.cdn.office.net *.fluidpreview.office.net *.microsoft.com https://www.microsoft.com/ res-dev.cdn.officeppe.net res.public.onecdn.static.microsoft;default-src 'self' *.cdn.office.net *.public.onecdn.static.microsoft cdn.fluidpreview.office.net https://midgardbranches.blob.core.windows.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft;img-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.clipchamp.com *.create.microsoft.com *.loki.delve.office.com *.oasis.microsoft.com *.onecdn.static.microsoft *.osi.office.net *.osi.officeppe.net *.public.onecdn.static.microsoft *.s-microsoft.com *.sharepointonline.com *.svc.ms aadcdn.msftauthimages.net az787822.vo.msecnd.net blob: browser.events.data.microsoft.com cdn.create.microsoft.com cdn.designerapp.osi.office.net cdn.hubblecontent.osi.office.net clipchamp.df.onecdn.static.microsoft clipchamp.public.onecdn.static.microsoft content.lifecycle.office.net content.lifecycle.officeppe.net content.powerapps.com copilotstudio.preview.microsoft.com data: designer.cloud.microsoft designer.microsoft.com designerapp.edog.officeapps.live.com designerapp.officeapps.live.com forms.office.com https://outlook.office.com https://sdfpilot.outlook.com https://webshell.suite.office.com m365.cloud.microsoft measure.office.com media.licdn.com outlook-1.cdn.office.net pmservices.cp.microsoft.com powerautomate.microsoft.com preview.content.powerapps.com prod.msocdn.com prodapiicons.cdn.powerappscdn.net res-1.cdn.office.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft.com secure.aadcdn.microsoftonline-p.com spoprod-a.akamaihd.net static2.sharepointonline.com staticresources.payments.microsoft.com statics.teams.cdn.office.net substrate.office.com tip1apiicons.cdn.powerappscdn.net tip2apiicons.cdn.powerappscdn.net www.microsoft365.com;connect-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.collabhubrtc.officeapps.live.com *.public.onecdn.static.microsoft *.microsoft.com *.office.com *.office365.com *.officeapps.live.com *.rtc.svc.cloud.microsoft *.sharepoint-df.com *.sharepoint.com *.svc.ms arc-emea.msn.com arc.msn.com blob: data: https: https://admin.microsoft.com https://api.onedrive.com https://artifacts.dev.azure.com https://browser.events.data.microsoft.com https://browser.pipe.aria.microsoft.com https://cdn.config.centro.core.microsoft https://clients.config.gcc.office.net https://clients.config.office.net https://config.edge.skype.com https://config.edge.skype.net https://consentreceiverfd-prod.azurefd.net https://eu-mobile.events.data.microsoft.com https://eu-office.events.data.microsoft.com https://graph.microsoft.com https://login.microsoftonline.com https://my.microsoftpersonalcontent.com https://nleditor.osi.officeppe.net https://odc.edog.officeapps.live.com https://outlook.cloud.microsoft https://petrol-int.office.microsoft.com https://petrol.office.microsoft.com https://pp1.prd.bmc.teams.microsoft.com https://teams.cloud.microsoft https://titles.prod.mos.microsoft.com res-dev.cdn.officeppe.net res.cdn.office.net wss: wss://*.augloop.office.com wss://*.augloop-gcc.office.com wss://*.dogfood.augloop.svc.cloud.microsoft wss://*.gcc.augloop.svc.cloud.microsoft wss://*.trouter.teams.microsoft.com wss://augloop.office.com wss://augloop.svc.cloud.microsoft wss://gcc.augloop.svc.cloud.microsoft wss://substrate.office.com;font-src 'self' 'unsafe-inline' *.azureedge.net *.cdn.office.net *.public.onecdn.static.microsoft *.fluidpreview.office.net *.sharepointonline.com cdn.create.microsoft.com data: fs.microsoft.com https://c.s-microsoft.com prod.msocdn.com res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft sharepointonline.com spoprod-a.akamaihd.net;frame-ancestors 'self' data: https://support.office.com;frame-src 'self' * *.cdn.office.net *.oasis.microsoft.com *.office.com *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com blob: https://amcdn.msftauth.net https://create.cloud.microsoft https://create.microsoft.com https://login.live.com https://login.microsoftonline.com https://microsoft-onmicrosoft-com.access.mcas.ms https://my.microsoftpersonalcontent.com https://onedrive.live.com https://webshell.suite.officeppe.com https://www.odwebp.svc.ms ms-excel: ms-powerpoint: ms-word: onenote:;upgrade-insecure-requests;media-src 'self' https://*.sharepoint-df.com https://*.sharepoint.com blob: data: *.cdn.office.net *.azureedge.net *.core.windows.net *.clipchamp.com *.oasis.microsoft.com *.create.microsoft.com;manifest-src 'self';child-src blob:;object-src 'none';form-action https://*;worker-src 'self' blob:;trusted-types 'allow-duplicates' 1DSScriptURL @1js/midgard-trusted-types @azure/ms-rest-js#xml.browser @centro/floodgate @centro/hvc-loader @fluidx/loop @fluidx/loop#loop-app @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @microsoft/1ds-getcollectorurlsnippet-js#sanitize-html @msstream/azuremediaplayer#worker-noop @msstream/one-player#noop-create-html @msteams/embed-client @msstream/one-player#sanitize-html MeControlScriptURL cdn-url#oneshell default domPurifyHTML domUtilsTrustedTypePolicy dompurify html2canvas html2canvas-feedback nextjs nextjs#bundler ocvPolicy officebrowserfeedback#domUtils safe-xml#oneshell sccChatTrustedTypesPolicy sccEntityDrawerTrustedTypesPolicy script-url#webpack shellInfoPolicy;report-uri https://csp.microsoft.com/report/OfficeAppHome-PROD;report-to AppHomeReportToEndpoint 2 upgrade-insecure-requests; default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; media-src https: data: blob: 'unsafe-inline'; img-src https: data: blob: 'unsafe-inline' android-webview-video-poster: ; 2 frame-ancestors 'self' https://workforceexperience.hp.com https://wordpress.workforceexperience.hp.com https://test.ecosystems.us; 2 frame-ancestors https://forem.com https://version-feb-19-mjhc7.b-cdn.net https://codenewbie.forem.com https://coss.forem.com https://scale.forem.com https://bookclub.forem.com https://village.forem.com https://golf.forem.com https://core.forem.com https://bizarro.forem.com https://dumb.dev.to https://experimental.forem.com https://crypto.forem.com https://wasp.forem.com https://devbrasil.forem.com https://popcorn.forem.com https://parenting.forem.com https://hmpljs.forem.com https://future.forem.com https://music.forem.com https://design.forem.com https://gg.forem.com https://vibe.forem.com https://dev.to https://zeroday.forem.com https://open.forem.com https://journal.forem.com https://grow.forem.com https://stormkit.forem.com https://maker.forem.com https://dev.to 2 default-src https:; child-src blob: https:; connect-src blob: https: wss:; form-action https:; frame-ancestors https: http://webvisor.com; media-src blob: https:; object-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; font-src https: data: 2 frame-ancestors https://poshmark.lightning.force.com *.goshd.com *.goshd.ca *.poshmark.com; report-uri https://poshmark.report-uri.com/r/t/csp/enforce 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: data: blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; 2 default-src 'none'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; connect-src https://quad9.zendesk.com/ https://api.quad9.net/ 2 default-src * blob: data:; style-src * 'unsafe-inline' blob: data:; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; img-src * data: blob: 'unsafe-inline' ; connect-src * 'unsafe-inline' data: blob:; frame-src * blob: data:;font-src * data: blob:;report-to default; 2 default-src 'self' customer-cubrih08bflu3z2b.cloudflarestream.com pages.churnbuster.io ghbtns.com *.algolia.net help.ghost.io resources.ghost.io tutorials.ghost.io changelog.ghost.io t.firstpromoter.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: cdn.jsdelivr.net https://cdn.firstpromoter.com proxy-assets.churnbuster.io https://static.ads-twitter.com embed.ghoststatus.org https://www.dubcdn.com/analytics/script.js ingest.promptwatch.com https://esm.sh https://vjs.zencdn.net https://analytics.ahrefs.com; style-src 'self' 'unsafe-inline' proxy-assets.churnbuster.io https://vjs.zencdn.net; font-src 'self' data: rsms.me/inter/font-files/; img-src 'self' 'unsafe-inline' data: supapjpiqdfzuaordcdx.supabase.co/storage/ analytics.twitter.com https://t.co https://dubassets.com https://*.cloudflarestream.com https://*.laravel.cloud; media-src 'self' blob: https://*.cloudflarestream.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com analytics.twitter.com https://ads-api.twitter.com/ t.firstpromoter.com https://api.dub.co/track/click ingest.promptwatch.com https://ingesteer.services-prod.nsvcs.net https://*.cloudflarestream.com https://analytics.ahrefs.com; worker-src 'self' blob:; frame-src 'self' https://app.netlify.com https://ghbtns.com https://pages.churnbuster.io; 2 connect-src 'self' https://chat.elster.de wss://chat.elster.de ; default-src 'self' ; font-src 'self' data: https://chat.elster.de ; form-action 'self' https://warteraum.elster.de ; frame-ancestors 'self' ; img-src 'self' https://chat.elster.de ; media-src 'self' https://download.elster.de ; object-src 'none' ; script-src 'self' https://chat.elster.de ; style-src 'self' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-5yrgW3nUT68EECASm0TDMs729Pt3nSC+0EW/YRBMQRU=' 'sha256-6MIo15D5GuyQxVgaO0PkPP9HO2gU95dv3iaYHh6J3kc=' 'sha256-YYGOQLmFupNssV6Yh7nuq54fYxTXHNrLhuEwg06WCkw=' https://chat.elster.de 2 default-src 'self' data: https://cloud.ccm19.de wss://*.tum.de https://api.session-replays.io wss://api.session-replays.io https://*.tum.de https://tum.de https://www.google.com/ https://ajax.googleapis.com https://cse.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.br.de https://maps.google.de https://geoportal.bayern.de https://www.googleapis.com https://clients1.google.com https://encrypted-tbn0.gstatic.com https://encrypted-tbn1.gstatic.com https://encrypted-tbn2.gstatic.com https://encrypted-tbn3.gstatic.com https://ngp.zdf.de https://www.arte.tv https://zdfvodnone-vh.akamaihd.net https://img.youtube.com https://www.ardaudiothek.de https://tum.cloud.panopto.eu https://vimeo.com https://player.vimeo.com https://open.spotify.com https://spotify.com https://anchor.fm/ https://www.ardmediathek.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cloud.ccm19.de https://ajax.googleapis.com https://api.session-replays.io twipla-analytics.tum.de; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.ardsounds.de https://www.ardaudiothek.de https://www.youtube-nocookie.com https://player.vimeo.com https://ngp.zdf.de https://www.br.de https://www.arte.tv https://www.ardmediathek.de https://open.spotify.com https://podcasters.spotify.com https://creators.spotify.com https://anchor.fm; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://*.tum.de; report-uri https://sentry2.in2code.de/api/19/security/?sentry_key=3eebfda547ed55b0e7f39fdf229429f9 2 default-src 'self'; img-src 'self' data:; script-src 'self' 'sha256-J/tux0AP4WAYsCxprPoE+2XJ+XNJ8Esd8nCF8o/diiw='; style-src 'self' 'unsafe-inline'; 2 frame-ancestors 'self' http://*.dji.com https://*.dji.com 2 frame-ancestors 'self' https://*.sanity.io https://*.sanity.work https://*.sanity.build https://hjaelp-community-studio-git-staging.sanity-io.vercel.app https://community.sanity.tools 2 frame-ancestors 'none'; form-action 'self'; 2 frame-ancestors 'self' https://*.dish.com; 2 frame-ancestors 'self' *.cnbc.com *.ms.now 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.sanity.io https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data:; connect-src 'self' https://*.supabase.co https://*.google-analytics.com https://www.googletagmanager.com; worker-src 'self' blob:; frame-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 2 frame-ancestors https://*.seagate.com https://*.seagate.cn https://seagate.saleshood.com; object-src 'none'; base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.seagate.com *.adobedtm.com *.paypal.com *.userway.org *.cookielaw.org *.rakuten.com *.googletagmanager.com *.redditstatic.com *.btasty.com *.quantserve.com *.google-analytics.com *.licdn.com *.ads-twitter.com *.pricespider.com *.facebook.net *.bing.com *.ml314.com ml314.com *.demandbase.com *.mookie1.com *.clarity.ms *.hxplatform.com *.quantcount.com *.doubleclick.net *.customer.io *.powerreviews.com *.abtasty.com *.liveperson.net *.lpsnmedia.net *.techtarget.com *.youtube.com *.facebook.com *.company-target.com *.recaptcha.net *.gstatic.com *.yimg.jp *.sharethis.com *.tiqcdn.cn *.tiqcdn.com *.adnxs.com *.gbqofs.com *.cdn-apple.com *.vimeo.com *.qq.com *.jsdelivr.net *.gtimg.cn app.cdn.lookbookhq.com bugcrowd.com *.bugcrowdusercontent.com *.cloudflare.com *.google.com *.pathfactory.com *.customerioforms.com *.gstatic.cn; 2 frame-ancestors 'self' https://corp.kaltura.com http://kaltura.pathfactory.com https://kaltura.pathfactory.com 2 form-action 'self' *.myqnapcloud.com *.myqnapcloud.cn; base-uri 'self'; default-src * data:; script-src http: https: *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com *.myqnapcloud.com *.myqnapcloud.cn *.event.qnap.com *.static.hotjar.com 'unsafe-inline' 'unsafe-eval'; style-src http: https: *.myqnapcloud.com *.myqnapcloud.cn 'unsafe-inline'; connect-src data: wss: http: https: *.myqnapcloud.com *.myqnapcloud.cn fcm.googleapis.com *.google.com *.firebaseio.com ; worker-src 'self' blob:; 2 object-src 'none'; script-src * 'report-sample' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' *.googleadservices.com app.purechat.com app-script.monsido.com connect.facebook.net cdnjs.cloudflare.com static.addtoany.com polyfill.io *.googletagmanager.com *.google-analytics.com *.google.com www.gstatic.com cdn.jsdelivr.net *.hotjar.com *.gtranslate.net js.createsend1.com www.createsend.com *.blackbaudhosting.com *.googleapis.com *.payments.blackbaud.com payments.blackbaud.com/Checkout/bbCheckout.2.0.js *.simpli.fi https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; style-src * 'report-sample' 'unsafe-inline'; worker-src 'self'; base-uri 'self'; form-action 'self' www.createsend.com *.blackbaudhosting.com js.createsend1.com *.nla.gov.au *.payments.blackbaud.com; frame-ancestors 'self' 2 frame-ancestors 'self' zpfsmigration.zohostratus.com 2 frame-ancestors 'self' *.everydayhealth.com *.infermedica.com *.ceros.com *.opinionstage.com *.doctor.com *.googleapis.com *.zdbb.net *.specless.tech *.specless.io *.totalbrain.com *.migraineagain.com *.epionhealth.com 2 default-src 'self' *.nrw.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de newsletter.land.nrw broschuerenservice.land.nrw *.flockler.com platform.twitter.com www.instagram.com *.twimg.com *.map.nrw map.nrw api.stage.bio about.stage.bio cdn.stage.bio dashboard.stage.bio; style-src 'self' 'unsafe-inline' *.nrw.de *.flockler.com; font-src data: *; img-src data: *; frame-ancestors 'self' *.nrw.de; worker-src 'self' *.nrw.de; frame-src 'self' *.nrw.de app.sli.do newsletter.land.nrw broschuerenservice.land.nrw www.youtube.com platform.twitter.com www.instagram.com www.facebook.com www.youtube-nocookie.com media-api.flockler.com customer-wa9kwmpdbqn89osv.cloudflarestream.com; object-src 'self'; connect-src 'self' newsletter.land.nrw *.nrw.de *.flockler.com api.stage.bio api.flockler.app socket.stage.bio wss://socket.stage.bio; media-src *; upgrade-insecure-requests; 2 frame-ancestors 'self' https://tpc.googlesyndication.com 2 child-src blob: https://*.mypurecloud.ie https://*.euw1.pure.cloud; connect-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io https://go.telia.se https://www.google.com https://www.google.se https://www.googletagmanager.com privacyportal-de.onetrust.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://telia-se.blueconic.net https://t944.telia.se https://n467.telia.se https://telia-se-b2b.blueconic.net https://*.doubleclick.net https://*.giosg.com https://*.giosgusercontent.com wss://*.giosg.com static.customersaas.com teliase-259.qelpcare.com static-accept.customersaas.com *.ace.teliacompany.com telia.humany.net *.kampyle.com *.medallia.eu *.decibelinsight.net *.decibel.com wss://*.decibelinsight.net https://www.google-analytics.com ssgtm.telia.se https://optimizely.teliacompany.com https://coverage.ddc.teliasonera.net https://glu2.han.telia.se https://glu2.ham.telia.se https://www.google.com https://*.mypurecloud.ie https://*.euw1.pure.cloud wss://*.mypurecloud.ie wss://*.euw1.pure.cloud captive.apple.com connectivitycheck.gstatic.com https://go.telia.se https://*.adyen.com https://*.tf-b2c.com https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js https://*.releasy.se https://*.mypurecloud.de wss://*.mypurecloud.de; default-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io; font-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io static.customersaas.com static-accept.customersaas.com *.ace.teliacompany.com telia.humany.net *.kampyle.com *.medallia.eu https://cdn.giosgusercontent.com data: https://*.adyen.com https://*.tf-b2c.com; frame-src https://coverage.ddc.teliasonera.net https://glu2.han.telia.se https://glu2.ham.telia.se ssgtm.telia.se https://*.doubleclick.net static.customersaas.com static-accept.customersaas.com https://*.giosg.com https://*.giosgusercontent.com *.kampyle.com *.medallia.eu *.ace.teliacompany.com telia.humany.net https://optimizely.teliacompany.com https://*.mypurecloud.ie https://*.euw1.pure.cloud bankid: https://app.bankid.com https://*.adyen.com https://*.tf-b2c.com https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js https://*.releasy.se https://*.mypurecloud.de wss://*.mypurecloud.de; img-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io https://cdn.cookielaw.org https://geolocation.onetrust.com https://adservice.google.com https://dcosix8as1189.cloudfront.net https://*.giosgusercontent.com https://www.facebook.com/ d35v9wsdymy32b.cloudfront.net d3mwk3f7r8fv9u.cloudfront.net images.customersaas.com horizon-cms.s3.eu-central-1.amazonaws.com https://*.doubleclick.net *.ace.teliacompany.com telia.humany.net https://telia-se.blueconic.net https://t944.telia.se https://n467.telia.se https://telia-se-b2b.blueconic.net *.kampyle.com *.medallia.eu https://www.google-analytics.com https://www.google.com https://www.google.se https://www.googletagmanager.com https://optimizely.teliacompany.com https://webbshop.telia.se https://*.mypurecloud.ie https://*.euw1.pure.cloud data: https://*.adyen.com https://*.tf-b2c.com https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js https://*.releasy.se https://*.mypurecloud.de wss://*.mypurecloud.de; object-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io https://*.mypurecloud.ie https://*.euw1.pure.cloud; report-uri /.api/csp-report/v1/report; script-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io https://go.telia.se https://www.google.com https://www.google.se https://cdn.cookielaw.org https://geolocation.onetrust.com https://telia-se.blueconic.net https://t944.telia.se https://n467.telia.se https://telia-se-b2b.blueconic.net https://*.giosg.com https://*.giosgusercontent.com https://*.interactionbuilder.giosg.com https://connect.facebook.net static.customersaas.com static-accept.customersaas.com *.ace.teliacompany.com telia.humany.net *.kampyle.com *.medallia.eu *.decibelinsight.net *.decibel.com wss://*.decibelinsight.net https://www.google-analytics.com https://www.googletagmanager.com ssgtm.telia.se blob: https://optimizely.teliacompany.com https://coverage.ddc.teliasonera.net https://glu2.han.telia.se https://glu2.ham.telia.se https://*.mypurecloud.ie https://*.euw1.pure.cloud 'unsafe-inline' 'unsafe-eval' https://go.telia.se https://*.adyen.com https://*.tf-b2c.com https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js https://*.releasy.se https://*.mypurecloud.de wss://*.mypurecloud.de; style-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io https://www.googletagmanager.com https://*.giosg.com https://*.giosgusercontent.com static.customersaas.com static-accept.customersaas.com *.ace.teliacompany.com telia.humany.net *.kampyle.com *.medallia.eu https://telia-se.blueconic.net https://t944.telia.se https://n467.telia.se https://telia-se-b2b.blueconic.net 'unsafe-inline' https://*.adyen.com https://*.tf-b2c.com https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js https://*.releasy.se https://*.mypurecloud.de wss://*.mypurecloud.de; worker-src blob:; media-src 'self' localhost https://www.telia.se https://www.preview.telia.se https://*.test.telia.se https://*.tse.telia.io https://*.tse-prod.telia.io https://*.mypurecloud.ie https://*.euw1.pure.cloud 2 default-src 'self' https://auth.zonatelecom.ru/ https://auth.zt.ru/ https://*.zonatelecom.ru http://code.jivo.ru *.zonatelecom.ru *.zt.ru zt.ru ws://*.zonatelecom.ru wss://*.zonatelecom.ru *.svc.team https://vk.com https://mc.yandex.ru https://yastatic.net https://*.doubleclick.net http://*.zonatelecom.ru https://*.mail.ru https://*.yandex.ru https://*.yandex.com https://*.maps.yandex.net https://widget.cloudpayments.ru/bundles/cloudpayments.js https://*.payselection.com wss://*.payselection.com ws://*.payselection.com;base-uri 'none';style-src 'self' 'unsafe-inline' https://*.zonatelecom.ru https://*.zt.ru https://zt.ru http://code.jivo.ru blob:;img-src 'self' https://cdn.zt.ru https://cdn.zt.ru http://code.jivo.ru https://static.zt.ru *.svc.team *.zonatelecom.ru *.zt.ru zt.ru https://vk.com https://*.vk.com https://*.yandex.ru https://*.yandex.com https://*.mail.ru https://*.maps.yandex.net https://*.yandex.ru data: blob: https:;connect-src https: 'self' wss: ws://b24.zt.ru uaas.yandex.ru *.zonatelecom.ru *.zt.ru zt.ru wss://*.payselection.com https://*.yandex.ru https://*.yandex.com;font-src 'self';manifest-src 'self' *.zonatelecom.ru *.zt.ru zt.ru;object-src 'none';child-src blob: https://mc.yandex.ru blob: https://mc.yandex.com https://*.yandex.com https://*.yandex.ru;script-src 'self' https://sdk.inappstory.ru https://api.inappstory.com https://*.svc.team http://*.svc.team http://code.jivo.ru https://auth.zonatelecom.ru/ https://auth.zt.ru/ https://*.zonatelecom.ru https://*.zt.ru https://zt.ru 'unsafe-inline' 'unsafe-eval' https://vk.com https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://*.mail.ru https://*.yandex.ru https://*.maps.yandex.net https://widget.cloudpayments.ru/bundles/cloudpayments.js abt.s3.yandex.net https://*.payselection.com;frame-src 'self' https://*.payselection.com https://widget.cloudpayments.ru https://b24.zt.ru/ https://*.yandex.ru https://yandex.ru https://apps.zonatelecom.ru/ https://auth.zonatelecom.ru/ https://auth.zt.ru/ https://*.zonatelecom.ru/ https://www.zonatelecom.ru/ https://zt.ru/ https://*.auth.svc.team https://*.payselection.com http://localhost:3000/ http://*.ztk-front.svc.team https://*.ztk-front.svc.team blob: https://mc.yandex.ru https://*.yandex.ru https://*.yandex.com;frame-ancestors 'self' https://*.payselection.com https://widget.cloudpayments.ru https://b24.zt.ru/ https://yandex.ru https://apps.zonatelecom.ru/ https://auth.zonatelecom.ru/ https://auth.zt.ru/ https://*.zonatelecom.ru/ https://*.zt.ru/ https://zt.ru https://www.zonatelecom.ru/ https://zt.ru/ https://*.auth.svc.team https://*.payselection.com http://localhost:3000/ http://*.ztk-front.svc.team https://*.ztk-front.svc.team https://*.yandex.ru https://*.yandex.com 2 report-uri https://impactother.report-uri.com/r/d/csp/reportOnly; default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: wss: *; base-uri 'self'; 2 frame-ancestors https://playersupport.my.salesforce.com 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.mediaset.it https://*.mediaset.net; 2 default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple.com.cn *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com.cn https://smb.apple.com swdlp.apple.com www.apple.com.cn www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple.com.cn *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: apple.com *.apple.com *.apple.com.cn *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com *.apple.com.cn 2 frame-ancestors https://*.prom.ua https://prom.ua 2 frame-ancestors 'self' *.kugou.com 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; connect-src 'self' https:; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https: blob:; base-uri 'self'; upgrade-insecure-requests; 2 default-src * data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.serasa.dev serasa.dev *.serasa.com.br serasa.com.br *.ecsbr.net *.googlesyndication.com *.google.com *.google.com.sg *.google.com.br *.google-analytics.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.gstatic.com *.googleadservices.com *.googleoptimize.com *.adtrafficquality.google *.facebook.net *.facebook.com *.bing.com *.clarity.ms *.builder.io builder.io *.datadome.co *.audima.co vlibras.gov.br *.vlibras.gov.br https://static.ads-twitter.com https://edge.fullstory.com *.hotjar.io *.hotjar.com https://browser-intake-datadoghq.com *.tiktok.com https://cdnjs.cloudflare.com *.scorecardresearch.com s3.glbimg.com *.amplitude.com *.goadopt.io https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/vlibras-plugin.js secure.lomadee.com; img-src 'self' data: *.serasa.dev serasa.dev *.serasa.com.br serasa.com.br *.ecsbr.net *.googlesyndication.com *.google.com *.google.com.sg *.google.com.br *.google-analytics.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.gstatic.com *.googleadservices.com *.googleoptimize.com *.adtrafficquality.google *.facebook.net *.facebook.com *.bing.com *.clarity.ms *.audima.co vlibras.gov.br *.vlibras.gov.br *.twitter.com https://secure.gravatar.com *.ytimg.com *.hotjar.com *.scorecardresearch.com *.krxd.net *.navdmp.com *.builder.io *.tiktok.com s3-sa-east-1.amazonaws.com/frame-image-br/bg.png gpixel.globo.com t.co https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_icon.svg https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/assets/access_popup.jpg; object-src 'none'; style-src 'unsafe-inline' *.serasa.dev serasa.dev *.serasa.com.br serasa.com.br *.ecsbr.net *.googleapis.com *.datadome.co *.hotjar.com; connect-src 'self' *.serasa.dev serasa.dev *.serasa.com.br serasa.com.br *.ecsbr.net *.googlesyndication.com *.google.com *.google.com.sg *.google.com.br *.google-analytics.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.gstatic.com *.googleadservices.com *.googleoptimize.com *.adtrafficquality.google *.googleapis.com *.bing.com *.clarity.ms *.builder.io builder.io *.datadome.co https://browser-intake-datadoghq.com https://logs.browser-intake-datadoghq.com https://apigw-commons-prd.ecsbr.net https://apigw-commons-hml.ecsbr.net *.audima.co vlibras.gov.br *.vlibras.gov.br wss://*.hotjar.com *.hotjar.io *.hotjar.com *.tiktok.com *.facebook.com *.creativecdn.com *.criteo.com pixel.globo.com *.amplitude.com *.goadopt.io https://cdn.jsdelivr.net/gh/spbgovbr-vlibras/vlibras-portal@dev/app/target/playerweb.json; frame-ancestors 'self' *.builder.io builder.io *.serasa.dev serasa.dev *.serasa.com.br serasa.com.br *.ecsbr.net; worker-src 'self' blob: *.serasa.dev serasa.dev *.serasa.com.br serasa.com.br *.ecsbr.net *.builder.io builder.io https://browser-intake-datadoghq.com 2 frame-ancestors 'self' https://*.tiscali.it 2 script-src 'self' 'unsafe-eval' 'unsafe-inline' *.thomannmusic.com *.thomann.de app.storyblok.com connect.facebook.net analytics.tiktok.com *.adform.net www.google-analytics.com sc-static.net s.pinimg.com www.youtube.com challenges.cloudflare.com *.payments-amazon.com www.googleadservices.com userlike-cdn-umm.b-cdn.net bat.bing.com www.googletagmanager.com www.googletagservices.com tr.snapchat.com ct.pinterest.com js.appboycdn.com *.g.doubleclick.net widgets.trustedshops.com tpc.googlesyndication.com *.clarity.ms cdn.avo.app maps.googleapis.com pagead2.googlesyndication.com ep2.adtrafficquality.google www.paypal.com; frame-src 'self' *.thomannmusic.com *.thomann.de *.g.doubleclick.net *.safeframe.googlesyndication.com challenges.cloudflare.com ct.pinterest.com td.doubleclick.net tpc.googlesyndication.com tr.snapchat.com www.facebook.com www.google.com www.youtube-nocookie.com www.googletagmanager.com ep2.adtrafficquality.google www.paypal.com; frame-ancestors 'self' app.storyblok.com; object-src 'none' 2 frame-ancestors 'self' *.remotepc.com *.remotedesktop.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.bing.com https://*.remotepc.com https://*.remotedesktop.com https://media.twiliocdn.com https://cmp.osano.com https://cdn.weglot.com https://sdk.amazonaws.com https://static.idriveonlinebackup.com https://*.facebook.com https://*.google.com https://*.googleapis.com https://www.google-analytics.com https://*.criteo.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.criteo.net https://api.maxaccess.io https://gum.criteo.com https://sslwidget.criteo.com https://*.livechatinc.com https://html5shim.googlecode.com https://s.adroll.com https://a.adroll.com https://d.adroll.com https://www.idrivedownloads.com http://ssl.p.jwpcdn.com https://www.youtube.com https://px.spiceworks.com https://connect.facebook.net https://5358683.fls.doubleclick.net https://platform.twitter.com https://www.googleadservices.com https://www.gstatic.com https://ssl.google-analytics.com https://code.jquery.com https://*.stripe.com https://cdnjs.cloudflare.com https://bat.bing.com https://www.googletagmanager.com https://www.clarity.ms https://hcaptcha.com https://*.hcaptcha.com; img-src https://* 'self' data: blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.remotepc.com https://*.remotedesktop.com https://fonts.googleapis.com https://cdn.weglot.com https://ssl.google-analytics.com https://code.jquery.com https://hcaptcha.com https://*.hcaptcha.com https://catamphetamine.gitlab.io https://*.bootstrapcdn.com; font-src https://* data: ;object-src 'self' https://secure.livechatinc.com; media-src https://* blob:; worker-src https://* blob:; connect-src wss: https://* blob:; 2 frame-ancestors 'self' https://*.kit.edu; report-uri /global-cgi-bin/csp-report; report-to csp-report 2 object-src 'none';frame-ancestors 'self' *.dn.se *.retriever-info.com;base-uri 'none';upgrade-insecure-requests 2 default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googleadservices.com www.youtube.com snap.licdn.com static.hotjar.com plugin.handtalk.me unpkg.com *.hubspot.net cdnjs.cloudflare.com www.gstatic.com script.hotjar.com www.google.com try.abtasty.com static.hotjar.com code.jquery.com googleads.g.doubleclick.net www.google-analytics.com www.clarity.ms ajax.googleapis.com cdn.cookielaw.org connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hsforms.net js.hsleadflows.net js.usemessages.com plugin.handtalk.me px.ads.linkedin.com snap.licdn.com *.hsappstatic.net unpkg.com *.hubspot.com *.hubspotusercontent-na1.net cdn.jsdelivr.net *.cloudfront.net *.bing.com *.albacross.com *.privacytools.com.br *.linkedin.com *.googletagmanager.com www.gupy.io *.gupy.io; style-src 'self' 'unsafe-inline' static.hsappstatic.net *.hubspot.net cdnjs.cloudflare.com stackpath.bootstrapcdn.com cdn.cookielaw.org *.hubspotusercontent-na1.net *.hubspotusercontent40.net fonts.googleapis.com *.gupy.io *.hubspot.com cdn-uicons.flaticon.com *.privacytools.com.br www.gupy.io; img-src 'self' blob: 3299491.fs1.hubspotusercontent-na1.net perf-na1.hsforms.com track.hubspot.com www.gupy.io data: *; font-src 'self' fonts.gstatic.com *.hubspotusercontent-na1.net *.hubspotusercontent40.net www.gupy.io; connect-src 'self' blob: 'self' fs1.hubspotusercontent-na1.net cdn.cookielaw.org *.gupy.io data: gap: *; media-src *.hubspotusercontent-na1.net *.hubspot.com *.gupy.io www.gupy.io; frame-src gupy.com.br gupy.io www.youtube.com app.hubspot.com td.doubleclick.net www.facebook.com forms.hsforms.com; frame-ancestors 'self' gupy.com.br gupy.io *.uc.r.appspot.com googletagmanager.com; 2 img-src 'self' https: data: cdn.paris.fr; frame-ancestors 'self' *; frame-src 'self' * 2 frame-ancestors 'self' *.ffxblue.com.au *.ffx.io *.afr.com *.cdn.ampproject.org *.platform.ink; upgrade-insecure-requests 2 frame-ancestors 'self' *.ebscohost.com *.ebsco.com; report-uri /report-csp-violation; upgrade-insecure-requests 2 default-src 'self' *.clover.com cloverstatic.com dev.cloverstatic.com *.quantummetric.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' ipv6.6sc.co j.6sc.co secure.adnxs.com https://assets.adobedtm.com js.adsrvr.org *.amazon-adsystem.com analytics.bgalytics.com bat.bing.com cdn.bttrack.com https://www.clarity.ms cdnjs.cloudflare.com d3sbxpiag177w8.cloudfront.net *.clover.com cloverstatic.com dev.cloverstatic.com cdn.cookielaw.org https://*.demdex.net googleads.g.doubleclick.net stats.g.doubleclick.net *.t.eloqua.com img.en25.com https://cm.everesttech.net connect.facebook.net tracker.gaconnector.com www.google-analytics.com apis.google.com optimize.google.com tagmanager.google.com www.google.com www.googleadservices.com maps.googleapis.com *.googletagmanager.com *.greenhouse.io www.gstatic.com heapanalytics.com cdn.heapanalytics.com *.hotjar.com js.hs-analytics.net js.hs-scripts.com mpsnare.iesnare.com widget.intercom.io js.intercomcdn.com pnapi.invoca.net solutions.invocacdn.com snap.licdn.com munchkin.marketo.net *.mountain.com apps.mypurecloud.com nifegwy.neustar.biz h.online-metrix.net *.optimizely.com cdn.optimizely.com amplify.outbrain.com s.pinimg.com *.pixeltracker.co *.qualtrics.com rules.quantcount.com secure.quantserve.com *.quantummetric.com cdn.ravenjs.com recaptcha.net www.redditstatic.com tags.tiqcdn.com play.vidyard.com *.walkme.com sp.analytics.yahoo.com s.yimg.com www.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com d3sbxpiag177w8.cloudfront.net *.clover.com cloverstatic.com dev.cloverstatic.com optimize.google.com tagmanager.google.com chart.googleapis.com fonts.googleapis.com heapanalytics.com *.qualtrics.com tags.srv.stackadapt.com; img-src blob: data: 'self' firstdatacloverwebsite.122.2o7.net b.6sc.co https://assets.adobedtm.com js.adsrvr.org p.adsymptotic.com data.adxcel-ec2.com mver.agkn.com s.amazon-adsystem.com apintego.com arttrk.com cx.atdmt.com *.bing.com bat.bing.com *.clarity.ms d3sbxpiag177w8.cloudfront.net dxkdvuv3hanyu.cloudfront.net res.cloudinary.com *.clover.com cloverstatic.com dev.cloverstatic.com www.google.co.uk www.google.co.in www.google.co.id www.google.com.pr www.google.com.br www.google.com.co images.contentful.com cdn.cookielaw.org *.ctfassets.net https://*.demdex.net *.doubleclick.net *.g.doubleclick.net *.t.eloqua.com https://cm.everesttech.net *.eyeota.net connect.facebook.net www.facebook.com *.ggpht.com *.google-analytics.com *.google.com *.analytics.google.com www.google.ca www.google.de www.google.ie www.google.com *.googleapis.com chart.googleapis.com maps.googleapis.com *.googletagmanager.com www.googletagmanager.com lh3.googleusercontent.com *.gstatic.com heapanalytics.com script.hotjar.com track.hubspot.com static.intercomassets.com *.intercomcdn.com js.intercomcdn.com uploads.intercomusercontent.com *.ads.linkedin.com www.linkedin.com *.omtrdc.net *.online-metrix.net *.optimizely.com amplify.outbrain.com amplifypixel.outbrain.com tr.outbrain.com data.pendo.io s.pinimg.com ct.pinterest.com *.qualtrics.com pixel.quantserve.com recaptcha.net alb.reddit.com www.redditstatic.com *.rfihub.com https://tags.srv.stackadapt.com cdn.vidyard.com play.vidyard.com *.vimeocdn.com *.walkme.com sp.analytics.yahoo.com s.yimg.com; font-src data: 'self' maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.clover.com cloverstatic.com dev.cloverstatic.com use.fontawesome.com fonts.gstatic.com heapanalytics.com script.hotjar.com *.intercomcdn.com js.intercomcdn.com *.qualtrics.com; connect-src 'self' 52.71.121.170 44.238.122.172 34.215.155.61 44.212.189.233 54.156.2.105 18.210.229.244 3.212.39.155 35.160.46.251 52.22.50.55 100.20.58.101 c.6sc.co ipv6.6sc.co 35.85.84.151 44.228.85.26 secure.adnxs.com https://assets.adobedtm.com collection.bgalytics.com bat.bing.com browser-intake-datadoghq.com *.browser-intake-datadoghq.com *.clarity.ms https://a.clarity.ms *.clover.com wss://*.clover.com cloverstatic.com dev.cloverstatic.com *.contentful.com cdn.cookielaw.org *.ctfassets.net *.datadoghq.com https://*.demdex.net *.g.doubleclick.net https://cm.everesttech.net www.facebook.com oamportal.fdvs.com secure.geonames.org *.google-analytics.com *.google.com analytics.google.com apis.google.com www.google.com maps.googleapis.com storage.googleapis.com *.googletagmanager.com *.greenhouse.io heapanalytics.com *.hotjar.com *.hotjar.io vc.hotjar.io wss://*.hotjar.com wss://ws4.hotjar.com *.intercom.io wss://*.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com pnapi.invoca.net px.ads.linkedin.com *.mktoresp.com *.mktoutil.com *.tt.omtrdc.net geolocation.onetrust.com h.online-metrix.net *.optimizely.com cdn.linkedin.oribi.io *.perka.com ct.pinterest.com *.pixeltracker.co *.qualtrics.com *.quantummetric.com recaptcha.net *.reddit.com redditstatic.com www.redditstatic.com sentry.io *.sentry.io collection.sperse.io tags.srv.stackadapt.com api.thelevelup.com s.yimg.com; media-src 'self' *.clover.com cloverstatic.com dev.cloverstatic.com *.ctfassets.net commondatastorage.googleapis.com js.intercomcdn.com cdn.vidyard.com gateway.zscloud.net; object-src 'self' *.clover.com cloverstatic.com dev.cloverstatic.com h.online-metrix.net vd.vidoplay.com; child-src blob: intercom-sheets.com player.vimeo.com www.youtube.com; frame-src mailto: 'self' tel: *.adsrvr.org insight.adsrvr.org s.amazon-adsystem.com players.brightcove.net *.clover.com cloverstatic.com dev.cloverstatic.com sync-flow.codat.io https://*.demdex.net *.doubleclick.net *.fls.doubleclick.net bid.g.doubleclick.net www.facebook.com accounts.google.com docs.google.com optimize.google.com www.google.com maps.googleapis.com boards.greenhouse.io vars.hotjar.com intercom-sheets.com h.online-metrix.net *.optimizely.com *.cdn.optimizely.com *.perka.com https://ct.pinterest.com *.qualtrics.com *.quantummetric.com play.vidyard.com player.vimeo.com www.youtube.com *.ytimg.com; frame-ancestors *.clover.com cloverstatic.com dev.cloverstatic.com *.optimizely.com *.perka.com; 2 default-src 'self' https://*.rhrz.uni-bonn.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://uni-bonn.de https://www.uni-bonn.de https://*.rhrz.uni-bonn.de https://*.hrz.uni-bonn.de https://www.youtube.com https://s.ytimg.com https://apis.google.com https://ajax.googleapis.com https://pjdcqgnb0lmk.statuspage.io https://*.siteimprove.com; img-src 'self' data: https://uni-bonn.de https://www.uni-bonn.de https://*.uni-bonn.de https://*.rhrz.uni-bonn.de https://i.ytimg.com https://*.googleapis.com https://*.vimeocdn.com https://*.youtube.com https://*.siteimprove.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://*.siteimprove.com data:; object-src 'self' blob:; frame-src 'self' https://*.uni-bonn.de:* https://*.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://content-youtube.googleapis.com https://content.googleapis.com https://pjdcqgnb0lmk.statuspage.io https://www.podcaster.de mailto://*; frame-ancestors 'self' https://*.uni-bonn.de; connect-src 'self' https://uni-bonn.de https://www.uni-bonn.de https://apis.google.com https://webstat.hrz.uni-bonn.de https://cms-proxy.uni-bonn.de 2 frame-ancestors 'self' https://student.portal.rug.nl https://myuniversity.rug.nl; object-src 'none'; 2 frame-ancestors 'self' https://minhaclaro.claro.com.br https://planos.claro.com.br https://minhaclaroescondida.claro.com.br https://www.clarocadastro.com.br https://clarocadastro.com.br; upgrade-insecure-requests; 2 default-src 'none'; img-src 'self' data: blob: https://www.goldmansachs.com https://*.trustarc.com https://*.truste.com https://googletagmanager.com https://www.googletagmanager.com https://www.google.com https://px.ads.linkedin.com https://gs.sc.omtrdc.net https://*.doubleclick.net https://*.parsely.com https://cdn.gs.com https://gateway.zscalerthree.net https://prod.forms.workflow.ep.site.gs.com *.gs.com:* https://public.flourish.studio https://gateway.zscaler.net https://adservice.google.com https://www.linkedin.com https://*.6sc.co https://www.facebook.com https://iad1.qualtrics.com https://siteintercept.qualtrics.com https://*.adobe.com https://*.omtrdc.net https://*.demdex.net https://*.tt.omtrdc.net https://*.adobedtm.com https://*.adobetag.com https://*.targetcdn.adobe.com https://*.adobedc.net https://*.experience.adobe.com https://*.adobe.io https://*.everesttech.net https://*.experiencecloud.adobe.com; style-src 'self' 'unsafe-inline' https://www.goldmansachs.com https://amp.akamaized.net https://cdn.gs.com *.gs.com:* https://public.flourish.studio https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.goldmansachs.com https://*.trustarc.com https://googletagmanager.com https://www.googletagmanager.com https://snap.licdn.com https://connect.facebook.net https://bat.bing.com https://gs.sc.omtrdc.net https://*.doubleclick.net https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://*.parsely.com https://*.go-mpulse.net https://*.akstat.io https://amp.akamaized.net https://cdn.gs.com https://gateway.zscalerthree.net *.gs.com:* https://public.flourish.studio https://www.googleadservices.com https://*.6sc.co https://*.adobe.com https://*.omtrdc.net https://*.demdex.net https://*.tt.omtrdc.net https://*.adobedtm.com https://*.adobetag.com https://*.targetcdn.adobe.com https://*.adobedc.net https://*.experience.adobe.com https://*.adobe.io https://*.everesttech.net https://*.experiencecloud.adobe.com https://sdk.ceros.com; connect-src 'self' https://www.goldmansachs.com https://*.trustarc.com https://www.google.com https://px.ads.linkedin.com https://gs.sc.omtrdc.net https://*.doubleclick.net https://dpm.demdex.net https://siteintercept.qualtrics.com https://*.parsely.com https://*.go-mpulse.net https://*.akstat.io https://amp.akamaized.net https://cdn.gs.com https://*.algolia.net https://*.algolianet.com https://*.algolia.io *.gs.com:* https://api.goldmansachs.wallst.com https://www.gsam.com/bin/gsam/servlets/EmailSubscriptionServlet https://public.flourish.studio https://adobedc.demdex.net https://adservice.google.com https://*.6sc.co https://*.akamaihd.net https://sdk.iad-07.braze.com https://*.adobe.com https://*.omtrdc.net https://*.demdex.net https://*.tt.omtrdc.net https://*.adobedtm.com https://*.adobetag.com https://*.targetcdn.adobe.com https://*.adobedc.net https://*.experience.adobe.com https://*.adobe.io https://*.everesttech.net https://*.experiencecloud.adobe.com; font-src 'self' data: https://www.goldmansachs.com https://*.trustarc.com https://amp.akamaized.net https://cdn.gs.com *.gs.com:* https://public.flourish.studio https://fonts.gstatic.com; frame-src 'self' mailto: https://www.goldmansachs.com https://*.trustarc.com https://www.googletagmanager.com https://*.doubleclick.net https://onegs.iad1.qualtrics.com https://d1pmpteesu3euy.cloudfront.net https://cdn.gs.com https://playlist.megaphone.fm https://gateway.zscalerthree.net *.gs.com:* https://goldmansachs.demdex.net https://gateway.zscaler.net https://consent-pref.trustarc.com https://flo.uri.sh; media-src 'self' data: blob: https://www.goldmansachs.com https://cdn.gs.com https://video.goldmansachs.com *.gs.com:*; frame-ancestors 'self' https://www.goldmansachs.com *.gs.com:* https://*.targetcdn.adobe.com https://*.experience.adobe.com https://*.adobe.io; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://match.prod.bidr.io/cookie-sync/contanuity https://tracking.contanuity.com/page-tracking/nrich_9655/ https://d-code.liadm.com/did-004v.min.js https://cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3/dist/fp.min.js https://connect.facebook.net/ https://www.google-analytics.com/analytics.js https://tracking.contanuity.com/tag.js https://www.googletagmanager.com/ https://bat.bing.com/ https://googleads.g.doubleclick.net/ https://x.clearbitjs.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googleadservices.com/ https://cdn.dreamdata.cloud/ https://cdn.mouseflow.com/ https://static.hsappstatic.net/ *.nrich.ai https://cdnjs.cloudflare.com/ https://*.hs-analytics.net/ https://*.hubspot.com/ https://*.hubspot.net/ https://hubspot.net/ https://*.hs-banner.com/ https://io.clickguard.com/ https://js.hsadspixel.net/ https://js.hscollectedforms.net/collectedforms.js https://*.fs1.hubspotusercontent-na1.net/ https://js.usemessages.com/conversations-embed.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://*.hotjar.com/ https://tag.clearbitscripts.com/ https://tracking.g2crowd.com/ https://www.clarity.ms/ https://platform.linkedin.com/ https://platform.twitter.com/ https://www.gartner.com/ https://secure.smart-company-vision.com/ https://s3-us-west-2.amazonaws.com/ https://js.hubspotfeedback.com/ https://unpkg.com/swiper/swiper-bundle.min.js https://b-code.liadm.com/lc2.js https://cdn.ampproject.org/ https://app-oss.byte-app.com/common/js/byteh5monitor.aio.min.js https://apis.google.com/js/client.js https://dyv6f9ner1ir9.cloudfront.net/ https://www.google.com/pagead/ https://cdn.jsdelivr.net/npm/basiclightbox@5.0.4/dist/basicLightbox.min.js https://scripts.clarity.ms/ https://pulse.clickguard.com/s/accvTTkgXOEVo/astIQzln53nBG https://static.addtoany.com/; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri https://o1168991.ingest.sentry.io/api/6261364/security/?sentry_key=7d242ac12119401194fa3bf0fb45a4bf; upgrade-insecure-requests 2 frame-ancestors 'self' https://*.keene.edu https://*.plymouth.edu https://*.usnh.edu https://*.unh.edu; 2 default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://stats.spdns.de; object-src 'none' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ ; img-src 'self' data: https://ssl.gstatic.com/ https://stats.spdns.de https://status.securepoint.de; media-src 'none'; frame-src https://stats.spdns.de/ https://www.google.com/recaptcha/ https://www.youtube.com/embed/; connect-src 'self' https://*.checkdns.spdyn.de/ https://*.checkcat.spdyn.de/; font-src 'self' https://fonts.gstatic.com 2 frame-ancestors 'self' https://bold-bat-abee834f89.strapiapp.com 2 frame-ancestors 'self' ura.news ura.ru *.ura.news *.uranews.xyz *.uran.news momenty.org webvisor.com *.yandex.ru *.yandex.com *.yandex.by *.yandex.com.tr; 2 base-uri 'self' https://*.lidl.com; default-src 'self' 'unsafe-inline' blob: data: https://*.adsrvr.org https://*.adyen.com https://*.api.schwarz https://*.app.baqend.com https://*.assets.schwarz https://*.batch.com https://*.bing.com https://*.clarity.ms https://*.cliplister.com https://*.cookiebot.com https://*.creativecdn.com https://*.criteo.com https://*.doubleclick.net https://*.exactag.com https://*.experimentation.dev https://*.facebook.com https://*.facebook.net https://*.frcapi.com https://*.friendlycaptcha.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.instana.io https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.lidlplus.com https://*.livebuy.io https://*.medallia.eu https://*.mycliplister.com https://*.onetrust.com https://*.peakprotect.com https://*.pingdom.net https://*.scon.schwarz https://*.simplesurance.com https://*.virtualearth.net https://*.youtube-nocookie.com https://*.youtube.com https://analytics.google.com https://asset.schwarz https://autosuggest.search.hereapi.com https://bat.bing.net https://bidswitch.net https://cdn.cookielaw.org https://creativecdn.com https://csp-service.prod-varnish-ha-myra.lidl-shop.com https://ct.pinterest.com https://form.lidl.com https://google.com https://lidl.de https://lidl.media.schwarz https://lidl.media01.eu https://lidlplusprod.blob.core.windows.net https://lidlplusstorage.blob.core.windows.net https://mycliplister.com https://region1.analytics.google.com https://s.kelkoogroup.net https://s.kk-resources.com https://s.pinimg.com https://sdk.virtualearth.net https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://test.formcycle.vdc.lidl https://upeimagesprd.blob.core.windows.net https://www.awin1.com https://www.google.be https://www.google.com https://www.google.cz https://www.google.nl https://www.google.pl https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://youtube.com wss://endpoint-prod.scon.schwarz; form-action 'self' https://*.facebook.com https://*.facebook.net https://*.lidl.com https://accounts.lidl.com https://payments.lidlplus.com https://survey.g.doubleclick.net; frame-ancestors 'self' https://*.lidl.com https://*.livebuy.io; frame-src 'self' 'unsafe-inline' https://*.adsrvr.org https://*.adyen.com https://*.cliplister.com https://*.cookiebot.com https://*.creativecdn.com https://*.criteo.com https://*.doubleclick.net https://*.experimentation.dev https://*.facebook.com https://*.facebook.net https://*.frcapi.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.livebuy.io https://*.medallia.eu https://*.pingdom.net https://*.youtube-nocookie.com https://*.youtube.com https://balancechecks.tx-gate.com https://bidswitch.net https://creativecdn.com https://ct.pinterest.com https://form.lidl.com https://forms-prod.enc-test.de/ https://ldl.viewer.cit-fusion.com https://lidl.de https://lidl.media01.eu https://link.tink.com https://manuals.sit-connect.com https://region1.analytics.google.com https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://test.formcycle.vdc.lidl https://www.awin1.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.lidl-gewinnspiel.de https://www.youtube.com https://youtube.com; img-src 'self' 'unsafe-inline' blob: data: https://*.360yield.com https://*.addthis.com https://*.adnxs.com https://*.adyen.com https://*.app.baqend.com https://*.assets.schwarz https://*.bing.com https://*.casalemedia.com https://*.cat-ret.assets.lidl https://*.cdn.flavedo.io https://*.clarity.ms https://*.cliplister.com https://*.cookiebot.com https://*.creativecdn.com https://*.criteo.com https://*.doubleclick.net https://*.experimentation.dev https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.instana.io https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.lidlplus.com https://*.livebuy.io https://*.medallia.eu https://*.mycliplister.com https://*.retail.lidl.net https://*.retail.vdc.lidl https://*.searchhub.io https://*.smartadserver.com https://*.teads.tv https://*.upe.schwarz https://*.virtualearth.net https://*.youtube.com https://ads.yieldmo.com https://analytics.google.com https://api.scon-assets.schwarz https://asset.schwarz https://bidswitch.net https://c1.adform.net https://cdn.cookielaw.org https://cdn.flavedo.io https://ce.lijit.com https://cm.adform.net https://content.odj.cloud https://criteo-partners.tremorhub.com https://dpm.demdex.net https://e1.emxdgt.com https://eb2.3lift.com https://exchange.mediavine.com https://fast.nexx360.io https://form.lidl.com https://hb.yahoo.net https://id5-sync.com https://jadserve.postrelease.com https://lidl.de https://lidl.media.schwarz https://lidl.media01.eu https://lidlplusprod.blob.core.windows.net https://lidlplusstorage.blob.core.windows.net https://matching.ivitrack.com https://media.sit-connect.com https://mycliplister.com https://pixel.rubiconproject.com https://region1.analytics.google.com https://rt.udmserve.net https://s.kelkoogroup.net https://s.seedtag.com https://searchhub.io https://sentry.int.secrz.com https://size.lidl.com https://spatial.virtualearth.net https://ssc-cms.33across.com https://sync-criteo.ads.yieldmo.com https://sync.1rx.io https://sync.go.sonobi.com https://sync.targeting.unrulymedia.com https://test.formcycle.vdc.lidl https://upeimagesprd.blob.core.windows.net https://www.adobe.com https://www.awin1.com https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.tr https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.is https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.lidl-shop.be https://www.lidl-shop.cz https://www.lidl-shop.nl https://www.lidl-shop.sk https://www.lidl-sklep.pl https://www.w3.org https://x.bidswitch.net https://youtube.com; object-src 'self' 'unsafe-eval' https://*.batch.com https://*.cookiebot.com https://*.criteo.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.gstatic.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.leaflets.schwarz https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.livebuy.io https://*.youtube.com https://asset.schwarz https://bidswitch.net https://form.lidl.com https://lidl.de https://lidl.media01.eu https://manuals.sit-connect.com https://region1.analytics.google.com https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://test.formcycle.vdc.lidl https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://youtube.com; report-uri https://*.lidl.com https://csp-service.prod-varnish-ha-myra.lidl-shop.com/csp/report; script-src 'self' 'unsafe-eval' 'unsafe-inline' about: blob: https://*.adsrvr.org https://*.adyen.com https://*.api.schwarz https://*.app.baqend.com https://*.batch.com https://*.bing.com https://*.clarity.ms https://*.cookiebot.com https://*.creativecdn.com https://*.criteo.com https://*.doubleclick.net https://*.exactag.com https://*.experimentation.dev https://*.facebook.com https://*.facebook.net https://*.friendlycaptcha.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.instana.io https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.livebuy.io https://*.medallia.eu https://*.mycliplister.com https://*.onetrust.com https://*.peakprotect.com https://*.pingdom.net https://*.scon.schwarz https://*.searchhub.io https://*.virtualearth.net https://*.youtube.com https://adservice.google.com https://asset.schwarz https://bidswitch.net https://cdn.cookielaw.org https://creativecdn.com https://ct.pinterest.com https://form.lidl.com https://lidl.de https://lidl.media01.eu https://localhost https://mycliplister.com https://partnersbenefits-uat-we.k8s.scrm.apps.schwarz https://region1.analytics.google.com https://s.kk-resources.com https://s.pinimg.com https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://test.formcycle.vdc.lidl https://www.awin1.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://youtube.com; style-src 'self' 'unsafe-inline' https://*.app.baqend.com https://*.bing.com https://*.cookiebot.com https://*.criteo.com https://*.experimentation.dev https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://*.kampyle.com https://*.leaflets.schwarz https://*.lidl-flyer.com https://*.lidl-shop.com https://*.lidl.com https://*.lidl.de https://*.medallia.eu https://*.youtube.com https://asset.schwarz https://bidswitch.net https://form.lidl.com https://lidl.de https://lidl.media01.eu https://partnersbenefits-uat-we.k8s.scrm.apps.schwarz https://region1.analytics.google.com https://sdk.virtualearth.net https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://test.formcycle.vdc.lidl https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.lidl-shop.be https://www.lidl-shop.cz https://www.lidl-shop.nl https://www.lidl-shop.sk https://www.lidl-sklep.pl https://youtube.com; 2 default-src 'self' https: blob: wss: data: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' https://builder.io https://*.builder.io;object-src 'none';base-uri 'self' https://static.panpno.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://va.vercel-scripts.com https://vercel.live https://connect.facebook.net https://*.googletagmanager.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://snap.licdn.com https://www.redditstatic.com https://wcs.naver.net https://ssl.pstatic.net https://t1.daumcdn.net https://static.ads-twitter.com https://cdn.amplitude.com https://static.airbridge.io; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: blob: https://cdn.prod.website-files.com https://assets-global.website-files.com https://uploads-ssl.webflow.com https://static.airbridge.io https://d31p1exvorcj37.cloudfront.net https://img.youtube.com https://i.ytimg.com https://www.facebook.com https://connect.facebook.net https://*.google-analytics.com https://www.google.com https://www.google.co.kr https://www.google.co.uk https://www.google.com.hk https://www.google.co.in https://www.google.com.br https://www.google.ro https://www.google.com.ua https://www.google.co.jp https://www.google.com.tw https://www.google.com.sg https://www.google.co.th https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.ads.linkedin.com https://px.ads.linkedin.com https://alb.reddit.com https://pixel-config.reddit.com https://wcs.naver.net https://t1.daumcdn.net https://analytics.twitter.com https://t.co https://qhzcaeifhsdzzjpnbdqr.supabase.co https://play-lh.googleusercontent.com https://lh3.googleusercontent.com https://*.mzstatic.com https://images.ctfassets.net; font-src 'self' data: https://cdn.jsdelivr.net; connect-src 'self' https://vitals.vercel-insights.com https://va.vercel-scripts.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://cdn.jsdelivr.net https://ipapi.co https://www.facebook.com https://graph.facebook.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://www.google.co.kr https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://*.ads.linkedin.com https://px.ads.linkedin.com https://alb.reddit.com https://ads.reddit.com https://pixel-config.reddit.com https://wcs.naver.net https://wcs.naver.com https://bc.ad.daum.net https://track.kakao.com https://aem-kakao-collector.onkakao.net https://*.ds.kakao.com https://analytics.twitter.com https://ads-api.twitter.com https://t.co https://*.amplitude.com https://*.airbridge.io; frame-src 'self' https://id.abr.ge https://www.youtube.com https://www.facebook.com https://snap.licdn.com https://t1.daumcdn.net https://t1.kakaocdn.net; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; report-uri /api/csp-report; report-to csp-endpoint 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://ajax.aspnetcdn.com https://consent.cookiebot.com https://visualisation.polimapper.co.uk https://consentcdn.cookiebot.com https://www.youtube.com https://app.five9.eu https://*.cloudfront.net https://connect.facebook.net https://sc-static.net https://*.redditstatic.com https://static.ads-twitter.com https://js.adsrvr.org https://*.snapchat.com https://settings.luckyorange.net https://*.luckyorange.net https://cdn.luckyorange.com;object-src 'none';style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com;img-src 'self' data: https://www.googletagmanager.com https://*.googlesyndication.com https://img.youtube.com https://imgsct.cookiebot.com https://2673654.fls.doubleclick.net https://*.twitter.com https://t.co https://*.doubleclick.net https://*.reddit.net https://*.reddit.com https://adservice.google.com;frame-src 'self' https://*.snapchat.com https://insight.adsrvr.org https://www.youtube.com https://consentcdn.cookiebot.com https://2673654.fls.doubleclick.net https://ad.doubleclick.net https://visualisation.polimapper.co.uk https://td.doubleclick.net https://img.youtube.com https://app.five9.eu https://match.adsrvr.org https://app.sli.do https://auth.slido.com https://app.powerbi.com;font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://maxcdn.bootstrapcdn.com;connect-src 'self' https://*.snapchat.com https://settings.luckyorange.net https://*.luckyorange.net https://cdn.luckyorange.com https://upload.luckyorange.net wss://*.luckyorange.net https://*.reddit.com https://*.redditstatic.com https://*.googleapis.com https://*.google-analytics.com https://ad.doubleclick.net https://*.doubleclick.net https://insight.adsrvr.org https://match.adsrvr.org https://consentcdn.cookiebot.com 2 default-src 'self' 'unsafe-inline'; script-src px.segmel.com privacy-cs.mail.ru cdn.al-adtech.com creatives.al-adtech.com telegram.org px.adhigh.net cdn.uxfeedback.ru cloud.ru content.cloud.ru cdn.cloud.ru mtm.sbercloud.tech facecast.net broadcast.comdi.com qoopler.ru *.mindbox.ru *.jivo.ru ad.adriver.ru www.googleanalytics.com www.google-analytics.com www.googleoptimize.com www.googletagmanager.com www.googleadservices.com mc.yandex.ru api-maps.yandex.ru top-fwz1.mail.ru api.ipify.org vk.com vkvideo.ru googleads.g.doubleclick.net yastatic.net *.cdnvideo.ru st.top100.ru www.youtube.com optimize.google.com abt.s3.yandex.net www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' data: blob:; img-src px.segmel.com ssp.al-adtech.com px.adhigh.net *.ops.beeline.ru *.jivo.ru *.uxfeedback.ru tech.rtb.mts.ru *.hc.sbercloud.ru *.hc.cloud.ru optimize.google.com i.ytimg.com mc.yandex.ru *.api-maps.yandex.ru cdn.cloud.ru cdn.sbercloud.ru cloud.ru www.google.com www.google.ru vk.com vkvideo.ru www.google-analytics.com www.googletagmanager.com content.cloud.ru google-analytics.bi.owox.com kraken.rambler.ru top-fwz1.mail.ru ad.adriver.ru *.mindbox.ru data:; connect-src cnt.rambler.ru px.segmel.com ssp.al-adtech.com telegram.org marketplace.cloud.ru id.cloud.ru console.cloud.ru widget-api.uxfeedback.ru *.jivo.ru *.mindbox.ru uaas.yandex.ru *.api-maps.yandex.ru api-maps.yandex.ru *.maps.yandex.net mlspace.aicloud.sbercloud.ru cloud.ru api.cloud.ru mtm.sbercloud.tech www.google-analytics.com mc.yandex.ru top-fwz1.mail.ru stats.g.doubleclick.net vk.com vkvideo.ru kraken-mdt.rambler.ru kraken.rambler.ru sentry.sbercloud.tech analytics.google.com wss://mc.yandex.ru wss://*.jivo.ru blob:; frame-src console.cloud.ru yandex.ru facecast.net broadcast.comdi.com vk.com vkvideo.ru px.adhigh.net rutube.ru content.adriver.ru optimize.google.com w.soundcloud.com readymag.website readymag.com www.youtube.com mc.yandex.ru www.google.com recaptcha.google.com blob:; media-src cdn.cloud.ru cdn-video.cloud.ru cloud.ru *.jivo.ru; style-src cloud.ru optimize.google.com *.jivo.ru fonts.googleapis.com 'unsafe-inline'; font-src cloud.ru fonts.gstatic.com data:; worker-src blob:; child-src mc.yandex.ru blob:; style-src-elem 'unsafe-inline' cloud.ru cdn.uxfeedback.ru *.jivo.ru *.mindbox.ru; 2 default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.gcp.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.de https://mpsnare.iesnare.com https://omt.dm.de https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.de https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.de https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://kuba-prod.services.dmtech.com https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.de https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.de https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.gcp.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.de https://giftcard-checkout.dm.de/api/checkout https://signin.dm.de; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.gcp.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.de https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://*.lxprod.ka.de.dm-drogeriemarkt.com https://account.dm.de https://app.datadoghq.eu https://checkout.dm.de https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.de https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.de https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.de https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.de https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.de https://signin.dm.de https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.de; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__; upgrade-insecure-requests; 2 frame-ancestors https://www.livehindustan.com https://*.girnarsoft.com https://agent.botsdekho.com 2 connect-src blob: data: 'self' https://*.anwar-695.workers.dev https://*.clerk.accounts.dev https://*.cloudfront.net https://*.cookie-script.com https://*.ctfassets.net https://*.dyte.in https://*.dyte.io https://*.firstpromoter.com https://*.higgsfield.ai https://*.s3.amazonaws.com https://*.sentry.io https://accounts.google.com https://accounts.google.com/gsi/ https://analytics.google.com https://api-sr.amplitude.com https://api.amplitude.com https://api.churnkey.co https://api.clerk.com https://api.cluster.dyte.in https://api.hsforms.com https://api.stripe.com https://assets.churnkey.co https://assets.higgsfield.ai https://cdn.growthbook.io https://cdn.higgsfield.ai https://checkout.stripe.com https://clerk-telemetry.com https://clerk-telemetry.com/v1/event https://cloudflareinsights.com https://cs-chat-dev.higgsfield.ai https://cs-chat.higgsfield.ai https://data.amplitude.com https://dd.higgsfield.ai https://esm.sh/ https://events.framer.com https://fnf-sh.higgs.ai https://fnf-web.anwar-695.workers.dev https://framer.com https://framerusercontent.com https://images.higgs.ai https://oauth2.googleapis.com https://region1.google-analytics.com https://sr-client-cfg.amplitude.com https://unpkg.com https://www.google-analytics.com https://www.googletagmanager.com wss://*.dyte.io wss://canvas-worker.higgsfield.ai wss://dam-editor-worker.higgsfield.ai; img-src blob: data: 'self' https: https://*.cloudfront.net https://*.ctfassets.net https://*.higgsfield.ai https://*.s3.amazonaws.com https://cdn.higgsfield.ai https://fnf-web.anwar-695.workers.dev https://framerusercontent.com https://images.higgs.ai; media-src blob: data: 'self' https://*.cloudfront.net https://*.higgsfield.ai https://*.s3.amazonaws.com https://a.storyblok.com https://cdn.higgsfield.ai https://fnf-web.anwar-695.workers.dev https://framerusercontent.com https://higgsfield.ai https://images.higgs.ai https://videos.ctfassets.net; worker-src blob: 'self'; font-src data: 'self' https://*.s3.amazonaws.com https://assets.higgsfield.ai https://d1xarpci4ikg0w.cloudfront.net https://fnf-web.anwar-695.workers.dev https://fonts.googleapis.com https://fonts.gstatic.com; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.clerk.accounts.dev https://*.cookie-script.com https://*.higgsfield.ai https://*.s3.amazonaws.com https://*.sentry.io https://accounts.clerk.com https://accounts.google.com https://accounts.google.com/gsi/client https://assets.churnkey.co https://assets.higgsfield.ai https://cdn.amplitude.com https://cdn.firstpromoter.com https://cdn.growthbook.io https://cdn.jsdelivr.net https://challenges.cloudflare.com https://clerk.higgsfield.ai https://cloudflareinsights.com https://cookie-script.com https://crossdomain.cookie-script.com https://ct.captcha-delivery.com https://d8j0ntlcm91z4.cloudfront.net https://dd.higgsfield.ai https://esm.sh/ https://fnf-sh.higgs.ai https://fnf-web.anwar-695.workers.dev https://fonts.googleapis.com https://framer.com https://framerusercontent.com https://js.datadome.co https://js.stripe.com https://sparkjs.dev/releases/ https://sr-client-cfg.amplitude.com https://static.cloudflareinsights.com https://unpkg.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://*.s3.amazonaws.com https://accounts.google.com https://accounts.google.com/gsi/style https://assets.churnkey.co https://assets.higgsfield.ai https://fnf-web.anwar-695.workers.dev https://fonts.googleapis.com https://framer.com https://framerusercontent.com; form-action 'self' https://api.stripe.com; base-uri 'self'; frame-ancestors 'self'; frame-src https://*.cloudfront.net https://*.higgsfield.ai https://*.higgsfield.app https://*.higgsfield.gg https://accounts.google.com https://accounts.google.com/gsi/ https://cdn.higgsfield.ai https://challenges.cloudflare.com https://checkout.stripe.com https://clerk.higgsfield.ai https://fnf-web.anwar-695.workers.dev https://geo.captcha-delivery.com https://higgsfield.ai https://higgsfield.app https://higgsfield.gg https://higgsfield.typeform.com https://js.stripe.com 2 default-src 'self'; frame-ancestors 'self' https://trustseal.enamad.ir; object-src 'none'; base-uri 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://myket.ir; img-src 'self' data: blob: https://myket.ir https://*.myket.ir https://www.googletagmanager.com; font-src 'self' data: https://myket.ir https://*.myket.ir; media-src 'self' blob: https://myket.ir https://*.myket.ir; connect-src 'self' https://*.myket.ir https://region1.google-analytics.com https://*.clarity.ms; 2 frame-ancestors 'self' https://adobemc.com https://nfcu.experiencecloud.adobe.com https://experience.adobe.com 2 default-src 'self' * data: https: blob:; object-src 'self'; script-src 'self' * 'unsafe-inline' 'unsafe-eval'; worker-src * 'self' blob:; img-src * 'self' data: https: blob:; style-src * 'self' 'unsafe-inline'; font-src * data:; frame-src * 'self' 2 base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 2 frame-ancestors 'self' https://next.brella.io https://bmsredesign.bms-preview.com 2 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; frame-ancestors 'self' audioplayer.pe; 2 worker-src 'self' blob: *.vix.tv *.vix.com; frame-ancestors SAMEORIGIN; 2 frame-ancestors 'self' https://webhare.utwente.nl https://portal-test.utsp.utwente.nl 2 connect-src 'self' *.leandata.com https://adservice.google.com *.1mind.com global.ketchcdn.com *.calibermind.com *.ketchcdn.com *.ketchjs.com *.google.com *.g2crowd.com *.linkedin.com *.chilipiper.com cmstesting.salesloft.com https://munchkin.marketo.net https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location cdn.contentstack.io api.contentstack.io *.contentstack.io *.hotjar.com *.sequel.io *.salesloft.com *.adnxs.com unpkg.com *.hotjar.com *.hotjar.io *.6sc.co *.6sense.com *.marketlinc.com *.nr-data.net/ *.analytics.google.com *.marketo.com *.mktoresp.com *.doubleclick.net *.google-analytics.com/ *.googletagmanager.com/ *.pantheonsite.io/ *.cookielaw.org/ *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.litix.io *.netdna-ssl.com https://api.company-target.com/api/v2/ip.json https://api.brightfunnel.com/v1/sd https://api-iam.intercom.io/messenger/web/ping wss://nexus-websocket-a.intercom.io/ https://ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css https://ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css https://ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css https://analytics.google.com/g/collect https://cdn.linkedin.oribi.io/partner/5254305/domain/salesloft.com/token wss://wsp13.hotjar.com/api/v2/client/ws *.google.com *.googleoptimize.com *.hotjar.com *.introvoke.com *.mktoweb.com *.benchmarkseverywhere.com https://saasbenchmarks.ai/ https://live-salesloft-v2.pantheonsite.io/ https://test-salesloft-v2.pantheonsite.io/ https://images.contentstack.io https://slft-cons-preproduction.contentstackapps.com *.driftt.com *.drift.com wss://ws.hotjar.com/api/v2/client/ws; font-src 'self' data: https://fonts.gstatic.com *.netdna-ssl.com https://js.intercomcdn.com/fonts/ *.fontawesome.com *.wistia.com *.bootstrapcdn.com; frame-src 'self' *.leandata.com *.1mind.com *.doubleclick.net *.sequel.io *.vidyard.com *.youtube.com *.chilipiper.com *.salesloft.com *.clari.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net https://staticxx.facebook.com/ http://www2.salesloft.com *.greenhouse.io/ *.megaphone.fm *.google.com/ *.contentstack.io *.contentstack.com *.spotify.com *.twitter.com *.facebook.com *.driftt.com *.drift.com https://live-salesloft-v2.pantheonsite.io/ https://images.contentstack.io *.googletagmanager.com; img-src 'self' https: data: blob: *.netdna-ssl.com https://ssl.gstatic.com/ *.vidyard.com; manifest-src 'self' blob:; media-src 'self' blob: *.driftt.com *.wistia.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com *.marketo.com *.netdna-ssl.com https://tagmanager.google.com/ https://fonts.googleapis.com/ *.salesloft.com *.bootstrapcdn.com *.google.com https://live-salesloft-v2.pantheonsite.io/ https://images.contentstack.io/; worker-src blob: data: *.netdna-ssl.com *.contentstackapps.com localhost:3000 salesloft.com cmstesting.salesloft.com *.salesloft.com; base-uri 'none'; frame-ancestors 'self' *.contentstack.com; default-src 'none'; script-src https: 'unsafe-eval' 'unsafe-inline' http://pages.salesloft.com http://pages.clari.com http://localhost:3000 https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://tagmanager.google.com/ 'self'; 2 default-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru payanyway.ru *.payanyway.com ; script-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru payanyway.ru *.payanyway.com payanyway.ru https://pay.google.com https://pay.yandex.ru https://mc.yandex.ru https://yastatic.net https://cdn-ru.bitrix24.ru https://b24-eye5y3.bitrix24.ru 'report-sample' 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru payanyway.ru www.payanyway.ru *.payanyway.com https://b24-eye5y3.bitrix24.ru 'unsafe-inline'; img-src * data:; font-src 'self' data: *.moneta.ru *.moneta.com *.payanyway.ru payanyway.ru *.payanyway.com ; connect-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru payanyway.ru sbp.payanyway.ru *.payanyway.com https://mc.yandex.ru https://qr.nspk.ru https://widget.cbrpay.ru https://b24-eye5y3.bitrix24.ru ; frame-src https: sberpay: sbolpay: qr.nspk.ru mc.yandex.ru ; child-src blob: https://mc.yandex.ru ; report-uri /cspreport.htm 2 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src * 'self' https: data:; connect-src https: wss:; font-src https: data:; media-src https: blob:; 2 img-src 'self' *.commercecloud.salesforce.com *.cdn.content.amplience.net cdn.media.amplience.net *.bigcontent.io cdn.graphics.amplience.net *.googleapis.com *.gstatic.com *.googleusercontent.com *.google.com *.staging.bigcontent.io *.brother.com *.assets.brother.com data: wwwassets.pricespider.com embeddedcloud.pricespider.com *.pricespider.com https:;media-src 'self' cdn.media.amplience.net cdn.static.amplience.net *.bigcontent.io *.googleapis.com *.gstatic.com *.googleusercontent.com *.staging.bigcontent.io *.brother.com *.support.brother.com *.content.syndigo.com blob: https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.stripe.com applepay.cdn-apple.com *.googleapis.com *.gstatic.com *.googleusercontent.com *.google.com *.googletagmanager.com *.bigcontent.io *.staging.bigcontent.io cdn.static.amplience.net cdn.media.amplience.net *.cdn.content.amplience.net *.commercecloud.salesforce.com tags.tiqcdn.com *.tiqcdn.com cdn.schemaapp.com static.cloud.coveo.com api.bluecore.com api.vimeo.com *.mapbox.com cdn.pardot.com *.pardot.com *.pricespider.com ee.channels.ocs.oraclecloud.com brothercustomerservice.widget.custhelp.com helptest.brother-usa.com brothercustomerservice--dev.custhelp.com bicusa--test.sandbox.my.site.com bicusa.my.site.com js.zi-scripts.com blob: elfsightcdn.com survey.us.confirmit.com digitalfeedback.us.confirmit.com login.salesforce.com https: http: https://runtime.commercecloud.com;connect-src 'self' *.stripe.com applepay.cdn-apple.com *.apple.com apple-pay-gateway.apple.com smp-paymentservices.apple.com smp-device-content.apple.com api.cquotient.com *.c360a.salesforce.com *.cdn.content.amplience.net *.googleapis.com *.gstatic.com *.googleusercontent.com *.google.com *.doubleclick.net *.googleadservices.com *.staging.bigcontent.io *.brother.com info.brother.com bicusa.my.site.com cdn.schemaapp.com static.cloud.coveo.com apps.bazaarvoice.com cdn.pricespider.com *.pricespider.com api.vimeo.com *.mapbox.com *.elfsight.com core.service.elfsight.com *.clarity.ms *.tiqcdn.com brothercustomerservice--dev.custhelp.com helptest.brother-usa.com help.brother-usa.com ee.channels.ocs.oraclecloud.com brothercustomerservice.widget.custhelp.com bicusa--test.sandbox.my.site.com elfsightcdn.com survey.us.confirmit.com digitalfeedback.us.confirmit.com login.salesforce.com https: http: https://runtime.commercecloud.com;style-src 'self' 'unsafe-inline' https:;script-src-attr 'unsafe-inline';frame-src 'self' https://www.youtube.com https://player.vimeo.com https://play.vidyard.com https://js.stripe.com/ https://applepay.cdn-apple.com https://pay.apple.com https://app.amplience.net *.staging.bigcontent.io *.brother.com https://brplus-test.brother-usa.com *.google.com *.googletagmanager.com *.pinterest.com *.support.brother.com *.pricespider.com brothercustomerservice--dev.custhelp.com helptest.brother-usa.com help.brother-usa.com bicusa--test.sandbox.my.site.com bicusa.my.site.com ee.channels.ocs.oraclecloud.com blob: about: https:;frame-ancestors 'self' https://app.amplience.net https://runtime.commercecloud.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';upgrade-insecure-requests 2 frame-ancestors 'self' https://bolt.eu https://*.bolt.eu; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hsadspixel.net https://app.sosha.ai https://www.redditstatic.com https://assets.anytrack.io https://j.6sc.co https://scripts.clarity.ms https://ssl.pstatic.net https://bat.bing.com https://bat.bing.net https://cta-service-cms2.hubspot.com https://a.quora.com https://api.fraud0.com https://wcs.naver.net https://cdn.segment.com https://js.hubspot.com https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://monitor.tapper.ai https://link.edgepilot.com https://www.onelink-edge.com https://www.gstatic.com https://www.google.com https://*.google-analytics.com https://region1.analytics.google.com https://*.mktoutil.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://*.criteo.com https://public.cobrowse.oraclecloud.com https://sc54374195us1.cobrowse.oraclecloud.com https://sc54374195us1.cobrowse.oraclecloud.com/launcher.js https://bat.bing.com https://www.youtube.com https://www.clarity.ms https://cdnjs.cloudflare.com https://test.salesforce.com https://webto.salesforce.com https://tracker.adreadyclick.com https://code.jquery.com https://kit.fontawesome.com https://survey.alchemer.com https://www.surveygizmo.com https://tr.snapchat.com https://tr-shadow.snapchat.com https://*.go-mpulse.net https://*.rfihub.net https://cdn.boomtrain.com https://secure.adnxs.com https://acdn.adnxs.com https://*.kaltura.com https://live.rezync.com https://www.googleadservices.com https://analytics.tiktok.com https://bs.serving-sys.com https://secure-ds.serving-sys.com https://sc-static.net https://snap.licdn.com https://*.optimix.cn https://munchkin.marketo.net https://cdn.resonate.com https://libjs.s4mdsp.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hs-banner.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://google.com https://googleads.g.doubleclick.net https://js.hs-scripts.com https://js-eu1.hs-scripts.com https://www.googletagmanager.com https://*.ets.org https://assets.adobedtm.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://maps.googleapis.com https://888-oul-143.mktoweb.com https://js.hsforms.net https://js-eu1.hsforms.net; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.google.com https://*.google-analytics.com https://*.mktoutil.com https://google.com https://googleads.g.doubleclick.net https://cdn.jsdelivr.net https://www.surveygizmo.com https://fonts.googleapis.com https://*.ets.org https://maxcdn.bootstrapcdn.com https://assets.adobedtm.com https://ka-f.fontawesome.com https://888-oul-143.mktoweb.com; font-src 'self' data: https://www.gstatic.com https://www.google.com https://*.google-analytics.com https://*.mktoutil.com https://ka-p.fontawesome.com https://google.com https://googleads.g.doubleclick.net https://www.surveygizmo.com https://*.kaltura.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://ka-f.fontawesome.com https://*.kaltura.com; connect-src 'self' https://ad.doubleclick.net https://static.hsappstatic.net https://api.hubapi.com https://app.sosha.ai https://epsilon.6sense.com https://secure.adnxs.com https://pixel-config.reddit.com https://*.6sc.co https://faro-collector-prod-us-east-2.grafana.net https://cdn.jsdelivr.net https://wcs.naver.com https://cdn.segment.com https://api.segment.io https://protect.tapper.ai https://cta-service-cms2.hubspot.com https://forms-eu1.hsforms.com https://forms-na1.hsforms.com https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https://www.onelink-edge.com https://www.googleadservices.com https://region1.google-analytics.com https://region1.analytics.google.com https://analytics-ipv6.tiktokw.us https://api.fraud0.com https://bat.bing.com https://*.tt.omtrdc.net https://www.gstatic.com https://www.google.com https://www.google.co.in https://pagead2.googlesyndication.com https://*.google-analytics.com https://analytics.pangle-ads.com https://*.mktoutil.com https://ib.adnxs.com https://google.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://tr.snapchat.com https://kit.fontawesome.com https://test.salesforce.com https://webto.salesforce.com https://www.livelook.com/cobrowse/auth https://www.livelook.com https://*.clarity.ms/ https://ka-p.fontawesome.com https://pixelconnector.adready.com https://*.kaltura.com https://*.akamaihd.net https://*.rfihub.net https://*.akstat.io https://*.go-mpulse.net https://people.api.boomtrain.com https://events.api.boomtrain.com https://www.facebook.com https://analytics.tiktok.com https://lm.serving-sys.com https://secure-ds.serving-sys.com https://tr-shadow.snapchat.com https://cdn.linkedin.oribi.io https://analytics.google.com https://stats.g.doubleclick.net https://709-zco-379.mktoresp.com https://www.google-analytics.com https://ssl.google-analytics.com https://ds.reson8.com https://forms.hscollectedforms.net https://*.ets.org https://ets-app-privacy.my.onetrust.com https://geolocation.onetrust.com https://privacyportal.onetrust.com https://cookie-cdn.cookiepro.com https://maps.googleapis.com https://ka-f.fontawesome.com https://cdn.cookielaw.org https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://forms-na1.hubspot.com wss://oda-e40b50f987234cd9917401d2041ee2c6-da2.data.digitalassistant.oci.oraclecloud.com wss://oda-7d45bc8b07464a85817b482742d79302-da2.data.digitalassistant.oci.oraclecloud.com wss://oda-b5675d826e074d05b3305135c81c2162-da2.data.digitalassistant.oci.oraclecloud.com; frame-ancestors https://oets-tst.ets.org https://oets-stg.ets.org https://oets.ets.org https://toeflibt-cn-dev.ets.org https://toeflibt-cn-test.ets.org https://toeflibt-cn-stg.ets.org https://toeflibt-cn.ets.org https://toeflibt.ets.org https://toeflibt-dev.ets.org https://toeflibt-test.ets.org https://toeflibt-stg.ets.org https://v2-dev.ereg.ets.org https://v2-tst.ereg.ets.org https://v2-uat.ereg.ets.org https://v2.ereg.ets.org https://oets-csrint-test.ets.org https://oets-csr-test.ets.org https://oets-csrint-uat.ets.org https://oets-csr-uat.ets.org; frame-src 'self' https://js.hsforms.net https://js-eu1.hsforms.net https://forms-eu1.hsforms.com https://www.gstatic.com https://www.google.com https://*.google-analytics.com https://*.mktoutil.com https://google.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://www.livelook.com/ https://td.doubleclick.net/ https://static.criteo.net https://*.criteo.com https://www.googletagmanager.com https://public.cobrowse.oraclecloud.com https://s.amazon-adsystem.com https://*.kaltura.com https://*.fls.doubleclick.net https://*.rfihub.com https://www.facebook.com https://*.snapchat.com https://e03.optimix.cn https://www.google-analytics.com https://ssl.google-analytics.com https://888-oul-143.mktoweb.com https://www.youtube.com https://*.ets.org https://oda-e40b50f987234cd9917401d2041ee2c6-da2.data.digitalassistant.oci.oraclecloud.com https://oda-7d45bc8b07464a85817b482742d79302-da2.data.digitalassistant.oci.oraclecloud.com https://oda-b5675d826e074d05b3305135c81c2162-da2.data.digitalassistant.oci.oraclecloud.com https://forms.hsforms.com; media-src 'self' blob: data: https://*.ets.org https://*.kaltura.com https://public.cobrowse.oraclecloud.com https://google.com https://googleads.g.doubleclick.net https://www.gstatic.com https://www.google.com ; img-src 'self' data: https: https://www.surveygizmo.com https://i.ytimg.com https://www.gstatic.com https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://aax-eu.amazon-adsystem.com https://bx01.optimix.cn https://cm.g.doubleclick.net https://e03.optimix.cn https://forms.hsforms.com https://track.hubspot.com https://google.com https://googleads.g.doubleclick.net https://www.facebook.com https://px.ads.linkedin.com https://cfvod.kaltura.com https://maps.gstatic.com https://cdn.cookielaw.org https://objectstorage.us-ashburn-1.oraclecloud.com https://*.akstat.io; worker-src blob: https:; 2 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' * 'unsafe-eval' blob: *; worker-src 'self' blob:; 2 frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com teams.cloud.microsoft *.skype.com 2 frame-ancestors 'self' *.sf.intra.laposte.fr *.labanquepostale.fr file://* ; 2 frame-ancestors 'self' *.ncaa.com *.sdata-cloud.com *.ampproject.org; 2 frame-ancestors 'self' https://*.erp.tu-dresden.de:* https://piwik.mz.tu-dresden.de https://matomo.tu-dresden.de 2 default-src 'self' *.destatis.de *.bewacherregister.de; base-uri 'self' *.bewacherregister.de; connect-src 'self' *.destatis.de interamt.de piwik.itzbund.de *.itzbund.de wss://*.bundesbots.de faktenfuchs.destatis.bundesbots.de *.bewacherregister.de; style-src 'self' 'unsafe-inline' *.destatis.de piwik.itzbund.de *.bewacherregister.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.destatis.de piwik.itzbund.de doo.net *.bundesbots.de *.bewacherregister.de;font-src 'self' 'unsafe-eval' 'unsafe-inline' *.destatis.de *.bundesbots.de *.bewacherregister.de;object-src 'self' multimedia.gsb.bund.de *.destatis.de piwik.itzbund.de *.bundesbots.de ; media-src 'self' multimedia.gsb.bund.de www.quirksmode.org *.destatis.de piwik.itzbund.de *.bundesbots.de ; child-src blob: *.destatis.de *.itzbund.de *.stba.de *.euro-area-statistics.org *.ims-cms.net *.kemweb.de *.teambits.events *.bundesbots.de doo.net/de-de/widget/ www9.idev.nrw.de www.idev.nrw.de storymaps.arcgis.com stba.maps.arcgis.com *.dashboard-deutschland.de shinymikrosimapp.azurewebsites.net start.video-stream-hosting.de data: ; img-src 'self' data: blob: *.destatis.de piwik.itzbund.de *.bundesbots.de *.bewacherregister.de; frame-ancestors 'self' *.destatis.de statistikportal.bwl.doi-de.net *.statistikportal.de ; upgrade-insecure-requests; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.plyr.io https:; style-src 'self' 'unsafe-inline' https://cdn.plyr.io; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; media-src 'self' https: blob:; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self' 2 frame-ancestors 'self' https://ladmin.clips4sale.com https://workspace.clips4sale.com 2 frame-ancestors 'self' 2 block-all-mixed-content; upgrade-insecure-requests; frame-ancestors 'self' bugcrowd.com; 2 default-src https://www.allwyn.cz/-YVHw29b2QucYQ5RSw/9zO9zN8fJtmXVziE/C2ABPgcD/DXUJIl/8ZaXUB https: ws: data: blob: 'unsafe-inline' 'unsafe-eval' 2 base-uri 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.state.ak.us https://*.alaska.gov https://cse.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://partner.googleadservices.com; style-src 'self' 'unsafe-inline' https://*.state.ak.us https://*.alaska.gov https://www.google.com; frame-ancestors 'self'; form-action 'self' https: https://*.state.ak.us https://*.alaska.gov; img-src 'self' https://*.state.ak.us https://*.alaska.gov https://www.google-analytics.com https://www.googleapis.com https://www.google.com https://clients1.google.com https://encrypted-tbn0.gstatic.com https://encrypted-tbn1.gstatic.com 2 default-src 'self' data: https://*.e-i.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.google.com *.googleusercontent.com *.monetico-services.com https://*.abtasty.com https://*.e-i.com https://*.ggpht.com https://*.googleapis.com https://*.gstatic.com https://bat.bing.com https://cdn.persa.do https://cdn.persado.com https://cdn.tagcommander.com https://cdna.cic.fr https://connect.facebook.net https://googleads.g.doubleclick.net https://h.online-metrix.net https://h64.online-metrix.net https://pagead2.googlesyndication.com https://player.vimeo.com https://rts.persado.com https://tag.aticdn.net https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.youtube.com; style-src 'self' 'unsafe-inline' data: https://*.abtasty.com https://*.e-i.com https://fonts.googleapis.com; img-src 'self' blob: data: *.google.com *.googleusercontent.com https://*.aa.online-metrix.net https://*.abtasty.com https://*.commander1.com https://*.e-i.com https://*.ggpht.com https://*.googleapis.com https://*.gstatic.com https://ad.doubleclick.net https://bat.bing.com https://bat.bing.net https://cdna.cic.fr https://connect.facebook.net https://googleads.g.doubleclick.net https://i.vimeocdn.com https://i.ytimg.com https://img.youtube.com https://manager.tagcommander.com https://pagead2.googlesyndication.com https://pubads.g.doubleclick.net https://wat.cic.fr https://www.creditmutuel-am.eu/ https://www.facebook.com https://www.google.com https://www.google.fr https://www.googleadservices.com https://www.googletagmanager.com https://infos.cic.fr; font-src 'self' data: https://*.e-i.com https://common-fonts.abtasty.com https://fonts.gstatic.com; media-src 'self' blob: data: https://*.e-i.com https://download-video-ak.vimeocdn.com https://player.vimeo.com https://www.creditmutuel-am.eu/; base-uri 'none'; form-action 'self' *.monetico-services.com https://bconnect.net https://cic.lekiosqueaservices.fr https://creditmutuel.lekiosqueaservices.fr https://video.ibm.com https://www.facebook.com https://www.homji.fr https://www.lekiosqueaservices.fr digipin-aff1.europ3c.fr digipin-aff2.europ3c.fr digipin-aff3.europ3c.fr digipin-aff4.europ3c.fr https://authent.lidentitenumerique.laposte.fr https://bconnect.net https://idp.docapost.io https://sign-qualifie.certinomis.fr https://smartpinlive.oberthur.com https://www.afedim.fr https://www.homji.fr https://www.votaccess.fr; frame-ancestors 'self'; child-src 'self' blob: data: *.google.com *.monetico-services.com http://www.ustream.tv https://*.e-i.com https://*.fls.doubleclick.net https://bat.bing.com https://bid.g.doubleclick.net https://cdna.cic.fr https://h.online-metrix.net https://maps.google.fr https://player.vimeo.com https://qa-assistant.abtasty.com https://td.doubleclick.net https://video.ibm.com https://www.facebook.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com digipin-aff1.europ3c.fr digipin-aff2.europ3c.fr digipin-aff3.europ3c.fr digipin-aff4.europ3c.fr https://smartpinlive.oberthur.com; connect-src 'self' blob: data: *.commander1.com *.google.com https://*.abtasty.com https://*.e-i.com https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com https://ad.doubleclick.net https://adservice.google.com https://bat.bing.com https://bat.bing.net https://cdn.persa.do https://cdna.cic.fr https://connect.facebook.net https://google.com https://googleads.g.doubleclick.net https://logs1412.xiti.com https://pagead2.googlesyndication.com https://rts.persado.com https://stats.g.doubleclick.net https://wat.cic.fr https://www.agri-mutuel.com https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://zkkwkzt.pa-cd.com wss://127.0.0.1:* https://www.associatheque.fr/fr/actu/rss-cm/flux-rss-json-html.cgi https://www.guide-association.cic.fr/fr/actu/rss-cic/flux-rss-json-html.cgi; report-uri 2 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self' https://*.mobilexpress.com.tr; form-action 'self' https://*.mobilexpress.com.tr; object-src 'none'; 2 frame-ancestors 'self' https://*.eyemed.com https://*.luxottica.com https://*.essilorluxottica.com; 2 frame-ancestors https://*.toast.com https://*.dooray.com https://dooray.com 2 frame-ancestors *.procore.com https://app.contentful.com *.bugcrowd.com bugcrowd.com 2 default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' mattermost.com *.mattermost.com d30ia583fbtg8i.cloudfront.net snap.licdn.com www.redditstatic.com bat.bing.com connect.facebook.net pubads.g.doubleclick.net www.trustradius.com use.typekit.net fonts.gstatic.com fast.wistia.com fast.wistia.net browser.sentry-cdn.com embed-cloudfront.wistia.com distillery.wistia.com pipedream.wistia.com dudodiprj2sv7.cloudfront.net cdn.cookielaw.org geolocation.onetrust.com api.lever.co *.algolia.net *.algolianet.com boards.greenhouse.io code.jquery.com www.googletagmanager.com *.googlesyndication.com *.googleapis.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat googleads.g.doubleclick.net analytics.google.com www.google-analytics.com stats.g.doubleclick.net platform.twitter.com static.ads-twitter.com munchkin.marketo.net *.mktoutil.com tag.demandbase.com d20519brkbo4nz.cloudfront.net tag.clearbitscripts.com api-preview.luckyorange.com wss://realtime.luckyorange.com settings.luckyorange.com tools.luckyorange.com api.company-target.com 161-fbe-733.mktoresp.com app.clearbit.com reveal.clearbit.com x.clearbitjs.com wss://in.visitors.live in.visitors.live client-registry.mutinycdn.com px.ads.linkedin.com *.reddit.com cdn.rudderlabs.com api-v2.mutinyhq.io api.rudderlabs.com pdat.matterlytics.com segments.company-target.com js.zi-scripts.com ws.zoominfo.com tags.clickagy.com aorta.clickagy.com hemsync.clickagy.com *.6sc.co *.6sense.com secure.adnxs.com *.qualified.com wss://*.qualified.com embed.typeform.com api.typeform.com cdn.bizible.com; style-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' mattermost.com *.mattermost.com d30ia583fbtg8i.cloudfront.net snap.licdn.com www.redditstatic.com bat.bing.com connect.facebook.net pubads.g.doubleclick.net www.trustradius.com use.typekit.net p.typekit.net fonts.googleapis.com www.googletagmanager.com cdnjs.cloudflare.com *.qualified.com embed.typeform.com; img-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' mattermost.com *.mattermost.com d30ia583fbtg8i.cloudfront.net snap.licdn.com www.redditstatic.com bat.bing.com connect.facebook.net pubads.g.doubleclick.net media.trustradius.com secure.gravatar.com fast.wistia.com embed-ssl.wistia.com cdn.cookielaw.org www.googletagmanager.com fonts.gstatic.com user-images.githubusercontent.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat googleads.g.doubleclick.net t.co analytics.twitter.com id.rlcdn.com alb.reddit.com *.linkedin.com px.ads.linkedin.com px4.ads.linkedin.com segments.company-target.com www.facebook.com *.6sc.co *.6sense.com *.qualified.com cdn.bizible.com cdn.bizibly.com; frame-src mattermost.com *.mattermost.com d30ia583fbtg8i.cloudfront.net snap.licdn.com www.redditstatic.com bat.bing.com connect.facebook.net pubads.g.doubleclick.net fast.wistia.net forms.mattermost.com capture.navattic.com *.productboard.com *.youtube.com job-boards.greenhouse.io player.flipsnack.com s.company-target.com td.doubleclick.net *.facebook.com hemsync.clickagy.com *.googletagmanager.com *.qualified.com form.typeform.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 2 frame-ancestors 'self' https://*.myshopify.com https://*.mybigcommerce.com; 2 default-src 'self' data: https://cdn.builder.io 'unsafe-inline' 'unsafe-eval' https://*.website-files.com https://uploads-ssl.webflow.com https://webflow.com https://*.survicate.com https://*.survicate-cdn.com https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.intercomcdn.com https://static.intercomassets.com https://*.cookiebot.com https://www.googletagmanager.com https://d3e54v103j8qbb.cloudfront.net https://*.google-analytics.com https://*.googlesyndication.com https://*.google.com www.googleadservices.com https://*.doubleclick.net https://assets.calendly.com https://calendly.com https://tracking.g2crowd.com https://*.g2.com https://cdn.mxpnl.com https://api-js.mixpanel.com https://snap.licdn.com https://*.linkedin.com https://js.hs-scripts.com https://js.hsleadflows.net https://js.hs-analytics.net https://js.hs-banner.com *.hsforms.net *.hsforms.com https://forms.hubspot.com https://*.hsappstatic.net https://meetings.hubspot.com https://js.partnerstack.com partnerlinks.io https://grsm.io *.sharethis.com https://platform.twitter.com https://platform.x.com ipapi.co https://www.youtube-nocookie.com https://www.youtube.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.googleapis.com https://fonts.gstatic.com https://bcp.crwdcntrl.net https://survicate.traffit.com https://cdn.embedly.com/ https://*.demio.com https://tube.rvere.com https://*.storylane.io https://*.getcontrast.io https://sc.lfeeder.com https://jscloud.net https://*.ahrefs.com https://demo.arcade.software; media-src https: data:; img-src https: data:; worker-src 'self' blob:; frame-ancestors 'none'; report-to csp-endpoint-landing; 2 frame-ancestors 'self';media-src 'self' js.intercomcdn.com; connect-src 'self' https://cdn.cookielaw.org api-iam.intercom.io nexus-websocket-a.intercom.io api-iam.intercom.io nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io cdn.cookielaw.org geolocation.onetrust.com www.google-analytics.com *.clarity.ms stats.g.doubleclick.net;default-src 'self';frame-src 'self' intercom-sheets.com; script-src 'self' *.intercomcdn.com *.heapanalytics.com www.googletagmanager.com cdn.cookielaw.org platform.twitter.com www.clarity.ms www.google-analytics.com static.ads-twitter.com widget.intercom.io 'unsafe-inline';style-src 'self' 'unsafe-inline' www.googletagmanager.com fonts.googleapis.com;font-src 'self' fonts.googleapis.com fonts.gstatic.com fonts.intercomcdn.com;img-src 'self' *.intercomcdn.com fonts.gstatic.com fast.fonts.net heapanalytics.com cdn.cookielaw.org c.clarity.ms t.co analytics.twitter.com c.bing.com www.google.com www.google.com.np https://www.googletagmanager.com static.intercomassets.com data:;object-src 'none';base-uri 'self';form-action 'self';upgrade-insecure-requests 2 default-src *.nic.ch *.nic.li *.switch.ch; style-src 'unsafe-inline' *.nic.ch *.nic.li *.switch.ch; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.nic.ch *.nic.li *.switch.ch; img-src data: *.nic.ch *.nic.li *.switch.ch; object-src 'none'; form-action 'self' *.nic.ch *.nic.li *.switch.ch *.eduid.ch export.highcharts.com; font-src data: *.nic.ch *.nic.li *.switch.ch; frame-ancestors *.nic.ch *.nic.li *.switch.ch; frame-src * 2 frame-ancestors 'self' *.dimelochat.com *.engagement.dimelo.com 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://client.axept.io https://api.axept.io https://static.axept.io https://js-eu1.hs-scripts.com https://js-eu1.hscollectedforms.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://forms-eu1.hscollectedforms.net https://cdn.jsdelivr.net https://static.claydar.com https://cdn.claydar.com; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com https://fonts.axept.io; font-src 'self' https://fonts.gstatic.com https://fonts.axept.io; img-src 'self' data: blob: https://cms.globalaegis.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://axeptio.imgix.net https://track-eu1.hubspot.com https://favicons.axept.io https://i.ytimg.com; media-src 'self' https://cms.globalaegis.net blob:; connect-src 'self' https://cms.globalaegis.net https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://client.axept.io https://static.axept.io https://api.axept.io https://forms-eu1.hscollectedforms.net https://ingesteer.services-prod.nsvcs.net https://api.claydar.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://spaces-blogs-staging-mistral-01d83c8e.koyeb.app/ https://*.demo.emmi.ai/; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://chat.mistral.ai; frame-ancestors 'none'; upgrade-insecure-requests 2 frame-ancestors 'self' https://fizy.com https://play.fizy.com; 2 frame-ancestors 'self' https://nan-net.com https://*.nan-net.com https://adacomi.com https://*.adacomi.com https://eroita.net https://*.eroita.net https://nan-net.jp https://*.nan-net.jp; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; frame-src 'self' https:; media-src 'self' https:; connect-src 'self' https:; 2 default-src 'self' *; font-src * data:; img-src * blob: data:; connect-src *; media-src * data:; object-src 'none'; style-src * 'unsafe-inline'; child-src *; worker-src * blob:; frame-ancestors 'self' *.activenetwork.com *.active.com *.activekids.com *.active.local:3000; script-src * 'unsafe-inline' 'unsafe-eval' 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googletagmanager.com *.gstatic.com *.google-analytics.com connect.facebook.net *.spotifycdn.com *.youtube.com; style-src 'self' 'unsafe-inline' *.spotifycdn.com; font-src 'self' *.scdn.co data:; img-src 'self' data: *.spotifycdn.com *.google.com *.google.cl *.googletagmanager.com *.gruposura.com *.doubleclick.net *.facebook.com *.ytimg.com; connect-src 'self' analytics.google.com *.google-analytics.com *.google.com *.spotify.com *.facebook.com ad.doubleclick.net mpc2-prod-29-is5qnl632q-uc.a.run.app 5z-2b6b761f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws; frame-src 'self' *.google.com *.googletagmanager.com *.spotify.com *.facebook.com *.youtube.com indd.adobe.com; frame-ancestors 'self'; media-src 'self' *.spotify.com *.scdn.co; object-src 'none'; base-uri 'self'; 2 frame-ancestors *.reviews.co.uk *.reviews.io 2 frame-ancestors 'self' *.purestorage.com *.pure.ai; object-src 'none'; upgrade-insecure-requests; 2 default-src 'self' *.website-files.com scribehow.com twitter.com ads-twitter.com *.finsweet.com *.intellimize.co *.intellimizeio.com *.tenor.com *.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: unpkg.com *.claydar.com *.wdfl.co *.unifyintent.com *.riverside.fm *.vimeo.com ipinfo.io *.leandata.com *.jsdelivr.net *.bigmarker.com *.redditstatic.com redditstatic.com *.byspotify.com *.website-files.com *.bing.com *.ashbyhq.com *.finsweet.com *.intellimize.co *.intellimizeio.com *.cloudflare.com scribe.involve.me *.ubembed.com *.google.com google.com *.launchnotes.io *.sentry-cdn.com *.outbrain.com *.typeform.com js.stripe.com *.profitwell.com profitwell.com *.scribehow.com scribehow.com *.customer.io *.clickagy.com *.facebook.net *.calendly.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.licdn.com *.googleanalytics.com *.ads-twitter.com *.twitter.com *.googleadservices.com *.flagsmith.com *.rollbar.com *.nr-data.net *.tiktok.com recaptcha.net *.googleapis.com *.mxpnl.com *.navattic.com *.cloudfront.net *.doubleclick.net *.intercomcdn.com *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hsappstatic.net *.mgln.ai mgln.ai *.hsforms.net *.hs-scripts.com *.usemessages.com *.hubspotusercontent-na2.net; style-src 'self' 'unsafe-inline' unpkg.com *.cloudflare.com *.google.com *.bigmarker.com *.website-files.com embed.typeform.com *.calendly.com *.googleapis.com cdn.jsdelivr.net; object-src 'none'; base-uri 'self'; connect-src 'self' unpkg.com api.claydar.com *.sentry-cdn.com *.reddit.com reddit.com riverside.com *.riverside.fm *.leandata.com hooks.zapier.com *.tiktokw.us *.bigmarker.com *.website-files.com *.pangle-ads.com *.launchnotes.io *.navattic.com *.finsweet.com *.intellimize.co *.intellimizeio.com *.ads.linkedin.com *.ubembed.com *.cloudimg.io cdn.jsdelivr.net *.profitwell.com profitwell.com *.scribehow.com scribehow.com *.google-analytics.com *.customer.io *.mixpanel.com *.calendly.com facebook.com *.s3-accelerate.amazonaws.com *.s3.us-east-2.amazonaws.com *.google.com google.com *.ingest.sentry.io *.flagsmith.com *.rollbar.com *.nr-data.net *.clickagy.com *.tenor.com *.googletagmanager.com *.facebook.com *.tiktok.com bat.bing.com *.cloudflare.com *.doubleclick.net *.hs-banner.com *.hscollectedforms.net *.s3.amazonaws.com *.unifyintent.com *.hsforms.com *.hubspot.com *.mgln.ai mgln.ai; font-src 'self' data: unpkg.com *.leandata.com *.google.com *.bigmarker.com *.launchnotes.io *.webflow.com *.gstatic.com *.website-files.com *.hsappstatic.net; frame-src 'self' *.leandata.com *.googletagmanager.com *.google.com google.com *.ubembed.com *.ashbyhq.com *.finsweet.com *.intellimize.co *.intellimizeio.com cdn.embedly.com *.launchnotes.io *.vimeo.com *.twitter.com *.typeform.com scribe.involve.me calendly.com *.clickagy.com js.stripe.com scribehow.com *.scribehow.com *.gong.io *.loom.com *.navattic.com *.facebook.com *.youtube.com td.doubleclick.net *.cloudflare.com googletagmanager.com *.hsforms.net *.hsforms.com *.hubspot.com; frame-ancestors 'self' *.scribehow.com scribehow.com; img-src 'self' data: *.cloudfront.net *.tenor.com blob: content: *.reddit.com reddit.com *.cloudflare.com *.website-files.com *.leandata.com t.co *.scribehow.com *.google.com *.profitwell.com *.finsweet.com *.intellimize.co *.intellimizeio.com *.bing.com tr.outbrain.com *.s3.amazonaws.com *.customer.io scribehow.com *.s3-accelerate.amazonaws.com *.s3.us-east-2.amazonaws.com *.googleusercontent.com *.google-analytics.com *.googletagmanager.com *.google.by *.calendly.com *.clickagy.com *.facebook.com *.rlcdn.com p.adsymptotic.com *.faviconkit.com *.gstatic.com twemoji.maxcdn.com gravatar.com pixel-sync.sitescout.com pixel.tapad.com sync.crwdcntrl.net stags.bluekai.com *.agkn.com dpm.demdex.net us-u.openx.net analytics.twitter.com *.linkedin.com *.doubleclick.net *.hsforms.com *.hubspot.com *.mgln.ai mgln.ai; manifest-src 'self'; media-src 'self' *.website-files.com *.s3.us-east-2.amazonaws.com; worker-src 'self' blob:; child-src blob:; report-uri https://68ff7b91542230bb732f6fcd.endpoint.csper.io?v=0; 2 media-src 'self' blob: livestream.st-andrews.ac.uk livestream1.st-andrews.ac.uk livestream2.st-andrews.ac.uk livestream-test.st-andrews.ac.uk; 2 default-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; media-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; prefetch-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; script-src https://www.phonepe.com https://www.googletagmanager.com https://phonepe.com https://website.phonepe.com https://www.gstatic.com https://www.google.com https://cdn.jotfor.ms https://form.jotform.me https://code.jquery.com https://www.google-analytics.com https://platform.twitter.com/ https://www.googleadservices.com https://static.ads-twitter.com https://googleads.g.doubleclick.net https://connect.facebook.net https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; style-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://cdn.jotfor.ms https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; img-src data: https://website.phonepe.com data: https://www.phonepe.com https://phonepe.com https://imgstatic.phonepe.com https://images.phonepe.com https://cdn.jotfor.ms www.googletagmanager.com 'self' https://www.google-analytics.com https://*.doubleclick.net https://adservice.google.com https://css.page-source.com https://www.google.com https://www.google.co.in https://www.facebook.com https://analytics.twitter.com https://t.co https://www.googleadservices.com/; font-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://cdn.jotfor.ms https://fonts.gstatic.com/ 'self'; connect-src https://www.google-analytics.com https://boards-api.greenhouse.io https://api.phonepe.com https://www.phonepe.com https://phon.pe https://phonepe.com https://website.phonepe.com https://insights-api.phonepe.com https://sentry.phonepe.com https://page-source.com https://css.page-source.com https://logo.page-source.com https://cdn.page-source.com https://hcaptcha.com https://*.hcaptcha.com https://www.googleadservices.com/ https://www.google.com/ 'self'; frame-src https://www.greenhouse.io https://script.google.com/a/macros/phonepe.com/ https://boards.greenhouse.io https://boards-api.greenhouse.io https://form.jotform.me https://docs.google.com https://qr.phonepe.com https://www.google.com https://phonepe.helpshift.com https://phonepe.freshdesk.com https://hcaptcha.com https://*.hcaptcha.com *.phonepe.com https://www.sisainfosec.com https://website.phonepe.com https://www.youtube.com https://platform.twitter.com/ https://*.doubleclick.net https://bugbase.ai https://hackerone.com; frame-ancestors https://mercury.phonepe.com https://mercury-t1.phonepe.com https://mercury-t2.phonepe.com https://bugbase.ai https://hackerone.com; base-uri 'self'; object-src 'none'; report-uri https://csp.phonepe.com/log 2 frame-ancestors 'self' https://app.contentstack.com https://eu-app.contentstack.com https://preview-share-ui.contentstack.com https://*.contentstackapps.com https://*.qualified.com 2 default-src 'self' 'unsafe-inline' *.criipto.id cdnjs.cloudflare.com *.maxcdn.com ajax.googleapis.com maxcdn.bootstrapcdn.com *.facebook.com *.facebook.net webhosting.dk *.webhosting.dk fonts.gstatic.com googleadservices.com doubleclick.net *.doubleclick.net *.googleadservices.com; ;frame-ancestors 'self' *.webhosting.dk webhosting.dk ajax.googleapis.com *.facebook.com *.facebook.net googleadservices.com doubleclick.net *.doubleclick.net *.googleadservices.com; img-src https://* data:; frame-src 'self' 'unsafe-inline' ajax.googleapis.com *.facebook.com *.facebook.net webhosting.dk *.webhosting.dk fonts.gstatic.com doubleclick.net *.doubleclick.net *.googleadservices.com googleadservices.com; 2 base-uri 'self'; default-src 'self' *.photonengine.com; connect-src 'self' *.photonengine.com *.azure.com *.addsearch.com *.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://static.cloudflareinsights.com ca.turing.captcha.qcloud.com https://www.turingfraud.net; frame-ancestors 'self' https://www.google.com https://recaptcha.google.com; frame-src 'self' *.photonengine.com *.google.com youtube-nocookie.com www.youtube-nocookie.com youtube.com www.youtube.com player.vimeo.com itch.io *.itch.io *.stripe.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; img-src 'self' *.photonengine.com *.azure.com https://*.google-analytics.com https://*.googletagmanager.com ca.turing.captcha.qcloud.com blob: data:; object-src 'self' *.photonengine.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com https://www.gstatic.com *.azure.com global.turing.captcha.gtimg.com ca.turing.captcha.qcloud.com *.stripe.com https://*.google-analytics.com https://*.googletagmanager.com https://static.cloudflareinsights.com https://ssl.captcha.qq.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' www.tycaptcha.com ca.turing.captcha.qcloud.com global.turing.captcha.gtimg.com; 2 default-src https://*.belastingdienst.nl https://vinden.belastingdienst.nl https://*.readspeaker.com; connect-src 'self' https://*.belastingdienst.nl https://enquete.agconsult.com https://*.readspeaker.com https://*.abtasty.com https://attachuk.imi.chat https://cdn-widget.eu.webexengage.com https://api.pdok.nl https://statistiek.rijksoverheid.nl; child-src 'self' https://belastingdienst.nl https://*.belastingdienst.nl https://secure.opinionlab.com https://*.readspeaker.com https://www.youtube.com https://www.youtube-nocookie.com ; frame-src 'self' https://*.belastingdienst.nl https://*.readspeaker.com https://secure.opinionlab.com https://www.youtube.com https://www.youtube-nocookie.com https://survey.alchemer.eu https://douane.livepresence.net https://attachuk.imi.chat; frame-ancestors 'self' https://*.belastingdienst.nl https://*.pagefreezer.com https://*.pagefreezer.nl ; img-src 'self' https://*.readspeaker.com https://statistiek.rijksoverheid.nl https://img.youtube.com data: https://*.belastingdienst.nl blob: data: *.abtasty.com; font-src 'self' https://*.belastingdienst.nl blob: data: *.abtasty.com; script-src 'self' https://*.belastingdienst.nl https://enquete.agconsult.com https://*.readspeaker.com https://attachuk.imi.chat https://statistiek.rijksoverheid.nl 'unsafe-eval' 'unsafe-inline' blob: *.abtasty.com ; style-src 'self' https://*.belastingdienst.nl https://*.readspeaker.com https://attachuk.imi.chat *.abtasty.com 'unsafe-inline' 2 default-src 'self' https://cdn.finnair.com https://pay.finnair.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.finnair.com *.googletagmanager.com https://tagmanager.google.com *.google-analytics.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://bat.bing.com https://*.akamaihd.net https://*.go-mpulse.net https://*.quantummetric.com https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://connect.facebook.net https://www.dwin1.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://snap.licdn.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com https://*.hotjar.com https://*.ads-twitter.com https://cdn.jsdelivr.net/npm/tesseract.js@v5.0.4/ https://cdn.jsdelivr.net/npm/tesseract.js-core@v5.0.0/ https://xsell.expedia.com; style-src 'self' 'unsafe-inline' *.finnair.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://*.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.reactandshare.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com; img-src 'self' data: *.finnair.com *.google-analytics.com https://*.ytimg.com https://*.akamaihd.net https://*.akstat.io https://www.googletagmanager.com https://maps.googleapis.com https://*.gstatic.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://pagead2.googlesyndication.com *.doubleclick.net https://www.googleadservices.com https://*.analytics.google.com https://www.facebook.com https://www.awin1.com https://www.dwin1.com https://cdn.smartvel.com https://bat.bing.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://analytics.twitter.com https://t.co https://script.hotjar.com https://play-lh.googleusercontent.com https://ade.googlesyndication.com https://cms-scdn.airtime.geemedia.com; manifest-src 'self' https://cdn.finnair.com; font-src 'self' data: https://cdn.finnair.com https://maps.googleapis.com https://*.gstatic.com https://cdn.smartvel.com https://cdn-qa.smartvel.com https://*.reactandshare.com https://script.hotjar.com; connect-src 'self' *.finnair.com https://sentry.io https://*.sentry.io https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://search-api.swiftype.com https://finnair-app.quantummetric.com *.google-analytics.com https://pagead2.googlesyndication.com https://www.googleadservices.com *.doubleclick.net https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://www.facebook.com https://green.am.apps.avarko.com https://*.aurinkomatkat.fi https://api.smartvel.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://finnair-app-search.ent.eu-central-1.aws.cloud.es.io https://*.reactandshare.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://*.analytics.twitter.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.safetravel.amadeus.com https://wasm.oho.prd.icm.aero; child-src 'self' https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://www.facebook.com https://staticxx.facebook.com blob:; frame-src 'self' https://sst.finnair.com https://*.force.com https://*.salesforce.com https://*.my.site.com https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://api-dev.finnair.com https://api-test.finnair.com https://api-preprod.finnair.com https://3530909.fls.doubleclick.net https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://finnair.eu.qualtrics.com https://www.facebook.com https://*.points.com https://13389050.fls.doubleclick.net https://vars.hotjar.com https://product-router.cartrawler.com https://*.hotels.finnair.com; worker-src 'self' https://finnair.3dseatmapvr.com blob:; sandbox allow-popups allow-forms allow-scripts allow-same-origin allow-modals allow-popups-to-escape-sandbox allow-top-navigation allow-downloads; frame-ancestors 'self'; object-src 'none'; media-src https://finnair.3dseatmapvr.com https://cdn.finnair.com; 2 frame-ancestors 'self' https://classroom-82f94.web.app https://classroom-82f94.firebaseapp.com https://*.tutorix.com http://localhost:5173; 2 default-src 'self' blob: *.line-scdn.net *.bb-os.com *.bb-st.com *.teststar.cc;img-src 'self' data: blob: https: * *.google-analytics.com;style-src 'self' https: 'unsafe-inline' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.teststar.cc *.bb-os.com *.bb-st.com *.webpushs.com *.legendtrading.com *.sendpulse.com *.bing.com cdn.jsdelivr.net *.crowdin.com *.bingx.com *.googletagmanager.com static.zdassets.com *.google-analytics.com ajax.cloudflare.com *.geetest.com *.qbox.me *.zopim.com *.tradingview.com *.twitter.com *.recaptcha.net *.google.com *.facebook.net *.facebook.com *.tiktok.com *.gstatic.com *.botlabpro.com *.netshunt.com *.botion.com *.doubleclick.net *.googleadservices.com *.volccdn.com *.ibytedtos.com fpnpmcdn.net fpcdn.io *.prdredir.com *.geevisit.com *.mql5.com *.taboola.com *.ads-twitter.com *.yandex.ru adscool.net *.zendesk.com *.appsflyer.com *.guance.com *.koinx.co *.koinfuture.com *.kointrade.io *.youtube.com appleid.cdn-apple.com storage.googleapis.com *.clarity.ms *.houtai.io *.line-scdn.net *.appsflyersdk.com;connect-src 'self' 'unsafe-inline' data: blob: * *.fptls.com api.fpjs.io *.api.fpjs.io fp.bingx.com *.line-scdn.net;form-action 'self' *.facebook.com *.facebook.net *.advcash.com *.mrcr.io *.mercuryo.io bingxservice.zendesk.com;frame-src 'self' blob: *;object-src 'none';font-src 'self' data: *;media-src 'self' * blob:;manifest-src 'self' 'unsafe-inline' 'unsafe-eval' *.line-scdn.net;worker-src blob: *;child-src blob: * 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' ipredictive.com adgrx.com demdex.net dpm.demdex.net adyen.com ads.yieldmo.com sync-criteo.ads.yieldmo.com *.scene7.com *.amazonaws.com www.dwin1.com adnxs.com ib.adnxs.com secure.adnxs.com attentivemobile.com events.attentivemobile.com attn.tv *.audioeye.com bidswitch.net x.bidswitch.net *.bing.com *.btttag.com *.bluecore.com bluekai.com tags.bluekai.com *.creativecdn.com certona.net edge1.certona.net *.res-x.com *.cloudfront.net cloudfront.net *.coach.com coach.com cohimg.net img1.cohimg.net cquotient.com criteo.com criteo.net *.criteo.net *.criteo.com w55c.net *.doubleclick.net *.facebook.com *.facebook.net facebook.net fonts.net fast.fonts.net *.forter.com forter.com stickyadstv.com ads.stickyadstv.com *.fwmrm.net *.google.com *.google.com.pr www.google.ie *.google.hn www.google.com.au www.google.vg www.google.com.bz www.google.pt www.google.ru www.google.lv www.google.com.uy www.google.nl www.google.com.eg www.google.mv www.google.com.mm www.google.com.ng www.google.com.sa www.google.de www.google.cd www.google.co.il www.google.com.ec www.google.com.ph www.google.cn www.google.com.qa www.google.bs www.google.es www.google.gy www.google.co.ma www.google.com.ly www.google.co.zm www.google.tn www.google.com.tr www.google.com.ag www.google.be www.google.sn www.google.com.kw www.google.co.vi *.google.com.do www.google.pl www.google.co.nz www.google.kz www.google.hu www.google.co.ke www.google.ro www.google.is www.google.mu www.google.am www.google.com.py www.google.com.kh www.google.ba www.google.co.za www.google.com.sg www.google.com.bo www.google.sk www.google.com.gh www.google.sr www.google.co.th www.google.ci www.google.ch www.google.com.pa www.google.ht www.google.cl www.google.co.kr www.google.com.tw www.google.co.uk www.google.gl www.google.com.sv www.google.com.gt www.google.fr www.google.co.cr www.google.com.hk www.google.co.ls *.gstatic.com www.google.com.my *.google.co.in www.google.co.jp *.google.com.co *.google.com.pe www.google.ca www.google.se www.google.tt www.google.ae www.google.com.vn www.google.com.ar www.google.com.br www.google.co.ve www.google.com.mx www.google.com.ni www.google.com.ua www.google.as *.google.com.jm www.googleadservices.com googleapis.com *.googleapis.com cloudfunctions.net *.cloudfunctions.net www.googletagmanager.com *.google-analytics.com 360yield.com ad.360yield.com casalemedia.com *.casalemedia.com ivitrack.com jsdelivr.net *.jsdelivr.net klarna.com *.klarna.com klarnacdn.net *.klarnacdn.net klarnaevt.com *.klarnaevt.com *.klarnaservices.com linksynergy.com *.linksynergy.com liadm.com *.liadm.com addressy.com api.addressy.com pcapredict.com tapes11111.pcapredict.com crwdcntrl.net media.net contextual.media.net mathtag.com mediavine.com exchange.mediavine.com mediawallahscript.com partner.mediawallahscript.com *.mountain.com mountain.com micpn.com *.micpn.com cookielaw.org cdn.cookielaw.org postrelease.com jadserve.postrelease.com agkn.com aa.agkn.com onetrust.com *.online-metrix.net *.optimizely.com optimizely.com outbrain.com sync.outbrain.com *.paypal.com www.paypalobjects.com pinimg.com s.pinimg.com pinterest.com *.pinterest.com pdst.fm cdn.pdst.fm pubmatic.com simage2.pubmatic.com *.quantummetric.com quantummetric.com *.rakuten.com rmtag.com intljs.rmtag.com rlcdn.com *.rlcdn.com revcontent.com trends.revcontent.com rubiconproject.com pixel.rubiconproject.com force.com *.force.com my.salesforce.com *.my.salesforce.com *.salesforceliveagent.com sharethrough.com match.sharethrough.com signifyd.com *.signifyd.com sitescout.com smartadserver.com rtb-csync.smartadserver.com sc-static.net *.snapchat.com loopassets.net qa-specops.loopassets.net taboola.com sync-t1.taboola.com tangiblee.com *.tangiblee.com tapad.com tapestry.tapad.com teads.tv criteo-sync.teads.tv *.tiktok.com adsrvr.org *.adsrvr.org tremorhub.com criteo-partners.tremorhub.com 3lift.com eb2.3lift.com twitter.com *.twitter.com ads-twitter.com static.ads-twitter.com t.co ad.smaato.net s.ad.smaato.net clmbtech.com ade.clmbtech.com mdhv.io jelly.mdhv.io postcodeanywhere.co.uk services.postcodeanywhere.co.uk rqtrk.eu ws.rqtrk.eu techlab-cdn.com p11.techlab-cdn.com *.yext-pixel.com *.adyen.com *.attn.tv *.cquotient.com *.onetrust.com cloudflare.com cdnjs.cloudflare.com coach.comis images.coach.comis a.bigcontent.io *.a.bigcontent.io api2.fonts.com dynl.mktgcdn.com m.media-amazon.com apay-us.amazon.com static-na.payments-amazon.com *.drivecommerce.com visitor.omnitagjs.com matching.ivitrack.com ad.tpmn.co.kr *.socdm.com *.shoppinggives.com *.loveslisa.tech *.iesnare.com *.cloudinary.com *.yahoo.com consent.nxtck.com consent.mediaforge.com consent.jrs5.com *.smooch.io *.my.salesforce-sites.com *.salesforce-scrt.com *.my.site.com *.drrv.co *.googlesyndication.com googlesyndication.com *.needle.com *.mapbox.com www.upsellit.com shareasale.com api.fillr.com smct.co edgeshoppingstatic.azureedge.net api.bounce-commerce.de preview.babylonjs.com *.instagram.com *.youtube.com youtube.com rstyle.me *.narvar.com www.out.com www.cosmopolitan.com www.ecosia.org slooks.top *.reddit.com *.rakuten.ca www.groupon.com shrturl.site www.byrdie.com www.tsawwassenmills.com www.lyst.com www.retailmenot.com www.shopittome.com *.dealmoon.com appium.io mobile.ebates.com www.elle.com *.55haitao.com www.latimes.com theeverygirl.com www.instyle.com www.refinery29.com clothedup.com nymag.com *.affirm.com *.qualtrics.com sentry.io *.sentry.io cdn.shopping.gives api.thegreenwebfoundation.org *.amplience.net cdn.honey.io m.huaren.us app.partnerboost.com *.studentbeans.com www.forbes.com findsimilar.com bellejamericancarnival.weebly.com yandex.ru *.yandex.ru brokescholar.com modesens.com arise.okta.com adx.dable.io www.gravatar.com email.traversedlp.com usage.trackjs.com unpkg.com *.ibosscloud.com *.shoplooks.com fonts.bunny.net www.aadvantageeshopping.com pippio.com um.simpli.fi *.kampyle.com *.medallia.com cs.adingo.jp sync.aralego.com www.talkable.com *.pfizer.com www.lrb.co.uk www.thebrandcloset.com static.lisa-cdn.net yastatic.net cm.adform.net id5-sync.com s.thebrighttag.com ad.yieldlab.net *.krxd.net cdn.aralego.net match.prod.bidr.io cms.quantserve.com app.collectivevoice.com *.rewardStyle.com brandcycle.net smilekols.com go.magik.ly media.paroleparis.com c.fanstoshop *.monetate.net *.bluecore.app *.pub.lilyai.net amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon *.tapestry.com *.pixlee.co *.turnto.com *.edgecastcdn.net *.pixlee.com *.pixleeteam.com *.pxlecdn.com *.shopify.com *.cdn.shopifycloud.com shop.app *.shopifysvc.com *.stripe.com *.afterpay.com *.squarecdn.com *.collect.igodigital.com *.kahoona.io api.cash.app cash.app *.xgen.dev *.xgen.ai affirm.com *.securedvisit.com *.sv.rkdms.com bing.net bing.com bat.bing.net *.bc0a.com adservice.google.co.id cm.adgrx.com klarnaservices.com pmwclnsg.micpn.com online-metrix.net snapchat.com tr.snapchat.com trackjs.com doubleclick.net api.images.drivecommerce.com sync.1rx.io he.lijit.com e.dlx.addthis.com 68794905.akstat.io trial-eum-clienttons-s.akamaihd.net login.dotomi.com beacon.krxd.net aorta.clickagy.com thrtle.com p.alcmpn.com statsigapi.net www.yext-pixel.com cdn.ivaws.com sas.selleramp.com 905trk.com www.shopstyle.com www.foxnews.com tracking.narvar.com mostlycoupons.com rd.bizrate.com lustrelife.com www.bradsdeals.com www.dealmoon.ca coccoc.com capitaloneshopping.com www.buyandship.today thecouponboutique.com www.premiumoutlets.com m.baidu.com www.supermama.lt www.simon.com ww55.affinity.net www.savewithsydney.com mpsnare.iesnare.com www.buyma.com fonts.cdnfonts.com safe.menlosecurity.com s.pubmine.com i.ytimg.com brandcycle.trackonomics.net www.metziahs.com tag.yieldoptimizer.com link.shoplooks.com *.kargo.com cms.coachoutlet.com track.sv.rkdms.com lantern.roeyecdn.com pixels.spotify.com *.rioseo.com chatapps-us.netomi.com tapestry.sjv.io *.impct.site *.queue-it.net www.ojrq.net utt.impactcdn.com wss://*.amazonaws.com applepay.cdn-apple.com data: blob:; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' zingtree.com *.zingtree.com ajax.googleapis.com livehelpnow.net *.livehelpnow.net developer.livehelpnow.net cdn.polyfill.io www.googletagmanager.com www.google-analytics.com unpkg.com youtube.com *.youtube.com cdnjs.cloudflare.com cdn.jsdelivr.net fulview.io *.fulview.io www.gstatic.com clarity.ms *.clarity.ms static.addtoany.com *.google.com *.google *.googleadservices.com *.feathr.co *.cookiepro.com *.zohopublic.com *.zohostatic.com web.propfuel.com connect.facebook.net js.zohocdn.com cdn.propfuel.com static.zohocdn.com; style-src 'self' 'unsafe-inline' zingtree.com *.zingtree.com fontawesome.com *.fontawesome.com fonts.googleapis.com fonts.gstatic.com cdn.jsdelivr.net livehelpnow.net *.livehelpnow.net unpkg.com cdnjs.cloudflare.com use.typekit.net p.typekit.net *.google.com *.zohocdn.com *.zohostatic.com; img-src 'self' data: livehelpnow.net *.livehelpnow.net www.google-analytics.com www.googletagmanager.com cdn.jsdelivr.net clarity.ms *.clarity.ms www.ala.org live-alaorg.pantheonsite.io *.googleusercontent.com *.google.com *.gstatic.com *.google *.goog *.gstatic.com *.feathr.co match.adsrvr.org cookie-cdn.cookiepro.com www.facebook.com *.zohopublic.com www.google.com.gt; media-src 'self' developer.livehelpnow.net fulview.io *.fulview.io; frame-src 'self' static.addtoany.com youtube.com *.youtube.com airtable.com *.airtable.com embed.wakelet.com *.google.com www.swissarmylibrarian.net *.goog *.google https://alacorenews.org *.vimeo.com *.billtrack50.com *.flourish.studio *.canva.com https://alacore.org/ www.facebook.com; font-src 'self' data: fonts.gstatic.com use.typekit.net p.typekit.net fontawesome.com *.fontawesome.com cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com *.zohocdn.com *.zohostatic.com *.zohopublic.com; connect-src 'self' cdn.jsdelivr.net *.google *.google.com *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.zohopublic.com *.cookiepro.com *.feathr.co *.adsrvr.org geolocation.onetrust.com web.propfuel.com; report-uri /report-csp-violation 2 default-src 'self' 'unsafe-inline' miraheze.org donate.miraheze.org static.miraheze.org static.wikitide.net cdnjs.cloudflare.com cdn.jsdelivr.net analytics.wikitide.net; 2 default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js *.youtube.com https://www.googletagmanager.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com *.fontawesome.com use.fontawesome.com api.connectedcommunity.org http://www.lifescitrc.org https://cdn.feathr.co cdn.feathr.co polo.feathr.co marco.feathr.co *.crazyegg.com *.hotjar.com *.informz.net *.surveymonkey.com *.cloudfront.net *.ngpvan.com *.everyaction.com *.research.net *.tickcounter.com *.smassets.net *.rdmobile.com *.wistia.net *.vimeo.com voicesofaps.gv-one.com apsoc.informz.net https://code.jquery.com *.photoshelter.com *.jquery.com blob: cdnjs.cloudflare.com fe.sitedataprocessing.com taps.photoshelter.com 'self' https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com www.googletagmanager.com use.fontawesome.com *.fontawesome.com use.typekit.net p.typekit.net *.crazyegg.com *.hotjar.com *.cloudfront.net *.everyaction.com *.tickcounter.com *.smassets.net *.research.net *.wistia.net *.rdmobile.com *.vimeo.com *.photoshelter.com 'self' https://cdn.insight.sitefinity.com 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com *.twimg.com data: blob: novartis.contacthr.com novartispharmaceuticalscorp.contacthr.com *.google-analytics.com https://www.googletagmanager.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com twitter.com *.twitter.com use.fontawesome.com *.eloqua.com *.physiology.org connect.the-aps.org *.cloudfront.net *.placehold.it stats.g.doubleclick.net marco.feathr.co *.adsrvr.org polo-v1.feathr.co polo.feathr.co *.crazyegg.com *.hotjar.com *.informz.net *.surveymonkey.com *.everyaction.com *.tickcounter.com *.rdmobile.com *.vimeo.com picsum.photos *.picsum.photos s3.amazonaws.com voicesofaps.gv-one.com *.photoshelter.com 'self' https://cdn.insight.sitefinity.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.fontawesome.com use.fontawesome.com use.typekit.net *.crazyegg.com *.hotjar.com *.everyaction.com *.tickcounter.com *.rdmobile.com; frame-src 'self' *.facebook.com novartis.contacthr.com novartispharmaceuticalscorp.contacthr.com www.youtube.com api.connectedcommunity.org cdn.feathr.co polo.feathr.co marco.feathr.co *.qzzr.com *.crazyegg.com *.hotjar.com twitter.com *.twitter.com html5-player.libsyn.com www.podbean.com *.surveymonkey.com *.ngpvan.com *.cloudfront.net *.everyaction.com *.tickcounter.com *.smassets.net *.research.net *.wistia.net *.vimeo.com voicesofaps.gv-one.com apsoc.informz.net *.photoshelter.com *.googletagmanager.com; connect-src *.google-analytics.com *.informz.net polo.feathr.co *.crazyegg.com *.doubleclick.net *.ngpvan.com *.cloudfront.net *.everyaction.com *.tickcounter.com *.smassets.net *.research.net *.wistia.net *.rdmobile.com *.vimeo.com *.fontawesome.com *.photoshelter.com *.googletagmanager.com fe.sitedataprocessing.com 'self' *.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: www.youtube.com fast.wistia.net *.vimeo.com voicesofaps.gv-one.com *.photoshelter.com; child-src 'self' blob: 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: www.googletagmanager.com www.google-analytics.com cache.img.gmo.jp siteseal.gmo-cybersecurity.com gmo-cybersecurity.com seal.atlas.globalsign.com www.value-server.com www.coreserver.jp www.google.co.jp code.jquery.com connect.facebook.net www.google.com googleads.g.doubleclick.net static.cloudflareinsights.com static.ads-twitter.com minerva-deliver.sp.gmossp-sp.jp *.clarity.ms analytics.twitter.com t.co cdnjs.cloudflare.com www.youtube.com analytics.ahrefs.com www.googleadservices.com analytics.google.com stats.g.doubleclick.net www.facebook.com; 2 img-src * data:; font-src * data:; connect-src * data:; media-src * data: blob:; object-src *; frame-ancestors 'self' https://advancedmd-hub.knowledgeowl.com https://static-100.advancedmd.com https://static-999.advancedmd.com; 2 frame-ancestors 'self' https://store-qa2.enphase.com https://store.enphase.com/ 2 frame-ancestors 'self' https://vk.com https://m.vk.com http://awards.ratingruneta.ru; 2 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; 2 frame-ancestors https://hpsecurity.my.salesforce.com; 2 default-src 'unsafe-inline' 'unsafe-eval' 'self' data: * blob: *; frame-src 'self' blob: *; frame-ancestors 'self' https://*.peta.org https://*.peta2.com https://*.petalatino.com https://*.animalrahat.com; media-src 'self' blob: *;worker-src 'self' blob: *; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://platform.twitter.com https://cdn-cookieyes.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com; img-src 'self' data: blob: https://coin-images.coingecko.com https://static.news.bitcoin.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://fonts.gstatic.com https://cdn-cookieyes.com https://form.typeform.com https://bitcoin.bamboohr.com https://docs.google.com https://map.bitcoin.com https://i.ytimg.com https://www.youtube-nocookie.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://prod.api.wombat.systems https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://cdn-cookieyes.com https://*.cookieyes.com; frame-ancestors 'self' https://www.notbcomcms.com; frame-src 'self' https://www.youtube.com/ https://platform.twitter.com https://www.google.com https://storelocator.page/ https://www.googletagmanager.com https://form.typeform.com https://bitcoin.bamboohr.com https://docs.google.com https://map.bitcoin.com https://i.ytimg.com https://www.youtube-nocookie.com; media-src 'self'; base-uri 'self'; form-action 'self' 2 default-src 'self'; script-src 'self' 'unsafe-inline' www.gstatic.com www.google.com stats.epic.com; child-src embed-ssl.ted.com embed.ted.com e.issuu.com secure.quantserve.com sentry.issuu.com pingback.issuu.com www.youtube.com player.vimeo.com www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; form-action 'self'; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; connect-src 'self' www.google.com stats.epic.com; img-src 'self' data: stats.epic.com i.ytimg.com media.epic.com media.epic.com epicshare.blob.core.windows.net media.epic.com; 2 object-src 'none'; style-src 'unsafe-inline' 'self' *; font-src 'self' * data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: *; frame-ancestors 'self' ; frame-src 'self' *; connect-src 'unsafe-inline' 'unsafe-eval' 'self' blob: * 2 default-src 'self'; connect-src 'self' *.aptrinsic.com; font-src 'self' fonts.gstatic.com; frame-ancestors 'self' *.emplifi.io; frame-src 'self' mailto: www.youtube.com; img-src * data:; script-src 'unsafe-eval' 'self'; script-src-attr 'unsafe-inline' 'self'; script-src-elem 'unsafe-inline' 'self' *.aptrinsic.com; style-src-attr 'unsafe-inline' 'self'; style-src-elem 'unsafe-inline' 'self' fonts.googleapis.com code.getmdl.io 2 img-src 'self' data: https://img.youtube.com/ https://cookie-cdn.cookiepro.com/ https://cdn5.dcbstatic.com/ https://*.wistia.com https://*.wistia.net https://secure.gravatar.com/ https://www.googletagmanager.com https://brandcentral.cambiumnetworks.com/ https://assets.ept.ai https://px.ads.linkedin.com/ https://www.facebook.com https://alb.reddit.com/ https://www.linkedin.com/px/li_sync https://px4.ads.linkedin.com https://www.cambiumnetworks.com; script-src 'self' 'unsafe-inline' *.algolia.net *.algolianet.com *.algolia.io *.leadinfo.net https://browser.sentry-cdn.com/9.6.1/bundle.min.js https://insights.algolia.io/ pi.pardot.com go.cambiumnetworks.com cdn.jsdelivr.net code.jquery.com https://g10102301085.co/ https://g10498469755.co/ https://cookie-cdn.cookiepro.com/ https://ws.zoominfo.com/ https://js.zi-scripts.com https://*.wistia.com/ https://*.wistia.net/ https://cdnjs.cloudflare.com/ https://www.googletagmanager.com/ tags.clickagy.com https://cdn.leadinfo.net/ping.js https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/rW64dpMGAGrjU7JJQr9xxPl8/recaptcha__fr.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://connect.facebook.net https://www.redditstatic.com/ads/pixel.js https://www.youtube.com/iframe_api https://www.youtube.com/ https://snap.licdn.com/li.lms-analytics/insight.old.min.js *.ept.ai/chat/ https://assets.ept.ai/chat/v0/ept_chat_loader.bundle.js blob:; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io *.cookiepro.com *.wistia.net https://browser.sentry-cdn.com/ https://js.zi-scripts.com/unified/v1/master/getSubscriptions https://js.zi-scripts.com/unified/v1/master/logError https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://api.lever.co/ https://ws.zoominfo.com/ https://www.google-analytics.com/ aorta.clickagy.com hemsync.clickagy.com https://pipedream.wistia.com/ *.leadinfo.net https://api.leadinfo.com/ https://px.ads.linkedin.com/ https://pixel-config.reddit.com/pixels/a2_grewe3t1gwnn/config https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/a2_grewe3t1gwnn_telemetry https://conversions-config.reddit.com/v1/pixel/error https://www.facebook.com/privacy_sandbox/topics/registration/ https://noembed.com/embed wss://ws.api.ept.ai/ https://assets.ept.ai/chat/ https://js.zi-scripts.com/unified/v1/master/telemetry/batch https://chat.ept.ai/access_token/api/v1/access_token https://cdn.plyr.io/3.5.6/plyr.svg; upgrade-insecure-requests; base-uri 'none'; frame-src 'self' https://www.googletagmanager.com https://go.cambiumnetworks.com https://www.youtube.com/ https://*.wistia.net hemsync.clickagy.com https://app.teamwalnut.com https://www.youtube-nocookie.com/ https://www.google.com/ https://support.cambiumnetworks.com/ https://app.powerbi.com/; object-src 'self' https://www.cambiumnetworks.com/ https://cambiumstaging.wpengine.com https://cndevelopment.wpengine.com; 2 default-src 'self'; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com https://*.googletagmanager.com cdnjs.cloudflare.com *.google.com.sg *.google.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.facebook.com www.redditstatic.com *.linkedin.com *.bilibili.com *.youtube-nocookie.com https://player.vimeo.com https://platform.twitter.com fonts.gstatic.com kendo.cdn.telerik.com https://libapp.ntu.edu.sg https://syndication.twitter.com https://static.licdn.com *.insight.sitefinity.com https://dec.azureedge.net/ https://*.dec.sitefinity.com https://dc.services.visualstudio.com pbs.twimg.com track.hubspot.com https://i.ytimg.com netdna.bootstrapcdn.com *.cloudfront.net https://www.thinglink.com data: js.hs-scripts.com js.hs-analytics.net cdn.ampproject.org *.ntu.edu.sg https://ntu-cris-test.4science.cloud https://az416426.vo.msecnd.net/scripts/a/ai.0.js *.mapsindoors.com https://cdn.applozic.com/applozic/applozic.chat-6.1.min.js *.cognitoforms.com *.usetiful.com https://snap.licdn.com https://js.hs-banner.com https://js.hsadspixel.net https://js.hsleadflows.net *.g.doubleclick.net wss://socket2.applozic.com *.typeform.com *.hubspotusercontent40.net *.hubapi.com *.hubspot.com *.hsforms.com *.dialogflow.com walls.io *.walls.io *.surveysparrow.com app.sli.do www.pbrain.biz cdn.unibuddy.co unibuddy.co *.launchpad6.com *.hscta.net *.hscollectedforms.net *.hsforms.net *.hubspotusercontent00.net *.hubspotusercontent-na1.net *.tableau.com https://analytics.tiktok.com *.accredify.io schemata.openattestation.com *.viziofly.com *.hs-sites.com https://popcard.unibuddy.co/ https://cdn.thinglink.me/jse/responsive.js *.dacast.com https://ntu.imail-host.com https://cdn.jsdelivr.net https://forms.office.com *.superchar.xyz https://assets.pxlecdn.com/assets/pixlee_widget_1_0_0.js https://assets.pixlee.com/assets/fp.js https://photos.pixlee.co superchar.xyz https://*.ntuinnovates.world https://ntuinnovates.world https://app-script.monsido.com https://*.doubleclick.net https://14120583.fls.doubleclick.net https://cdn.mathjax.org *.sharethis.com https://lib-essential.netlify.app https://api.sg.kaltura.com https://www.usetiful.com https://youtu.be https://www.google-analytics.com https://analytics.google.com https://www.google.com.sg https://td.doubleclick.net https://www.facebook.com https://w.soundcloud.com https://www.cognitoforms.com eBooks.ntu.edu.sg https://player.bilibili.com https://assets.tumblr.com https://*.tiktok.com https://*.instagram.com https://heatmaps.monsido.com https://sf16-website-login.neutral.ttwstatic.com https://*.omappapi.com https://*.srv.stackadapt.com https://*.usemessages.com https://*.hs-sites.com https://*.js.hscta.net *.hsadspixel.net *.hs-analytics.net *.usemessages.com *.hs-banner.com *.hsleadflows.net *.hs-scripts.com https://*.ntu.edu.sg https://www.pbrain.biz https://ntu-uat-tms.dev.edutechonline.org https://edustoragemazuat4sg.blob.core.windows.net/ https://a.optinmonster.com/app/js/prebid-ads.js *.dialogshield.ai https://*.theaccessplatform.com https://*.maglr.com https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://app.mapsindoors.com https://www.usetiful.com https://platform.twitter.com https://youtu.be https://www.google-analytics.com https://player.vimeo.com https://publish.twitter.com https://analytics.google.com https://www.google.com.sg https://td.doubleclick.net https://www.facebook.com https://w.soundcloud.com https://ntu.imail-host.com https://forms.office.com https://www.cognitoforms.com *.cloudfront.net eBooks.ntu.edu.sg https://player.bilibili.com https://assets.tumblr.com https://libapp.ntu.edu.sg https://sf16-website-login.neutral.ttwstatic.com https://*.maglr.com https://*.fs1.hubspotusercontent-na1.net https://*.hsforms.com https://*.omappapi.com https://www.pbrain.biz https://tags.srv.stackadapt.com https://*.hs-sites.com *.hsadspixel.net *.hs-analytics.net *.hubapi.com js.hscta.net *.hubspot.com *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent40.net *.hsleadflows.net *.hsforms.net *.hs-scripts.com https://*.ntu.edu.sg https://my.walls.io *.hubspotusercontent-na1.net *.dialogshield.ai https://*.theaccessplatform.com https://cdn.insight.sitefinity.com 'unsafe-inline'; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com *.sharethis.com https://*.mapsindoors.com https://www.usetiful.com https://platform.twitter.com https://youtu.be https://www.google-analytics.com https://player.vimeo.com https://publish.twitter.com https://analytics.google.com https://www.google.com.sg https://td.doubleclick.net https://www.facebook.com https://w.soundcloud.com https://ntu.imail-host.com https://forms.office.com https://www.cognitoforms.com *.cloudfront.net eBooks.ntu.edu.sg https://player.bilibili.com https://assets.tumblr.com https://libapp.ntu.edu.sg https://tracking.monsido.com https://vodcdn.sg.kaltura.com https://*.hubspot.com https://ntu-cris-test.4science.cloud/ https://ntu-sg-dr.prod.4science.cloud/ https://dr.ntu.edu.sg/ https://ntu-sg-dr.staging.4science.cloud https://*.maglr.com https://*.doubleclick.net https://px.ads.linkedin.com https://www.google.com https://*.hsforms.com https://tags.srv.stackadapt.com https://*.hs-sites.com https://*.js.hscta.net *.hsadspixel.net *.hs-analytics.net *.hubapi.com js.hscta.net *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent40.net *.hsleadflows.net *.hsforms.net *.hs-scripts.com https://*.hsappstatic.net https://*.ntu.edu.sg https://www.pbrain.biz https://*.omappapi.com https://my.walls.io *.hubspotusercontent-na1.net https://*.fs1.hubspotusercontent-na1.net https://*.turn.com https://ntu-uat-tms.dev.edutechonline.org https://edustoragemazuat4sg.blob.core.windows.net/ https://*.google.co.in/ https://vitstorageprodprojsg.blob.core.windows.net/ https://*.fs1.hubspotusercontent-na2.net https://*.googleadservices.com https://cdn.usetiful.com https://*.theaccessplatform.com https://*.theambassadorplatform.com https://*.stagingmag.nl https://cdn.insight.sitefinity.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://cdnjs.cloudflare.com https://platform.twitter.com https://youtu.be https://www.google-analytics.com https://player.vimeo.com https://publish.twitter.com https://analytics.google.com https://www.google.com.sg https://td.doubleclick.net https://www.facebook.com https://w.soundcloud.com *.googleapis.com https://ntu.imail-host.com https://forms.office.com https://www.cognitoforms.com *.cloudfront.net eBooks.ntu.edu.sg https://player.bilibili.com https://assets.tumblr.com https://libapp.ntu.edu.sg https://api.sg.kaltura.com https://*.hsforms.com https://*.hs-sites.com https://*.js.hscta.net *.hsadspixel.net *.hs-analytics.net *.hubapi.com js.hscta.net *.hubspot.com *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent40.net *.hsleadflows.net *.hsforms.net *.hs-scripts.com https://*.ntu.edu.sg https://my.walls.io *.hubspotusercontent-na1.net https://*.maglr.com https://*.theaccessplatform.com; frame-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com superchar.xyz *.superchar.xyz *.sharethis.com https://www.youtube.com https://platform.twitter.com https://youtu.be https://www.google-analytics.com https://player.vimeo.com https://publish.twitter.com https://analytics.google.com https://www.google.com.sg https://td.doubleclick.net https://www.facebook.com https://w.soundcloud.com *.googleapis.com https://ntu.imail-host.com https://forms.office.com https://www.cognitoforms.com *.cloudfront.net eBooks.ntu.edu.sg https://player.bilibili.com https://assets.tumblr.com https://libapp.ntu.edu.sg https://walls.io *.facebook.com/ *.bilibili.com/ https://www.thinglink.com/ https://*.unibuddy.co https://*.instagram.com https://unibuddy.co/ https://www.tiktok.com/ https://ntu-cris-test.4science.cloud/ https://ntu-sg-dr.prod.4science.cloud/ https://dr.ntu.edu.sg/ https://ntu-sg-dr.staging.4science.cloud/ https://www.googletagmanager.com https://*.fls.doubleclick.net https://www.google.com https://www.linkedin.com https://*.hsforms.com https://www.pbrain.biz https://*.hs-sites.com https://*.js.hscta.net https://cdn.knightlab.com https://pace-ntu-8688058.hs-sites.com *.hsadspixel.net *.hs-analytics.net *.hubapi.com js.hscta.net *.hubspot.com *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent40.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com https://lib-essential.netlify.app https://*.ntu.edu.sg https://*.omappapi.com https://my.walls.io *.hubspotusercontent-na1.net https://cdn.forms-content.sg-form.com https://*.theaccessplatform.com https://*.hs-sites-na2.com https://*.maglr.com; connect-src 'self' data: accounts.google.com *.google-analytics.com *.gstatic.com https://*.googletagmanager.com https://*.googleapis.com/ *.sharethis.com https://maps.googleapis.com *.mapsindoors.com https://dialogflow.cloud.google.com https://api.ntu.edu.sg/ariba/supplierportal https://www.google-analytics.com https://www.usetiful.com https://platform.twitter.com https://youtu.be https://player.vimeo.com https://publish.twitter.com https://analytics.google.com https://www.google.com.sg https://td.doubleclick.net https://www.facebook.com https://w.soundcloud.com *.googleapis.com https://ntu.imail-host.com https://forms.office.com https://www.cognitoforms.com *.cloudfront.net eBooks.ntu.edu.sg https://player.bilibili.com https://assets.tumblr.com https://libapp.ntu.edu.sg https://c.ltmsphrcl.net https://analytics.sg.kaltura.com https://data.stbuttons.click https://*.crwdcntrl.net https://www.google.com https://px.ads.linkedin.com https://analytics.tiktok.com https://api.hubapi.com https://cta-service-cms2.hubspot.com https://*.hubspot.com https://*.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://www.linkedin.com https://*.omappapi.com https://tags.srv.stackadapt.com https://*.hs-sites.com https://*.js.hscta.net *.hsadspixel.net *.hs-analytics.net *.hubapi.com *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent40.net *.hsleadflows.net *.hsforms.net *.hs-scripts.com https://*.ntu.edu.sg https://www.pbrain.biz https://my.walls.io *.hubspotusercontent-na1.net *.g.doubleclick.net https://google.com https://api.sendgrid.com https://ad.doubleclick.net https://analytics-ipv6.tiktokw.us/ipv6/enrich_ipv6 *.dialogshield.ai https://*.hsappstatic.net https://*.googleadservices.com https://*.maglr.com https://*.theaccessplatform.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: https://*.kaltura.com https://*.maglr.com https://*.stagingmag.nl; child-src 'self'; worker-src blob: https://*.maglr.com 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: webpack-internal: webpack: blob: https://*.calltouch.ru https://*.calltouch.net wss://ws.calltouch.ru https://ab-ct.ru https://aw-demo.ru https://*.addevent.com https://addevent.com https://*.adriver.ru push4site.com https://ads.betweendigital.com https://adservice.google.com https://*.ad.smaato.net https://*.analytics.google.com https://analytics.google.com https://an.yandex.ru https://anycomment.io https://api.enkod.ru https://api-maps.yandex.ru https://api.tomi.ai https://*.bidswitch.net https://bitrix.info https://*.botfaqtor.ru https://*.bumlam.com https://calltouchru.push4site.com https://cdn.accutics.net https://cdn.anycomment.io https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com/jquery-migrate-1.4.1.min.js https://connect.facebook.net https://const.uno *.digitaltarget.ru https://dm.hybrid.ai https://*.facebook.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.googleapis.com https://*.googleusercontent.com https://*.gstatic.com https://*.hybrid.ai https://ib.adnxs.com https://*.integrations-hub.ru https://inv-nets.admixer.net https://leonardo.osnova.io https://linur.dj https://madte.st https://*.mail.ru https://manalyticshub.com https://match.new-programmatic.com/userbind https://mc.yandex.com https://mc.yandex.md https://mc.yandex.ru https://*.openx.net https://*.beeline.ru https://*.ops.beeline.ru https://pixel.onaudience.com https://push4site.com https://redirect.frontend.weborama.fr https://*.witstroom.com https://secure.gravatar.com https://ssp.bestssp.com https://static.terratraf.io https://smartcaptcha.yandexcloud.net https://sync.bumlam.com https://tags.soloway.ru https://td.doubleclick.net https://tech.rtb.mts.ru https://*.tildacdn.com https://track.onef.pro https://*.turbotargeting.io https://unpkg.com/swiper@7/ https://us.ck-ie.com https://vk.com https://widget.anycomment.io https://www.1c-bitrix.ru https://www.googleadservices.com https://www.google-analytics.com https://www.google.by https://www.google.bg https://www.google.co.id https://www.google.com https://www.google.com.cy https://www.google.de https://www.google.me https://www.google.nl https://www.googleoptimize.com https://www.google.pt https://www.google.ru https://www.googletagmanager.com https://www.gstatic.com https://www.w3.org https://www.youtube-nocookie.com https://youtu.be https://x01.aidata.io https://yandex.ru https://yastatic.net https://*.youtube.com https://*.ytimg.com https://kinescope.io https://vkvideo.ru https://gtmpx.com/ga/video-tags/inject https://rutube.ru/play/ wss://mc.yandex.ru ; report-uri https://sentry.calltouch.ru/api/49/security/?sentry_key=051618c290784f49b8f0714d8f3295e5 2 upgrade-insecure-requests; frame-ancestors 'self' https: 2 default-src 'self' *.amazonaws.com *.getunleash.io *.gstatic.com *.hotjar.com *.hsforms.com *.hsforms.net *.liadm.com *.list-manage.com *.plausible.io *.youtube.com; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.amazonaws.com *.analytics.google.com *.calendly.com *.clarity.ms *.clearbitjs.com *.clearbitscripts.com *.getunleash.io *.google-analytics.com *.google.com *.googleadservices.com *.googleoptimize.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hsforms.net *.hubspot.com *.liadm.com *.lfeeder.com *.redditstatic.com *.youtube.com cdn-cookieyes.com d3pkntwtp2ukl5.cloudfront.net googleads.g.doubleclick.net ipapi.co js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hscollectedforms.net optimize.google.com plausible.io snap.licdn.com static.ads-twitter.com static.hsappstatic.net static.reo.dev tracker.ub-analytics.com tracking-api.g2.com unpkg.com vercel.live cdn.logr-in.com cdn.lr-ingest.io cdn.lr-in.com cdn.lr-in-prod.com cdn.lr-ingest.com cdn.ingest-lr.com cdn.lr-intake.com cdn.intake-lr.com cdn.logr-ingest.com cdn.lrkt-in.com cdn.lgrckt-in.com cdn.logr-in.com; style-src 'report-sample' 'self' 'unsafe-inline' *.calendly.com *.getunleash.io *.googletagmanager.com *.hubspot.com fonts.googleapis.com optimize.google.com vercel.live; object-src 'none'; base-uri 'self'; connect-src 'self' *.algolia.net *.algolianet.com *.amazonaws.com *.analytics.google.com *.clarity.ms *.clearbit.com *.cookieyes.com *.getunleash.io *.github.com *.google-analytics.com *.googleadservices.com *.google.com *.google.pl *.google.ca *.google.co.uk *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.hscollectedforms.net *.hsappstatic.net *.hsforms.com *.hubspot.com *.liadm.com *.linkedin.com *.oribi.io *.pusher.com *.reddit.com *.unleash-hosted.com *.usbrowserspeed.com alocdn.com api.hubapi.com api.reo.dev cdn-cookieyes.com calendly.com forms.hubspot.com google.com googleads.g.doubleclick.net hubspot-forms-static-embed.s3.amazonaws.com ipapi.co js.hs-banner.com plausible.io pro.ip-api.com stats.g.doubleclick.net ad.doubleclick.net tracking-api.g2.com unpkg.com wss://*.hotjar.com *.logrocket.io *.lr-ingest.io *.logrocket.com *.lr-in.com *.lr-in-prod.com *.lr-ingest.com *.ingest-lr.com *.lr-intake.com *.intake-lr.com *.logr-ingest.com *.lrkt-in.com *.lgrckt-in.com *.logr-in.com; font-src 'self' data: *.hubspot.com fonts.googleapis.com fonts.gstatic.com script.hotjar.com; frame-src *.doubleclick.net *.google.com *.googletagmanager.com *.hotjar.com *.hsforms.com *.hsforms.net *.hubspot.com *.youtube.com *.youtube-nocookie.com app.hubspot.com calendly.com meetings.hubspot.com optimize.google.com vercel.live; frame-ancestors 'self' *.google.com *.hubspot.com; img-src 'self' data: *.analytics.google.com *.bing.com *.calendly.com *.clarity.ms *.doubleclick.net *.getunleash.io *.githubusercontent.com *.google-analytics.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.no *.google.pl *.googletagmanager.com *.hotjar.com *.hsforms.com *.hsforms.net *.hubspot.com *.lfeeder.com *.linkedin.com *.reddit.com *.youtube.com *.ytimg.com *.gravatar.com analytics.twitter.com cdn-cookieyes.com optimize.google.com t.co track.hubspot.com; worker-src 'self' blob:; child-src 'self' blob: 2 frame-src 'self' bat.bing.com *.blackbaudhosting.com *.blackbaud.com blackbaud.com *.doubleclick.net embed.tawk.to www.facebook.com connect.facebook.net *.hotjar.com cdn.jsdelivr.net *.kaltura.com snap.licdn.com www.podbean.com sc-static.net *.snapchat.com www.youtube-nocookie.com www.youtube.com discoveruni.gov.uk widget.discoveruni.gov.uk *.google.com libraryhelp.shef.ac.uk theaccessplatform.com tappage.theaccessplatform.com www.googletagmanager.com www.findaphd.com player.vimeo.com app.geckoform.com roundme.com *.wondavr.com wvr.li api3-eu.libcal.com *.shef.ac.uk my.matterport.com universityofsheffield.my.site.com universityofsheffield.my.salesforce-scrt.com sky.blackbaudcdn.net https://www.sheffield.ac.uk app.cloudpano.com app.sli.do; object-src 'self' discoveruni.gov.uk; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.blackbaud.com *.civiccomputing.com *.onetrust.com *.bing.com *.blackbaudhosting.com *.doubleclick.net *.google-analytics.com *.hotjar.com *.kaltura.com *.shef.ac.uk *.sheffield.ac.uk *.snapchat.com *.theaccessplatform.com theaccessplatform.com *.twitter.com ajax.googleapis.com analytics.tiktok.com app.geckoform.com widget.geckoengage.com bat.bing.com blackbaud.com connect.facebook.net discoveruni.gov.uk embed.geckochat.io embed.tawk.to libraryhelp.shef.ac.uk player.vimeo.com sc-static.net snap.licdn.com static.ads-twitter.com static.cloudflareinsights.com widget.discoveruni.gov.uk www.facebook.com www.findaphd.com www.google.co.uk *.google.com google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.podbean.com www.youtube-nocookie.com www.youtube.com *.newrelic.com *.ttl.ai universityofsheffield.my.site.com sheffield.libcal.com sky.blackbaudcdn.net chat-widget.geckoengage.com https://*.observability-pipeline.blackfire.io https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' *.sheffield.ac.uk *.shef.ac.uk *.theaccessplatform.com bbox.blackbaudhosting.com payments.blackbaud.com embed.geckochat.io fonts.geckoform.com widget.geckoengage.com fonts.googleapis.com www.findaphd.com www.googletagmanager.com www.gstatic.com *.ttl.ai universityofsheffield.my.site.com universityofsheffield.my.salesforce-scrt.com sky.blackbaudcdn.net app.geckoform.com https://api.mapbox.com https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; base-uri 'self'; form-action 'self' search.sheffield.ac.uk www.sheffield.ac.uk; frame-ancestors 'self' universityofsheffield.my.site.com 2 frame-ancestors 'none'; base-uri 'self'; default-src self; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.6sc.co/ https://bzrcdn.openai.com/ https://js-na1.hs-scripts.com/ https://superops.com/ https://px.ads.linkedin.com/ https://ddwl4m2hdecbv.cloudfront.net/b/4N210H5MK46Z/4N210H5MK46Z.js.gz https://cdn.popt.in/ https://px.ads.linkedin.com/ https://*.superops.ai https://r2.leadsy.ai/ https://scripts.clarity.ms/ https://static.ads-twitter.com/ https://static.elfsight.com https://*.licdn.com https://www.youtube.com/ https://*.elfsight.com https://*.liadm.com/ https://hcaptcha.com https://*.captiwate.com https://cdn.vector.co https://*.optimonk.com/ https://*.hcaptcha.com https://*.salesloft.com/ https://cdn.dreamdata.cloud/ https://s3-us-west-2.amazonaws.com/ https://bat.bing.com/ https://*.partnerstack.com/ https://*.getwarmly.com/ https://*.vwo.com https://*.visualwebsiteoptimizer.com https://js.zi-scripts.com/zi-tag.js https://*.smartlook.com https://*.smartlook.cloud https://web-sdk.smartlook.com https://static.zohocdn.com https://cdn-in.pagesense.io/ https://unpkg.com/ *.mouseflow.com https://load.sumo.com https://tracking.g2crowd.com https://app.revenuehero.io/ https://js.hsforms.net/forms/v2.js https://revenuehero.io/ http://fast.wistia.com/ https://fast.wistia.net/ https://cdn.cookielaw.org/ https://www.clarity.ms https://cdn.mouseflow.com https://cookiehub.net https://dash.cookiehub.com https://app.factors.ai/ https://js.na.chilipiper.com/ https://widgets.openli.com/ https://secure.copy9loom.com/ https://script.hotjar.com/ https://static.hotjar.com/ https://optimize.google.com https://static.hsappstatic.net https://meetings.hubspot.com https://cdn.jsdelivr.net https://lambdaapi.superopsbeta.com/ https://lambdaapi.superopsalpha.com/ https://lambdaapi.superops.ai/ https://widget.intercom.io https://js.hs-banner.com https://www.google.com/ https://js.hscollectedforms.net/ https://js.hsadspixel.net/ https://fast.wistia.com/ https://fast.wistia.com/ https://js.hs-analytics.net/ https://js.intercomcdn.com/ https://script.crazyegg.com/ https://www.google-analytics.com/ https://googleads.g.doubleclick.net/ http://script.crazyegg.com/ http://www.googletagmanager.com https://www.google-analytics.com http://www.googleadservices.com https://www.redditstatic.com/ http://js.hs-scripts.com/ https://js.intercomcdn.com/ https://www.google.com https://www.gstatic.com https://js.hsforms.net https://forms.hsforms.com https://connect.facebook.net *.crazyegg.com; style-src 'self' 'unsafe-inline' https://*.vwo.com https://api.fontshare.com https://db.onlinewebfonts.com https://*.optimonk.com/ https://cookiehub.net https://dash.cookiehub.com https://optimize.google.com https://js.na.chilipiper.com/ https://fonts.googleapis.com/; object-src 'none'; form-action 'self' data: https://lambdaapi.superops.ai https://superops-intercom-search.netlify.app https://superopsalpha-html-page.netlify.app https://lambdaapi.superopsalpha.com https://canny.io https://intercom.help https://forms.hsforms.com https://forms.hsforms.com https://intercom.help/; font-src 'self' data: https://cdn.fontshare.com https://fonts.intercomcdn.com/ https://db.onlinewebfonts.com https://cdn.fontshare.com https://fonts.gstatic.com https://js.intercomcdn.com/ https://*.captiwate.com; connect-src 'self' data: https://api-us-west-2.hygraph.com/ https://bzr.openai.com/ https://static.hsappstatic.net/ https://*.superops.ai https://ingress.us1.rum-ingress-coralogix.com https://ingress.eu2.rum-ingress-coralogix.com https://api.bettermode.com/ https://ws.zoominfo.com/ https://*.wistia.com/ https://ipv6.6sc.co/ https://img.youtube.com https://tracking-api.g2.com https://*.superopsalpha.com/ https://*.superops.com/ https://epsilon.6sense.com/ https://capig.datah04.com https://px.ads.linkedin.com/ https://www.facebook.com/ https://www.google.com/ https://static.elfsight.com https://fast.wistia.net/ https://*.elfsight.com https://shared-us-west-2-assets-delivery-1b85646.s3.us-west-2.amazonaws.com/ https://*.salesloft.com/ wss://ws.captiwate.com wss://ws.captiwate.com https://*.captiwate.com https://us-west-2.graphassets.com/ https://us-west-2.cdn.hygraph.com/ https://us-west-2.graphassets.com https://*.optimonk.com/ https://*.superops.com/ https://*.vector.co wss://ws.hotjar.com/ https://*.hotjar.io/ https://tracking.g2crowd.com/ https://cdn.dreamdata.cloud/ https://*.ip-api.com/ https://partnerlinks.io/ https://api.ipregistry.co/ https://grsm.io/ https://*.reddit.com/ https://www.redditstatic.com/ https://www.google.co.in/ https://bat.bing.com/ https://*.getwarmly.com/ https://usserv.superopsalpha.com https://euserv.superopsalpha.com https://*.superalpha.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://usserv.superops.ai https://euserv.superops.ai https://*.superops.ai https://js.zi-scripts.com/ https://*.smartlook.com https://*.smartlook.cloud https://pagesense-collect.zoho.in https://unpkg.com/ *.revenuehero.io http://fast.wistia.com/ https://uploads.intercomcdn.com https://o2.mouseflow.com https://api.revenuehero.io https://revenuehero.io/ https://media.graphassets.com https://geolocation.onetrust.com/ https://cookies-data.onetrust.io/ *.google-analytics.com *.analytics.google.com https://cdn.cookielaw.org/ *.clarity.ms https://canny.io https://*.algolianet.com https://*.algolia.net https://api-us-west-2.graphcms.com https://consent.cookiehub.net https://app.openli.com https://tracking.chilipiper.com/ https://api.chilipiper.com/ https://api.na.chilipiper.com/ https://widgets.openli.com https://api.factors.ai https://in.hotjar.com https://embedwistia-a.akamaihd.net/ https://ws10.hotjar.com/ https://www.google-analytics.com https://optimize.google.com https://tracking.crazyegg.com/ https://lambdaapi.superopsbeta.com/ https://lambdaapi.superopsalpha.com/ https://lambdaapi.superops.ai/ https://api-msp.superops.ai https://serv.superopsbeta.com https://serv.superopsalpha.com https://api.hsforms.com https://api.hubapi.com/ https://script.crazyegg.com/ https://stats.g.doubleclick.net/ https://forms.hubspot.com/ https://embed-fastly.wistia.com/ https://api.ipstack.com/ https://distillery.wistia.com/ http://pipedream.wistia.com/ https://fg8vvsvnieiv3ej16jby.litix.io https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://hubspot-forms-static-embed.s3.amazonaws.com https://analytics.google.com https://forms.hsforms.com *.crazyegg.com; img-src 'self' blob: data: https://api-us-west-2.hygraph.com/ https://c.bing.com/ https://px.ads.linkedin.com/ https://*.superops.ai https://*.superopsalpha.com/ https://*.superops.com/ https://*.superops.ai/ https://img.youtube.com https://*.ytimg.com https://analytics.twitter.com https://t.co https://*.elfsight.com/ https://files.elfsightcdn.com/ https://*.6sc.co/ https://bat.bing.com/ https://*.captiwate.com https://us-west-2.graphassets.com/ https://us-west-2.graphassets.com https://*.optimonk.com/ https://*.visualwebsiteoptimizer.com https://embed-ssl.wistia.com/ https://revenuehero.io/ https://optanon.blob.core.windows.net/ *.google-analytics.com *.analytics.google.com https://cdn.cookielaw.org/ https://assets.superopsbeta.com https://media.graphassets.com *.clarity.ms https://media.graphcms.com https://js.na.chilipiper.com/ https://embedwistia-a.akamaihd.net/ https://www.googletagmanager.com https://www.gstatic.com https://www.google.com/ https://www.google.co.in/ https://static.intercomassets.com https://alb.reddit.com https://www.google-analytics.com/ https://forms.hsforms.com/ https://track.hubspot.com/ https://embed-fastly.wistia.com/ https://fast.wistia.com/ https://www.facebook.com https://downloads.intercomcdn.com/ https://js.intercomcdn.com/ https://ct.capterra.com *.crazyegg.com; frame-src 'self' *.schedulehero.io https://static.elfsight.com https://*.superops.ai https://newassets.hcaptcha.com/ https://www.googletagmanager.com/ https://*.elfsight.com https://*.captiwate.com https://online.fliphtml5.com https://superops.storylane.io/ https://*.optimonk.com/ https://rive.app https://superops.trainn.co https://*.vwo.com https://td.doubleclick.net https://revenuehero.io/ https://api.revenuehero.io/ *clarity.ms https://giphy.com https://superops.na.chilipiper.com/ https://vars.hotjar.com https://fonts.gstatic.com https://splineanim.netlify.app/ https://optimize.google.com https://meetings.hubspot.com https://www.google.com/ https://bid.g.doubleclick.net/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://share.transistor.fm/ https://forms.hsforms.com https://intercom.help/ https://intercom-sheets.com/; manifest-src 'self' data: https://assets.superopsbeta.com https://us-west-2.graphassets.com/ https://us-west-2.graphassets.com https://media.graphassets.com https://media.graphcms.com/; media-src 'self' blob: data: https://api-us-west-2.hygraph.com/ https://media.graphassets.com https://widget.captiwate.com/ https://widget.captiwate.com/ https://us-west-2.graphassets.com/ https://us-west-2.graphassets.com https://media.graphcms.com https://embed-fastly.wistia.com/ https://js.intercomcdn.com/; report-uri https://60d28bd9a22e18d4f42faf2b.endpoint.csper.io/; worker-src 'self' blob:;; prefetch-src 'self'; 2 frame-ancestors 'self' chrome-extension://leiiflpjdkfadkiicfabhggpfdfebdmh chrome-extension://hmdkfngkncmbgiehonfebecighedjiak ms-appx-web: https://*.officeapps.live.com https://*.sharepoint.com https://onedrive.live.com https://www.coswift.ai https://coswift.ai https://www.genspark.ai https://genspark.ai 2 frame-ancestors 'self' https://cms.aws.newsmatics.com 2 script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' blob: 'unsafe-inline' https:; report-uri /reports/csp/uri; report-to csp-reports; 2 frame-ancestors 'self' cdn.adkaora.space 2 report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.appointlet.com *.appointletcdn.com *.aptrinsic.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.ecomm.events *.ecwid.com *.elev.io *.facebook.com *.facebook.net *.fontawesome.com *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.jaris.co *.jaris.com *.linkedin.com *.mcjobboard.net *.mybillsystem.com *.newrelic.com *.nr-data.net *.pagespeed-mod.com *.paypal.com *.termly.io *.twitter.com *.typekit.net *.uservoice.com *.vimeo.com *.wildapricot.com *.youtube.com *.zdassets.com *.zendesk.com *.zopim.com api.preczn.com caas-sf.wildapricot.org https://*.forethought.ai live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/ reserveddomainnames.wildapricot.org sf.wildapricot.org; img-src * data: blob:; media-src * blob:; font-src * https://*.aptrinsic.com data:; 2 frame-ancestors 'self' *.lufthansa.com *.miles-and-more.com *.swiss.com *.amadeus.com *.amadeus.net *.brusselsairlines.com *.austrian.com; script-src privacyportalde-cdn.onetrust.com cdn.cookielaw.org privacyportal.onetrust.com www.google.com bat.bing.com ct.pinterest.com s.pinimg.com *.slgnt.eu *.exactag.com *.quantummetric.com *.monetate.net *.doubleclick.net *.googleadservices.com *.tiqcdn.com *.tealiumiq.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.usabilla.com *.artefact.com *.skyscanner.net *.skyscanner.net *.facebook.com *.facebook.net *.kayak.com *.amadeus.com *.lufthansa-group.com *.austrian.com *.lufthansa.com *.swiss.com *.brusselsairlines.com *.go-mpulse.net *.techlab-cdn.com *.instagram.com *.akamaihd.net *.akstat.io *.cloudfront.net *.cognigy.cloud *.googleapis.com *.gstatic.com *.sheerid.com *.meili.travel *.dwin1.com widget.getyourguide.com lhopa01.custhelp.com tdn.da-services.ch rum.hlx.page 'unsafe-inline' 'unsafe-eval'; object-src 'none'; worker-src blob: *.swiss.com; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' geolocation.onetrust.com *.recaptcha.net cdn.cookielaw.org *.google.com *.moodys.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.qualtrics.com *.webtrendslive.com *.webtrends.com *.salesforceliveagent.com *.force.com *.salesforce.com *.adobedtm.com *.gstatic.com *.walkme.com *.cloudfront.net *.go-mpulse.net *.akstat.io *.vimeocdn.com acsbapp.com about.moodys.io moodysabout.webflow.io munchkin.marketo.net *.mktoweb.com https://static.cloudflareinsights.com https://hcaptcha.com https://*.hcaptcha.com activitymap.adobe.com acrobatservices.adobe.com *.googleadservices.com googleads.g.doubleclick.net https://challenges.cloudflare.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://js.adsrvr.org/up_loader.1.1.0.js https://tags.srv.stackadapt.com/events.js https://bat.bing.com/bat.js https://bat.bing.com/p/action/97055025.js js.driftt.com rc-sc.js.driftt.com cdn.weglot.com js.zi-scripts.com https://js.adsrvr.org/up_loader.3.0.0.js https://j.6sc.co/6si.min.js https://j.6sc.co/j/13c8bb0b-c787-4b1c-b83d-3320f221708d.js https://moodysanalytics.my.site.com/ESWMoodyscomChat1765620020837/assets/js/bootstrap.min.js https://player.vimeo.com/api/player.js https://t.contentsquare.net https://appsforoffice.microsoft.com/lib/1/hosted/; worker-src 'self' blob: https://cdn.walkme.com; frame-ancestors 'self' 2 base-uri 'self'; default-src 'self' blob: data: https: ; worker-src 'self' blob:; frame-ancestors 'self' http://localhost:9999 *.paddle.com *.prismic.io https://www.profitwell.com https://paddle.enablix.com https://paddle.letter.ai; media-src 'self' blob: data: https: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.contentsquare.net app.contentsquare.com d-code.liadm.com *.vector.co *.usbrowserspeed.com *.visualwebsiteoptimizer.com app.vwo.com tag.unifyintent.com unifyintent.com *.stackadapt.com *.twitter.com *.iubenda.com connect.facebook.net *.cloudfront.net *.hsforms.com googleads.g.doubleclick.net *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsforms.net *.hsleadflows.net *.licdn.com *.ads-twitter.com *.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.redditstatic.com *.youtube.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net prod-assets.sequelvideo.com https: ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.contentsquare.net app.contentsquare.com *.mdb.tools d-code.liadm.com *.vector.co *.usbrowserspeed.com *.visualwebsiteoptimizer.com app.vwo.com tag.unifyintent.com unifyintent.com *.youtube.com *.wistia.net *.wistia.com *.licdn.com *.ads-twitter.com *.doubleclick.net *.redditstatic.com *.profitwell.com *.bing.com js.hubspot.com *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.clarity.ms *.hs-scripts.com connect.facebook.net *.rudderlabs.com *.influ2.com *.stackadapt.com *.metadata.io *.clearbitscripts.com *.clearbitjs.com *.kustomerapp.com *.qualified.com *.iubenda.com *.netlify.app *.hsforms.net *.googletagmanager.com *.googleapis.com prismic.io *.prismic.io *.mplat-ppcprotect.com status.io dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net tracking.g2crowd.com cdn.jsdelivr.net/npm/hockeystack@latest/hockeystack.min.js cdn.jsdelivr.net/npm/hockeystack@latest/hockeystack-qualified.min.js js.stripe.com/v3/ cdnjs.cloudflare.com/polyfill/ prod-assets.sequelvideo.com; style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com *.cloudfront.net *.youtube.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net s3.amazonaws.com https: blob: ; object-src 'none'; font-src 'self' *.cloudfront.net *.gstatic.com data: https: ; connect-src 'self' *.contentsquare.net *.contentsquare.com api.vector.co *.visualwebsiteoptimizer.com app.vwo.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net *.qualified.com ws: wss: https: data: ; img-src 'self' *.contentsquare.net *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.googletagmanager.com *.ctfassets.net *.reddit.com *.cloudfront.net *.ytimg.com *.adsymptotic.com *.ads.linkedin.com t.co *.hubspot.com *.facebook.com *.google.com *.youtube.com *.ggpht.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net chart.googleapis.com wingify-assets.s3.amazonaws.com data: https:; frame-src 'self' csxd.paddle.com csxd.www.paddle.com i.liadm.com paddle.chilipiper.com *.visualwebsiteoptimizer.com app.vwo.com paddle.prismic.io www.googletagmanager.com *.youtube.com *.wistia.net *.wistia.com *.hsforms.com paddle.kustomer.help *.kustomerapp.com *.qualified.com app.netlify.com *.doubleclick.net *.prismic.io www.slideshare.net dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net js.stripe.com *.sequel.io; upgrade-insecure-requests; 2 default-src https: blob: 'self' 'unsafe-inline' 'unsafe-eval' https://embed.widencdn.net https://cengage.widen.net https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io; connect-src 'self' https://*.amplitude.com https://www.google.com https://cengagelearning.us-5.evergage.com https://*.mouseflow.com wss://*.mouseflow.com https://www.googletagmanager.com https://analytics.google.com https://zendesk-eu.my.sentry.io https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.survicate.com wss://*.zopim.com https://*.zendesk.com https://*.zdassets.com https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io https://*.cengage.info https://*.googleapis.com https://*.optimizely.com https://stats.g.doubleclick.net https://*.google-analytics.com https://*.cookielaw.org https://*.bing.com https://*.onetrust.com https://*.supporthero.io https://*.addthis.com https://cengage.force.com https://*.snapchat.com https://analytics.tiktok.com https://tags.srv.stackadapt.com https://*.vidyard.com https://*.demandbase.com https://*.company-target.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.amplitude.com https://cdn.mouseflow.com https://*.zdassets.com https://*.survicate.com https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io https://*.gstatic.com https://*.bing.com https://*.cookielaw.org https://*.onetrust.com https://*.rackcdn.com https://*.googleapis.com https://*.force.com https://cengage.my.salesforce.com https://*.salesforceliveagent.com https://sc-static.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.googletagmanager.com https://www.google.com https://snap.licdn.com https://*.vidyard.com https://*.optimizely.com https://www.google-analytics.com https://img.en25.com https://*.eloqua.com https://static.ads-twitter.com https://analytics.twitter.com https://instant.page https://connect.facebook.net https://*.cloudfront.net https://www.youtube.com https://*.addthis.com https://*.addthisedge.com https://*.moatads.com https://*.tribalfusion.com https://analytics.tiktok.com https://cdn.evgnet.com https://cdn.evergage.com https://evergage.com https://tags.srv.stackadapt.com https://*.demandbase.com https://*.company-target.com; style-src 'self' 'unsafe-inline' data: s3.amazonaws.com https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io https://surveys-static.survicate.com https://cengage.force.com https://service.force.com https://*.googleapis.com https://tags.srv.stackadapt.com/sa.css; frame-src https://www.facebook.com https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io https://*.google.com https://cengage.widen.net https://*.widencdn.net/ https://*.force.com https://*.supporthero.io https://*.approvemyviews.com/ https://*.optimizely.com https://*.snapchat.com https://*.fls.doubleclick.net https://*.vidyard.com https://*.adobe.com https://cengage.postclickmarketing.com https://*.addthis.com https://*.mayvenstudios.com https://www.youtube.com https://*.demandbase.com https://*.company-target.com https://*.navattic.com; frame-ancestors 'self' https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io; font-src 'self' data: https://*.gstatic.com https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io https://*.googleapis.com https://surveys-static.survicate.com; img-src 'self' https://px4.ads.linkedin.com https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io chart.googleapis.com wingify-assets.s3.amazonaws.com https: data:; worker-src 'self' blob: https://*.cengage.com https://*.cengage.ca https://hippo.cengage.com https://b2b-gale-storefront-k8s.dev.eks.cengage.io https://b2b-gale-storefront-k8s.qa.eks.cengage.io https://b2b-gale-storefront-k8s.perf.eks.cengage.io https://b2b-gale-storefront-k8s.prod.eks.cengage.io; object-src 'none'; base-uri 'none'; upgrade-insecure-requests; 2 frame-ancestors 'self' https://app.safe.global 2 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline' 'unsafe-eval' 2 frame-ancestors 'self' https://xmission.com; 2 default-src https: 'self' data: blob:; font-src https: data:; img-src https: data:; script-src https: 'self' data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-src 'self' blob: https: data:; report-uri https://dxw.report-uri.com/r/d/csp/enforce; 2 upgrade-insecure-requests; frame-ancestors https://www.reutersconnect.com 2 default-src 'self' https://*.iwara.tv * data:;script-src 'self' 'unsafe-inline' https://*.iwara.tv * data:;style-src 'self' 'unsafe-inline' https://*.dlsite.com;font-src https://i.harem-battle.club https://*.iwara.tv data:;connect-src 'self' https://*.iwara.tv *;frame-ancestors https://*.iwara.tv;media-src 'self' https://*.iwara.tv https://i.harem-battle.club blob:; 2 frame-ancestors 'self' https://huggingface.co/ https://*.static.hf.space/ 2 default-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.barclays.co.uk https://*.uk.barclays; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://tags.tiqcdn.com https://collect.tealiumiq.com https://gateway.answerscloud.com https://s.go-mpulse.net https://www.media.barclays.co.uk https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://api.travelex.net https://resources.barclays.co.uk https://barclaysbankplc.tt.omtrdc.net https://barclaysbankplc.demdex.net https://cm.everesttech.net https://dpm.demdex.net https://*.siteintercept.qualtrics.com https://btttag.com https://*.btttag.com https://cdn.decibelinsight.net https://collection.decibelinsight.net https://widget.decibelinsight.net https://portal.decibel.com https://v6-eu.api.decibel.com https://api.decibel.com https://d063-248-eu-frankfurt-1.api.decibel.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://snap.licdn.com https://analytics.tiktok.com https://connect.facebook.net https://www.recaptcha.net https://rum.hlx.page https://cdn-ukwest.onetrust.com blob:; style-src 'self' 'unsafe-inline' https://www.media.barclays.co.uk https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com https://cdn-ukwest.onetrust.com; object-src 'self'; worker-src 'self' blob:; child-src https://demo.barclays.co.uk https://edigitalsurvey.com https://www.google.com https://www.media.barclays.co.uk https://barclaysbankplc.demdex.net https://cm.everesttech.net https://dpm.demdex.net https://*.siteintercept.qualtrics.com https://www.recaptcha.net blob:; frame-src 'self' https://demo.barclays.co.uk https://5452834.fls.doubleclick.net https://3460779.fls.doubleclick.net https://edigitalsurvey.com https://www.google.com https://www.media.barclays.co.uk https://barclaysbankplc.demdex.net https://cm.everesttech.net https://dpm.demdex.net https://*.siteintercept.qualtrics.com https://www.googletagmanager.com https://td.doubleclick.net https://www.recaptcha.net; img-src 'self' data: https://demo.barclays.co.uk https://px4.ads.linkedin.com https://analytics.tiktok.com https://3460779.fls.doubleclick.net https://collect.tealiumiq.com https://cdnjs.cloudflare.com https://adservice.google.co.uk https://ad.doubleclick.net https://adservice.google.com https://googleads.g.doubleclick.net https://googleads4.g.doubleclick.net https://smetrics.barclays.co.uk https://www.facebook.com https://www.google.co.uk https://www.google.com https://maps.googleapis.com https://maps.google.com https://www.google.fr https://adservice.google.fr https://www.google.de https://www.google.es https://adservice.google.es https://www.google.nl https://www.google.se https://www.google.co.id https://www.google.co.il https://www.google.be https://www.google.sk https://www.google.co.nz https://www.google.co.za https://www.google.com.sg https://www.google.pt https://www.google.ca https://www.google.cz https://www.google.com.cy https://www.google.com.au https://adservice.google.com.au https://www.google.mk https://www.google.je https://adservice.google.je https://www.google.co.ug https://www.google.com.hk https://www.google.ro https://www.google.bg https://www.google.im https://www.google.co.ao https://www.google.ie https://adservice.google.ie https://www.google.com.ng https://www.google.it https://adservice.google.it https://www.google.lt https://www.google.ae https://www.google.gr https://www.google.com.mx https://www.google.hu https://www.google.ch https://www.google.ru https://www.google.com.eg https://www.google.com.pk https://www.google.com.bh https://www.google.pl https://adservice.google.pl https://www.google.co.in https://www.gstatic.com https://www.google-analytics.com https://www.google.lu https://www.google.co.jp https://www.google.com.tr https://adservice.google.co.il https://adservice.google.co.zw https://adservice.google.com.sa https://adservice.google.ae https://adservice.google.pt https://www.google.com.my https://adservice.google.nl https://www.google.gg https://adservice.google.be https://adservice.google.cz https://www.google.co.th https://adservice.google.de https://www.google.com.gh https://www.google.com.sa https://www.google.ge https://www.google.com.br https://www.google.com.tw https://www.google.dk https://www.google.com.ph https://adservice.google.co.za https://www.google.lv https://adservice.google.gg https://adservice.google.ca https://www.google.at https://www.google.rs https://www.google.com.mt https://adservice.google.com.hk https://www.google.no https://www.google.com.qa https://www.google.co.ke https://www.barclays.co.uk https://adservice.google.gr https://www.google.fi https://adservice.google.co.jp https://adservice.google.co.in https://www.google.com.vc https://www.google.lk https://adservice.google.ch https://www.google.com.ua https://www.google.az https://www.google.by https://www.google.com.kw https://adservice.google.com.sg https://adservice.google.im https://adservice.google.no https://www.google.co.zw https://www.google.mu https://www.google.com.vn https://adservice.google.com.br https://adservice.google.lv https://adservice.google.com.kw https://adservice.google.com.tr https://www.google.co.kr https://adservice.google.az https://adservice.google.hu https://adservice.google.co.th https://www.google.cm https://www.google.mw https://www.google.com.ar https://www.google.co.ma https://www.google.com.gi https://www.google.co.tz https://www.google.com.om https://www.google.com.af https://adservice.google.lt https://adservice.google.co.nz https://www.google.tt https://www.google.ms https://adservice.google.ro https://www.google.dz https://adservice.google.com.my https://www.google.com.pe https://www.google.com.jm https://www.google.com.sl https://adservice.google.com.cy https://adservice.google.se https://www.google.com.ec https://www.google.hr https://www.google.al https://adservice.google.ru https://www.google.co.mz https://adservice.google.com.ng https://www.google.com.et https://www.google.com.bn https://www.google.sh https://www.google.com.pa https://www.google.ci https://www.google.cl https://adservice.google.bg https://www.google.co.ve https://www.google.bs https://www.google.com.ag https://www.google.hn https://adservice.google.hn https://www.google.iq https://www.google.so https://www.google.com.np https://maps.gstatic.com https://www.media.barclays.co.uk https://5452834.fls.doubleclick.net https://dev.day.com https://pixel.quantserve.com https://bclays-ads.aimatch.com https://barclaysbankplc.demdex.net https://cm.everesttech.net https://dpm.demdex.net https://*.siteintercept.qualtrics.com https://www.googletagmanager.com https://googletagmanager.com https://ssl.gstatic.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://px.ads.linkedin.com https://connect.facebook.net https://www.recaptcha.net https://sasaimatch.uk.barclays https://cdn-ukwest.onetrust.com; connect-src 'self' https://formsdss-v3.uk.barclays https://bclays-ads.aimatch.com https://search.barclays.co.uk https://collect.tealiumiq.com https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://www.media.barclays.co.uk https://device.4seeresults.com https://dpm.demdex.net https://barclaysbankplc.tt.omtrdc.net https://smetrics.barclays.co.uk https://*.siteintercept.qualtrics.com https://maps.googleapis.com https://btttag.com https://*.btttag.com https://cdn.decibelinsight.net https://collection.decibelinsight.net wss://collection.decibelinsight.net https://widget.decibelinsight.net https://portal.decibel.com https://v6-eu.api.decibel.com https://api.decibel.com https://d063-248-eu-frankfurt-1.api.decibel.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://px.ads.linkedin.com https://analytics.tiktok.com https://px4.ads.linkedin.com https://www.recaptcha.net https://sasaimatch.uk.barclays https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://barclays-bx-privacy.my.onetrust.com; font-src 'self' data: https://fonts.gstatic.com https://www.media.barclays.co.uk; manifest-src 'self'; media-src 'self' https://demo.barclays.co.uk https://www.media.barclays.co.uk; 2 frame-ancestors 'self' https://*.govloanoptions.com https://govratealerts.com https://*.govratealerts.com https://staging--govratealerts.netlify.app https://bestrateguide.com https://*.bestrateguide.com; 2 frame-ancestors 'none'; width=device-width,initial-scale=1,shrink-to-fit=no 2 default-src 'self'; frame-ancestors 'self' https://*.sachsen.de; frame-src 'self' https://*.sachsen.de https://e.issuu.com https://platform.twitter.com https://syndication.twitter.com https://www.facebook.com https://e.issuu.com https://www.youtube-nocookie.com; font-src 'self' data:; img-src 'self' data: https://*.sachsen.de https://i.ytimg.com https://syndication.twitter.com https://vrweb15.linguatec.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.sachsen.de https://connect.facebook.net https://platform.twitter.com https://e.issuu.com https://vrweb15.linguatec.org https://*.etracker.com https://*.etracker.de; style-src 'self' 'unsafe-inline' https://*.sachsen.de https://vrweb15.linguatec.org; connect-src 'self' https://*.sachsen.de https://vrweb15.linguatec.org https://www.etracker.de; media-src 'self' https://vrweb15.linguatec.org; object-src 'self'; upgrade-insecure-requests; 2 object-src 'none';frame-ancestors https://*.neogov.com https://*.neogov.net https://*.neoed.com https://*.neogov.ca https://*.neoed.net https://*.powerdms.com https://*.agency360.com https://*.schooljobs.com https://*.governmentjobs.com 2 style-src 'self' 'unsafe-inline' *; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; frame-src *; 2 frame-ancestors 'self' http://localhost:80 https://localhost:443 http://127.0.0.1:80 https://127.0.0.1:443; 2 frame-ancestors 'self' avto-trast.info *.avto-trast.info ati.su *.ati.su metrika.yandex.ru; report-uri https://s1.ati.su/api/250/security/?sentry_key=26fdc7599dca4410ae3f3212919d17b9&sentry_environment=production 2 frame-ancestors 'self' bot.airdroid.com bot.airdroid.cn biz.airdroid.com biz.airdroid.cn 2 default-src 'self' 'unsafe-inline' blob: data: *.contentful.com *.ctfassets.net web.ccpgamescdn.com *.clarity.ms c.bing.com; base-uri 'self'; object-src 'self' ctfassets.net https://www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.amazon-adsystem.com *.doubleclick.net *.clarity.ms *.facebook.com *.facebook.net *.fbcdn.net *.google.com *.googleadservices.com *.googlesyndication.com *.ninetailed.co *.reddit.com *.redditstatic.com *.t.co *.tiktok.com *.twitch.tv *.twitter.com *.x.com *.zdassets.com *.zendesk.com analytics.tiktok.com ccpcommunity.zendesk.com connect.facebook.net consent.cookiebot.com consentcdn.cookiebot.com google.com google.co.jp google.co.kr google.co.uk google.co.za google.de graphql.contentful.com hello.myfonts.net https://d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/cBaCB1PHCwXVd4yY/delighted.js https://bat.bing.com https://player.idomoo.com https://sp.analytics.yahoo.com https://ssl.google-analytics.com https://tagmanager.google.com https://widget-mediator.zopim.com https://www.artfut.com https://www.google.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion_async.js https://maps.googleapis.com paperform.co recaptcha.net s.ytimg.jp s.ytimg.com *.ads-twitter.com static.ads-twitter.com tpc.googlesyndication.com web.ccpgamescdn.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.cn www.gstatic.com www.youtube.com yimg.com *.tiktokv.com analytics-ipv6.tiktokv.us analytics-ipv6.tiktokw.us; style-src 'self' 'unsafe-inline' fonts.googleapis.com hello.myfonts.net https://tagmanager.google.com optimize.google.com web.ccpgamescdn.com; connect-src 'self' *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.doubleclick.net *.clarity.ms *.cloudapp.azure.com *.extccp.com *.eveonline.com *.evetech.net *.facebook.com *.facebook.net *.fbcdn.net *.google.com *.googleadservices.com *.launchdarkly.com *.ninetailed.co *.reddit.com *.redditstatic.com *.t.co *.tiktok.com *.testeveonline.com *.x.com *.zdassets.com *.zendesk.com analytics.tiktok.com api.ccpgames.com cb2dzccayg.execute-api.eu-west-1.amazonaws.com ccp-gap-export.ew.r.appspot.com ccp-recruitmentservice-dev.azurewebsites.net ccpcommunity.zendesk.com consentcdn.cookiebot.com graphql.contentful.com google.is google.com google.co.jp google.co.uk google.co.za google.de https://bat.bing.com http://localhost:3274 https://ccp-gap-export.ew.r.appspot.com https://consentcdn.cookiebot.com https://maps.googleapis.com https://login.microsoftonline.com https://login.windows.net https://peerserver.westus.cloudapp.azure.com https://s.ytimg.com https://s3.amazonaws.com images.ctfassets.net j62tyvg8r3.execute-api.eu-west-1.amazonaws.com openmaptiles.data.gouv.fr recaptcha.net *.sentry.io sentry.io signup.ccpeveweb.com umip1v3tqb.execute-api.eu-west-1.amazonaws.com w778zk1gu3.execute-api.eu-west-1.amazonaws.com web.ccpgamescdn.com *.ads-twitter.com wss://peerserver.westus.cloudapp.azure.com wss://*.cloudapp.azure.com wss://*.zendesk.com wss://widget-mediator.zopim.com www.facebook.com www.google-analytics.com *.google.co.kr www.googleadservices.com yo2vtgum73.execute-api.eu-west-1.amazonaws.com localhost:3274 *.tiktokv.com analytics-ipv6.tiktokv.us analytics-ipv6.tiktokw.us; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com hello.myfonts.net web.ccpgamescdn.com; img-src 'self' https: data: blob: *.amazon-adsystem.com *.doubleclick.net *.ctfassets.net *.reddit.com www.googleadservices.com https://ssl.gstatic.com https://www.google-analytics.com https://www.gstatic.com; frame-src 'self' *.eveonline.com *.ctfassets.net *.doubleclick.net *.ninetailed.io *.paperform.co *.twitch.tv challonge.com *.challonge.com cdn.knightlab.com consentcdn.cookiebot.com https://recaptcha.net https://www.facebook.com optimize.google.com tpc.googlesyndication.com videos.ctfassets.net *.google.com www.googletagmanager.com www.ostlon.com www.youtube.com open.spotify.com; frame-ancestors 'self' app.contentful.com; report-uri https://ccpgames.report-uri.com/r/t/csp/enforce; 2 frame-ancestors 'self' https://*.elisa.ee https://entitlement1.ses.elisa.ee:10076; 2 frame-ancestors 'self' https://*.ccma.cat https://*.3cat.cat; 2 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss:; media-src https: blob: data:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; 2 frame-ancestors 'self' https://*.kinsta.com https://*.kinsta.ninja 2 default-src 'self'; connect-src 'self' rdap.nic.scb rdap1.nic.scb rdap2.nic.scb rdap.thains.co.th www.google-analytics.com; frame-src 'self' www.google.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com; img-src 'self' www.thnic.or.th www.google-analytics.com data:; 2 base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; child-src blob:; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; style-src 'self' https: 'unsafe-inline' *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; img-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; font-src 'self' data: *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; connect-src 'self' *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; frame-src 'self' data: *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; frame-ancestors 'self' *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; object-src data: *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; media-src 'self' data: *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com; worker-src 'self' data: blob: *.indra-netplus.com *.ads-twitter.com *.adswizz.com *.amazonaws.com *.amazon-adsystem.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bucket.co *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.eu2.segmentapis.com *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.jazztel.com *.jsdelivr.net *.krxd.net *.masstack.com *.masmovil.com *.masmovil.es mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.optimizely.com *.orange.es *.orsac.net *.paa-reporting-advertising.amazon *.pinterest.com *.pinimg.com *.quantummetric.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.segmentapis.com *.speedtestcustom.com *.supplia.es tally.so *.tally.so *.tiktok.com *.treasuredata.com *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com t.co t.womtp.com ws.walmeric.com wss://*.byside.com d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com *.digitelts.com 2 default-src https: data: 'unsafe-inline' 'unsafe-eval' 'report-sample';img-src 'self' https: blob: data:;media-src 'self' https: blob: data:;connect-src wss: https:;object-src 'none';base-uri 'self';frame-ancestors 'self' https://soundtrack.io https://*.soundtrack.io https://soundtrackyourbrand.com https://*.soundtrackyourbrand.com https://*.soundcdn.com https://*.syb.sh https://*.soundtr.ac;report-uri https://o15889.ingest.us.sentry.io/api/4505663820857344/security/?sentry_key=c1cfffcf3b072f7c67557cad0dea30e9&sentry_environment=production 2 Content-Security-Policy: default-src 'self'; 2 default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: www.google.de cdn.cookielaw.org www.google.it adservice.google.com *.onetrust.com *.imperva.com www.google.com.et www.google.co.il www.google.com.sa munchkin.marketo.net cdn.bizible.com www.google.pl *.doubleclick.net www.google.com.co www.google.com.np edge.fullstory.com www.google.com.ph www.google.fr www.google-analytics.com www.google.co.th www.google.com.br www.google.es *.mktoresp.com www.brighttalk.com region1.analytics.google.com translate.google.com www.google.com.ua www.google.nl www.google.com.eg *.optimizely.com www.google.com.hk www.youtube.com jscloud.net *.adroll.com www.google.com.pk *.googleapis.com www.google.com.ng rs.fullstory.com *.vimeo.com www.google.com.au www.google.ie www.google.com.gh www.google.co.kr www.google.com.vn www.google.com www.google.se www.google.com.my *.mktoutil.com imperva.piwik.pro www.google.co.in www.googletagmanager.com *.gstatic.com www.google.com.tw imperva.containers.piwik.pro js.driftt.com bam.nr-data.net privacy-policy.truste.com www.google.co.uk www.google.co.il analytics.google.com gc.kis.v2.scr.kaspersky-labs.com www.google.ca cdn.bizibly.com js-agent.newrelic.com *.gravatar.com code.highcharts.com go.imperva.com imperva.substack.com *.vimeocdn.com *.demandbase.com *.company-target.com id.rlcdn.com yoast.com *.hcaptcha.com demostack.app snap.licdn.com *.linkedin.com *.6sense.com *.navattic.com netdna.bootstrapcdn.com *.6sc.co static.oktopost.com *.soundcloud.com *.thalesgroup.com *.bttrack.com bttrack.com *.wp.com ; form-action 'self' *.salesforce.com ; frame-ancestors 'self' http://thalesgroup.lookbookhq.com https://thalesgroup.lookbookhq.com demostack.app ; 2 frame-ancestors 'self' https://bsigroup.sharepoint.com; 2 font-src 'self' data: https://static.francetv.fr; frame-ancestors 'none' 2 default-src https: http: blob: javascript: data: 'unsafe-inline' 'unsafe-eval' 'self'; 2 default-src https: data: blob: chrome-extension: android-webview-video-poster: ms-appx-web: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' https://gebrauchtwagen.autobild.de https://vorschau.autobild.de https://interred.autobild.de 2 upgrade-insecure-requests;default-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline' *.akamaihd.net *.bedbathandbeyond.com *.cloudinary.com *.ostkcdn.com *.overstock.com *.swarmshop.com unpkg.com vercel.live apple.com applepay.cdn-apple.com *.bing.com *.bing.net *.braze.com *.clarity.ms *.facebook.net *.facebook.com *.google.com *.google.ca *.google.co.uk *.google.ie *.google.mx *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.3gl.net *.newrelic.com *.nr-data.net *.appboycdn.com *.creativecdn.com *.doubleclick.net *.taboola.com *.bizrate.com *.connexity.net *.cnnx.link *.prandolisto.com;connect-src 'self' *.akamaihd.net *.akstat.io *.bedbathandbeyond.com *.go-mpulse.net *.ostkcdn.com *.overstock.com *.swarmshop.com cdn1.affirm.com cdn1-sandbox.affirm.com cdn1.sandbox.affirm.com *.affirm.com apple.com *.paypal.com *.kmsmep.com *.kmsmep.com *.comenity.net *.comenity.net *.breadpayments.com *.breadpayments.com *.bing.com *.bing.net *.braze.com *.clarity.ms api.consentjs.datagrail.io *.evergage.com *.facebook.net *.facebook.com *.google.com *.google.ca *.google.co.uk *.google.ie *.google.mx *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.3gl.net aspireiq.go2cloud.org id5-sync.com eu-1-id5-sync.com eu-4-id5-sync.com *.accdab.net *.id5-sync.com *.eu-1-id5-sync.com *.eu-4-id5-sync.com *.inmarkethub.com *.ninthdecimal.com *.logtrackback.com *.thinknearhub.com *.inmarket.com *.newrelic.com *.nr-data.net *.appboycdn.com *.creativecdn.com measurement-api.criteo.com *.doubleclick.net *.googleadservices.com *.taboola.com *.bizrate.com *.connexity.net *.cnnx.link *.prandolisto.com beyond.chat.getzowie.com;img-src 'self' blob: data: *.akamaihd.net *.bedbathandbeyond.com *.cloudinary.com public-prod-dspcookiematching.dmxleo.com *.ostkcdn.com *.overstock.com *.swarmshop.com unpkg.com vercel.com vercel.live cdn1.affirm.com *.affirm.com applepay.cdn-apple.com *.paypal.com *.kmsmep.com *.comenity.net *.breadpayments.com *.bing.com *.bing.net *.braze.com *.clarity.ms *.facebook.com *.google.com *.google.ca *.google.co.uk *.google.ie *.google.mx *.google-analytics.com google-analytics.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com retail.googleapis.com *.criteo.com *.3gl.net prf.hn id5-sync.com eu-1-id5-sync.com eu-4-id5-sync.com *.id5-sync.com *.eu-1-id5-sync.com *.eu-4-id5-sync.com *.inmarkethub.com *.ninthdecimal.com *.logtrackback.com *.thinknearhub.com *.inmarket.com *.appboycdn.com appboy-images.com x.bidswitch.net braze-images.com r.casalemedia.com *.creativecdn.com *.doubleclick.net googleads.g.doubleclick.com googleads.g.doubleclick.net *.googleadservices.com rtb-csync.smartadserver.com *.ytimg.com ytimg.com ad.yieldlab.net *.taboola.com *.bizrate.com *.connexity.net *.cnnx.link *.prandolisto.com beyond.chat.getzowie.com;script-src-elem 'self' 'unsafe-inline' *.akamaihd.net *.bedbathandbeyond.com *.go-mpulse.net *.ostkcdn.com *.overstock.com *.swarmshop.com unpkg.com vercel.live *.vercel-scripts.com cdn1.affirm.com cdn1-sandbox.affirm.com cdn1.sandbox.affirm.com applepay.cdn-apple.com *.paypal.com *.kmsmep.com *.comenity.net *.breadpayments.com *.bing.com *.bing.net *.braze.com *.clarity.ms api.consentjs.datagrail.io *.evergage.com cdn.evgnet.com *.facebook.net *.facebook.com *.google.com *.google.ca *.google.co.uk *.google.ie *.google.mx *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.criteo.com *.3gl.net js.go2sdk.com id5-sync.com eu-1-id5-sync.com eu-4-id5-sync.com *.accdab.net *.id5-sync.com *.eu-1-id5-sync.com *.eu-4-id5-sync.com *.inmarkethub.com *.ninthdecimal.com *.logtrackback.com *.thinknearhub.com *.inmarket.com *.newrelic.com *.nr-data.net *.appboycdn.com *.creativecdn.com sslwidget.criteo.com widget.us.criteo.com *.doubleclick.net *.googleadservices.com *.taboola.com *.bizrate.com *.connexity.net *.cnnx.link *.prandolisto.com bugcrowd.com assets.bugcrowdusercontent.com beyond.chat.getzowie.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.akamaihd.net *.bedbathandbeyond.com *.go-mpulse.net *.ostkcdn.com *.overstock.com *.swarmshop.com unpkg.com vercel.live cdn1.affirm.com cdn1-sandbox.affirm.com cdn1.sandbox.affirm.com applepay.cdn-apple.com *.bing.com *.bing.net *.braze.com *.clarity.ms *.evgnet.com *.facebook.net *.facebook.com *.google.com *.google.ca *.google.co.uk *.google.ie *.google.mx *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.3gl.net js.go2sdk.com aspireiq.go2cloud.org id5-sync.com eu-1-id5-sync.com eu-4-id5-sync.com *.id5-sync.com *.eu-1-id5-sync.com *.eu-4-id5-sync.com *.inmarkethub.com *.ninthdecimal.com *.logtrackback.com *.thinknearhub.com *.inmarket.com *.newrelic.com *.nr-data.net *.appboycdn.com *.creativecdn.com *.doubleclick.net *.googleadservices.com *.taboola.com *.bizrate.com *.connexity.net *.cnnx.link *.prandolisto.com beyond.chat.getzowie.com;script-src-attr 'self' 'unsafe-inline' *.akamaihd.net *.bedbathandbeyond.com *.ostkcdn.com *.overstock.com *.swarmshop.com unpkg.com vercel.live *.bing.com *.bing.net *.clarity.ms *.facebook.net *.facebook.com *.google.com *.google.ca *.google.co.uk *.google.ie *.google.mx *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.3gl.net *.newrelic.com *.nr-data.net *.appboycdn.com *.creativecdn.com *.doubleclick.net *.taboola.com *.bizrate.com *.connexity.net *.cnnx.link *.prandolisto.com;style-src 'self' data: 'unsafe-inline' *.bedbathandbeyond.com *.overstock.com *.swarmshop.com vercel.live *.us-6.evergage.com *.gstatic.com *.3gl.net;worker-src 'self' blob blob: *.bedbathandbeyond.com *.ostkcdn.com *.overstock.com *.swarmshop.com;form-action 'self' *.bedbathandbeyond.com *.overstock.com *.swarmshop.com *.facebook.com *.3gl.net;frame-src 'self' *.bedbathandbeyond.com *.overstock.com *.swarmshop.com unpkg.com vercel.live *.youtube.com *.affirm.com applepay.cdn-apple.com *.paypal.com *.kmsmep.com *.comenity.net *.breadpayments.com *.bing.com *.bing.net *.clarity.ms *.facebook.com *.google.com *.google.ca *.google.co.uk *.google.ie *.google.mx *.googlesyndication.com *.googletagmanager.com *.criteo.com *.criteo.net *.3gl.net *.accdab.net *.creativecdn.com *.doubleclick.net *.prandolisto.com bugcrowd.com assets.bugcrowdusercontent.com beyond.chat.getzowie.com;frame-ancestors *.comenity.net;object-src 'none'; 2 frame-ancestors https://fupa.net:* https://*.fupa.net https://*.fupa.dev http://localhost:* localhost:* 2 default-src 'self' 'unsafe-inline'; frame-ancestors 'none';object-src 'none'; 2 default-src 'self' https:; base-uri 'self'; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; script-src-attr 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; style-src-elem 'self' https: 'unsafe-inline'; style-src-attr 'unsafe-inline'; img-src 'self' https: data: blob:; media-src 'self' https: data: blob: mediastream:; font-src 'self' https: data:; connect-src 'self' https: wss: http://pipedream.wistia.com; worker-src 'self' https: blob:; child-src 'self' https: blob:; frame-src 'self' https: data: blob:; form-action 'self' https:; frame-ancestors 'self' https://app.contentful.com; upgrade-insecure-requests; report-uri /api/csp-report; report-to csp-endpoint 2 frame-ancestors https://www.wrike.com https://app-eu.wrike.com https://app-us2.wrike.com https://trial.wrike.com; report-uri https://csp-global.wrike.com/csp-report?website 2 frame-ancestors 'self' *.ispmanager.com *.ispmanager.ru https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr http://webvisor.com http://*.webvisor.com 2 frame-ancestors self https://*.asianetnews.com https://*.asianetnews.co http://*.annpl.org https://*.asianetnews.org https://jionews.com https://jionewsdev1.jio.ril.com 2 frame-ancestors 'self' http://api.securedvisit.com http://track.securedvisit.com http://content.securedvisit.com http://images.securedvisit.com http://track.sv.rkdms.com https://cdn-us.algoliaradar.com https://insights.algolia.io/1/events https://insights.algolia.io/1/searches 2 default-src 'self'; connect-src 'self' *.adobeaemcloud.com cdn.jsdelivr.net rum.hlx.page player.simplecast.com injector.simplecastaudio.com https://diyynxsp8dot1.cloudfront.net wss://58vcudu8r5.execute-api.us-east-1.amazonaws.com/prod/ https://6ygezwblvd.execute-api.us-east-1.amazonaws.com/prod/feedback/b28d65ac-b276-425e-b2eb-cf2924f804eb *.pusher.com sessions.bugsnag.com *.bugherd.com bugcrowd.com assets.bugcrowdusercontent.com *.execute-api.us-east-1.amazonaws.com *.adobedc.net *.demdex.net www.juicer.io app.smartsheet.com https://yz72p3rzwh.execute-api.us-east-1.amazonaws.com https://labcorp.tt.omtrdc.net https://ekr.zdassets.com wss://27vxon1aze.execute-api.us-east-1.amazonaws.com wss://widget-mediator.zopim.com https://pixel-by-labcorp.zendesk.com *.labcorp.com *.scene7.com *.onetrust.com *.cookielaw.org vimeo.com labcorp-qa.oktapreview.com labcorp.oktapreview.com sc.omtrdc.net assets.adobedtm.com *.linkedin.oribi.io *.algolianet.com https://6pskq0iljc-dsn.algolia.net https://labcorp-holdings.okta.com https://labcorp-holdings-stage.oktapreview.com https://bcbolt446c5271-a.akamaihd.net https://manifest.prod.boltdns.net https://edge.api.brightcove.com https://www.snapengage.com https://s722592.t.eloqua.com *.adobecqms.net https://kit-pro.fontawesome.com https://www.google-analytics.com *.iperceptions.com https://covance.sc.omtrdc.net https://covanceinc.tt.omtrdc.net https://stats.g.doubleclick.net https://viewlicense.adobe.io https://maps.googleapis.com https://amcglobal.sc.omtrdc.net https://covancecom.mpeasylink.com; style-src 'unsafe-inline' 'self' https://costestimator.labcorp.com https://use.fontawesome.com https://assets.juicer.io https://cdn.jsdelivr.net https://ok1static.oktacdn.com *.scene7.com *.drugdevelopment.labcorp.com *.biopharma.labcorp.com https://covancecom.mpeasylink.com https://fonts.googleapis.com *.typekit.net; font-src 'self' *.typekit.net https://storage.googleapis.com https://ok1static.oktacdn.com https://fonts.gstatic.com https://static.juicer.io https://use.fontawesome.com data:; script-src 'unsafe-eval' 'unsafe-inline' 'self' rum.hlx.page *.bugherd.com *.pusher.com bugcrowd.com assets.bugcrowdusercontent.com *.adobe.com *.demdex.net *.labcorp.com https://connect.facebook.net https://assets.juicer.io https://challenges.cloudflare.com https://widget-mediator.zopim.com https://static.zdassets.com https://static.cloudflareinsights.com *.scene7.com *.cookielaw.org player.vimeo.com https://bh.contextweb.com *.brandcdn.com https://tracking1.labcorp.com https://img.en25.com https://cdn.jsdelivr.net https://ok1static.oktacdn.com https://view.ceros.com https://analytics.convertlanguage.com https://drugdevelopment.labcorp.com *.drugdevelopment.labcorp.com https://biopharma.labcorp.com *.biopharma.labcorp.com https://vjs.zencdn.net https://map.brightcove.com https://assets.map.brightcove.com https://cdn5.userzoom.com https://kit-pro.fontawesome.com https://assets.adobedtm.com https://covancecom.mpeasylink.com https://www.google-analytics.com https://urldefense.com https://www.googletagmanager.com https://tag.simpli.fi *.iperceptions.com https://snap.licdn.com https://js.adsrvr.org https://static.ads-twitter.com https://www.googleadservices.com https://analytics.twitter.com https://i.simpli.fi https://googleads.g.doubleclick.net https://maps.googleapis.com https://storage.googleapis.com https://www.google.com https://www.snapengage.com https://www.gstatic.com https://www.youtube.com https://l2.io https://ssl.google-analytics.com https://players.brightcove.net https://img03.en25.com blob:; img-src 'self' *.adobeaemcloud.com d2iiunr5ws5ch1.cloudfront.net bugherd-attachments.s3.amazonaws.net *.bugherd.com *.labcorp.com *.vimeocdn.com *.scene7.com *.cookielaw.org *.businesswire.com mma.prnewswire.com metrics.labcorp.com *.juicer.io *.demdex.net *.iperceptions.com labcorp.sc.omtrdc.net https://www.snapengage.com https://analytics.twitter.com *.brandcdn.com https://insight.adsrvr.org https://tracking1.labcorp.com https://www.googletagmanager.com https://ok1static.oktacdn.com https://analytics.convertlanguage.com https://cf-images.us-east-1.prod.boltdns.net https://metrics.brightcove.com https://googleads.g.doubleclick.net *.linkedin.com *.linkedin.oribi.io https://t.co https://p.adsymptotic.com https://www.google.com https://www.google.com.gt https://www.google-analytics.com https://drugdevelopment.labcorp.com https://biopharma.labcorp.com https://maps.gstatic.com https://maps.googleapis.com https://storage.googleapis.com https://cm.everesttech.net https://amcglobal.sc.omtrdc.net https://s409256115.t.eloqua.com https://um.simpli.fi https://www.googleadservices.com https://cm.g.doubleclick.net https://covance.sc.omtrdc.net data:; frame-ancestors 'self' https://match.adsrvr.org; frame-src 'self' rum.hlx.page player.simplecast.com injector.simplecastaudio.com youtube.com www.youtube.com *.bugherd.com bugcrowd.com assets.bugcrowdusercontent.com *.demdex.net *.adobe.com *.cloudflare.com player.vimeo.com *.brandcdn.com https://www.labcorp.com https://webforms.labcorp.com https://app.smartsheet.com https://view.ceros.com https://10644661.fls.doubleclick.net https://players.brightcove.net *.iperceptions.com https://insight.adsrvr.org https://covancecom.mpeasylink.com https://bid.g.doubleclick.net https://www.google.com https://match.adsrvr.org; media-src 'self' *.labcorp.com *.scene7.com delivery-p121952-e1214068.adobeaemcloud.com https://static.zdassets.com https://www.snapengage.com blob:; object-src 'none'; 2 child-src 'self' *.vimeo.com *.vimeocdn.com www.youtube.com; default-src 'self' 'unsafe-inline' vitals.vercel-insights.com *.vimeo.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; frame-src player.vimeo.com vars.hotjar.com www.facebook.com t.sharethis.com *.company-target.com https://challenges.cloudflare.com https://wizlympics-website.vercel.app https://wizlympics-winter-website.vercel.app https://asteroids-website.vercel.app https://path-man-website.vercel.app *.navattic.com *.wiz.io forms.office.com docs.google.com www.googletagmanager.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com www.youtube.com cdn.forms-content.sg-form.com boards.greenhouse.io job-boards.greenhouse.io; worker-src 'self' blob:; connect-src 'self' vitals.vercel-insights.com www.google-analytics.com analytics.google.com/g/collect www.google.com *.vimeo.com vimeo.com *.ingest.sentry.io www.datocms-assets.com www.youtube.com legal.wiz.io *.algolia.net *.algolianet.com *.algolia.io *.company-target.com *.demandbase.com *.hotjar.com *.hotjar.io wss://*.hotjar.com cdn.bizible.com bat.bing.com cdn.cookielaw.org tracking.g2crowd.com static.hotjar.com script.hotjar.com *.sharethis.com a.clarity.ms/collect *.onetrust.com *.clarity.ms j.6sc.co snap.licdn.com *.redditstatic.com static.ads-twitter.com connect.facebook.net tkr.techtarget.com epsilon.6sense.com ipv6.6sc.co c.6sc.co ib.adbnxs.com trk.techtarget.com ib.adnxs.com munchkin.marketo.net 120-tfk-810.mktoutil.com 120-tfk-810.mktoresp.com secure.adnxs.com www.facebook.com cdn.linkedin.oribi.io epsilon-cloudfront.6sense.com tags.clickagy.com *.doubleclick.net ws://localhost:3000 tags.srv.stackadapt.com *.googleapis.com ctf.wiz-research.com staging-ctf.wiz-research.com api.cr-relay.com analytics.tiktok.com *.tiktokw.us *.mux.com *.supabase.co wss://*.supabase.co hey.wiz.io px.ads.linkedin.com *.techtarget.com tracking-api.g2.com *.reddit.com *.crwdcntrl.net *.googlesyndication.com *.clearbit.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.hotjar.com data:; img-src 'self' 'unsafe-eval' data: https: http: *.hotjar.com tags.srv.stackadapt.com https://ct.capterra.com; media-src 'self' https: blob: mediastream:; object-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' va.vercel-scripts.com vitals.vercel-insights.com tagmanager.google.com apis.google.com www.googleadservices.com www.googletagmanager.com www.google-analytics.com *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.hotjar.com *.demandbase.com *.quora.com https://challenges.cloudflare.com tags.srv.stackadapt.com *.navattic.com bwa.marketplace.awsstatic.com cdn.cr-relay.com analytics.tiktok.com *.clearbitjs.com *.clearbitscripts.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com www.youtube.com cdn.forms-content.sg-form.com boards.greenhouse.io job-boards.greenhouse.io cdn.bizible.com bat.bing.com cdn.cookielaw.org tracking.g2crowd.com static.hotjar.com script.hotjar.com *.sharethis.com a.clarity.ms/collect *.onetrust.com *.clarity.ms j.6sc.co snap.licdn.com *.redditstatic.com static.ads-twitter.com connect.facebook.net tkr.techtarget.com epsilon.6sense.com ipv6.6sc.co c.6sc.co ib.adbnxs.com trk.techtarget.com ib.adnxs.com munchkin.marketo.net 120-tfk-810.mktoutil.com 120-tfk-810.mktoresp.com secure.adnxs.com www.facebook.com cdn.linkedin.oribi.io epsilon-cloudfront.6sense.com tags.clickagy.com *.doubleclick.net; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.vimeocdn.com *.hotjar.com tags.srv.stackadapt.com; form-action 'self' www.facebook.com; frame-ancestors 'self' https://partners.wiz.io https://www.wiz.io; 2 frame-ancestors http://*.bestbuy.com https://*.bestbuy.com http://*.bestbuy.ca https://*.bestbuy.ca https://*.google.com https://*.gstatic.com https://*.adobemc.com https://*.adobe.com; style-src * blob: 'unsafe-inline'; 2 frame-ancestors 'self' https://m.superonline.net https://epayment-gtm.turkcell.com.tr; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https:;font-src 'self' https://use.typekit.net data:;img-src 'self' data: blob: https:;frame-src 'self' https:;connect-src 'self' https:;media-src data: blob: https:;object-src 'none';base-uri 'self';form-action 'self' 2 default-src 'self' https: data: blob:; connect-src https: wss:;script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' blob:; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com https://www.riskdataobject.com https://dev.pcgcustomer.nprd.aig.com https://dev2.pcgcustomer.nprd.aig.com https://qa.pcgcustomer.nprd.aig.com https://qa2.pcgcustomer.nprd.aig.com https://uat.pcgcustomer.nprd.aig.com https://perf.pcgcustomer.nprd.aig.com https://perf2.pcgcustomer.nprd.aig.com https://pcgcustomer.aig.com/; upgrade-insecure-requests; 2 frame-ancestors 'self' https://matomo01vp.noris.gr https://analytics.noris.de https://analytics.noris.net https://noris.de https://www.noris.de 2 frame-ancestors 'self' *.adr.org 2 default-src 'self' my.gov.au; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.youtube.com s.ytimg.com assets.adobedtm.com dynatrace.humanservices.gov.au; connect-src blob: 'self' adobedc.demdex.net docs.apigw.my.gov.au edge.adobedc.net *.my.gov.au my.gov.au mygov-dls-bff.apps.openshift-prod1-dca1.csda.gov.au mygov-dls-bff.apps.openshift-prod1-dcb1.csda.gov.au swift.csda.gov.au stats.g.doubleclick.net dynatrace.humanservices.gov.au *.dynamsoft.com https://127.0.0.1:* ws://127.0.0.1:* wss://127.0.0.1:* data: cdn.jsdelivr.net w3.org/svg/2000; img-src 'self' data: blob: stats.g.doubleclick.net swift.csda.gov.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; object-src 'self' blob: swift.csda.gov.au; frame-src 'self' blob: bluey-webchat.azurewebsites.net my.gov.au *.my.gov.au swift.csda.gov.au www.youtube.com www.youtube-nocookie.com w.soundcloud.com servicesaustralia.vudoo.io 2 default-src 'self' *.coccoc.com *.google.com *.doubleclick.net *.googletagmanager.com *.gstatic.com *.facebook.net *.bing.com *.clarity.ms *.googleapis.com; object-src 'none'; style-src 'unsafe-inline' 'self' *.coccoc.com *.gstatic.com *.googleapis.com; font-src 'self' data: *.coccoc.com *.gstatic.com; script-src 'unsafe-inline' 'self' *.coccoc.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.net *.bing.com *.clarity.ms *.googleapis.com *.youtube.com; img-src 'self' data: https:; frame-ancestors 'none'; form-action *.coccoc.com coccoc.com *.coccoc.vn; frame-src *.coccoc.com coccoc.com *.coccoc.vn *.youtube.com *.google.com *.doubleclick.net *.googletagmanager.com *.gstatic.com *.facebook.net *.bing.com *.clarity.ms *.googleapis.com; 2 default-src 'self' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft; upgrade-insecure-requests; frame-ancestors 'self' https://teams.microsoft.com https://retailservices.teams.microsoft.com https://retailservices-ppe.teams.microsoft.com https://tasks.teams.microsoft.com https://local.teams.office.com https://devspaces.skype.com https://ssauth.skype.com https://teams.microsoft.com.mcas.ms https://teams.microsoft.com.us3.cas.ms https://local.teams.office.com:8080 https://teams.live.com https://outlook-sdf.office.com https://outlook.office.com/ https://assignments.onenote.com https://assignments.edu.cloud.microsoft https://browser-sandbox.meshxp.net/ https://spoolclientsdk.skype.com https://acsinternal-cte-beta.azurewebsites.net https://acssample-beta.azurewebsites.net https://acssample-stable.azurewebsites.net https://loop.microsoft.com https://*.loop.microsoft.com https://loop.cloud.microsoft https://loop.cloud-dev.microsoft https://app.int.whiteboard.microsoft.com https://whiteboard.cloud-dev.microsoft https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft https://*.whiteboard.microsoft.com https://whiteboard.microsoft.com https://whiteboard.office.com https://teams.cloud.microsoft https://outlook.cloud.microsoft https://m365.cloud.microsoft https://res-sdf.cdn.office.net https://res.cdn.office.net https://mesh.public.onecdn.static.microsoft https://mesh.df.onecdn.static.microsoft https://m365.cloud.microsoft https://sbrprodprv.www.office.com https://scuprodprv.www.office.com https://fa000000174.resources.office.net https://outlook.office.com https://planner.cloud.microsoft; base-uri 'none'; manifest-src 'self' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft; script-src 'self' 'unsafe-eval' 'report-sample' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft http://amcdn.msftauth.net https://amcdn.msftauth.net https://*.office365.com https://*.office.net https://shell.cdn.office.net https://cdn.fluidpreview.office.net https://js.monitor.azure.com https://res-1.cdn.office.net https://res.cdn.office.net https://ch5.fluidpreview.office.net https://cdn.dev.fluidpreview.office.net https://dev.loop.microsoft.com https://res-sdf.cdn.office.net 'sha256-VCkGe6AeV2B4vV7flXt9Dkkp04wMc8zq7faHdRwhOx0=' 'sha256-Wmg7miLkEVn5v393z4Ch7lbKnpNnLZhnVOk/iJN1miE='; style-src 'self' 'unsafe-inline' 'report-sample' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft https://*.office.net https://res.cdn.office.net https://cdn.fluidpreview.office.net https://ch5.fluidpreview.office.net https://cdn.dev.fluidpreview.office.net https://dev.loop.microsoft.com https://res-sdf.cdn.office.net; font-src 'self' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft data: https://*.office.net https://spoprod-a.akamaihd.net https://static2.sharepointonline.com fs.microsoft.com; img-src 'self' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft blob: data: https://*.office.com https://*.office.net https://*.office365.com https://outlook.live.com https://*.teams.microsoft.com https://*.officeapps.live.com https://web.vortex.data.microsoft.com https://shell.cdn.office.net https://urlp.asm.skype.com https://urlp.sfbassets.com https://*.svc.ms https://login.live.com https://storage.live.com https://az495088.vo.msecnd.net; connect-src 'self' blob: https://* wss://whiteboard.microsoft.com/sync wss://whiteboard.svc.cloud.microsoft/sync wss://whiteboard.svc.cloud.dev.microsoft/sync wss://*.whiteboard.microsoft.com wss://whiteboard.microsoft.com wss://*.svc.ms wss://int.augloop.svc.cloud.dev.microsoft wss://*.int.augloop.svc.cloud.dev.microsoft wss://*.augloop-int.officeppe.com wss://augloop-int.officeppe.com wss://dogfood.augloop.svc.cloud.microsoft wss://*.dogfood.augloop.svc.cloud.microsoft wss://*.augloop-dogfood.officeppe.com wss://augloop-dogfood.officeppe.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft wss://*.augloop.office.com wss://augloop.office.com wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com; frame-src 'self' https://*; form-action 'self' https://*; worker-src 'self' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft; media-src 'self' https://whiteboard.cloud.dev.microsoft https://whiteboard.cloud.microsoft; object-src 'none'; report-uri https://csp.microsoft.com/report/WhiteboardWebClient-WhiteboardApp-PROD; report-to csp-endpoint; 2 default-src 'self' blob: commercial.cdn.aws.placeit.net commercial-staging.cdn.aws.placeit.net; base-uri 'self' *.plasmic.app; connect-src 'self' 'unsafe-inline' blob: *.googleapis.com *.googleadservices.com *.algolia.io *.algolia.net *.algolianet.com *.amazonaws.com *.bing.com *.braintree-api.com *.braintreegateway.com *.envato-staging.com *.envato.com *.envato.market *.envato.test *.facebook.com *.g.doubleclick.net *.doubleclick.net *.google-analytics.com *.analytics.google.com *.google.com google.com *.hotjar.com *.hotjar.io *.ip-api.com *.maxmind.com *.nr-data.net *.olark.com *.pinterest.com *.placeit.net *.recurly.com *.segment.io *.thenounproject.com *.uservoice.com code.jquery.com httpbin.org smart-templates.us nice.staging.placeit.net *.instagram.com *.pinpiaa.com wss://*.hotjar.com *.tiktok.com *.amplitude.com *.kaptcha.com wss://*.pusher.com *.paypal.com *.cookiebot.com *.googlesyndication.com *.googletagmanager.com googletagmanager.com *.placeitcode.net *.browser-intake-datadoghq.com browser-intake-datadoghq.com placeit.net *.plasmic.app sentry.io *.posthog.com *.plasmic.app *.cloudflare.com; font-src 'self' data: *.amazonaws.com *.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.gstatic.com *.olark.com *.placeit.net *.quadpay.com *.zscalerone.net github.com use.typekit.net *.hotjar.com *.placeitcode.net placeit.net *.plasmic.app; frame-src 'self' *.braintreegateway.com *.doubleclick.net *.envato.market *.facebook.com *.freshdesk.com *.googlesyndication.com *.googletagmanager.com googletagmanager.com *.hotjar.com *.kaptcha.com *.olark.com *.paypal.com *.recurly.com *.twitter.com *.uservoice.com *.youtube.com *.youtube-nocookie.com cdn.wishpond.net *.pinterest.com gateway.zscalerone.net localhost:* *.googleapis.com *.instagram.com *.google.com google.com *.placeit.net *.accounts.google.com *.cookiebot.com *.placeitcode.net placeit.net *.stripe.com *.plasmic.app *.cloudflare.com; frame-ancestors 'none'; media-src 'self' data: blob: *.olark.com *.placeit.net *.zscalerone.net ssl.gstatic.com *.amazonaws.com *.cloudfront.net *.placeitcode.net placeit.net *.mozilla.net *.plasmic.app *.cloudinary.com; img-src 'self' blob: data: https: http: *.cloudinary.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: js.recurly.com js.braintreegateway.com *.algolia.net *.algolianet.com *.amazonaws.com *.bing.com *.bootstrapcdn.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com google.com *.googleapis.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com googletagmanager.com *.gstatic.com *.hotjar.com *.impactradius-event.com *.jsdelivr.net *.linkedin.com *.newrelic.com *.nr-data.net *.olark.com *.paypal.com *.pinimg.com *.placeit.net *.segment.com *.twitter.com *.uservoice.com *.youtube.com cdn.wishpond.net unpkg.com *.upscope.io *.clarity.ms *.tiktok.com *.amplitude.com *.kaptcha.com *.cookiebot.com *.jsdelivr.net placeit.net *.placeitcode.net *.plasmic.app *.stripe.com *.plasmic.app; style-src 'self' 'unsafe-inline' *.olark.com *.googleapis.com *.olark.com *.amazonaws.com *.bootstrapcdn.com *.cloudflare.com *.placeit.net *.zscalerone.net fast.fonts.net *.typekit.net *.cloudfront.net *.google.com google.com *.jsdelivr.net *.placeitcode.net placeit.net *.plasmic.app *.plasmic.app; form-action 'self' javascript: localhost:* *.twitter.com *.pinterest.com *.facebook.com *.envato-staging.com *.envato.com *.placeit.net *.placeitcode.net placeit.net *.plasmic.app; 2 default-src 'self' blob: *.cms-wien.magwien.gv.at *.magwien.gv.at *.wien.gv.at *.maptoolkit.net *.youtube.com *.vimeo.com archiv.yourvideo.tv *.buzzsprout.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cms-wien.magwien.gv.at *.magwien.gv.at *.wien.gv.at wien.kavedo.com code.jquery.com cdn.priv.center prod-origin.truendo.com track.adform.net *.adform.net siteimproveanalytics.com *.siteimproveanalytics.io siteimproveanalytics.io *.maptoolkit.net *.webspellchecker.net platform.twitter.com syndication.twitter.com js.stripe.com; connect-src 'self' https://*.cms-wien.magwien.gv.at https://*.magwien.gv.at https://stadtservicebot.wien.gv.at ws://stadtservicebot.wien.gv.at https://clients.wh-i.at https://*.wien.gv.at https://*.maptoolkit.net https://ux.maptoolkit.net https://prod-origin.truendo.com https://*.truendo.com https://*.priv.center https://svc.webspellchecker.net https://*.jsdelivr.net https://wien.kavedo.com; style-src 'self' 'unsafe-inline' *.cms-wien.magwien.gv.at *.magwien.gv.at *.wien.gv.at wien.kavedo.com; style-src-elem 'self' 'unsafe-inline' *.cms-wien.magwien.gv.at *.magwien.gv.at *.wien.gv.at scds.dev.handbuch.wien.gv.at wiener-melange-theme.wien.gv.at svc.webspellchecker.net wien.kavedo.com; img-src 'self' data: blob: *.cms-wien.magwien.gv.at *.magwien.gv.at *.wien.gv.at *.seadform.net *.siteimproveanalytics.io siteimproveanalytics.io *.maptoolkit.net *.stripe.com *.blob.core.windows.net wien.kavedo.com; worker-src 'self' blob: *.maptoolkit.net; font-src 'self' data: blob: *.wien.gv.at *.webspellchecker.net wien.kavedo.com; frame-src 'self' *.cms-wien.magwien.gv.at *.magwien.gv.at *.wien.gv.at *.truendo.com *.adform.net cams.its-viennaregion.at platform.twitter.com youtu.be vimeo.com *.youtube.com *.vimeo.com *.yourvideo.tv *.justlive.tv justlive.tv js.stripe.com webtv.feratel.com stp.wien.gv.at *.gemeinderecht.wien.gv.at *.walls.io; frame-ancestors 'self' https://*.magwien.gv.at 2 frame-ancestors 'self' https://comscore.sharepoint.com https://*.skilljar.com https://*.basis.net; 2 default-src 'self' *.orange.be *.google.es *.abtasty.com *.fontawesome.com *.typekit.net *.digitalchannels.technology cdn.jsdelivr.net *.cookielaw.org *.googletagmanager.com *.optimizegoogle.com *.optimize-google.com *.googleanalytics.com *.google-analytics.com *.newrelic.com *.onetrust.com *.hotjar.com *.adbutter.net *.adnxs.com *.doubleclick.net *.amazon-adsystem.com *.sprinklr.com brand-messenger.app.khoros.com *.khoros.com ssl://brandmessenger-ws.euw1.khoros.com:8883 proactive-chat-server-eu.prod.aws.lcloud.com messaging-auth-eu-west-1.prod.aws.lcloud.com *.ekoo.co *.supabase.co; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' * https://optimize.google.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com https://googleads.g.doubleclick.net cdn.amplitude.com https://script.hotjar.com https://connect.facebook.net https://www.googleadservices.com http//www.googleadservices.com https://static.hotjar.com https://trk.adbutter.net https://accounts.google.com https://www.googleanalytics.com https://www.googleoptimize.com *.customersaas.com t.contentsquare.net app.contentsquare.com contentsquare.com *.emsecure.net *.customersaas.com *.orange.be *.netdna-ssl.com blob: *.abtasty.com *.googleapis.com https://assets.pinterest.com https://widgets.pinterest.com *.sprinklr.com *.ekoo.co *.supabase.co https://cdn.eu.heap-api.com https://cdn.us.heap-api.com https://heapanalytics.com https://eu.heapanalytics.com; object-src 'self' *.mobistar.be *.orange.be *.netdna-ssl.com *.sprinklr.com *.ekoo.co *.supabase.co; style-src 'unsafe-inline' 'self' https://optimize.google.com https://fonts.googleapis.com *.mobistar.be *.cloudfront.net *.customersaas.com *.orange.be *.netdna-ssl.com cdnjs.cloudflare.com *.gstatic.com *.abtasty.com *.googleapis.com messaging-khoros.app.khoros.com cdn.jsdelivr.net *.typekit.net *.googletagmanager.com *.sprinklr.com *.ekoo.co *.supabase.co https://heapanalytics.com https://eu.heapanalytics.com; img-src * blob: https://optimize.google.com *.orange.be https://www.facebook.com https://www.google.com https://www.google.es https://static.hotjar.com *.fls.doubleclick.net https://brand-messenger.app.khoros.com *.adnxs.com https://p1.zemanta.com https://aax-eu.amazon-adsystem.com https://www.google-analytics.com *.googletagmanager.com data: *.abtasty.com *.amazonaws.com *.cloudfront.net *.contentsquare.net https://i.pinimg.com https://log.pinterest.com *.sprinklr.com *.ekoo.co *.supabase.co; media-src 'self' data: *.mobistar.be *.orange.be *.netdna-ssl.com brand-messenger.app.khoros.com https://v.pinimg.com *.sprinklr.com *.ekoo.co *.supabase.co https://heapanalytics.com https://eu.heapanalytics.com; frame-src 'self' https://optimize.google.com * emsecure.net *.orange.be https://assets.pinterest.com *.sprinklr.com *.ekoo.co *.supabase.co; font-src 'self' https://fonts.gstatic.com *.mobistar.be *.customersaas.com *.orange.be cdn.livechatinc.com themes.googleusercontent.com *.netdna-ssl.com blob: data: *.googleapis.com *.gstatic.com *.abtasty.com brand-messenger.app.khoros.com messaging-khoros.app.khoros.com *.typekit.net *.fontawesome.com *.sprinklr.com *.ekoo.co *.supabase.co *.contentsquare.net https://heapanalytics.com https://eu.heapanalytics.com; connect-src 'self' *.googlesyndication.com *.qelpcare.com *.gstatic.com analytics.tiktok.com w998baawd3-dsn.algolia.net uq5v1rcrhz-dsn.algolia.net *.algolianet.com insights.algolia.io *.cloudfront.net *.tealiumiq.com *.usabilla.com *.emsecure.net *.customersaas.com wss://*.sprinklr.com *.sprinklr.com wss://*.khoros.com wss://*.khorostech.com *.eshop.orange.be *.orange.be *.digitalchannels.technology *.mousestats.com secure.comparecycle.com *.abtasty.com *.contentsquare.net *.smooch.io *.slgnt.eu *.google-analytics.com *.prod.aws.lcloud.com *.typekit.net cdn.jsdelivr.net *.nr-data.net cdnjs.cloudflare.com *.google.com *.google.es *.google.be *.fontawesome.com *.cookielaw.org *.onetrust.com *.hotjar.com *.adbutter.net *.adnxs.com *.doubleclick.net *.newrelic.com wss://*.hotjar.com *.googletagmanager.com *.ipify.org px.ads.linkedin.com *.zemanta.com *.googleadservices.com *.facebook.net *.facebook.com *.hotjar.io *.amazon-adsystem.com browser-update.org *.googleapis.com *.tiqcdn.com *.teads.tv *.pinterest.com *.taboola.com *.clarity.ms *.gsitrix.com *.adensemble.com *.cookieless-data.com bbd-tag.de admaxium.com *.perfectaudiencertg.com *.netdna-ssl.com *.twitter.com *.bing.com *.pinimg.com *.licdn.com https://static.ads-twitter.com https://js.adsrvr.org https://img.netaffiliation.com https://files.qualifio.com *.khoros.com *.ekoo.co *.supabase.co *.outbrain.com *.paa-reporting-advertising.amazon *.bing.net loopwidget.com *.adsrvr.org https://c.eu.heap-api.com https://heapanalytics.com https://eu.heapanalytics.com; frame-ancestors 'self' https://mobile.kbc-group.com https://kbctouch.kbc.be https://cbctouch.cbc.be https://touch.kbcbrussels.be https://mobileyoungsterapp.kbc-group.com wss://*.sprinklr.com *.sprinklr.com; 2 frame-ancestors 'none'; report-uri https://shoptetwww.report-uri.com/r/t/csp/enforce; report-to default 2 frame-ancestors 'self' https://statistics.uni-saarland.de; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://mc.yandex.ru https://yastatic.net https://ton-connect.github.io https://challenges.cloudflare.com https://static.cloudflareinsights.com https://*.hcaptcha.com https://hcaptcha.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://*.yandex.ru https://yastatic.net https://cdn.jsdelivr.net https://tonkeeper.com https://ton-bridge.safepal.com https://config.ton.org https://*.hcaptcha.com https://hcaptcha.com https://imgs.hcaptcha.com https://newassets.hcaptcha.com; connect-src 'self' https://mc.yandex.ru https://yastatic.net https://tonapi.io https://*.tonapi.io https://bridge.tonapi.io https://ton-connect.github.io https://config.ton.org https://analytics.ton.org https://challenges.cloudflare.com https://cloudflareinsights.com https://static.cloudflareinsights.com https://*.hcaptcha.com https://hcaptcha.com wss:; worker-src 'self' blob:; frame-src https://ton-connect.github.io https://*.tonkeeper.com https://*.tonhub.com https://*.safepal.com https://challenges.cloudflare.com https://*.hcaptcha.com https://hcaptcha.com; style-src-elem 'self' 'unsafe-inline' https://*.hcaptcha.com https://hcaptcha.com; font-src 'self' data:; object-src 'none'; base-uri 'self'; 2 media-src 'self' cdn.media.amplience.net washford.a.bigcontent.io cdn.media.halfords.com cdn.media.halfords.ie i1.adis.ws cdn.static.amplience.net cdn.c1.amplience.net;img-src 'self' *.commercecloud.salesforce.com i1.adis.ws cdn.media.amplience.net washford.a.bigcontent.io cdn.media.halfords.com cdn.media.halfords.ie www.halfords.com api.ecpplatform.com cdn.cookielaw.org *.adalyser.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.linkedin.com *.facebook.com *.quantserve.com *.affec.tv *.google.com *.google.pt *.google.co.uk *.teads.tv bat.bing.net *.adnxs.com *.adsrvr.org bat.bing.com maps.gstatic.com fonts.gstatic.com *.googleapis.com *.gstatic.com *.googleusercontent.com *.bloomreach.cloud https://tiles.woosmap.com https://a.tiles.woosmap.com https://b.tiles.woosmap.com *.googlesyndication.com www.google.ro www.googleadservices.com *.contentsquare.net *.contentsquare.com c.az.contentsquare.net l.contentsquare.net https://heapanalytics.com s.yimg.com sp.analytics.yahoo.com https://track.omguk.com track.omguk.com https://applepay.cdn-apple.com *.feefo.com *.brsrvr.com *.webtrends-optimize.com *.redditstatic.com data:;script-src cdn.cookielaw.org js-agent.newrelic.com *.nr-data.net nonce *.webtrends-optimize.com *.webtrends-optimize.workers.dev *.googletagmanager.com *.google-analytics.com 'unsafe-inline' bat.bing.com *.licdn.com *.adalyser.com connect.facebook.net *.tiktok.com *.medallia.eu *.quantserve.com go.affec.tv *.adnxs.com *.doubleclick.net *.teads.tv www.ist-track.com 'self' 'unsafe-eval' rules.quantcount.com *.contentsquare.net *.contentsquare.com app.contentsquare.com t.contentsquare.net https://cdn.heapanalytics.com https://heapanalytics.com *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com https://sdk.woosmap.com blob: s.yimg.com https://track.omguk.com https://www.facebook.com test.oppwa.com eu-prod.oppwa.com *.force.com *.salesforce.com *.my.site.com *.halfords.com *.salesforceliveagent.com https://applepay.cdn-apple.com *.feefo.com cdn.brcdn.com cdns.brsrvr.com pidataplatformhalfords.azure-api.net c.az.contentsquare.net csp.withgoogle.com *.exponea.com *.redditstatic.com https://runtime.commercecloud.com *.site.com p11.techlab-cdn.com;script-src-attr 'unsafe-inline' p11.techlab-cdn.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org cookie-cdn.cookiepro.com https://fonts.googleapis.com test.oppwa.com eu-prod.oppwa.com *.googleapis.com *.force.com *.salesforce.com *.my.site.com *.halfords.com *.salesforceliveagent.com https://applepay.cdn-apple.com *.feefo.com *.webtrends-optimize.com https://heapanalytics.com;connect-src 'self' cdn.cookielaw.org halfords-privacy.my.onetrust.com bam.eu01.nr-data.net *.webtrends-optimize.com *.webtrends-optimize.workers.dev https://api.cquotient.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.analytics.google.com *.google-analytics.com/g/collect *.analytics.google.com/g/collect bat.bing.com bat.bing.net *.a.run.app *.google.com *.google.pt analytics.tiktok.com *.teads.tv *.googlesyndication.com pixel.quantcount.com px.ads.linkedin.com localhost:* *.googleapis.com *.gstatic.com https://api.woosmap.com *.dxpapi.com wto-halfords-productfeed.azurewebsites.net *.contentsquare.net *.contentsquare.com https://heapanalytics.com s.yimg.com https://api.edq.com https://track.omguk.com https://www.facebook.com https://pixel.quantserve.com pixel.quantserve.com google.com play.google.com *.force.com *.salesforce.com *.my.site.com *.halfords.com *.salesforceliveagent.com https://applepay.cdn-apple.com *.feefo.com pidataplatformhalfords.azure-api.net csp.withgoogle.com *.azurewebsites.net *.exponea.com https://runtime.commercecloud.com *.salesforce-scrt.com p11.techlab-cdn.com;frame-src * *.site.com;child-src blob: 'self';worker-src https://test.oppwa.com https://eu-prod.oppwa.com 'self' blob:;form-action *;default-src 'self' p11.techlab-cdn.com;base-uri 'self';font-src 'self' https: data:;frame-ancestors 'self' https://runtime.commercecloud.com;object-src 'none';upgrade-insecure-requests 2 frame-ancestors 'self' https://addeventinc.github.io/; 2 upgrade-insecure-requests ;frame-ancestors 'self' https://*.experiencecloud.adobe.com https://experiencecloud.adobe.com https://experience.adobe.com; 2 frame-src https://*.farnell.com https://*.element14.com https://*.newark.com 2 frame-ancestors 'self' https://www.conservativereview.com/ 2 default-src 'none'; img-src wtfismyip.com myip.wtf; script-src ipv4.wtfismyip.com wtfismyip.com myip.wtf ipv4.myip.wtf; style-src 'unsafe-inline' 2 frame-ancestors 'self' https://*.mobiauto.com.br https://*.mobigestor.com.br https://*.passecarros.com.br https://*.suaoficinaonline.com.br https://*.evergage.com 2 default-src https: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' https://*; 2 object-src players.brightcove.net www.realpage.com s.realpage.com vjs.zencdn.net; frame-ancestors 'self' *.realpage.com *.seismic.com www.realpagelearning.com *.yieldstar.com *.mpfyieldstar.com www.on-site.com; report-to csp-violation; report-uri https://cspreports.realpage.com/api/reports/save/violation; 2 default-src data: https:; script-src data: https: 'unsafe-inline' 'unsafe-eval'; style-src data: https: 'unsafe-inline'; object-src 'self' blob:; img-src data: blob: https:; 2 frame-ancestors 'self' http://webvisor.com; default-src 'self' https://yandex.ru; font-src 'self'; script-src 'self' https://api-maps.yandex.ru https://maps.google.com https://code.jivosite.com https://www.googletagmanager.com https://stats.hts.ru https://mc.yandex.ru https://yastatic.net https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://mc.yandex.ru https://code.jivosite.com https://*.jivosite.com; img-src 'self' https://ext.host-tracker.com https://api-maps.yandex.ru https://counter.yadro.ru http://cp.hts.ru https://mc.yandex.ru https://*.maps.yandex.net http://www.hts.ru http://hubble.ht-systems.ru https://stats.hts.ru https://www.google-analytics.com data:; media-src 'self' https://code.jivosite.com; style-src 'self' 'unsafe-inline'; object-src 'self' 2 frame-ancestors 'self' *.freenas.org *.ixsystems.com *.truenas.org; upgrade-insecure-requests; default-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; object-src 'self' https:; connect-src 'self' https: wss: wss://*.docsbot.ai; img-src 'self' data: https: blob:; font-src 'self' data: https:; 2 default-src 'none'; connect-src 'self' ipleak.net:* *.ipleak.net:* ipleak.net *.ipleak.net; font-src 'self'; frame-src 'self' *.google.com; img-src 'self' data:; script-src 'self'; style-src 'self'; manifest-src 'self'; base-uri 'none'; form-action 'self' 2 default-src 'self'; connect-src *; style-src 'self' 'unsafe-inline' *.zdf.de *.zdfheute.de; font-src 'self' *.zdf.de *.zdfheute.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.zdf.de *.zdfheute.de *.sensic.net *.aticdn.net *.nmrodam.com *.gstatic.com *.twitter.com *.facebook.net *.instagram.com *.xiti.com; img-src 'self' blob: data: *.zdf.de *.zdfheute.de *.nmrodam.com *.ytimg.com; frame-src 'self' *.zdf.de *.zdfheute.de *.twitter.com *.sensic.net *.nmrodam.com *.facebook.com *.instagram.com *.dwcdn.net *.youtube-nocookie.com; media-src 'self' blob: *.zdf.de *.zdfheute.de *.zdf.dev *.akamaihd.net *.akamaized.net *.dradio.de; frame-ancestors 'self'; 2 default-src 'unsafe-inline' 'unsafe-eval' 'self' data: https://static.tugraz.at https://sso.tugraz.at https://analytics.tugraz.at *.tugraz.at https://*.twitter.com https://*.twimg.com https://www.googletagmanager.com https://connect.facebook.net https://*.google-analytics.com https://stats.g.doubleclick.net https://*.analytics.google.com https://*.licdn.com https://*.linkedin.com; child-src 'self' *.tugraz.at *.youtube.com *.youtube-nocookie.com *.google.com *.mapbuildr.com mapbuildr.com *.googleapis.com *.openstreetmap.org https://*.twitter.com https://letscast.fm; img-src 'unsafe-inline' 'unsafe-eval' * data:; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://googleads.g.doubleclick.net https://analytics.tiktok.com https://a.mgid.com https://unpkg.com https://a.plerdy.com https://snap.licdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://connect.facebook.net https://polyfill.io https://script.hotjar.com https://cdn.liqpay.ua https://w.liqpay.ua https://channelapi.liqpay.ua https://www.gstatic.com https://maxcdn.bootstrapcdn.com https://static.hotjar.com https://fingerprint.pb.ua https://socauth.privatbank.ua https://24.privatbank.ua https://*.privatbank.ua https://*.it.loc; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://24.privatbank.ua https://*.privatbank.ua; img-src 'self' data: blob: https: https://*.privatbank.ua https://dobro.privatbank.ua https://www.liqpay.ua https://auto.privatbank.ua https://carddesign.privatbank.ua https://dwfvpbrjajjfs.cloudfront.net; font-src 'self' data: https://fonts.gstatic.com https://*.privatbank.ua; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://www.googleadservices.com https://region1.analytics.google.com https://www.google.com https://analytics.tiktok.com https://a.plerdy.com https://snap.licdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://px.ads.linkedin.com https://stats.g.doubleclick.net https://dwfvpbrjajjfs.cloudfront.net https://www.facebook.com https://connect.facebook.net https://socauth.privatbank.ua https://cdn.liqpay.ua https://channelapi.liqpay.ua wss://channelapi.liqpay.ua https://w.liqpay.ua https://fingerprint.pb.ua https://*.privatbank.ua https://*.it.loc https://promin.privatbank.ua:8072 https://promin.stage.it.loc https://promin.test.it.loc https://cp.privatbank.ua:443 https://uniagr.test.it.loc https://dio.privatbank.ua https://otp-inner.privatbank.ua https://activepoints.privatbank.ua https://cis.stage.it.loc https://atmtsoorder.privatbank.ua https://uniagr.privatbank.ua https://bmetal.privatbank.ua https://odb.privatbank.ua:10151 https://deposits.privatbank.ua http://odb.privatbank.ua:11151 http://treasury.privatbank.ua http://wf.privatbank.ua:8186 https://fxcash.privatbank.ua https://iq.privatbank.ua:9488 https://moneyreturn.privatbank.ua https://ex.privatbank.ua https://stat.privatbank.ua wss://a.plerdy.com https://ad.doubleclick.net https://*.fls.doubleclick.net https://*.run.app https://*.conversionsapigateway.com https://cognito-identity.eu-central-1.amazonaws.com https://firehose.eu-central-1.amazonaws.com; frame-src 'self' 'unsafe-inline' data: blob: privat24: https://www.google.com https://www.googletagmanager.com https://drive.google.com https://www.youtube.com https://www.facebook.com https://w.liqpay.ua https://a.plerdy.com https://fingerprint.pb.ua https://24.privatbank.ua https://socauth.privatbank.ua https://static.privatbank.ua https://login-widget.privatbank.ua https://*.privatbank.ua https://*.it.loc https://*.fls.doubleclick.net; child-src 'self' blob: https://www.googletagmanager.com https://w.liqpay.ua; media-src 'self' data: blob: https://cdn.liqpay.ua https://*.privatbank.ua https://dwfvpbrjajjfs.cloudfront.net; object-src 'self' https://static.privatbank.ua https://maxcdn.bootstrapcdn.com; base-uri 'self'; form-action 'self' https://www.liqpay.ua https://*.privatbank.ua https://*.it.loc privat24:; 2 frame-ancestors 'self' https://*.bidorbuy.co.za https://*.bobshop.co.za https://*.bob.co.za https://*.qa.bobshop.co.za; 2 child-src checkoutshopper-live.adyen.com https://intercom-sheets.com https://www.intercom-reporting.com 'self'; connect-src adservice.google.com ajax.googleapis.com analytics.google.com analytics.twitter.com api-js.mixpanel.com api.mixpanel.com apis.google.com arena.matific.com bam-cell.nr-data.net bam.nr-data.net cdn.linkedin.oribi.io checkoutshopper-live.adyen.com code.jquery.com consentcdn.cookiebot.com d3hb14vkzrxvla.cloudfront.net d5c36hgmtufmn.cloudfront.net episode-fact.matific.com firebase.googleapis.com firebaseinstallations.googleapis.com firestore.googleapis.com fonts.googleapis.com googleads.g.doubleclick.net *.google-analytics.com heapanalytics.com https://*.cardinalcommerce.com https://*.clarity.ms/ https://*.clarity.ms/collect https://customer-h8ynfrgd4l2k01xb.cloudflarestream.com https://er0hbf77h9.execute-api.us-east-1.amazonaws.com/production/logVoiceOverEvent https://google.com/ https://google.com/ccm/form-data/ https://hv.survicate.com https://*.intercomcdn.com https://*.intercom-messenger.com https://*.intercomusercontent.com https://pagesense-hb-collect.zoho.com.au/psimg.gif https://production-respondent-uploads.s3.eu-west-1.amazonaws.com https://respondent.survicate.com https://survey-prd.survicate-cdn.com https://survey.survicate.com https://translate-pa.googleapis.com https://www.cloudflare.com https://www.google.gr *.intercom.io ljifg6p8cd.execute-api.us-east-1.amazonaws.com *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu matific-generatedpdf-ca.s3.amazonaws.com matific-homepage-production.s3.amazonaws.com pagesense-collect.zoho.com.au pagesense.zoho.com.au/ pi.pardot.com polling.matific.com prod-static-web1.matific.com production-cdn-slatemathweb.s3.amazonaws.com px.ads.linkedin.com region1.analytics.google.com s147nglrj7.execute-api.us-east-1.amazonaws.com securetoken.googleapis.com 'self' *.sentry.io site1.matific.com site2.matific.com site3.matific.com ssl.kaptcha.com static1.matific.com static2.matific.com static3.matific.com stats.g.doubleclick.net t.co translate.googleapis.com wa.appsflyer.com wa.onelink.me widget.usersnap.com widget.usersnap.com/api/widget/xhrrpc/* wss://*.intercom-messenger.com wss://nexus-australia-websocket.intercom.io wss://nexus-europe-websocket.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io www.facebook.com www.google.ad www.googleadservices.com www.google.ae www.google.al www.googleapis.com www.google.az www.google.be www.google.by www.google.ca www.google.ch www.google.cl www.google.cn www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.com www.google.com.ar www.google.com.au www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.do www.google.com.ec www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.om www.google.com.pe www.google.com.pr www.google.com.qa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.uk www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.hn www.google.hr www.google.hu www.google.iq www.google.it www.google.jo www.google.kg www.google.li www.google.lu www.google.lv www.google.mn www.google.mv www.google.nl/ www.google.no www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.googletagmanager.com www.google.vg; default-src fonts.googleapis.com https://c.bing.com https://*.clarity.ms *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu 'self' 'unsafe-inline'; font-src api.couponmate.com d5c36hgmtufmn.cloudfront.net data: fonts.googleapis.com fonts.gstatic.com gateway.zscalerone.net heapanalytics.com https://fonts.intercomcdn.com https://js.intercomcdn.com https://surveys-static-prd.survicate-cdn.com https://surveys-static.survicate.com *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu maxcdn.bootstrapcdn.com production-cdn-slatemathweb.s3.amazonaws.com 'self' stackpath.bootstrapcdn.com themes.googleusercontent.com use.fontawesome.com use.typekit.net; form-action *.3ds.modirum.com *.bluesnap.com data: https://api-iam.intercom.io https://intercom.help lgn.edu.gov.il matific-admintools.auth.us-east-1.amazoncognito.com *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu 'self' staging-matific-admintools.auth.us-east-1.amazoncognito.com 'unsafe-eval' www.facebook.com; frame-ancestors *.matific.com 'self' www.instructure.com www.matific.com; frame-src * accounts.google.com app.smartsheet.com bid.g.doubleclick.net *.bluesnap.com challenges.cloudflare.com checkoutshopper-live.adyen.com consentcdn.cookiebot.com customer-h8ynfrgd4l2k01xb.cloudflarestream.com d5c36hgmtufmn.cloudfront.net gateway.zscalerone.net https://*.cardinalcommerce.com live.adyen.com live-apse.adyen.com live-au.adyen.com live-us.adyen.com *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu matific-prod.firebaseapp.com pagesense.zoho.com.au pay.google.com policies.google.com prod-static-web1.matific.com production-cdn-slatemathweb.s3.amazonaws.com 'self' site1.matific.com site2.matific.com site3.matific.com ssl.kaptcha.com static1.matific.com static2.matific.com static3.matific.com tst.kaptcha.com 'unsafe-eval' us-east-1.quicksight.aws.amazon.com www.facebook.com www.google.com www.gstatic.com; img-src accounts.google.com *.analytics.google.com analytics.google.com analytics.twitter.com bam-cell.nr-data.net bam.nr-data.net blob: *.bluesnap.com c.bing.com code.jquery.com connect.facebook.net csi.gstatic.com cx.atdmt.com d33v4339jhl8k0.cloudfront.net d5c36hgmtufmn.cloudfront.net data: dev.visualwebsiteoptimizer.com files.readme.io gateway.zscalerone.net googleads.g.doubleclick.net *.google-analytics.com *.gstatic.com heapanalytics.com https://assets.survicate.com https://c.clarity.ms/ https://c.clarity.ms/c.gif https://chatapi-prod.s3.amazonaws.com/ https://downloads.intercomcdn.com https://gifs.intercomcdn.com https://images.unsplash.com https://img.survicate.com https://js.intercomcdn.com https://messenger-apps.intercom.io https://pagesense-hb-collect.zoho.com.au/psimg.gif https://purecatamphetamine.github.io/country-flag-icons/ https://static.intercomassets.com https://surveys-static-prd.survicate-cdn.com https://surveys-static.survicate.com https://uploads.intercomusercontent.com https://video-messages.intercomcdn.com https://www.facebook.com/ https://www.facebook.com/tr/ https://www.google.ge imgsct.cookiebot.com *.intercom-attachments-1.com *.intercom-attachments-2.com *.intercom-attachments-3.com *.intercom-attachments-4.com *.intercom-attachments-5.com *.intercom-attachments-6.com *.intercom-attachments-7.com *.intercom-attachments-8.com *.intercom-attachments-9.com matific-a.akamaihd.net *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu p.adsymptotic.com pagesense-collect.zoho.com.au prod-static-web1.matific.com production-cdn-slatemathweb.s3.amazonaws.com p.typekit.net px4.ads.linkedin.com px.ads.linkedin.com resources.usersnap.com 'self' site1.matific.com site2.matific.com site3.matific.com ssl.kaptcha.com static1.matific.com static2.matific.com static3.matific.com static.ads-twitter.com stats.g.doubleclick.net t.co translate.googleapis.com translate.google.com tst.kaptcha.com 'unsafe-eval' 'unsafe-inline' web.facebook.com www.google.ad www.googleadservices.com www.google.ae www.google.al www.google.at www.google.az www.google.be www.google.bg www.google.bs www.google.bt www.google.by www.google.ca www.google.ch www.google.cl www.google.cn www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.com www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.do www.google.com.ec www.google.com.eg www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.it www.google.jo www.google.kg www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.mn www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.googletagmanager.com www.google.tt www.google.vg www.google.vu www.kidsafeseal.com www.linkedin.com; media-src blob: data: https://customer-h8ynfrgd4l2k01xb.cloudflarestream.com https://downloads.intercomcdn.com https://js.intercomcdn.com *.matific.com 'unsafe-eval'; object-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src ajax.googleapis.com analytics.twitter.com apis.google.com appleid.cdn-apple.com bam-cell.nr-data.net bam.nr-data.net blob: *.bluesnap.com cdn4.mxpnl.com cdn.heapanalytics.com cdn.mxpnl.com challenges.cloudflare.com checkoutshopper-live.adyen.com code.jquery.com connect.facebook.net consentcdn.cookiebot.com consent.cookiebot.com dev.visualwebsiteoptimizer.com firebase.googleapis.com firstore.googleapis.com gateway.zscalerone.net googleads.g.doubleclick.net *.google-analytics.com *.google.com heapanalytics.com https://appleid.cdn-apple.com https://*.cardinalcommerce.com https://*.clarity.ms https://d12wqas9hcki3z.cloudfront.net https://d33v4339jhl8k0.cloudfront.net https://firebaseinstallations.googleapis.com https://survey-prd.survicate-cdn.com https://surveys-static-prd.survicate-cdn.com https://surveys-static.survicate.com https://survey.survicate.com https://www.recaptcha.net js-agent.newrelic.com *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu *.pagesense.io pi.pardot.com resources.usersnap.com 'self' snap.licdn.com static.ads-twitter.com static.zohocdn.com translate.googleapis.com translate.google.com 'unsafe-eval' 'unsafe-inline' use.typekit.net wa.appsflyer.com websdk.appsflyer.com widget.usersnap.com www.googleadservices.com www.google.al www.google.cn www.google.co.kr www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.na www.google.com.ng www.google.com.ni www.google.com.om www.google.com.sg www.google.co.zw www.google.dk www.google.es www.google.iq www.google.kg www.google.md www.google.mn www.google.mv www.google.rs www.google.se www.google.si www.google.sk www.googletagmanager.com www.gstatic.com; script-src-attr 'unsafe-inline'; script-src-elem ajax.googleapis.com analytics.twitter.com apis.google.com appleid.cdn-apple.com bam-cell.nr-data.net bam.nr-data.net *.bluesnap.com cdn4.mxpnl.com cdn.heapanalytics.com cdn.mxpnl.com challenges.cloudflare.com checkoutshopper-live.adyen.com code.jquery.com connect.facebook.net consentcdn.cookiebot.com consent.cookiebot.com dev.visualwebsiteoptimizer.com googleads.g.doubleclick.net *.google-analytics.com googletagmanager.com heapanalytics.com https://*.cardinalcommerce.com https://*.clarity.ms https://firestore.googleapis.com https://*.intercomcdn.com https://*.intercom.io js-agent.newrelic.com *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu pagesense-collect.zoho.com.au *.pagesense.io pagesense.zoho.com.au pay.google.com pi.pardot.com plus.google.com resources.usersnap.com 'self' *.sentry-cdn.com snap.licdn.com ssl.kaptcha.com static.ads-twitter.com static.zohocdn.com 'unsafe-inline' use.typekit.net wa.appsflyer.com websdk.appsflyer.com widget.usersnap.com www.googleadservices.com www.google.com www.googletagmanager.com www.gstatic.com; style-src blob: checkoutshopper-live.adyen.com fonts.googleapis.com heapanalytics.com https://surveys-static-prd.survicate-cdn.com https://surveys-static.survicate.com https://www.gstatic.com *.matific.ca *.matific.co.il *.matific.com *.matific.eu 'self' stackpath.bootstrapcdn.com translate.googleapis.com 'unsafe-eval' 'unsafe-inline' use.fontawesome.com; style-src-attr 'unsafe-inline'; style-src-elem apis.google.com checkoutshopper-live.adyen.com code.jquery.com fonts.googleapis.com heapanalytics.com https://surveys-static.survicate.com *.matific.ca *.matific.co.il *.matific.com *.matific.co.nz *.matific.eu 'self' stackpath.bootstrapcdn.com 'unsafe-inline' use.fontawesome.com; worker-src blob: 'self'; report-uri https://matific.report-uri.com/r/d/csp/reportOnly; report-to default; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wacom.com https://code.jquery.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://vjs.zencdn.net https://kit.fontawesome.com https://cdn.datatables.net https://widget-mediator.zopim.com https://static.zdassets.com https://consent.trustarc.com https://www.googletagmanager.com https://connect.facebook.net https://stackpath.bootstrapcdn.com https://www.youtube.com https://googleads.g.doubleclick.net/ https://www.google.com/ https://ajax.googleapis.com https://www.gstatic.com https://bugcrowd.com https://assets.bugcrowdusercontent.com; style-src 'self' 'unsafe-inline' https://cdn-media.wacom.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://vjs.zencdn.net https://cdn.datatables.net https://hello.myfonts.net https://content.wacom.com; font-src 'self' data: https://kit.fontawesome.com https://hello.myfonts.net https://consent.trustarc.com https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https://*.wacom.com https://static.zdassets.com https://*.blob.core.windows.net; connect-src 'self' https://*.wacom.com https://*.google.com https://www.google-analytics.com/ https://wacom.zendesk.com wss://widget-mediator.zopim.com https://widget-mediator.zopim.com https://ekr.zdassets.com https://consent.trustarc.com https://www.facebook.com; frame-src 'self' https://*.wacom.com https://www.youtube.com https://*.trustarc.com https://www.googletagmanager.com https://www.google.com https://admin.metalocator.com https://bugcrowd.com 2 frame-ancestors 'self' https://*.bouyguestelecom.fr https://bouyguestelecom--c.vf.force.com https://bouyguestelecom.lightning.force.com https://bouyguestelecom.my.salesforce.com; 2 connect-src 'self' ws: wss: https://*.optimizely.com https://cdn.cookielaw.org https://www.google-analytics.com https://www.googletagmanager.com https://cms.comptia.org https://www.comptia.org https://www.google.com.br https://geolocation.onetrust.com https://privacyportal.onetrust.com https://chatapps-us.netomi.com https://*.chatplus.jp https://ak.sail-horizon.com https://d1igp3oop3iho5.cloudfront.net https://js.zi-scripts.com https://api.sail-personalize.com https://px.ads.linkedin.com https://*.wootric.com https://wootric-eligibility.herokuapp.com https://analytics.tiktok.com https://ws.zoominfo.com https://cdn.segment.com https://api.segment.io https://*.hotjar.io https://*.cmp.optimizely.com https://*.google.com https://*.googlesyndication.com https://sso.comptia.org https://*.contentsquare.net https://*.contentsquare.com https://stats.g.doubleclick.net https://analytics-ipv6.tiktokw.us https://api.sail-track.com https://*.zaius.com https://www.facebook.com https://*.sailthru.cloud https://*.googleadservices.com https://googleads.g.doubleclick.net https://ak.sail-horizon.com https://gtm.comptia.org https://*.in.applicationinsights.azure.com https://js.monitor.azure.com; default-src 'self'; font-src 'self' data: https://chatapps-us.netomi.com https://*.chatplus.jp https://use.typekit.net https://fonts.gstatic.com https://*.googleadservices.com https://googleads.g.doubleclick.net wss://ws.zoominfo.com https://gtm.comptia.org; frame-ancestors 'self' https://cms.comptia.org https://*.optimizely.com; frame-src https://comptiaprojects.atlassian.net https://*.comptia.org https://cms.comptia.org https://*.optimizely.com https://forms.comptia.org https://www.youtube.com https://player.vimeo.com https://production-comptiawebsite.azurewebsites.net https://www.verse.com https://www.googletagmanager.com https://www.google.com https://*.chatplus.jp https://gtm.comptia.org; img-src data: https://www.comptia.org https://images.cmp.optimizely.com https://cdn.cookielaw.org https://*.contentsquare.net https://www.facebook.com https://a.usea01.idio.episerver.net https://px.ads.linkedin.com https://api.zaius.com https://px4.ads.linkedin.com https://www.googletagmanager.com https://aistudio-cdata.s3.amazonaws.com https://www.googletagmanager.com https://cms.comptia.org https://*.google.com.br https://optanon.blob.core.windows.net https://*.netomi.com https://*.chatplus.jp https://*.optimizely.com https://images4.cmp.optimizely.com https://*.cmp.optimizely.com https://www.google.ca https://www.linkedin.com https://img.convertflow.co https://uploads.convertflow.co https://media.sailthru.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.google.com https://*.google.com.mx https://*.simpli.fi https://gtm.comptia.org; media-src 'self' https://i.ytimg.com https://*.chatplus.jp https://gtm.comptia.org; script-src 'self' https://*.comptia.org https://*.optimizely.com https://*.googleapis.com https://cdn.cookielaw.org https://chatapps-us.netomi.com https://*.chatplus.jp https://www.google-analytics.com https://www.googletagmanager.com https://cms.comptia.org https://www.comptia.org https://code.jquery.com https://unpkg.com https://va.vercel-scripts.com https://player.vimeo.com https://www.youtube.com https://*.contentsquare.net https://app.contentsquare.com https://connect.facebook.net https://snap.licdn.com https://ak.sail-horizon.com https://pagead2.googlesyndication.com https://analytics.tiktok.com https://cdn.wootric.com https://s.usea01.idio.episerver.net https://chatapps-us.netomi.com https://*.chatplus.jp https://d1igp3oop3iho5.cloudfront.net https://js.zi-scripts.com https://chatapps-us.netomi.com https://api.sail-personalize.com https://js.zi-scripts.com https://*.zaius.com https://cdn.segment.com https://*.hotjar.com https://*.convertflow.co https://*.convertflow.com https://api.sail-track.com https://www.google.com https://www.gstatic.com https://*.sailthru.cloud https://ak.sail-horizon.com 'unsafe-eval' 'unsafe-inline' blob: https://*.googleadservices.com https://googleads.g.doubleclick.net https://tag.simpli.fi https://i.simpli.fi https://gtm.comptia.org https://*.in.applicationinsights.azure.com https://js.monitor.azure.com; style-src 'self' 'unsafe-inline' https://www.comptia.org https://cms.comptia.org https://chatapps-us.netomi.com https://*.chatplus.jp https://*.googleapis.com https://use.typekit.net https://p.typekit.net https://gtm.comptia.org; base-uri 'none'; worker-src 'self' blob:; 2 script-src https: data: 'unsafe-inline' 'unsafe-eval' https://www.tu-dortmund.de https://*.itmc.tu-dortmund.de https://*.relaunch.tu-dortmund.de; style-src https: 'unsafe-inline' https://www.tu-dortmund.de https://*.itmc.tu-dortmund.de https://*.relaunch.tu-dortmund.de; frame-src https://www.tu-dortmund.de https://redaktion.tu-dortmund.de https://*.itmc.tu-dortmund.de https://*.relaunch.tu-dortmund.de https://www.youtube-nocookie.com https://www.youtube.com 'self' https://webapps.itmc.tu-dortmund.de https://service.tu-dortmund.de; frame-ancestors https://www.tu-dortmund.de https://redaktion.tu-dortmund.de 'self' 2 form-action *.facebook.com; default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.fls.doubleclick.net *.doubleclick.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.omtrdc.net *.twitter.com covers.odilo.io *.ads-twitter.com *.facebook.com *.facebook.net cdn.cookielaw.org *.googletagmanager.com *.googleadservices.com online.bancosantander.es a.omappapi.com *.googleapis.com extend.vimeocdn.com t.co adservice.google.com *.linkedin.com *.google-analytics.com *.santanderopenacademy.com *.universia.net fonts.gstatic.com in-automate.sendinblue.com z.omappapi.com api.omappapi.com snap.licdn.com images.findawayworld.com *.tiktok.com privacyportal-de.onetrust.com sibautomation.com use.typekit.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com santander-privacy.my.onetrust.com; frame-ancestors 'self' *.santanderopenacademy.com *.googletagmanager.com; connect-src 'self' cdn.equalweb.com *.universia.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com www.linkedin.com script.hotjar.com img.youtube.com px4.ads.linkedin.com t.co surveystats.hotjar.io analytics.twitter.com www.google.es mboxedge37.tt.omtrdc.net santanderuniversidad.tt.omtrdc.net www.googletagservices.com www.google.ie www.facebook.com cdn.cookielaw.org googleads.g.doubleclick.net stats.g.doubleclick.net www.google.com pagead2.googlesyndication.com *.analytics.google.com *.google-analytics.com vc.hotjar.io metrics.hotjar.io wss://ws.hotjar.com ws.hotjar.com content.hotjar.io px.ads.linkedin.com analytics.tiktok.com *.pangle-ads.com *.omappapi.com *.vimeo.com *.santanderopenacademy.com *.onetrust.com *.tiktokw.us sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net; font-src 'self' script.hotjar.com fonts.gstatic.com data:; frame-src 'self' www.youtube.com www.google.com *.doubleclick.net track.adform.net www.facebook.com *.universia.net universia.net *.googletagmanager.com *.santanderopenacademy.com *.vimeo.com doubleclick.net *.doubleclick.net; img-src 'self' data: *.santanderopenacademy.com *.santanderx.com dss.hybrid.ai su-commons-documents.s3.eu-west-1.amazonaws.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com i.ytimg.com non-productive-alfred-s3.s3.eu-west-1.amazonaws.com *.universia.net img.youtube.com cdn.cookielaw.org www.facebook.com fonts.gstatic.com www.google.ie www.google.com www.google.es *.googletagmanager.com *.google-analytics.com px.ads.linkedin.com px4.ads.linkedin.com t.co analytics.twitter.com covers.odilo.io images.findawayworld.com *.doubleclick.net *.odilotk.es *.googlesyndication.com snapchat.com *.snapchat.com; manifest-src 'self'; media-src 'self' data: *.santanderopenacademy.com *.santanderx.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' emd.hybrid.ai *.hybrid.ai pixel.wp.pl *.santanderopenacademy.com www.google.com cdn.jsdelivr.net cdn.equalweb.com *.googleadservices.com code.jquery.com track.adform.net s2.adform.net www.googletagservices.com cdn.cookielaw.org googleads.g.doubleclick.net connect.facebook.net static.hotjar.com metrics.hotjar.io script.hotjar.com *.googletagmanager.com *.google-analytics.com snap.licdn.com static.ads-twitter.com analytics.tiktok.com *.googleapis.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com *.gstatic.com *.omappapi.com *.googlesyndication.com sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net st.hybrid.ai; style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com *.googletagmanager.com fonts.googleapis.com *.omappapi.com; worker-src *.universia.net 2 frame-ancestors chrome-extension://mbofgadpoeclogccaclfpdpnclommnmi chrome-extension://ekbmjlhcmklhfndhclgcgpghpgmlcaof chrome-extension://bpamhfbbljgioillepebmmegmjdkaoge chrome-extension://joccojpbogmpagfepecinlmiibacfhlb; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' redditstatic.com *.reddit.com *.stackadapt.com connect.facebook.net *.adsrvr.org facebook.com cdn.pdst.fm px.adentifi.com kds-pixel.kargo.com data.adxcel-ec2.com secure.adnxs.com trkn.us cdnssl.clicktale.net w3.org snap.licdn.com dc.ads.linkedin.com *.googletagmanager.com websitevisitorleads.com *.twitter.com t.co sc-static.net *.evgnet.com *.cookielaw.org static.ads-twitter.com *.google-analytics.com assets.sitescdn.net *.vimeocdn.com dev.visualwebsiteoptimizer.com *.tctm.co *.qualtrics.com vimeo.com *.vimeo.com *.newrelic.com *.bing.com googleads.g.doubleclick.net *.clarity.ms *.tiktok.com *.snapchat.com everfi-next.net fpjscdn.net *.fpjs.io fresnel.vimeocdn.com f.vimeocdn.com *.cloudflare.com *.jsdelivr.net unpkg.com *.googleadservices.com *.byspotify.com code.jquery.com *.pinterest.com *.pinimg.com *.knotch-cdn.com *.contentsquare.net app.contentsquare.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.stackadapt.com connect.facebook.net *.adsrvr.org facebook.com cdn.pdst.fm px.adentifi.com kds-pixel.kargo.com data.adxcel-ec2.com secure.adnxs.com trkn.us cdnssl.clicktale.net w3.org snap.licdn.com dc.ads.linkedin.com *.googletagmanager.com websitevisitorleads.com *.twitter.com t.co sc-static.net *.evgnet.com *.cookielaw.org static.ads-twitter.com *.google-analytics.com assets.sitescdn.net *.vimeocdn.com dev.visualwebsiteoptimizer.com *.tctm.co *.qualtrics.com vimeo.com *.vimeo.com *.newrelic.com *.bing.com googleads.g.doubleclick.net *.clarity.ms *.tiktok.com *.snapchat.com everfi-next.net fpjscdn.net *.fpjs.io fresnel.vimeocdn.com f.vimeocdn.com *.cloudflare.com *.jsdelivr.net unpkg.com *.googleadservices.com *.byspotify.com cdn.evgnet.com *.visualwebsiteoptimizer.com googletagmanager.com *.virtualearth.net cdn.ckeditor.com *.google.com *.evergage.com code.jquery.com *.pinterest.com *.pinimg.com *.knotch-cdn.com *.contentsquare.net app.contentsquare.com *.redditstatic.com *.reddit.com; frame-src 'self' blob: *.vimeo.com *.doubleclick.net *.clicktale.net *.adsrvr.org *.edwardjones.com *.edwardjones.ca accountaccess.edwardjones.com accountaccess.edwardjones.ca iaa-api-gateway.apps.edwardjones.com onlineaccess.edwardjones.com iaaweb.edwardjones.com *.tctm.co *.w3.org *.vimeocdn.com *.qualtrics.com *.everfi-next.net *.snapchat.com *.amazon-adsystem.com *.facebook.com dev.visualwebsiteoptimizer.com *.googletagmanager.com *.pinterest.com csxd.edwardjonesinvestintomorrow.ca csxd.edwardjonesretirementready.ca csxd.letsmeetedwardjones.ca csxd.helloedwardjones.ca csxd.edwardjoneslongtermhealthcare.ca; frame-ancestors 'self' *.edwardjones.com *.edwardjones.ca iaa-api-gateway.apps.edwardjones.com accountaccess.edwardjones.com accountaccess.edwardjones.ca onlineaccess.edwardjones.com iaaweb.edwardjones.com; child-src 'self' blob: *.vimeo.com *.doubleclick.net *.clicktale.net *.adsrvr.org *.edwardjones.com *.edwardjones.ca accountaccess.edwardjones.com accountaccess.edwardjones.ca iaa-api-gateway.apps.edwardjones.com onlineaccess.edwardjones.com iaaweb.edwardjones.com *.tctm.co *.w3.org *.vimeocdn.com *.qualtrics.com *.everfi-next.net *.snapchat.com *.amazon-adsystem.com *.facebook.com 2 frame-ancestors 'self' http://localhost:* https://*.admin.faithlifesites.com https://admin.faithlifesites.com https://*.sites.faithlife.com https://*.faithlife.com http://local.app.logos.com:* https://app.logos.com https://*.app.logos.com logos-app://* https://builder.io; object-src https://cloud.faithlife.net https://cloud.mail.logos.com; base-uri https://optimize.google.com; block-all-mixed-content 2 frame-ancestors 'self' https://gocardless.lookbookhq.com https://gocardless.pathfactory.com https://content.gocardless.com;report-uri https://o405487.ingest.sentry.io/api/5312304/security/?sentry_key=9f3af8ac83c84627bbdbe45a80a061aa 2 default-src 'self'; font-src 'self' data:; script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://googleads.g.doubleclick.net https://www.googleadservices.com https://js-eu1.hs-scripts.com https://js-eu1.hscollectedforms.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com *.hsadspixel.net *.hs-analytics.net https://js.hscta.net *.hubspot.com https://static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com https://feedback.hubapi.com https://browser.sentry-cdn.com https://js.sentry-cdn.com https://sdk.privacy-center.org https://load.insights.juspay.io https://insights.juspay.io *.stape.io https://snap.licdn.com https://connect.facebook.net https://tracking-api.g2.com *.g2.com https://app.factors.ai *.factors.ai; style-src 'self' 'unsafe-inline' 'unsafe-hashes' https://sdk.privacy-center.org https://www.googletagmanager.com https://fonts.googleapis.com; form-action 'self' crm.zoho.com api.social.juspay.in https://www.facebook.com; object-src 'none'; img-src 'self' data: crm.zoho.com https://dth95m2xtyv8v.cloudfront.net https://cdn.sanity.io https://track-eu1.hubspot.com https://js.hscta.net https://no-cache.hubspot.com *.hubspot.com *.hsforms.net *.hsforms.com https://sdk.privacy-center.org https://px.ads.linkedin.com https://www.facebook.com *.facebook.com *.g2.com https://analytics.google.com https://www.google.com https://www.google.co.in https://stats.doubleclick.net *.google.com *.google.co.in *.doubleclick.net https://fonts.gstatic.com https://www.googletagmanager.com; frame-src 'self' youtube.com www.youtube.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://forms.zohopublic.com/ https://sdk.privacy-center.org *.hubspot.com *.hs-sites.com *.hsforms.net *.hsforms.com *.stape.io https://www.googletagmanager.com https://insights.juspay.io https://www.facebook.com; frame-ancestors 'self'; connect-src 'self' api.social.juspay.in https://joinus.juspay.in/api/careerJobOpening https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://analytics.google.com https://stats.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://forms-eu1.hscollectedforms.net *.hubapi.com https://js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.sentry.io *.ingest.de.sentry.io https://sdk.privacy-center.org https://api.privacy-center.org https://load.insights.juspay.io https://insights.juspay.io *.stape.io https://px.ads.linkedin.com https://www.facebook.com https://tracking-api.g2.com *.factors.ai; child-src 'self' *.hsforms.com 2 default-src 'self' 'unsafe-inline' https://*.uni-paderborn.de https://www.youtube-nocookie.com https://player.vimeo.com https://*.upb.de https://streaming.uni-paderborn.de:2233 https://*.google.com https://public-eur.mkt.dynamics.com https://assets1-eur.mkt.dynamics.com; font-src 'self' https://*.uni-paderborn.de data:; img-src 'self' data: https://pbs.twimg.com https://*.google.com https://www.googleapis.com https://*.uni-paderborn.de https://*.gstatic.com/images; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.uni-paderborn.de https://www.google.com https://cse.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; media-src 'self' https://*.uni-paderborn.de https://*.upb.de https://streaming.uni-paderborn.de:2233 blob:; frame-src https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ 'self' mailto: tel: https://*.uni-paderborn.de https://www.youtube-nocookie.com https://player.vimeo.com https://*.upb.de https://streaming.uni-paderborn.de:2233 https://*.google.com 2 font-src 'self' 2 font-src 'self' data: https://*.cleartax-cdn.com https://*.gstatic.com https://*.website-files.com https://*.webflow.com https://assets.clear.in; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://www.redditstatic.com https://sc-static.net https://static.ads-twitter.com https://connect.facebook.net https://cdnjs.cloudflare.com https://js.hs-banner.com https://js.hsadspixel.net https://js.usemessages.com https://www.google-analytics.com https://www.googletagmanager.com https://doubleclick.net https://*.doubleclick.net https://snap.licdn.com https://www.youtube-nocookie.com https://sumo.com https://*.sumo.com https://*.livechatinc.com https://*.hs-scripts.com https://*.hs-analytics.net https://go.pardot.com https://*.cleartax-cdn.com https://*.clarity.ms https://*.google.com https://*.gstatic.com https://*.sumome.com https://code.jquery.com https://*.cloudfront.net https://*.googleapis.com https://www.googleadservices.com https://*.website-files.com https://*.webflow.io https://cleartax.mynexthire.com https://*.factors.ai https://*.netcoresmartech.com https://assets.clear.in/cleartax/images/1752568698_lottieplayer.js https://*.cmp.usercentrics.eu https://assets.apollo.io https://assets.clear.in blob: https://cleartax.in https://cdn.jsdelivr.net/npm/ https://*.hsforms.net https://*.hscollectedforms.net https://*.hs-banner.com https://web-sdk.smartlook.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://*.google.com https://*.cleartax-cdn.com https://*.googleapis.com https://*.clarity.ms https://*.gstatic.com https://*.website-files.com https://*.jquery.com https://www.googletagmanager.com; default-src 'self' 'unsafe-inline' https://clear.navattic.com https://*.factors.ai https://*.google.com/ https://www.incometax.gov.in https://go.arena.im https://assets1.cleartax-cdn.com https://www.googletagmanager.com https://www.redditmedia.com https://assets.cleartax-cdn.com https://*.gstatic.com https://www.google-analytics.com https://js-agent.newrelic.com https://api.portal.peppercontent.in https://cleartax.in https://*.cleartax.in https://vc.hotjar.io https://*.cleartax.co https://*.cleartax.com https://cleartax.com https://www.youtube.com https://i.tryinteract.com https://cleartax-media.s3.amazonaws.com https://*.cloudfront.net https://web.archive.org https://img.youtube.com https://*.googleusercontent.com https://v.24liveblog.com https://sentry.io https://px.ads.linkedin.com https://doubleclick.net https://*.doubleclick.net https://platform.twitter.com https://cdn.jsdelivr.net https://browser.sentry-cdn.com/ https://i.ytimg.com https://code.jquery.com https://*.googleapis.com https://www.google.co.in https://*.clarity.ms https://sumome.com https://*.sumome.com https://clear.in https://*.clear.in https://www.w3schools.com https://cdnjs.cloudflare.com http://localhost:80 https://*.website-files.com https://cleartax.mynexthire.com https://sumo.com https://*.sumo.com https://*.livechatinc.com https://*.hs-scripts.com https://www.youtube-nocookie.com https://*.hubapi.com https://*.hubspot.com https://*.webflow.io https://*.s3.ap-south-1.amazonaws.com https://*.netcoresmartech.com https://*.cmp.usercentrics.eu https://assets.apollo.io https://aplo-evnt.com https://cdn.embedly.com https://region1.google-analytics.com https://www.google-analytics.com https://www.googleadservices.com https://bat.bing.com https://webflow.com/ https://forms-na2.hsforms.com https://hubspot-forms-static-embed-na2.s3.amazonaws.com; img-src 'self' https://cdn.jsdelivr.net data: https://bat.bing.com https://www.facebook.com https://analytics.twitter.com https://*.linkedin.com https://*.google.com/ https://*.cleartax-cdn.com https://img.youtube.com https://cleartax-media.s3.amazonaws.com https://www.google.co.in https://assets.clear.in https://www.googletagmanager.com https://sumome.com https://*.website-files.com https://*.cloudfront.net https://*.jquery.com https://*.doubleclick.net https://*.usercentrics.eu https://static.wixstatic.com https://www.google.fr https://www.googleadservices.com https://*.gstatic.com https://*.clarity.ms 2 default-src 'self' https://*.aau.dk https://*.azurewebsites.net https://*.dropbox.com https://*.dropboxusercontent.com https://podcastpusher.com https://*.doubleclick.net https://*.fonts.net https://*.linkedin.com https://*.facebook.com https://*.snapchat.com https://*.google.com https://*.youtube.com https://*.twitter.com https://*.survey-xact.dk https://*.microsoftonline.com https://*.office.com https://*.gstatic.com https://*.cookieinformation.com https://test-1.aau.dk https://test-2.aau.dk; frame-ancestors 'none'; base-uri 'self'; font-src 'self' data: https://fonts.gstatic.com; script-src https://www.clarity.ms/ https://www.clarity.ms https://learninglib.org 'self' 'unsafe-inline' wifipassword.aau.dk https://stats.g.doubleclick.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.scratcher.io https://*.elfsightcdn.com https://*.snapchat.com https://*.readpeak.com https://*.sc-static.net https://*.licdn.com https://*.google.com https://*.googleapis.com https://*.elfsight.com https://*.googletagmanager.com https://*.google-analytics.com https://*.facebook.net https://*.twitter.com https://*.cookieinformation.com https://*.youtube.com https://*.vimeo.com https://sc-static.net; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com; img-src 'self' data: image/* https://*.aau.dk https://*.plan2learn.dk https://*.elfsight.com https://*.linkedin.com https://*.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.taboola.com https://*.doubleclick.net https://*.adnxs.com https://*.readpeak.com https://*.google.dk https://*.gstatic.com https://*.dropbox.com https://*.dropboxusercontent.com https://*.google.com https://*.twimg.com https://*.facebook.com https://*.vimeocdn.com https://*.ytimg.com https://*.youtube.com https://*.googleapis.com https://*.elfsightcdn.com; connect-src https://dc.services.visualstudio.com 'self' https://*.microsoftonline.com https://widget-data.service.elfsight.com https://core.service.elfsight.com https://public-eur.mkt.dynamics.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-eur.mkt.dynamics.com wss://aau-its-caai-shared-haandbog-prod.azurewebsites.net https://prod-aaudxp-vacancy-app.azurewebsites.net wss://aau-its-caai-studieservice-adgangstjek-prod.azurewebsites.net https://*.azurewebsites.net https://*.elfsightcdn.com https://*.aau.dk https://*.licdn.com https://*.linkedin.com https://*.google.com https://*.doubleclick.net https://*.snapchat.com https://*.oribi.io https://*.analytics.google.com https://*.googleapis.com https://*.elfsight.com https://*.google-analytics.com https://*.cookieinformation.com; frame-src https://media.videotool.dk/ https://www.figma.com https://embed.figma.com https://learninglib.org https://lcbuild.dk https://byggeforskning.dk 'self' http://mfc-print03.aau.dk https://102nu.mjt.lu https://vimeo.com https://*.vimeo.com https://kuula.co https://madsheiselberg.github.io https://copilotstudio.preview.microsoft.com https://login.windows.net https://aaublanketterdev.powerappsportals.com https://assets-eur.mkt.dynamics.com https://serviceinfo.dk https://www.youtube-nocookie.com https://public-eur.mkt.dynamics.com https://*.geckobooking.dk https://*.powerapps.com https://cobe.dk https://*.powerbi.com https://*.scratcher.io https://*.youtube.com https://*.plandisc.com https://*.moodle.aau.dk https://*.matterport.com https://*.microsoftonline.com https://*.360company.dk https://*.snapchat.com https://*.spotify.com https://*.google.com https://*.vercel.app https://*.libraryh3lp.com https://*.aau.dk https://*.facebook.com https://*.survey-xact.dk https://*.office.com https://*.kuula.co https://*.cookieinformation.com https://hislabaau.shinyapps.io/; form-action 'self' https://*.facebook.com https://*.microsoftonline.com; 2 default-src 'none'; base-uri 'self'; manifest-src 'self'; font-src 'self' data: https://*.polo-static.com https://fonts.gstatic.com; img-src 'self' data: blob: https://app-static-1306115679.file.myqcloud.com https://*.polo-static.com https://*.poloniex.com https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://poloniex.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io https://d21y75miwcfqoq.cloudfront.net/5d308ddf https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com https://dn-staticdown.qbox.me https://report.woodpeckerlog.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.hbfile.net https://i.ytimg.com https://d1x7dwosqaosdj.cloudfront.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; connect-src 'self' https://*.polo-static.com https://*.poloniex.com wss://*.poloniex.com https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://poloniex.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://poloniex.zendesk.com wss://*.zopim.com https://report.woodpeckerlog.com https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com https://dn-staticdown.qbox.me https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://s3.ap-northeast-1.amazonaws.com https://copy-cms-polo-static-com.s3.amazonaws.com https://cms-polo-static-com.s3.amazonaws.com; frame-src 'self' blob: polo: https://docs.google.com https://td.doubleclick.net https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.polo-static.com https://pixel.mediamathrdrt.com https://scripts.mediamathrdrt.com https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://poloniex.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com https://dn-staticdown.qbox.me https://*.googletagmanager.com https://tagmanager.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.polo-static.com https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com https://dn-staticdown.qbox.me https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://poloniex.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; worker-src 'self' blob: https://*.polo-static.com; form-action https://checkout.simplexcc.com; media-src 'self' blob: https://*.polo-static.com; child-src 'self' blob: polo: https://docs.google.com https://td.doubleclick.net https://*.polo-static.com; report-uri /frontend-api/skynet/csp-uri; report-to skynet 2 frame-ancestors 'self' https://*.syf.com https://app.contentful.com; 2 default-src https: data: blob: chrome-extension: android-webview-video-poster: ms-appx-web: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' https://vorschau.computerbild.de https://rendering.computerbild.de 2 frame-ancestors 'self' https://knotch.com https://*.knotch.com 2 default-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.zcool.com.cn *.zcool.cn *.meitudata.com hm.baidu.com *.google-analytics.com www.googletagmanager.com *.work.weixin.qq.com *.wx.qq.com *.captcha.qcloud.com *.captcha.gtimg.com cloudcache.tencentcs.com rce.tencentrio.com xui.ptlogin2.qq.com unpkg.com cdn.jsdelivr.net cdn.wwads.cn; style-src 'self' 'unsafe-inline' *.zcool.com.cn *.zcool.cn *.meitudata.com *.captcha.qcloud.com *.captcha.gtimg.com fonts.googleapis.com unpkg.com cdn.jsdelivr.net; img-src 'self' data: blob: https: *.zcool.com.cn *.zcool.cn *.meitudata.com; font-src 'self' data: blob: *.zcool.com.cn *.zcool.cn *.meitudata.com fonts.googleapis.com fonts.gstatic.com use.typekit.net use.fontawesome.com unpkg.com cdn.jsdelivr.net gw.alipayobjects.com; connect-src 'self' blob: *.zcool.com.cn *.zcool.cn wss: https: *.meitudata.com hm.baidu.com *.google-analytics.com www.googletagmanager.com qyapi.weixin.qq.com *.work.weixin.qq.com *.wx.qq.com; media-src 'self' blob: *.zcool.com.cn *.zcool.cn *.meitudata.com titan-h5.meitu.com; object-src 'none'; frame-src 'self' *.meitudata.com *.zcool.com.cn *.zcool.cn *.captcha.qcloud.com *.captcha.gtimg.com rce.tencentrio.com xui.ptlogin2.qq.com; base-uri 'self'; form-action 'self' *.zcool.com.cn; upgrade-insecure-requests 2 base-uri 'self'; default-src 'none'; img-src 'self' https: data: blob:; worker-src 'self' https: data: blob:; media-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; object-src 'none'; frame-src https:; frame-ancestors 'none'; connect-src 'self' https: blob: data: ws:; font-src 'self' data:; manifest-src 'self' 2 default-src 'none'; frame-src 'self' open.spotify.com www.youtube-nocookie.com data: video/mp4 https://widget.trustpilot.com/ https://forms.hl.co.uk/ td.doubleclick.net www.googletagmanager.com *.doubleclick.net; style-src 'self' 'unsafe-inline' https://www.hl.co.uk open.spotify.com www.youtube-nocookie.com fonts.googleapis.com https://forms.hl.co.uk/; font-src 'self' https://www.hl.co.uk https://www.hl.co.uk fonts.gstatic.com fonts.googleapis.com; img-src 'self' blob: https://online.hl.co.uk https://www.hl.co.uk data: images.hl.uk open.spotify.com www.youtube-nocookie.com www.googletagmanager.com googleads.g.doubleclick.net www.google.co.uk www.google.com *.ytimg.com *.ggpht.com www.facebook.com https://widget.trustpilot.com/ https://www.hl.co.uk https://forms.hl.co.uk/ cdn-ukwest.onetrust.com bat.bing.com bat.bing.net analytics.twitter.com t.co https://*.google-analytics.com *.doubleclick.net adservice.google.com www.redditstatic.com alb.reddit.com *.ads.linkedin.com; media-src assets.hl.uk videos.hl.uk open.spotify.com *.youtube-nocookie.com; script-src 'self' https://www.hl.co.uk https://online.hl.co.uk open.spotify.com *.youtube-nocookie.com https://widget.trustpilot.com/ https://ajax.googleapis.com https://code.jquery.com https://forms.hl.co.uk/ https://static.formstack.com/ 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com connect.facebook.net tpc.googlesyndication.com online.hl.co.uk cdn-ukwest.onetrust.com *.amplitude.com *.qualtrics.com bat.bing.com bat.bing.net bat.bing-int.com www.googleadservices.com googleads.g.doubleclick.net www.google.co.uk www.facebook.com static.ads-twitter.com d.impactradius-event.com/A52406-8a0b-4e43-8c3d-9a39897859cd2.js hl.7eer.net/cur/1774 utt.impactcdn.com d.impct.site/d www.redditstatic.com/ads/pixel.js snap.licdn.com; connect-src 'self' https://www.hl.co.uk https://online.hl.co.uk open.spotify.com logs.browser-intake-datadoghq.eu rum.browser-intake-datadoghq.eu https://browser-intake-datadoghq.eu www.youtube-nocookie.com video.google.com https://forms.hl.co.uk/ www.hl.co.uk online.hl.co.uk search.hl.uk content.hl.uk app.launchdarkly.com events.launchdarkly.com cdn-ukwest.onetrust.com geolocation.onetrust.com privacyportal-uk.onetrust.com *.amplitude.com *.qualtrics.com bat.bing.com bat.bing.net bat.bing-int.com www.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.co.uk https://*.google-analytics.com https://*.analytics.google.com www.googletagmanager.com www.facebook.com static.ads-twitter.com https://widget.trustpilot.com browser-intake-datadoghq.eu *.doubleclick.net alb.reddit.com pixel-config.reddit.com *.ads.linkedin.com; frame-ancestors 'none'; 2 frame-ancestors *.txstate.edu *.txst.edu *.tsus.edu *.tjctc.org; 2 frame-ancestors 'self' http://localhost:3333 https://sbc-sanity-studio-b2c-studio.vercel.app https://*.sanity.studio https://*.sanity.build https://*.sanity.io 2 default-src 'self' p11.techlab-cdn.com;script-src 'self' 'unsafe-inline' *.cdw.com *.richrelevance.com *.qualtrics.com *.optimizely.com *.needle.com *.liadm.com *.demandbase.com *.appspot.com *.facebook.net *.googleadservices.com *.doubleclick.net *.google-analytics.com *.bing.com *.googleapis.com *.akamaihd.net *.google.com *.twitter.com *.demdex.net *.d41.co *.cxense.com pactsafe.io *.webcollage.net *.simpli.fi *.googletagmanager.com *.googlesyndication.com *.googletagservices.com *.ytimg.com *.youtube.com *.easy2.com *.go-mpulse.net *.linkedin.com *.cdnwidget.com *.rlcdn.com *.cloudfront.net *.bluecore.com p.adsymptotic.com *.dotomi.com blob: *.flixsyndication.net data.g2.com *.g2crowd.com *.adobe.com *.omtrdc.net *.spexlive.net *.gstatic.com *.turnto.com *.licdn.com *.hs-scripts.com *.ispot.tv *.hsleadflows.net *.hs-banner.com *.hsforms.net *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com *.tiqcdn.com *.tealiumiq.com *.adroll.com *.hs-analytics.net js.usemessages.com *.hscollectedforms.net *.redditstatic.com *.reddit.com *.adsrvr.org *.scene7.com *.vidyard.com *.vimeo.com *.hp.com *.etilize.com *.1worldsync.com *.quantserve.com *.quantcount.com *.spexaccess.net *.launchdarkly.com *.onetrust.com *.oribi.io *.cookielaw.org *.criteo.com *.criteo.net *.stackadapt.com *.zemanta.com *.botframework.com *.administrateweblink.com *.stripe.com *.pactsafe.io *.peerspot.com *.sketchfab.com *.quantummetric.com *.fiservapps.com *.quora.com sierra.chat *.algorecs.com *.cimulate.ai *.officeperceptioninstinct.com *.oktapreview.com *.okta.com oc-cdn-ocprod.azureedge.net *.adobedtm.com *.mktoresp.com *.mktoapi.com *.mktoweb.com *.mktoedge.com *.adobedc.net *.marketo.net *.adoberesources.net sketchfab.com *.6sc.co *.6sense.com *.bluecore.app p11.techlab-cdn.com;style-src 'self' 'unsafe-inline' *.cdw.com *.needle.com *.googleapis.com *.webcollage.net *.easy2.com *.amazonaws.com *.cloudfront.net blob: *.typekit.net *.adobe.com *.omtrdc.net *.spexlive.net *.turnto.com *.syndigo.com *.syndigo.cloud *.scene7.com *.etilize.com *.1worldsync.com *.spexaccess.net *.stackadapt.com *.administrateweblink.com *.stripe.com *.sketchfab.com *.quantummetric.com sierra.chat oc-cdn-ocprod.azureedge.net *.adobedtm.com;img-src 'self' *.cdw.com *.qualtrics.com *.optimizely.com *.needle.com *.liadm.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.bing.com *.akamaihd.net *.google.com *.demdex.net *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.ytimg.com *.youtube.com *.easy2.com *.amazonaws.com *.linkedin.com *.company-target.com *.facebook.com *.cdnwidget.com *.rlcdn.com *.cloudfront.net *.adobecqms.net *.everesttech.net *.bluecore.com *.prod.bidr.io cdn.optimizely.com p.adsymptotic.com um.simpli.fi data: *.dotomi.com *.flixsyndication.net liveintent.com *.adobe.com *.omtrdc.net *.spexlive.net *.windows.net *.turnto.com *.edgecastcdn.net *.licdn.com *.ispot.tv *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot.com *.tiqcdn.com *.tealiumiq.com *.adroll.com *.redditstatic.com *.reddit.com *.adsrvr.org *.scene7.com *.vidyard.com *.vimeocdn.com *.etilize.com *.1worldsync.com *.quantserve.com *.quantcount.com *.spexaccess.net *.oribi.io *.cookielaw.org *.criteo.com *.criteo.net *.stackadapt.com *.zemanta.com *.pactsafe.io *.administratehq.com *.peerspot.com *.sketchfab.com *.quora.com sierra.chat *.officeperceptioninstinct.com *.oktapreview.com *.okta.com *.hubspotusercontent-na1.net *.adobedtm.com *.mktoedge.com *.6sc.co *.6sense.com *.bluecore.app;frame-src 'self' *.cdw.com *.qualtrics.com *.needle.com *.liadm.com *.doubleclick.net *.google.com *.twitter.com *.demdex.net *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.youtube.com *.easy2.com *.facebook.com *.rlcdn.com *.cloudfront.net *.cdwemail.com www.emjcd.com *.dotomi.com *.kingston.com *.flixsyndication.net *.adobe.com *.spexlive.net *.swcontentsyndication.com *.cisco.com *.exct.net *.syndigo.com *.syndigo.cloud *.hsforms.com *.adsrvr.org *.scene7.com *.vidyard.com *.vimeo.com *.hp.com chromeos-selector-cdw-prod.web.app *.etilize.com *.1worldsync.com *.spexaccess.net *.onetrust.com *.criteo.com *.criteo.net *.se.com *.administrateweblink.com *.stripe.com *.sketchfab.com *.quantummetric.com *.fiservapps.com *.microsoft.com oc-cdn-ocprod.azureedge.net *.mktoweb.com *.adobedc.net sketchfab.com *.6sc.co *.6sense.com;font-src * data:;connect-src 'self' *.cdw.com *.richrelevance.com *.qualtrics.com *.optimizely.com *.needle.com *.liadm.com *.demandbase.com *.appspot.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.bing.com *.googleapis.com *.akamaihd.net *.google.com *.demdex.net *.d41.co *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.go-mpulse.net *.linkedin.com *.company-target.com *.facebook.com *.cdnwidget.com *.cloudfront.net *.bluecore.com p.adsymptotic.com *.cdnbasket.net *.akstat.io data.g2.com *.g2crowd.com *.adobe.com *.omtrdc.net *.spexlive.net *.turnto.com *.ispot.tv *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com *.tiqcdn.com *.tealiumiq.com *.adroll.com *.scene7.com *.addressy.com *.etilize.com *.1worldsync.com *.quantserve.com *.spexaccess.net *.launchdarkly.com *.onetrust.com *.oribi.io *.cookielaw.org *.criteo.com *.criteo.net *.stackadapt.com *.botframework.com wss://*.botframework.com *.administrateweblink.com *.pactsafe.io *.administratehq.com *.sketchfab.com *.quantummetric.com sierra.chat *.algorecs.com *.cimulate.ai wss://*.cimulate.ai *.adobedtm.com *.mktoresp.com *.mktoapi.com *.mktoweb.com *.mktoedge.com *.adobedc.net *.marketo.net *.6sc.co *.6sense.com *.bluecore.app p11.techlab-cdn.com;object-src 'self' *.cdw.com *.scene7.com;media-src 'self' *.cdw.com *.webcollage.net *.youtube.com blob: *.flixsyndication.net *.spexlive.net *.syndigo.com *.syndigo.cloud *.tiqcdn.com *.scene7.com *.etilize.com *.1worldsync.com *.spexaccess.net *.sketchfab.com;worker-src 'self' *.needle.com *.cloudfront.net blob: *.quantummetric.com *.cimulate.ai; 2 frame-ancestors 'self' http://hybris.com https://hybris.com https://discovery-center.cloud.sap https://www.discovery-center.cloud.sap http://*.hybris.com https://*.hybris.com http://sap.lookbookhq.com https://sap.lookbookhq.com http://*.sap.com https://*.sap.com http://*.sap.cn https://*.sap.cn https://www.gigya.com *.lookbookhq.com https://cloudplatform.sap.com https://cal.sap.com https://developers.sap.com *.omtrdc.net https://*.cloud.sap;default-src 'self' blob: https: data: 'unsafe-inline' 'unsafe-eval' github.com api.github.com raw.githubusercontent.com *.cloud.sap *.liveperson.net http://*.sap.com https://*.sap.com http://*.sap.cn https://*.sap.cn *.adobedtm.com *.company-target.com *.omtrdc.net *.w55c.net platform.twitter.com *.siteintercept.qualtrics.com *.doubleclick.net cdnjs.cloudflare.com charts3.equitystory.com http://*.akamai.net ust-servlet.dataxu.net https://*.cdn.sap.com *.2mdn.net *.2o7.net *.qualtrics.com https://*.akamaihd.net http://*.akamaihd.net *.lpsnmedia.net *.truste.com *.newrelic.com *.nr-data.net https://*.youtube.com https://*.youtu.be https://*.ytimg.com *.twitter.com http://*.twimg.com https://*.twimg.com *.adobe.com *.adobeaemcloud.com *.demdex.net *.liveperson.com *.liveengage.net *.liveengage.com *.liveper.sn *.licdn.com *.cloud.sap *.hana.ondemand.com http://dc1cp8nqqrmxi.cloudfront.net http://*.edgesuite.net https://bcmcps.enter.sap *.d41.co wss: advisor.p1.store.net.sap 2 base-uri 'self'; font-src 'self' data: https://static.audi.com static.audi.com live-chat-static.sprinklr.com; img-src 'self' https: blob: data: https://static.audi.com https://uploads.audi.com nexus-test.ensighten.com tms.audi.com; object-src 'none'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://static.audi.com https://www.audimedia.tv audimap-neckarsulm-staging.ackermann-online.com audimap-neckarsulm.ackermann-online.com audimap-sites-staging.ackermann-online.com audimap-sites.ackermann-online.com jpk-staging.ackermann-online.com jpk.ackermann-online.com prod3-live-chat.sprinklr.com live-chat-static.sprinklr.com nexus-test.ensighten.com tms.audi.com https://www.google.com https://www.gstatic.com stats.audi-mediacenter.com typeform.com www.youtube.com www.youtube-nocookie.com; style-src 'self' 'unsafe-inline' https://static.audi.com audimap-neckarsulm-staging.ackermann-online.com audimap-neckarsulm.ackermann-online.com audimap-sites-staging.ackermann-online.com audimap-sites.ackermann-online.com jpk-staging.ackermann-online.com jpk.ackermann-online.com https://www.google.com https://www.gstatic.com typeform.com; default-src 'self'; media-src 'self' https: blob: data: https://uploads.audi.com; connect-src 'self' blob: data: https://www.audi.com https://static.audi.com static.audi.com audimap-neckarsulm-staging.ackermann-online.com audimap-neckarsulm.ackermann-online.com audimap-sites-staging.ackermann-online.com audimap-sites.ackermann-online.com jpk-staging.ackermann-online.com jpk.ackermann-online.com prod3-live-chat.sprinklr.com live-chat-static.sprinklr.com wss://prod3-live-chat-mqtt.sprinklr.com https://www.google.com https://www.gstatic.com tms.audi.com app.getsentry.com stats.audi-mediacenter.com typeform.com www.youtube.com www.youtube-nocookie.com; frame-src 'self' https: https://www.audimedia.tv; report-uri https://o4509546924408832.ingest.de.sentry.io/api/4509548660129872/security/?sentry_key=979e3b0e86619c49be88dbd0e8bbeec4 2 frame-ancestors 'self';default-src 'self' blob: 'unsafe-inline' pinecast.com storage.pinecast.net *.mutinycdn.com data.hockeystack.com *.mutinyhq.io tracking.g2crowd.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com wss://ws.qualified.com perf-na1.hsforms.com app.qualified.com td.doubleclick.net pagead2.googlesyndication.com ws.qualified.com d3cy9zhslanhfa.cloudfront.net ws.zoominfo.com ws-assets.zoominfo.com js.zi-scripts.com youtube.com cdn.linkedin.oribi.io rs.fullstory.com forms-na1.hsforms.com cdn.contentful.com phenompeople.na.chilipiper.com js.chilipiper.com api.na.chilipiper.com api.chilipiper.com tracking.chilipiper.com ipv6.6sc.co cdn.cookielaw.org images.ctfassets.net assets.ctfassets.net videos.ctfassets.net app.clearbit.com api.hubapi.com x.clearbitjs.com js.hsadspixel.net app.clearbit.com api.hubapi.com *.clearbitscripts.com *.litix.io alb.reddit.com *.clarity.ms secure.adnxs.com *.g2.com *.wistia.net *.wistia.com embedwistia-a.akamaihd.net embed-fastly.wistia.com distillery.wistia.com pipedream.wistia.com images.g2crowd.com fast.wistia.com *.google.com *.google.co.in stats.g.doubleclick.net p.adsymptotic.com privacy-policy.truste.com *.linkedin.com api.sharedcount.com n2.mouseflow.com c.6sc.co epsilon.6sense.com www.facebook.com *.hubspot.com fonts.gstatic.com *.phenom.com cdn.jsdelivr.net use.fontawesome.com fonts.googleapis.com cdnjs.cloudflare.com app-ab31.marketo.com connect.facebook.net j.6sc.co www.googletagmanager.com js.driftt.com munchkin.marketo.net snap.licdn.com www.google-analytics.com www.w3.org b.6sc.co edge.fullstory.com bat.bing.com js.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hsforms.net static.hotjar.com script.hotjar.com forms.hsforms.com js.hsleadflows.net cdn.mouseflow.com www.youtube.com stackpath.bootstrapcdn.com cdn.cookielaw.org optanon.blob.core.windows.net c.bing.com geolocation.onetrust.com youtu.be abm2.listenloop.com notify.bugsnag.com pt37ad6f6a.execute-api.us-east-1.amazonaws.com data slideshare.net:;script-src 'self' 'unsafe-inline' 'unsafe-eval' pinecast.com storage.pinecast.net home.integrate.com *.mutinycdn.com data.hockeystack.com *.mutinyhq.io tracking.g2crowd.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com code.jquery.com ajax.googleapis.com images.ctfassets.net www.googleadservices.com videos.ctfassets.net *.phenom.com c.bing.com cdn.jsdelivr.net use.fontawesome.com fonts.googleapis.com cdnjs.cloudflare.com app-ab31.marketo.com connect.facebook.net *.clarity.ms j.6sc.co www.googletagmanager.com js.driftt.com munchkin.marketo.net snap.licdn.com www.google-analytics.com www.w3.org b.6sc.co edge.fullstory.com bat.bing.com js.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hsforms.net static.hotjar.com script.hotjar.com forms.hsforms.com js.hsleadflows.net cdn.mouseflow.com www.youtube.com stackpath.bootstrapcdn.com fast.wistia.net www.g2.com embedwistia-a.akamaihd.net embed-fastly.wistia.com distillery.wistia.com pipedream.wistia.com images.g2crowd.com fast.wistia.com www.redditstatic.com js.usemessages.com alb.reddit.com cdn.cookielaw.org static.ads-twitter.com *.clearbitscripts.com x.clearbitjs.com js.hsadspixel.net app.clearbit.com api.hubapi.com js.chilipiper.com js.usemessages.com js.hsadspixel.net js.na.chilipiper.com snap.licdn.com www.google.com images.ctfassets.net videos.ctfassets.net js.driftt.com googleads.g.doubleclick.net stats.g.doubleclick.neti edge.fullstory.com secure.adnxs.com cb3034c4ce68477bb69489e3e49e4588.js.ubembed.com assets.ubembed.com js.zi-scripts.com ws-assets.zoominfo.com js.qualified.com js.hubspot.com v2.listenloop.com launcher.1mind.com static.oktopost.com js.storylane.io cdn.storylane.io ddwl4m2hdecbv.cloudfront.net; connect-src 'self' data: https: http: wss://ws.qualified.com; frame-src 'self' data: https: http:; img-src 'self' data: https: http:; 2 frame-ancestors 'self' *.ais.th, font-src 'self' *.ais.th fonts.gstatic.com *.blob.core.windows.net *.cdc.ais.th maxcdn.bootstrapcdn.com data: 2 frame-ancestors 'none'; connect-src 'self' www.google-analytics.com wss://ws-mt1.pusher.com *.google-analytics.com *.analytics.google.com px.ads.linkedin.com events.rm-api.com stats.g.doubleclick.net ws.zoominfo.com play.vidyard.com https://lottie.host https://sockjs.pusher.com https://analytics.google.com *.google.com https://connect.facebook.net connect.facebook.net http://c.6sc.co/ https://ipv6.6sc.co/ https://eps.6sc.co/v3/company/details https://v.eps.6sc.co/v https://forms.hsforms.com/ https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hscollectedforms.net https://api.hubapi.com https://epsilon.6sense.com/v3/company/details https://forms.hubspot.com https://cdn.jsdelivr.net https://ipmeta.io https://api.nelioabtesting.com https://cta-service-cms2.hubspot.com *.contentsquare.net *.contentsquare.com https://api.marker.io https://ssr.marker.io https://s3.eu-west-1.amazonaws.com/marker.sessions.prod/ https://www.google.com/recaptcha/; object-src blend.localhost blendcom.localhost blendcom2.localhost blend.com blendcom2-blend.pantheonsite.io blend25-blend.pantheonsite.io; img-src 'self' blob: blendcom2-blend.pantheonsite.io blend25-blend.pantheonsite.io blend.com p.typekit.net www.googletagmanager.com www.google-analytics.com secure.gravatar.com data: *.gravatar.com *.cloudfront.net *.google-analytics.com *.analytics.google.com px.ads.linkedin.com px4.ads.linkedin.com *.google.com *.google.com.tr *.facebook.com *.hubspot.com t.co analytics.twitter.com videos.blend.com play.vidyard.com cdn.vidyard.com image.cnbcfm.com https://www.google.ba/ https://b.6sc.co/ https://forms-na1.hsforms.com https://forms.hsforms.com/ https://perf-na1.hsforms.com *.contentsquare.net https://media.marker.io https://app.marker.io https://edge.marker.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.typekit.net devserver.blend.localhost devserver.blendcom2.localhost *.google-analytics.com *.analytics.google.com *.contentsquare.net app.contentsquare.com *.googletagmanager.com static.ads-twitter.com connect.facebook.net snap.licdn.com ws.zoominfo.com metadata-static-files.sfo2.cdn.digitaloceanspaces.com assets.rampmetrics.com info.blend.com cdnjs.cloudflare.com play.vidyard.com https://unpkg.com/@lottiefiles/ https://unpkg.com/@dotlottie/ https://googleads.g.doubleclick.net https://j.6sc.co/j/d33c7c8c-8e24-425f-b6ab-1506d07b624b.js https://j.6sc.co/6si.min.js https://js.hs-scripts.com/ https://js.hsforms.net/ https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsadspixel.net/fb.js https://js.hs-banner.com https://js-na1.hs-scripts.com/ http://js.hsforms.net/forms/embed/v2.js https://ipmeta.io https://js.hsadspixel.net https://js.hubspot.com https://js-agent.newrelic.com https://edge.marker.io https://app.marker.io https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'unsafe-inline' 'self' info.blend.com; font-src 'self' data: *.typekit.net at.alicdn.com https://app.marker.io https://edge.marker.io; frame-src 'self' *.youtube.com info.blend.com play.vidyard.com docs.google.com player.cnbc.com td.doubleclick.net www.googletagmanager.com https://forms.hsforms.com/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://app.marker.io; worker-src 'self' blob: https://app.marker.io; child-src 'self' blob: https://app.marker.io; base-uri 'none' 2 frame-ancestors 'self' *.eur.nl 2 default-src blob: data: https: 'self'; script-src blob: https: 'self' 'unsafe-eval' 'unsafe-inline'; style-src blob: https: 'self' 'unsafe-inline'; media-src blob: https: 'self'; connect-src blob: https: 'self' 'unsafe-inline' wss://*.hotjar.com; frame-ancestors 'self'; report-to csp-endpoint; 2 frame-ancestors 'self' https://anz.sharepoint.com; 2 frame-ancestors 'self' *.kameleoon.com *.kameleoon.eu *.providence.org provcustomerservicedev.crm.dynamics.com provcustomerserviceuat.crm.dynamics.com provcustomerservice.crm.dynamics.com ; 2 child-src *.hsforms.com; connect-src 'self' *.analytics.google.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.hs-banner.com *.hsforms.com *.hubapi.com *.hubspot.com *.ip-api.com *.liadm.com *.vector.co analytics.ahrefs.com api.claydar.com api.cr-relay.com api.intellimize.co app.clearbit.com app.navattic.com cdn.athenahq.ai cdn.jsdelivr.net/npm/swiper@11/ cdn.linkedin.oribi.io cdn.prod.website-files.com conversions-config.reddit.com hubspot-forms-static-embed.s3.amazonaws.com joinamply.github.io/amply-motion/dist/index.js.map js.hscta.net log.intellimize.co material-site.cdn.prismic.io pagead2.googlesyndication.com pixel-config.reddit.com px.ads.linkedin.com static.hsappstatic.net unpkg.com/@rive-app/ vimeo.com/api/ webflow.com/api/v1/ www.redditstatic.com; default-src 'self'; font-src 'self' assets.website-files.com cdn.prod.website-files.com data: fonts.gstatic.com uploads-ssl.webflow.com use.typekit.net; frame-src 'self' *.hs-sites.com *.hsforms.com *.hsforms.net *.hubspot.com *.liadm.com 117352579.intellimizeio.com capture.navattic.com cdn.embedly.com demo.arcade.software material-site.prismic.io open.spotify.com player.vimeo.com td.doubleclick.net www.googletagmanager.com www.vimeo.com www.youtube.com; img-src 'self' *.analytics.google.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.hsforms.com *.hsforms.net *.hubspot.com *.liadm.com alb.reddit.com blob: cdn.prod.website-files.com d3e54v103j8qbb.cloudfront.net/img/ data: google.com googleads.g.doubleclick.net i.vimeocdn.com i.ytimg.com images.prismic.io js.hscta.net material-site.cdn.prismic.io/material-site/ no-cache.hubspot.com p.typekit.net pagead2.googlesyndication.com prismic-io.s3.amazonaws.com/material-site/ px.ads.linkedin.com px4.ads.linkedin.com use.typekit.net www.google.com www.linkedin.com; media-src 'self' cdn.prod.website-files.com material-site.cdn.prismic.io; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.googletagmanager.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.hsforms.com *.hsforms.net *.hubspot.com *.liadm.com *.usemessages.com *.vector.co analytics.ahrefs.com cdn.athenahq.ai cdn.claydar.com cdn.cr-relay.com cdn.intellimize.co/snippet/ cdn.jsdelivr.net/npm/@deltaclan/superform@2/ cdn.jsdelivr.net/npm/@finsweet/ cdn.jsdelivr.net/npm/swiper@11/ cdn.prod.website-files.com cdnjs.cloudflare.com/ajax/libs/ d3e54v103j8qbb.cloudfront.net/js/ joinamply.github.io/amply-motion/dist/index.js js.hscta.net js.navattic.com material.security/pageload.js player.vimeo.com prismic.io px.ads.linkedin.com snap.licdn.com static.cdn.prismic.io static.claydar.com static.hsappstatic.net tag.clearbitscripts.com unpkg.com/@rive-app/ www.google.com www.googleadservices.com www.googletagmanager.com www.redditstatic.com x.clearbitjs.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net/npm/swiper@11/ cdn.prod.website-files.com joinamply.github.io/amply-motion/styles.css p.typekit.net use.typekit.net 2 default-src 'self' *; font-src * data:;img-src * data:; frame-src * 'self' 'unsafe-inline' ;worker-src blob:; connect-src * 'self' ; script-src * 'self' 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' ;frame-ancestors * 'self'; form-action * 'self'; 2 default-src https:; font-src https: data:; img-src https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: https://pagead2.googlesyndication.com https://www.googletagmanager.com; style-src https: 'unsafe-inline'; connect-src https: wss: data: https://pagead2.googlesyndication.com https://connect.facebook.net https://log.cookieyes.com; worker-src https: blob:; media-src https: data: blob:; frame-src https: blob:; report-to csp-endpoint; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' strict-dynamic https: http: blob: data: *.osano.com *.braintreegateway.com;img-src * data: *.activeprospect.com;object-src 'none';base-uri 'none';style-src 'self' 'unsafe-inline' *.jsdelivr.net *.typekit.net *.braintreegateway.com fonts.googleapis.com; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.migros.com.tr exchange.mediavine.com e1.emxdgt.com *.analytics.yahoo.com sync.outbrain.com trends.revcontent.com match.sharethrough.com criteo-partners.tremorhub.com trends.revcontent.com tazedirekt.webinstats.com macro.webinstats.com *.facebook.com maps.googleapis.com https://*.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googlesyndication.com https://*.googletagservices.com https://www.google-analytics.com www.googletagmanager.com https://tagmanager.google.com https://googletagmanager.com *.googleapis.com *.googleadservices.com https://*.masterpassturkiye.com https://api-dev.moneypay.com.tr https://challenges.cloudflare.com app.vwo.com *.visualwebsiteoptimizer.com https://js.go2sdk.com https://cdn.adjust.com https://sdk.adjust.com https://live.maytap.me https://creativecdn.com https://*.cloudfront.net https://tags.bkrtx.com https://static.criteo.net https://connect.facebook.net https://cdn.yapaytech.com https://cdnjs.cloudflare.com https://*.criteo.com *.doubleclick.net affiliate.migros.com.tr *.bluekai.com *.mncdn.com *.adform.net *.storyly.io cdn.jsdelivr.net https://digiavantaj.cake.aclz.net *.efilli.com https://analytics.tiktok.com *.cloudflareinsights.com https://browser-intake-datadoghq.eu https://assets.migrosone.com https://*.adtrafficquality.google https://media.flixcar.com/ https://cdn.mlink.com.tr https://analytics.pangle-ads.com *.migrosone.com *.migrosonline.com *.migros.com.tr ; connect-src 'self' analytics.google.com macro.webinstats.com tazedirekt.webinstats.com *.gstatic.com logs.browser-intake-datadoghq.eu *.adjust.com app.adjust.net.in app.adjust.world *.dahi.ai *.adrttt.com https://*.migrosone.com *.facebook.com www.google.com www.google.com.tr magaza-iphone.migros.com.tr *.rubiconproject.com *.m1grocery.com https://*.mlink.com.tr https://img.youtube.com https://documents.colendilabs.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.googlesyndication.com https://*.googletagservices.com https://www.google-analytics.com www.googletagmanager.com https://tagmanager.google.com https://googletagmanager.com *.googleapis.com *.googleadservices.com https://*.masterpassturkiye.com https://api-dev.moneypay.com.tr https://challenges.cloudflare.com app.vwo.com *.visualwebsiteoptimizer.com https://js.go2sdk.com https://cdn.adjust.com https://sdk.adjust.com https://live.maytap.me https://creativecdn.com https://*.cloudfront.net https://tags.bkrtx.com https://static.criteo.net https://connect.facebook.net https://cdn.yapaytech.com https://cdnjs.cloudflare.com https://*.criteo.com *.doubleclick.net affiliate.migros.com.tr *.bluekai.com *.mncdn.com *.adform.net *.storyly.io cdn.jsdelivr.net https://digiavantaj.cake.aclz.net *.efilli.com https://analytics.tiktok.com *.cloudflareinsights.com https://browser-intake-datadoghq.eu https://assets.migrosone.com https://*.adtrafficquality.google https://media.flixcar.com/ https://cdn.mlink.com.tr https://analytics.pangle-ads.com *.migrosone.com *.migrosonline.com *.migros.com.tr ; font-src 'self' data: https://fonts.gstatic.com ; img-src data: blob: 'self' 'unsafe-inline' https://*.migrosone.com www.google.com www.google.com.tr maps.googleapis.com *.gstatic.com *.googleadservices.com *.visualwebsiteoptimizer.com *.facebook.com www.google-analytics.com *.googlesyndication.com img.youtube.com matching.ivitrack.com stags.bluekai.com x.bidswitch.net ib.adnxs.com contextual.media.net pixel.rubiconproject.com rtb-csync.smartadserver.com criteo-sync.teads.tv *.criteo.com eb2.3lift.com visitor.omnitagjs.com simage2.pubmatic.com *.ads.yieldmo.com *.doubleclick.net *.taboola.com cm.adform.net c1.adform.net *.casalemedia.com id5-sync.com ad.360yield.com jadserve.postrelease.com eb2.3lift.com x.bidswitch.net match.sharethrough.com jadserve.postrelease.com *.emxdgt.com ups.analytics.yahoo.com exchange.mediavine.com sync.outbrain.com trends.revcontent.com https://sync.1rx.io criteo-partners.tremorhub.com ad.yieldlab.net *.migros.com.tr magaza-iphone.migros.com.tr *.demdex.net *.krxd.net *.cloudfront.net *.thebrighttag.com *.semasio.net *.dmxleo.com https://googletagmanager.com www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://digiavantaj.cake.aclz.net https://documents.colendilabs.com https://*.files.fm https://uploads-ssl.webflow.com *.efilli.com https://analytics.tiktok.com *.adjust.com https://assets.migrosone.com https://*.adtrafficquality.google https://media.flixcar.com *.m1grocery.com https://*.mlink.com.tr ; frame-src https://*.youtube.com https://tr.rdrtr.com https://stags.bluekai.com https://*.criteo.com https://*.criteo.net https://*.doubleclick.net https://*.api.sociaplus.com https://*.webinstats.com https://sanalmarket.api.useinsider.com https://www.linkadoo.co https://linkadoo.co https://channelconnector.smartmessage-connect.com https://*.poltio.com https://*.googlesyndication.com https://console.googletagservices.com https://digiavantaj.cake.aclz.net https://creativecdn.com https://documents.colendilabs.com https://challenges.cloudflare.com https://cdnjs.cloudflare.com app.vwo.com *.visualwebsiteoptimizer.com https://*.adjust.com maps.googleapis.com *.adform.net https://wallet.moneypay.com.tr *.googleadservices.com *.facebook.com https://analytics.tiktok.com https://www.googletagmanager.com https://*.adtrafficquality.google https://media.flixcar.com *.migrosone.com *.migrosonline.com *.migros.com.tr ; frame-ancestors 'self' https://*.migros.com.tr ; style-src 'self' 'unsafe-inline' *.googlesyndication.com www.googletagservices.com www.googletagmanager.com fonts.googleapis.com *.visualwebsiteoptimizer.com maps.googleapis.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://assets.migrosone.com ;manifest-src 'self' ; worker-src 'self' blob: ;object-src 'none' ; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https:; connect-src 'self' https:; object-src 'none'; frame-src 'self' https:; img-src 'self' https: data:; frame-ancestors 'self' https://*.diplomatie.gouv.fr; style-src 'self' 'unsafe-inline' https://*.ttwstatic.com; font-src 'self' data:; 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://brightspot.erepublic.com; upgrade-insecure-requests 2 frame-ancestors *.mewatch.sg *.8world.com *.channelnewsasia.com *.mediacorp.sg *.melisten.sg *.teams.microsoft.com *.todayonline.com home.mediacorp.grp mediacorpteams.sharepoint.com teams.microsoft.com 2 default-src ;script-src 'unsafe-inline' 'self' 'unsafe-eval' https://*.textexpander.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google-analytics.com https://*.googleadservices.com https://*.facebook.net https://*.dwin1.com https://*.doubleclick.net https://*.google.at https://*.twitter.com https://*.iubenda.com https://*.vimeocdn.com https://*.hubspot.com https://*.hscollectedforms.net https://*.hsadspixel.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.calendly.com https://*.usemessages.com https://*.recruitee.com https://d10zminp1cyta8.cloudfront.net https://cdnjs.cloudflare.com https://unpkg.com https://*.paddle.com https://*.google.be https://*.google.ca https://*.google.ch https://*.google.cl https://*.google.co.in https://*.google.co.jp https://*.google.co.kr https://*.google.co.nz https://*.google.co.uk https://*.google.com.ar https://*.google.com.au https://*.google.com.br https://*.google.com.co https://*.google.com.gr https://*.google.com.mx https://*.google.com.pk https://*.google.com.tr https://*.google.com.tw https://*.google.de https://*.google.dk https://*.google.es https://*.google.fr https://*.google.ie https://*.google.it https://*.google.nl https://*.google.pl https://*.google.pt https://*.googleoptimize.com https://vimeo.com https://*.yoast.com https://*.vimeo.com https://*.google.com https://*.fontawesome.com https://*.hsappstatic.net https://ads.yahoo.com https://*.adroll.com https://d.adroll.mgr.consensu.org https://dsum-sec.casalemedia.com https://eb2.3lift.com https://ib.adnxs.com https://idsync.rlcdn.com https://image2.pubmatic.com https://*.adsymptotic.com https://*.advertising.com https://*.rubiconproject.com https://simage2.pubmatic.com https://*.licdn.com https://*.outbrain.com https://*.taboola.com https://ups.analytics.yahoo.com https://*.bidswitch.net https://*.facebook.com https://*.hsforms.com https://*.hsforms.net https://*.bing.com https://*.linkedin.com https://*.gstatic.com https://textexpander.com *.visualwebsiteoptimizer.com app.vwo.com https://*.g2crowd.com https://*.clarity.ms https://google.com https://google.com https://*.segment.com https://*.getreditus.com/ https://*.mountain.com https://pocustrack.com https://*.pocustrack.com https://*.influ2.com https://ddwl4m2hdecbv.cloudfront.net/b/ https://b-code.liadm.com/lc2.js https://rp.liadm.com https://idx.liadm.com https://a.usbrowserspeed.com https://b2bjsstore.s3.us-west-2.amazonaws.com https://*.cr-relay.com/ https://*.openai.com;style-src https://*.textexpander.com https://sentry.io 'unsafe-inline' 'self' https://unpkg.com https://*.google.com https://*.fontawesome.com https://*.calendly.com https://*.googleapis.com https://textexpander.com *.visualwebsiteoptimizer.com app.vwo.com https://s3.amazonaws.com https://google.com https://google.com https://*.typekit.net;font-src https://*.textexpander.com https://*.gstatic.com data: 'self' https://*.googletagmanager.com https://*.googleoptimize.com https://*.fontawesome.com https://textexpander.com https://*.typekit.net;img-src * data: https://*.influ2.com;connect-src https://*.textexpander.com wss://visitors.live https://*.hubapi.com https://*.fontawesome.com wss://*.visitors.live https://*.googleapis.com https://*.linkedin.com https://d3hb14vkzrxvla.cloudfront.net wss://*.pusher.com https://*.sumologic.com https://cdn.linkedin.oribi.io 'self' https://*.analytics.google.com https://*.hubspot.com https://*.iubenda.com https://*.recruitee.com https://sentry.io https://*.facebook.com https://*.google-analytics.com https://*.yoast.com https://*.google.com https://*.adroll.com https://*.googlesyndication.com https://*.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://*.bing.com https://*.doubleclick.net https://textexpander.com *.visualwebsiteoptimizer.com app.vwo.com https://*.clarity.ms https://google.com https://google.com https://*.g2crowd.com https://*.segment.com https://*.segment.io https://bat.bing.net https://*.g2.com https://*.pocustrack.com https://*.influ2.com https://rest-staging.tenet.textexpander.com https://unpkg.com https://*.hsappstatic.net https://pocustrack.com https://pro.ip-api.com https://alocdn.com/c/vn3d8u2u/a/xtarget/p.json https://*.liadm.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://a.usbrowserspeed.com https://*.cr-relay.com/ https://*.openai.com;media-src https://*.textexpander.com https://*.youtu.be https://vod-progressive.akamaized.net 'self' https://*.vimeocdn.com https://download-video.akamaized.net https://vimeo.com https://*.vimeo.com https://*.youtube.com https://textexpander.com;object-src https://*.textexpander.com blob: 'self' https://textexpander.com;frame-src https://*.textexpander.com https://calendly.com 'self' https://*.twitter.com https://*.hubspot.com https://*.iubenda.com https://*.vimeocdn.com https://*.google.at https://*.google.be https://*.google.ca https://*.google.ch https://*.google.cl https://*.google.co.in https://*.google.co.jp https://*.google.co.kr https://*.google.co.nz https://*.google.co.uk https://*.google.com.ar https://*.google.com.au https://*.google.com.br https://*.google.com.co https://*.google.com.gr https://*.google.com.mx https://*.google.com.pk https://*.google.com.tr https://*.google.com.tw https://*.google.de https://*.google.dk https://*.google.es https://*.google.fr https://*.google.ie https://*.google.it https://*.google.nl https://*.google.pl https://*.google.pt https://vimeo.com https://*.vimeo.com https://*.google.com https://*.youtube-nocookie.com https://*.adroll.com https://*.hsforms.com https://*.youtube.com https://*.doubleclick.net https://*.facebook.com https://textexpander.com *.visualwebsiteoptimizer.com app.vwo.com https://fast.wistia.net https://google.com https://google.com https://*.googletagmanager.com https://js.hsforms.net blob:;worker-src https://*.textexpander.com 'self' blob: https://textexpander.com https://fast.wistia.net https://vimeo.com https://*.youtube.com; 2 frame-src 'self' https://*.matterport.com https://*.takemobi.io https://*.ada.support https://*.yimg.com https://*.uplift.com https://*.sandbox.my.site.com https://*.adalyser.com https://*.redditstatic.com https://*.reddit.com https://www.googletagmanager.com https://pcl.satmetrix.com https://*.adsrvr.org https://*.edkt.io https://*.adnxs.com https://*.omniture.com https://*.teads.tv https://*.everesttech.net https://*.everestjs.net https://fledge.teads.tv https://*.adentifi.com https://*.linkedin.com https://*.licdn.com https://*.sojern.com https://*.videoamp.com https://awin1.com https://dwin1.com https://*.adobe.com https://*.niceincontact.com https://na-gateway.mastercard.com https://mtf.gateway.mastercard.com https://analytics.analytics-egain.com https://princesscruises.egain.cloud https://surfly-us.com https://princess.qualtrics.com https://sr.rlcdn.com https://www.facebook.com https://assets.adobedtm.com https://cdn.appdynamics.com https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://carnivalbrands.demdex.net https://servedby.flashtalking.com https://www.youtube.com https://*.princess.com https://*.ocean.com https://*.pinterest.com https://*.td.doubleclick.net https://*.tpc.googlesyndication.com https://publish-p107522-e1006297.adobeaemcloud.com https://td.doubleclick.net https://tpc.googlesyndication.com https://*.optimizely.com https://*.fullstory.com https://*.paypal.com https://*.opentable.com; frame-ancestors 'self' https://*.princess.com https://*.polarres.com https://*.clubprincess.com https://*.medallionclassmarket.com https://*.princesspromotions.com https://*.ocean.com https://*.niceincontact.com https://*.adobeaemcloud.com https://*.optimizely.com https://*.fullstory.com https://*.yimg.com https://*.demandware.net https://runtime.commercecloud.com https://*.ada.support; 2 frame-ancestors 'self' https://app.contentful.com https://*.chilipiper.com https://*.contentful.com https://*.saucelabs.com https://*.saucelabs.net *.navattic.com; 2 frame-ancestors ‘none'; 2 frame-ancestors 'self' http://webvisor.com https://webvisor.com https://metricka.yandex.com https://metricka.yandex.ru https://metricka.yandex.by https://metricka.yandex.com https://metricka.yandex.tr http://metricka.yandex.com http://metricka.yandex.ru http://metricka.yandex.by http://metricka.yandex.com http://metricka.yandex.tr https://metrika.yandex.com https://metrika.yandex.ru 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' https: blob:; style-src 'self' 'unsafe-inline' https: data: 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn1.adoberesources.net https://doctors.bannerhealth.com https://cdn.plyr.io https://mapsresources-pa.googleapis.com https://maps.googleapis.com https://a40.usablenet.com/ https://cdn.kyruus.com/ https://bannerhealth.formstack.com/ https://static.formstack.com/ https://bah-p-001.sitecorecontenthub.cloud https://bannerhealth.com https://bannernetworkcolorado.com https://col.eum-appdynamics.com https://udc-neb.kampyle.com https://plyr.io https://api.smartystreets.com https://rlets.com https://liqadprdct-capture-prod-east.gannett digital.com https://capture-api.reachlocalservices.com https://pinterest.com https://taboola.com https://px.ads.linkedin.com https://ad.ipredictive.com https://stats.g.doubleclick.net https://gstatic.com https://google.com https://pinimg.com https://tags.srv.stackadapt.com https://bing.com https://cdn.taboola.com https://solutions.invocacdn.com https://sitescdn.net https://crazyegg.com https://xg4ken.com https://googleads.g.doubleclick.net https://snap.licdn.com https://adsrvr.org https://nebula-cdn.kampyle.com https://connect.facebook.net https://google-analytics.com https://typekit.net https://googletagmanager.com https://clockwisemd.com https://ytimg.com https://googleapis.com https://bannerhealth.usablenet.com https://kyruus.com https://cloudflare.com https://appdynamics.com https://linkedin.oribi.io https://instagram.com https://dstillery.com https://media6degrees.com https://formstack.com https://twitter.com https://doubleclick.net https://polyfill.io https://s.pinimg.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://script.crazyegg.com https://bat.bing.com https://resources.xg4ken.com https://services.xg4ken.com https://cdn.appdynamics.com https://maps.gstatic.com https://js.adsrvr.org https://kloggyr-service.kyruus.com https://use.typekit.net https://s.ytimg.com https://assets.sitescdn.net https://www.clockwisemd.com; style-src-elem https: 'self' 'unsafe-inline' https://a40.usablenet.com https://ad.ipredictive.com https://addevent.com https://adobe.ly https://adoberesources.net https://adsrvr.org https://alchemer.com https://api.smartystreets.com https://appdynamics.com https://assets.sitescdn.net https://bah-p-001.sitecorecontenthub.cloud https://bannerhealth.com https://bannerhealth.formstack.com https://bannerhealth.usablenet.com https://bannernetworkcolorado.com https://bat.bing.com https://bing.com https://capture-api.reachlocalservices.com https://cdn.appdynamics.com https://cdn.jsdelivr.net https://cdn.kyruus.com https://cdn.taboola.com https://cdn1.adoberesources.net https://cdnjs.cloudflare.com https://clockwisemd.com https://cloudflare.com https://cloudflareinsights.com https://cloudfront.net https://col.eum-appdynamics.com https://connect.facebook.net https://crazyegg.com https://digital.com https://doubleclick.net https://dstillery.com https://fontawesome.com https://formstack.com https://google-analytics.com https://google.com https://googleads.g.doubleclick.net https://googleadservices.com https://googleapis.com https://googletagmanager.com https://gstatic.com https://instagram.com https://js.adsrvr.org https://jsdelivr.net https://kloggyr-service.kyruus.com https://krxd.net https://kyruus.com https://linkedin.oribi.io https://liqadprdct-capture-prod-east.gannett https://maps.googleapis.com https://maps.gstatic.com https://mapsresources-pa.googleapis.com https://media6degrees.com https://mongoosemetrics.com https://nebula-cdn.kampyle.com https://pinimg.com https://pinterest.com https://plyr.io https://polyfill.io https://px.ads.linkedin.com https://resources.xg4ken.com https://rlets.com https://s.pinimg.com https://s.ytimg.com https://script.crazyegg.com https://services.xg4ken.com https://sitescdn.net https://snap.licdn.com https://solutions.invocacdn.com https://static.cloudflareinsights.com https://static.formstack.com https://stats.g.doubleclick.net https://surveygizmo.com https://taboola.com https://tags.srv.stackadapt.com https://twitter.com https://typekit.net https://udc-neb.kampyle.com https://usablenet.com https://use.typekit.net https://www.clockwisemd.com https://www.googletagmanager.com https://www.youtube.com https://xg4ken.com https://youtube.com https://ytimg.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://tags.srv.stackadapt.com https://use.typekit.net https://googleapis.com https://formstack.com https://typekit.net https://px.ads.linkedin.com https://ad.ipredictive.com https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://bannerhealth.formstack.com https://static.formstack.com; font-src https: data: 'self' 'unsafe-inline' 'unsafe-eval' https://gstatic.com https://kyruus.com https://typekit.net https://cdn.kyruus.com https://kloggyr-service.kyruus.com https://maps.gstatic.com https://use.typekit.net https://a40.usablenet.com https://ad.ipredictive.com https://addevent.com https://adobe.ly https://adoberesources.net https://adsrvr.org https://alchemer.com https://api.smartystreets.com https://appdynamics.com https://assets.sitescdn.net https://bah-p-001.sitecorecontenthub.cloud https://bannerhealth.com https://bannerhealth.formstack.com https://bannerhealth.usablenet.com https://bannernetworkcolorado.com https://bat.bing.com https://bing.com https://capture-api.reachlocalservices.com https://cdn.appdynamics.com https://cdn.jsdelivr.net https://cdn.taboola.com https://cdn1.adoberesources.net https://cdnjs.cloudflare.com https://clockwisemd.com https://cloudflare.com https://cloudflareinsights.com https://cloudfront.net https://col.eum-appdynamics.com https://connect.facebook.net https://crazyegg.com https://digital.com https://doubleclick.net https://dstillery.com https://fontawesome.com https://formstack.com https://google-analytics.com https://google.com https://googleads.g.doubleclick.net https://googleadservices.com https://googleapis.com https://googletagmanager.com https://instagram.com https://js.adsrvr.org https://jsdelivr.net https://krxd.net https://linkedin.oribi.io https://liqadprdct-capture-prod-east.gannett https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://media6degrees.com https://mongoosemetrics.com https://nebula-cdn.kampyle.com https://pinimg.com https://pinterest.com https://plyr.io https://polyfill.io https://px.ads.linkedin.com https://resources.xg4ken.com https://rlets.com https://s.pinimg.com https://s.ytimg.com https://script.crazyegg.com https://services.xg4ken.com https://sitescdn.net https://snap.licdn.com https://solutions.invocacdn.com https://static.cloudflareinsights.com https://static.formstack.com https://stats.g.doubleclick.net https://surveygizmo.com https://taboola.com https://tags.srv.stackadapt.com https://twitter.com https://udc-neb.kampyle.com https://usablenet.com https://www.clockwisemd.com https://www.googletagmanager.com https://www.youtube.com https://xg4ken.com https://youtube.com https://ytimg.com; frame-src https: 'self' https://a40.usablenet.com https://ad.ipredictive.com https://addevent.com https://adobe.ly https://adoberesources.net https://adsrvr.org https://alchemer.com https://api.smartystreets.com https://appdynamics.com https://assets.sitescdn.net https://bah-p-001.sitecorecontenthub.cloud https://bannerhealth.com https://bannerhealth.formstack.com https://bannerhealth.usablenet.com https://bannernetworkcolorado.com https://bat.bing.com https://bing.com https://capture-api.reachlocalservices.com https://cdn.appdynamics.com https://cdn.jsdelivr.net https://cdn.kyruus.com https://cdn.taboola.com https://cdn1.adoberesources.net https://cdnjs.cloudflare.com https://clockwisemd.com https://cloudflare.com https://cloudflareinsights.com https://cloudfront.net https://col.eum-appdynamics.com https://connect.facebook.net https://crazyegg.com https://digital.com https://doubleclick.net https://dstillery.com https://fontawesome.com https://formstack.com https://google-analytics.com https://google.com https://googleads.g.doubleclick.net https://googleadservices.com https://googleapis.com https://googletagmanager.com https://gstatic.com https://instagram.com https://js.adsrvr.org https://jsdelivr.net https://kloggyr-service.kyruus.com https://krxd.net https://kyruus.com https://linkedin.oribi.io https://liqadprdct-capture-prod-east.gannett https://maps.googleapis.com https://maps.gstatic.com https://mapsresources-pa.googleapis.com https://media6degrees.com https://mongoosemetrics.com https://nebula-cdn.kampyle.com https://pinimg.com https://pinterest.com https://plyr.io https://polyfill.io https://px.ads.linkedin.com https://resources.xg4ken.com https://rlets.com https://s.pinimg.com https://s.ytimg.com https://script.crazyegg.com https://services.xg4ken.com https://sitescdn.net https://snap.licdn.com https://solutions.invocacdn.com https://static.cloudflareinsights.com https://static.formstack.com https://stats.g.doubleclick.net https://surveygizmo.com https://taboola.com https://tags.srv.stackadapt.com https://twitter.com https://typekit.net https://udc-neb.kampyle.com https://usablenet.com https://use.typekit.net https://www.clockwisemd.com https://www.googletagmanager.com https://www.youtube.com https://xg4ken.com https://youtube.com https://ytimg.com; script-src-elem https://widgets.wellnessliving.com https://cdn.penrod.co https://global.oktacdn.com https://cdn1.adoberesources.net https://assets.adobedtm.com https://md-scp.kampyle.com https://www.instagram.com/ https://www.wellnessliving.com https://cdn.addevent.com/ https://www.addevent.com https://platform.instagram.com https://adtrack.voicestar.com https://1179.xg4ken.com https://www.youtube.com https://ajax.googleapis.com https://bannerhealth.usablenet.com https://cdn.jsdelivr.net https://adobe.ly https://adoberesources.net https://cdn1.adoberesources.net/alloy/2.20.0/alloy.min.js https://cloudflareinsights.com https://static.cloudflareinsights.com https://pinterest.com https://maps.googleapis.com https://fontawesome.com https://alchemer.com https://cloudflare.com https://polyfill.io https://surveygizmo.com https://ytimg.com https://s.ytimg.com https://clockwisemd.com https://www.clockwisemd.com https://youtube.com https://jsdelivr.net https://appdynamics.com https://cdn.appdynamics.com https://googletagmanager.com https://www.googletagmanager.com https://usablenet.com https://a40.usablenet.com https://googleapis.com https://googleads.g.doubleclick.net https://google-analytics.com https://script.crazyegg.com https://snap.licdn.com https://nebula-cdn.kampyle.com https://connect.facebook.net https://js.adsrvr.org https://services.xg4ken.com https://assets.sitescdn.net https://solutions.invocacdn.com https://cdn.taboola.com https://bat.bing.com https://resources.xg4ken.com https://tags.srv.stackadapt.com https://s.pinimg.com https://taboola.com https://kyruus.com https://cdn.kyruus.com https://googleadservices.com https://mongoosemetrics.com https://formstack.com https://krxd.net https://addevent.com https://cloudfront.net https://rlets.com https://dstillery.com https://media6degrees.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' https://bannerhealth.formstack.com https://static.formstack.com https://kloggyr-service.kyruus.com https://mapsresources-pa.googleapis.com; img-src 'self' 'unsafe-inline' data: https://widgets.wellnessliving.com https://global.oktacdn.com https://cm.everesttech.net https://dpm.demdex.net https://phoenixmed.arizona.edu https://cdn.addevent.com https://s3.amazonaws.com https://www.wellnessliving.com https://i.ytimg.com https://www.horizonlaboratory.com https://cdn2.webdamdb.com https://kyruus-app-static.kyruus.com https://img.youtube.com https://mapsresources-pa.googleapis.com https://cdn-images.kyruus.com https://kloggyr-service.kyruus.com https://maps.gstatic.com https://a40.usablenet.com https://addevent.com https://adobe.ly https://adoberesources.net https://alchemer.com https://appdynamics.com https://assets.sitescdn.net https://bah-p-001.sitecorecontenthub.cloud https://bat.bing.com https://cdn.appdynamics.com https://cdn.jsdelivr.net https://cdn.kyruus.com https://cdn.taboola.com https://cdn1.adoberesources.net/alloy/2.20.0/alloy.min.js https://cdnjs.cloudflare.com https://clockwisemd.com https://cloudflare.com https://cloudflareinsights.com https://cloudfront.net https://connect.facebook.net https://dstillery.com https://fontawesome.com https://formstack.com https://google-analytics.com https://googleads.g.doubleclick.net https://googleadservices.com https://googleapis.com https://googletagmanager.com https://js.adsrvr.org https://jsdelivr.net https://kyruus.com https://maps.googleapis.com https://media6degrees.com https://mongoosemetrics.com https://nebula-cdn.kampyle.com https://pinterest.com https://polyfill.io https://resources.xg4ken.com https://rlets.com https://s.pinimg.com https://s.ytimg.com https://script.crazyegg.com https://services.xg4ken.com https://snap.licdn.com https://solutions.invocacdn.com https://static.formstack.com https://surveygizmo.com https://taboola.com https://tags.srv.stackadapt.com https://typekit.net https://usablenet.com https://www.clockwisemd.com https://www.googletagmanager.com https://youtube.com https://ytimg.com https://ad.ipredictive.com https://adsrvr.org https://api.smartystreets.com https://bannerhealth.com https://bannerhealth.formstack.com https://bannerhealth.usablenet.com https://bannernetworkcolorado.com https://bing.com https://capture-api.reachlocalservices.com https://col.eum-appdynamics.com https://crazyegg.com https://digital.com https://doubleclick.net https://google.com https://gstatic.com https://instagram.com https://krxd.net https://linkedin.oribi.io https://liqadprdct-capture-prod-east.gannett https://pinimg.com https://plyr.io https://px.ads.linkedin.com https://sitescdn.net https://static.cloudflareinsights.com https://stats.g.doubleclick.net https://twitter.com https://udc-neb.kampyle.com https://use.typekit.net https://www.youtube.com https://xg4ken.com; child-src 'self' https://bah-p-001.sitecorecontenthub.cloud; media-src 'self' https://d3ctxlq1ktw2nl.cloudfront.net https://bah-p-001.sitecorecontenthub.cloud https://a40.usablenet.com https://ad.ipredictive.com https://addevent.com https://adobe.ly https://adoberesources.net https://adsrvr.org https://alchemer.com https://api.smartystreets.com https://appdynamics.com https://assets.sitescdn.net https://bannerhealth.com https://bannerhealth.formstack.com https://bannerhealth.usablenet.com https://bannernetworkcolorado.com https://bat.bing.com https://bing.com https://capture-api.reachlocalservices.com https://cdn.appdynamics.com https://cdn.jsdelivr.net https://cdn.kyruus.com https://cdn.taboola.com https://cdn1.adoberesources.net https://cdnjs.cloudflare.com https://clockwisemd.com https://cloudflare.com https://cloudflareinsights.com https://cloudfront.net https://col.eum-appdynamics.com https://connect.facebook.net https://crazyegg.com https://digital.com https://doubleclick.net https://dstillery.com https://fontawesome.com https://formstack.com https://google-analytics.com https://google.com https://googleads.g.doubleclick.net https://googleadservices.com https://googleapis.com https://googletagmanager.com https://gstatic.com https://instagram.com https://js.adsrvr.org https://jsdelivr.net https://kloggyr-service.kyruus.com https://krxd.net https://kyruus.com https://linkedin.oribi.io https://liqadprdct-capture-prod-east.gannett https://maps.googleapis.com https://maps.gstatic.com https://mapsresources-pa.googleapis.com https://media6degrees.com https://mongoosemetrics.com https://nebula-cdn.kampyle.com https://pinimg.com https://pinterest.com https://plyr.io https://polyfill.io https://px.ads.linkedin.com https://resources.xg4ken.com https://rlets.com https://s.pinimg.com https://s.ytimg.com https://script.crazyegg.com https://services.xg4ken.com https://sitescdn.net https://snap.licdn.com https://solutions.invocacdn.com https://static.cloudflareinsights.com https://static.formstack.com https://stats.g.doubleclick.net https://surveygizmo.com https://taboola.com https://tags.srv.stackadapt.com https://twitter.com https://typekit.net https://udc-neb.kampyle.com https://usablenet.com https://use.typekit.net https://www.clockwisemd.com https://www.googletagmanager.com https://www.youtube.com https://xg4ken.com https://youtube.com https://ytimg.com ; connect-src 'self' https://bannerhealth-public.oktapreview.com https://global.oktacdn.com https://dpm.demdex.net https://edge.adobedc.net https://analytics-fe.digital-cloud-us-main.medallia.com https://maps.googleapis.com https://col.eum-appdynamics.com https://nebula-cdn.kampyle.com https://mapsresources-pa.googleapis.com https://doctors.bannerhealth.com https://adobedc.demdex.net https://bannerhealth.formstack.com https://www.fda.gov 2 default-src 'self' 'unsafe-inline'; connect-src 'self' blob: *; font-src 'self' https://images.mutinycdn.com/; frame-ancestors 'self' https://app.mutinyhq.com https://preview.mutinyhq.com; frame-src * data: *; img-src 'self' data: * blob: *; media-src 'self' blob: *; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *; 2 default-src 'self' gso.amocrm.com gso.kommo.com; script-src 'self' 'strict-dynamic' 'unsafe-inline' https://www.gstatic.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://assets.calendly.com https://platform.twitter.com piper.amocrm.com gso.amocrm.com piper.kommo.com gso.kommo.com https://my.hellobar.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.youtube.com 'sha256-qZJmHHAaUu28WoFKc0FVNpA5ikXzX0NBeqIpY0bQXIA=' 'sha256-V7US+zMwAMOPr/YqM4zVsHsKGl3xUiVIwhFUvnv87QE=' 'sha256-J8lzg3ubs2SO6PW9MmHWe1UzbBMwuiLWxN/otQCygyY=' 'sha256-eH5kMeUdc48DzHbZtubwbQ1dUOxSsKEw4nqHROB4O+g=' 'sha256-disSjv6Cqh2qc1///UXyReEByhnnMEGIa7VnqInfjls=' 'sha256-sejyC18/DnWxENEG0wtqHl60q8kck4ZIDJVPYZoFY2Y=' 'sha256-yHwihVYvV0uJwcx2/8gO6wxKSQKbIKgPrOhvJErN3Zs=' 'sha256-DpOoqibK/BsYhobWHnU38Pyzt5SjDZuR/mFsAiVN7kk=' https://ajax.googleapis.com https://www.facebook.com https://connect.facebook.net https://graph.facebook.com vk.com https://login.vk.com top-fwz1.mail.ru https://mc.yandex.ru https://yastatic.net https://cdn.userflow.com https://js.userflow.com https://*.clarity.ms https://*.convertexperiments.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://snap.licdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://cdn.linkedin.oribi.io https://gw.linkedin.oribi.io https://dc.ads.linkedin.com https://sjs.bizographics.com https://www.linkedin.com https://analytics.ahrefs.com https://bat.bing.com https://bat.bing.net 'nonce-e9af510aa1a2'; style-src 'self' https://fonts.googleapis.com 'strict-dynamic' 'unsafe-inline' https://unpkg.com https://assets.calendly.com https://cdn.jsdelivr.net q4s5p2q6.stackpathcdn.com pcfcdn.kommo.com gso.amocrm.com gso.kommo.com connect.facebook.net https://cdn.userflow.com https://js.userflow.com; form-action 'self' https://www.facebook.com; frame-ancestors 'self' https://*.kommo.com chrome-extension://cfaicdlgblgdchnpdilihjmfnogpjakl chrome-extension://eaeaddaoioikiaokcmjfeghddidmmfhc; worker-src blob:; object-src 'none'; font-src 'self' data: q4s5p2q6.stackpathcdn.com pcfcdn.kommo.com https://fonts.gstatic.com; img-src 'self' data: blob: https://*.kommo.com https://*.amocrm.com https://seal.godaddy.com https://partnersus.s3.amazonaws.com https://partnersus-test.s3.eu-west-1.amazonaws.com https://amocrm.com https://kommo.com https://giphy.com https://*.giphy.com https://pbs.twimg.com https://i.ytimg.com https://www.statista.com https://syndication.twitter.com https://s3-eu-west-1.amazonaws.com q4s5p2q6.stackpathcdn.com pcfcdn.kommo.com https://i.postimg.cc https://widgets.amocrm.com https://widgets.kommo.com piper.amocrm.com gso.amocrm.com piper.kommo.com gso.kommo.com https://www.google-analytics.com https://google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://google.com https://www.google.ru https://www.facebook.com https://connect.facebook.net https://vk.com https://mc.yandex.ru https://yastatic.net https://mc.yandex.md https://blob.userflow.com https://cdn.userflow.com https://js.userflow.com https://storage.googleapis.com/studio1-prod-blob/ https://*.clarity.ms https://c.bing.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://snap.licdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://cdn.linkedin.oribi.io https://gw.linkedin.oribi.io https://dc.ads.linkedin.com https://sjs.bizographics.com https://www.linkedin.com https://bat.bing.com https://bat.bing.net; media-src 'self' q4s5p2q6.stackpathcdn.com pcfcdn.kommo.com https://blob.userflow.com https://cdn.userflow.com https://storage.googleapis.com/studio1-prod-blob/; frame-src 'self' www.facebook.com socialplugin.facebook.net www.googletagmanager.com forms.amocrm.com forms.kommo.com calendly.com platform.twitter.com d562488024744908ac9e9fa9d3112067.pages.ubembed.com giphy.com td.doubleclick.net https://app.supademo.com/ piper.amocrm.com gso.amocrm.com piper.kommo.com gso.kommo.com button.kommo.com button.amocrm.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.facebook.com https://vk.com https://mc.yandex.ru https://*.clarity.ms bytedance: sslocal: https://www.linkedin.com; connect-src 'self' https://*.kommo.com https://connect.ok.ru https://appbroker.amocrm-dev.com https://appbroker.amostage.com https://appbroker.amocrm.com https://pagead2.googlesyndication.com gso.amocrm.com gso.kommo.com lc-en.amocrm.com lc-en.kommo.com https://pro.ip-api.com https://www.google-analytics.com https://google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://google.com https://www.facebook.com https://graph.facebook.com https://vk.com https://login.vk.com https://top-fwz1.mail.ru https://mc.yandex.ru https://mc.yandex.md https://cdn.userflow.com https://e.userflow.com https://js.userflow.com wss://e.userflow.com https://sales-demo-calendly.amostage.com https://sales-demo-calendly.kommo.com https://*.clarity.ms https://c.bing.com https://*.convertexperiments.com https://*.metrics.convertexperiments.com https://*.signals.convertexperiments.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://snap.licdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://p.adsymptotic.com https://cdn.linkedin.oribi.io https://gw.linkedin.oribi.io https://dc.ads.linkedin.com https://sjs.bizographics.com https://www.linkedin.com https://analytics.ahrefs.com https://bat.bing.com https://bat.bing.net; base-uri 'self'; 2 frame-ancestors 'self' https://insurance.jrj.com.cn 2 default-src https: 'self' data: https://pay.datatrans.com *.demdex.net *.everesttech.net *.omtrdc.net *.sc.omtrdc.net *.tt.omtrdc.net; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://bzrcdn.openai.com https://pay.datatrans.com https://*.letsway.com https://pay.sandbox.datatrans.com https://utt.impactcdn.com https://*.googleapis.com https://*.kouto.co https://*.stripe.com https://*.imagekit.io https://*.bing.com https://*.creativecdn.com https://cloud.e.mandarinoriental.com https://siteintercept.qualtrics.com https://cdnjs.cloudflare.com https://cloud.official.mandarinoriental.com https://zn1z6joka9pfuojsc-mohgcx.siteintercept.qualtrics.com https://www.wepowerconnections.com https://lantern.roeyecdn.com https://tags.creativecdn.com https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.go-mpulse.net https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagservices.com https://assets.adobedtm.com https://b99.yahoo.co.jp https://commerce.adobedtm.com https://cdn.cookielaw.org https://connect.facebook.net https://content.linkedin.com https://graph.facebook.com https://googletagmanager.com https://js.facebook.com https://platform.linkedin.com https://p.teads.tv https://recaptcha.net https://snap.licdn.com https://static-exp1.licdn.com https://sc-static.net https://static.tacdn.com https://s.yimg.jp https://tagmanager.google.com https://tr.snapchat.com https://www.clarity.ms https://www.awin1.com https://www.dwin1.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.gstatic.cn/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://linkcenterus.derbysoftsec.com/ https://px.ads.linkedin.com/ https://analytics.tiktok.com https://secde.trivago.com https://js.verygoodvault.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cloud.e.mandarinoriental.com https://cloud.official.mandarinoriental.com *.licdn.com *.google.com www.googletagmanager.com; img-src 'self' data: https://*; worker-src 'self' blob:; 2 frame-ancestors 'self' *.servicetitan.com; 2 frame-ancestors *.peugeot.ba *.citroen.ba *.fiat-bih.ba fiat-bih.ba *.olx.com olx.ba 2 frame-ancestors storyblok.com *.storyblok.com iq.com.br itau.com.br *.itau.com.br credicard.com.br *.credicard.com.br acordocerto.com.br *.acordocerto.com.br consumidorpositivo.com.br *.consumidorpositivo.com.br acordocerto.net cdn.acordocerto.net supersim.com.br *.supersim.com.br clarity.ms *.clarity.ms 2 base-uri 'none'; font-src 'self' https: data:; form-action 'self' epost.online.no; frame-ancestors 'self' *.telenor.no telenor.no; img-src 'self' https: data:; object-src 'none'; style-src 'self' https: blob: 'unsafe-inline' telenor.no *.telenor.no; script-src 'self' telenor.no *.telenor.no https: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; worker-src blob:; 2 frame-ancestors 'self' *.boursobank.com; object-src *.boursorama.com *.boursobank.com *.brsimg.com 2 block-all-mixed-content; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; default-src 'none'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; font-src 'self' data:; media-src data: about:; frame-src 'self' about: https:; object-src 'self' about: 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://solicitudes.tarjetaabc.cl https://tarjetaabc.cl https://*.tarjetaabc.cl https://515014059.collect.igodigital.com https://cdn.jsdelivr.net https://cdn.cquotient.com https://www.clarity.ms https://static.hotjar.com https://connect.facebook.net https://googleads.g.doubleclick.net https://script.hotjar.com https://p.cquotient.com https://ui.powerreviews.com https://e.cquotient.com https://media.flixfacts.com https://maps.googleapis.com https://media.flixcar.com https://www.entel.cl https://www.google.com/recaptcha/api.js https://www.gstatic.com https://static.powerreviews.com https://h.online-metrix.net https://scripts.clarity.ms https://abc.cl https://h64.online-metrix.net https://analytics.tiktok.com https://storage.googleapis.com https://oc-cache.production.alquimio.cloud https://front-notrack.indexado.production.pmbox.cloud https://front.indexado.production.alquimio.cloud https://*.alquimio.cloud https://*.omnitok.com https://lapolartarjeta.my.site.com https://lapolartarjeta.my.salesforce-scrt.com https://t.contentsquare.net;frame-ancestors 'self';object-src 'none';worker-src 'self' blob:; 2 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline' 'unsafe-eval' data: blob:; img-src * data: blob:; font-src * data: blob:; object-src *; base-uri *; form-action *; worker-src * data: blob:; frame-ancestors https://app.contentful.com; 2 report-uri /csp-report.php; default-src 'none'; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://www.fio.cz https://www.fio.sk https://www.gstatic.com https://googleads.g.doubleclick.net https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://www.google.cz https://www.google.sk https://pagead2.googlesyndication.com https://stats.g.doubleclick.net *.google-analytics.com *.analytics.google.com *.bankid.cz; connect-src 'self' *.analytics.google.com *.google-analytics.com https://ajax.googleapis.com https://pagead2.googlesyndication.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://tpc.googlesyndication.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://tpc.googlesyndication.com https://ssl.google-analytics.com; frame-src https://www.googletagmanager.com https://bid.g.doubleclick.net https://www.youtube.com https://maps.google.com https://maps.google.cz https://www.google.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net; frame-ancestors 'self'; base-uri 'self' 2 default-src 'self' d1a19ys8w1wkc1.cloudfront.net; connect-src *; font-src * data:; frame-src *; img-src * data: blob:; media-src * blob: data:; object-src *; script-src * 'unsafe-inline' 'unsafe-eval' https://rcdfcdn.mars.com https://stage-rcdfcdn.mars.com; worker-src * blob:; style-src * 'unsafe-inline'; 2 style-src 'self' 'unsafe-inline' api-maps.yandex.ru fonts.googleapis.com www.youtube.com broker-vb-temp.halykbank.kz; 2 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; font-src https: data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; 2 style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.mozilla.org; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.mozilla.org; frame-ancestors 'none'; upgrade-insecure-requests; object-src 'none'; connect-src 'self' cdn.transcend.io gtm.mozilla.org https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org o1069899.ingest.sentry.io o1069899.sentry.io region1.google-analytics.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.google-analytics.com www.googletagmanager.com www.mozilla.org/submit/bedrock/; form-action 'self' https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org; default-src 'self' *.mozilla.org; img-src 'self' blog.mozilla.org data: images.ctfassets.net www.google-analytics.com www.googletagmanager.com www.mozilla.org; base-uri 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.transcend.io js.stripe.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.google-analytics.com www.googletagmanager.com www.mozilla.org www.youtube.com; frame-src 'self' accounts.firefox.com gtm.mozilla.org js.stripe.com www.google-analytics.com www.googletagmanager.com www.youtube.com; font-src 'self' www.mozilla.org 2 default-src 'self' *.hsbc.com.hk *.mastercard.com.au *.demdex.net *.lpsnmedia.net *.liveperson.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.ads-twitter.com *.hsbc.ae rum.hlx.page bat.bing.com *.amazon-adsystem.com s.amazon-adsystem.com *.v.liveperson.net googleads.g.doubleclick.net connect.facebook.net static.ads-twitter.com tags.tiqcdn.com lptag.liveperson.net lpcdn.lpsnmedia.net cdn.optimizely.com accdn.lpsnmedia.net www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com cdn-assets-prod.s3.amazonaws.com app.contentsquare.com *.pinimg.com *.pinterest.com *.analytics.tiktok.com analytics.tiktok.com snap.licdn.com *.recaptcha.net s.yimg.com *.askus.hsbc.co.uk *.appspot.com tt.omtrdc.net *.sc.omtrdc.net *.demdex.net *.twitter.com t.co *.walkme.com *.omguk.com *.adsrvr.org pixel.everesttech.net liveperson.com *.contentsquare.com *.qualtrics.com *.quantserve.com *.outbrain.com *.taboola.com *.google-analytics.com www.google.com www.gstatic.cn *.hsbc.com.cn *.isstprod.hsbc.com.cn *.akamaihd.net *.tt.omtrdc.net c-hsbc.lytics.io diva-client-eu-preprod.hsbc.com diva-client-eu.hsbc.com; img-src data: * blob: *.pinimg.com *.pinterest.com *.analytics.tiktok.com analytics.tiktok.com *.liveperson.net *.lpsnmedia.net; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com players.brightcove.net edge.api.brightcove.com *.googleapis.com *.hsbc.ae *.omtrdc.net *.demdex.net *.hsbc.co.om *.brightcovecdn.com *.contentsquare.net bat.bing.com manifest.prod.boltdns.net adservice.google.com *.api.brightcove.com brightcove.hs.llnwd.net www.facebook.com maps.googleapis.com www.google.com www.googletagmanager.com *.siteintercept.qualtrics.com ad.doubleclick.net stats.g.doubleclick.net www.google-analytics.com t.co analytics.twitter.com analytics.google.com logx.optimizely.com www.google.co.uk hsbc.co.uk www.hsbc.co.uk *.lo.cobrowse.liveperson.net *.tt.omtrdc.net *.sc.omtrdc.net *.mcmprod.hsbc.co.uk rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk www.askus.hsbc.co.uk www.security.hsbc.co.uk translate.googleapis.com *.brightcove.com cdn-assets-prod.s3.amazonaws.com www.isstukdev.hsbc.co.uk www.mcmdev.hsbc.co.uk www.mcmperf.hsbc.co.uk www.isstukuat.hsbc.co.uk www.isstuk.hsbc.co.uk *.pinimg.com *.pinterest.com *.analytics.tiktok.com analytics.tiktok.com stream-dev.data.hsbc.com *.akamaihd.net px.ads.linkedin.com *.hsbc.co.uk *.qualtrics.com *.amazonaws.com *.we-stats.com *.hsbc.com wss://*.hsbc.com *.onfido.com *.appspot.com *.facebook.com tt.omtrdc.net *.liveperson.net *.google.com *.walkme.com pixel.everesttech.net *.contentsquare.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net code.jquery.com *.isstprod.hsbc.com.cn *.eu.v2.customers.biocatch.com analytics-ipv6.tiktokw.us www.googleadservices.com *.lpsnmedia.net wss://*.hsbc.co.uk wss://*.aws.cloud.hsbc; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com players.brightcove.net www.facebook.com connect.facebook.net www.youtube.com m.youtube.com *.demdex.net www.googletagmanager.com td.doubleclick.net *.ep-mimecast.facebook.com 8068700.fls.doubleclick.net gateway.zscalertwo.net google.com *.pinimg.com *.pinterest.com *.analytics.tiktok.com analytics.tiktok.com *.online-metrix.net *.hsbc.com.hk *.walkme.com liveperson.com *.qualtrics.com tags.tiqcdn.com *.hsbc.co.uk *.facebook.com *.recaptcha.net bid.g.doubleclick.net cdntm.hsbc.co.uk *.akamaihd.net *.ibosscloud.com m.hbeu.dxp1.preprod.eu.dynp.cloud1.vv1865.com; frame-ancestors 'self' www.hsbc.co.uk *.liveperson.net *.hsbc.co.uk; font-src 'self' data: *.hsbc.com.hk *.gstatic.com fonts.gstatic.com *.cloudfront.net at.alicdn.com cdn.jsdelivr.net *.avast.com *.alicdn.com fonts.googleapis.com *.hsbc.co.uk; worker-src 'self' blob: tags.tiqcdn.com; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com players.brightcove.net *.askus.hsbc.co.uk www.googletagmanager.com *.lo.cobrowse.liveperson.net *.liveperson.net *.optimizely.com *.walkme.com c-hsbc.lytics.io *.lpsnmedia.net *.hsbc.co.uk; object-src 'self' blob: players.brightcove.net; child-src 'self' *.demdex.net *.lpsnmedia.net *.liveperson.net *.google.com blob: tags.tiqcdn.com; media-src 'self' blob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com *.brightcovecdn.com lpcdn.lpsnmedia.net manifest.prod.boltdns.net ssl.gstatic.com brightcove.hs.llnwd.net *.lpsnmedia.net; manifest-src 'self' www.hsbc.co.uk; upgrade-insecure-requests ; report-uri /csp/report; 2 default-src 'self' *.materialdesignicons.com *.azurefd.net *.jsdelivr.net *.zoom.us *.doubleclick.net *.cloudfront.net *.googlesyndication.com *.opticsinfobase.org *.boltdns.net blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.osa.org *.3playmedia.com s3.amazonaws.com https://challenges.cloudflare.com/turnstile/ https://unpkg.com *.jsdelivr.net *.cvent.com cdn.mxpnl.com *.mixpanel.com *.zoom.us code.jquery.com *.doubleclick.net *.ampproject.org *.googleapis.com *.googlesyndication.com *.google-analytics.com www.googleadservices.com *.google.com www.googletagmanager.com www.googletagservices.com www.gstatic.com *.brightcove.net *.zencdn.net *.twimg.com *.ytimg.com www.youtube.com *.myfonts.net *.simpli.fi *.licdn.com *.knightlab.com https://kit.fontawesome.com *.stackadapt.com consent.studio *.adtrafficquality.google widgets.muster.com https://*.adp.com *.redditstatic.com connect.facebook.net *.perfdrive.com blob:; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; font-src 'self' data: *; connect-src 'self' cdn.opticsinfobase.org *.gstatic.com *.googleapis.com *.google-analytics.com *.google.com *.3playmedia.com *.cloudfront.net *.osa.org wss://*.osa.org http://www.frontiersinoptics.com www.frontiersinoptics.org www.cleoconference.org www.ofcconference.com api-js.mixpanel.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.googlesyndication.com *.akamaihd.net *.doubleclick.net https://unpkg.com https://*.zoom.us wss://*.zoom.us https://*.linkedin.com https://*.fontawesome.com *.algolia.net *.algolianet.com insights.algolia.io *.stackadapt.com *.optica.org *.adtrafficquality.google consent.studio https://*.adp.com *.jsdelivr.net *.facebook.com *.reddit.com *.redditstatic.com blob:; media-src 'self' *.osa.org *.talkjs.com *.zoom.us *.boltdns.net *.akamaihd.net *.brightcovecdn.com *.cf.brightcove.com blob:; object-src 'self' *.azurefd.net cdn.opticsinfobase.org cdn.materialdesignicons.com *.cloudfront.net *.googlesyndication.com *.blob.core.windows.net https://*.zoom.us; frame-src 'self' *.azurefd.net *.brightcove.net *.cloudfront.net *.blob.core.windows.net *.osa.org cdn.opticsinfobase.org *.frontiersinoptics.com *.google.com *.googlesyndication.com *.youtube.com https://challenges.cloudflare.com/ https://*.doubleclick.net www.googletagmanager.com *.adtrafficquality.google https://mstr.app; frame-ancestors 'self' *.osa.org *.optica.org *.frontiersinoptics.com 2 default-src 'self' https://static.eurostar.com https://www.eurostar.com; frame-ancestors 'self' https://cms.eurostar.com https://eurostar.moment.tech https://onboard.eurostar.com; child-src blob: 'self' https://*.doubleclick.net https://ams.creativecdn.com https://api.prod.eurostar.com https://checkoutshopper-test.adyen.com https://console-d2-eus-v3.conductrics.com https://d6tizftlrpuof.cloudfront.net https://insight.adsrvr.org https://match.adsrvr.org https://static.eurostar.com https://www.facebook.com https://www.google.com https://www.paypal.com https://www.paypalobjects.com https://www.youtube-nocookie.com https://www.youtube.com https://campaigns.lucky-cycle.com https://www.google.com https://recaptcha.google.com; connect-src 'self' https://*.awswaf.com https://*.contentsquare.net https://*.doubleclick.net https://*.eurostar.com https://*.launchdarkly.com https://1wyn2xo2.apicdn.sanity.io https://adservice.google.com https://analytics.google.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://api.musement.com https://api.privacy-center.org https://api.trafficguard.ai https://api.usabilla.com https://ams.creativecdn.com https://bat.bing.com https://bat.bing.net https://beacon.speedcurve.com https://cdn.speedcurve.com https://checkoutshopper-live.adyen.com https://cognito-idp.eu-west-1.amazonaws.com https://collect.commander1.com https://engage.commander1.com https://collect.tealiumiq.com https://collect-eu-west-1.tealiumiq.com https://eus-events.conductrics.com https://faro-collector-prod-eu-west-0.grafana.net https://fonts.googleapis.com https://ib.adnxs.com https://insight.adsrvr.org https://k-aeu1.contentsquare.net https://labs.observepoint.com https://lux.speedcurve.com https://maps.googleapis.com https://o1269418.ingest.sentry.io https://pagead2.googlesyndication.com https://r.contentsquare.net https://region1.analytics.google.com https://region1.google-analytics.com https://sdk.privacy-center.org https://stream.raptor.digital https://t.co https://tms-ingest-gateway-prod-4u5pdme3iq-ew.a.run.app https://www.bing.com https://www.facebook.com https://www.googleadservices.com https://www.google.be https://www.google.co.uk https://www.google.com https://www.google.de https://www.google.fr https://www.google.nl https://www.google-analytics.com https://www.paypal.com; font-src 'self' data: https://content.eurostar.com https://d6tizftlrpuof.cloudfront.net https://fonts.gstatic.com https://static.eurostar.com https://appdown.pstatic.net; img-src 'self' data: https://*.contentsquare.net https://*.doubleclick.net https://*.tealiumiq.com https://1wyn2xo2.apicdn.sanity.io https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://bat.bing.com https://bat.bing.net https://cdn.sanity.io https://cdn.speedcurve.com https://chatbot.eurostar.com https://checkoutshopper-live.adyen.com https://connect.facebook.net https://d6tizftlrpuof.cloudfront.net https://ib.adnxs.com https://images.ctfassets.net https://lux.speedcurve.com https://maps.googleapis.com https://maps.gstatic.com https://match.adsrvr.org https://images.musement.com https://manager.tagcommander.com https://packages-assets.eurostar.com https://packages.eurostar.com https://pixel.mediaiqdigital.com https://px.adnxs.com https://pxl.qccerttest.com https://region1.google-analytics.com https://s0.2mdn.net https://sdk.privacy-center.org https://seal.digicert.com https://secure.adnxs.com https://static.eurostar.com https://t.co https://t.paypal.com https://tag.yieldoptimizer.com https://w.usabilla.com https://www.facebook.com https://www.google.ae https://www.google.at https://www.google.be https://www.google.bg https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.uk https://www.google.co.za https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bh https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.eg https://www.google.com.hk https://www.google.com.kw https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.pe https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fi https://www.google.fr https://www.google.gg https://www.google.gr https://www.google.hu https://www.google.ie https://www.google.im https://www.google.is https://www.google.it https://www.google.je https://www.google.jo https://www.google.lt https://www.google.lu https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.se https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://statics.lucky-cycle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.awswaf.com https://*.doubleclick.net https://*.eurostar.com https://*.launchdarkly.com https://*.usabilla.com https://acdn.adnxs.com https://analytics.twitter.com https://api.commander1.com https://apply.workable.com https://bat.bing.com https://connect.facebook.net https://console-d2-eus-v3.conductrics.com https://chatbot.eurostar.com https://eus.cdn-v3.conductrics.com https://js.time1.me https://labs.observepoint.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://region1.google-analytics.com https://s.yimg.com https://sdk.privacy-center.org https://snap.licdn.com https://static.ads-twitter.com https://tag.yieldoptimizer.com https://tags.tiqcdn.com https://visitor-service.tealiumiq.com https://visitor-service-eu-west-1.tealiumiq.com https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googletagservices.com https://www.paypal.com https://statics.lucky-cycle.com; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.awswaf.com https://*.tealiumiq.com https://acdn.adnxs.com https://ad.doubleclick.net https://adservice.google.be https://adservice.google.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://analytics.twitter.com https://api.usabilla.com https://api.commander1.com https://app.contentsquare.com https://apply.workable.com https://bat.bing.com https://cdn.speedcurve.com https://cdn.tagcommander.com https://platform.commandersact.com https://api.commander1.com https://connect.facebook.net https://console-d2-eus-v3.conductrics.com https://chatbot.eurostar.com https://d2rhnzwg8g191b.cloudfront.net https://d6tizftlrpuof.cloudfront.net https://eus.cdn-v3.conductrics.com https://googleads.g.doubleclick.net https://hosted-scripts.eurostar.com https://js.adsrvr.org https://maps.googleapis.com https://pagead2.googlesyndication.com https://region1.google-analytics.com https://scripts.eurostar.com https://sdk.privacy-center.org https://secure-scripts.eurostar.com https://static.ads-twitter.com https://static.eurostar.com https://statics.lucky-cycle.com https://stream.raptor.digital https://tags.creativecdn.com https://tags.tiqcdn.com https://tgtag.io https://w.usabilla.com https://widget.usabilla.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googletagservices.com https://www.google.com https://www.workable.com https://www.gstatic.com; style-src 'unsafe-inline' 'self' https://*.awswaf.com https://d6tizftlrpuof.cloudfront.net https://fonts.googleapis.com https://www.gstatic.com; style-src-attr 'unsafe-inline'; style-src-elem 'unsafe-inline' 'self' https://*.awswaf.com https://d6tizftlrpuof.cloudfront.net https://fonts.googleapis.com https://www.gstatic.com; worker-src blob:; report-uri https://o1269418.ingest.sentry.io/api/4504559978545152/security/?sentry_key=c1b8b0d601d4479ca2508495c83b4e29&sentry_environment=www-prod 2 frame-ancestors 'self' localhost *.teamwork.com *.teamworkpm.net *.helpdocsite.com teams.microsoft.com *.teams.microsoft.com *.skype.com teamworkintegrations.ngrok.io *.us.teamworkops.com teams.cloud.microsoft outlook.cloud.microsoft m365.cloud.microsoft app.hubspot.com app-eu1.hubspot.com *.canva.com; 2 report-uri /report-csp;report-to /report-csp;base-uri 'self';child-src number26://* *.n26.com n26.com *.doubleclick.net pixel.mathtag.com n26.go2cloud.org www.googletagmanager.com *.youtube-nocookie.com youtube-nocookie.com;connect-src 'self' https://spc.n26.com * https://*.logs.datadoghq.eu;font-src 'self' data:;img-src https://spc.n26.com 'self' data: images.ctfassets.net images.contentful.com * *.greenhouse.io;media-src videos.contentful.com videos.ctfassets.net n26.bynder.com;object-src 'none';style-src 'unsafe-inline' 'self' tagmanager.google.com;script-src 'self' cdn.number26.de 'unsafe-inline' * connect.facebook.net *.youtube-nocookie.com s.ytimg.com youtube-nocookie.com youtube.com boards.greenhouse.io datadoghq.eu datadoghq-browser-agent.com cdn.cookielaw.org;worker-src 'self';default-src *;frame-ancestors app.contentful.com 'self' *.n26.com;frame-src *.n26.com www.googletagmanager.com *.doubleclick.net www.youtube-nocookie.com boards.greenhouse.io job-boards.greenhouse.io 2 default-src data: 'unsafe-inline' 'unsafe-eval' https:; style-src data: https: 'unsafe-inline'; 2 frame-ancestors 'self' https://mychart-np.et1288.epichosted.com https://internal.my.lablue.com https://mychart-np.et1288.epichosted.com https://my.lablue.com; 2 default-src *;frame-ancestors 'self' eiv.baidu.com *.vip.vip.com *.vip.com;script-src *.vip.com *.vipstatic.com *.mediav.com *.gdt.qq.com *.emarbox.com *.mjoys.com *.sogou.com cm.e.qq.com *.baidu.com *.ipinyou.com *.admaster.com.cn *.miaozhen.com *.youku.com *.tanx.com *.doubleclick.net *.vpimg1.com *.vpimg2.com *.vpimg3.com *.vpimg4.com *.gtimg.cn 'unsafe-eval' 'unsafe-inline';style-src *.vip.com *.vipstatic.com 'unsafe-inline';img-src * data:; report-uri //stat.vipstatic.com/pcfront/antiskyjack; 2 default-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com wlresults.westlotto.com www.youtube.com error.westlotto.de www.paypal.com www.paypalobjects.com data: blob: localhost: ; script-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com jjbupmbwsn.kameleoon.io static.kameleoon.com graphical-editor.kameleoon.com simulation.kameleoon.com client-config.kameleoon.com sdk-config.kameleoon.eu electra.kameleoon.com aibuilder.kameleoon.com static.experimentation.dev westlotto.loyjoy.com app-westlotto.loyjoy.com app-cloud.loyjoy.com cloud.loyjoy.com stable.loyjoy.com app-stable.loyjoy.com visitor-service-eu-central-1.tealiumiq.com visitor-service.tealiumiq.com collect-eu-central-1.tealiumiq.com the.sciencebehindecommerce.com datacloud.tealiumiq.com personalization-api.eu-central-1.prod.tealiumapis.com app.usercentrics.eu privacy-proxy.usercentrics.eu t.nunami.ai p.nunami.ai tags.tiqcdn.com www.awin1.com www.dwin1.com www.googletagmanager.com googleads.g.doubleclick.net bat.bing.com js.adsrvr.org acdn.adnxs.com scripts.psyma.com www.redditstatic.com 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com jjbupmbwsn.kameleoon.io static.kameleoon.com graphical-editor.kameleoon.com simulation.kameleoon.com client-config.kameleoon.com sdk-config.kameleoon.eu electra.kameleoon.com aibuilder.kameleoon.com static.experimentation.dev westlotto.loyjoy.com app-westlotto.loyjoy.com app-cloud.loyjoy.com cloud.loyjoy.com stable.loyjoy.com app-stable.loyjoy.com visitor-service-eu-central-1.tealiumiq.com visitor-service.tealiumiq.com collect-eu-central-1.tealiumiq.com the.sciencebehindecommerce.com datacloud.tealiumiq.com personalization-api.eu-central-1.prod.tealiumapis.com app.usercentrics.eu privacy-proxy.usercentrics.eu t.nunami.ai p.nunami.ai tags.tiqcdn.com www.awin1.com www.dwin1.com www.googletagmanager.com maps.googleapis.com www.gstatic.com googleads.g.doubleclick.net bat.bing.com js.braintreegateway.com js.adsrvr.org acdn.adnxs.com connect.facebook.net www.paypal.com www.paypalobjects.com c.paypal.com scripts.psyma.com www.redditstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com static.kameleoon.com static.products.kameleoon.com graphical-editor.kameleoon.com simulation.kameleoon.com electra.kameleoon.com aibuilder.kameleoon.com static.experimentation.dev 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com static.kameleoon.com static.products.kameleoon.com graphical-editor.kameleoon.com simulation.kameleoon.com electra.kameleoon.com aibuilder.kameleoon.com static.experimentation.dev fonts.googleapis.com www.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src-attr 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com 'unsafe-inline'; connect-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com jjbupmbwsn.kameleoon.io static.kameleoon.com eu-data.kameleoon.io eu-data.kameleoon.eu na-data.kameleoon.io na-data.kameleoon.eu editor.kameleoon.com graphical-editor.kameleoon.com simulation.kameleoon.com api.kameleoon.com customers.kameleoon.com logger.kameleoon.io client-config.kameleoon.com sdk-config.kameleoon.eu api.products.kameleoon.com static.experimentation.dev sdk-config.experimentation.dev eu-data.experimentation.dev westlotto.loyjoy.com app-westlotto.loyjoy.com app-cloud.loyjoy.com cloud.loyjoy.com stable.loyjoy.com app-stable.loyjoy.com app.usercentrics.eu privacy-proxy.usercentrics.eu api.usercentrics.eu aggregator.service.usercentrics.eu consent-api.service.consent.usercentrics.eu graphql.usercentrics.eu t.nunami.ai p.nunami.ai www.facebook.com demo-1.conversionsapigateway.com www.google.com www.googleadservices.com places.googleapis.com www.googletagmanager.com region1.google-analytics.com maps.googleapis.com www.googleadservices.com www.googletagmanager.com translate.googleapis.com googleads.g.doubleclick.net mpc2-prod-25-is5qnl632q-wl.a.run.app mpc-prod-17-s6uit34pua-wl.a.run.app personalization-api.eu-central-1.prod.tealiumapis.com collect-eu-central-1.tealiumiq.com ib.adnxs.com adnx.de bat.bing.com match.adsrvr.org insight.adsrvr.org eu-api.friendlycaptcha.eu api.friendlycaptcha.com api.braintreegateway.com client-analytics.braintreegateway.com payments.braintree-api.com www.wepowerconnections.com the.sciencebehindecommerce.com www.paypal.com pixel-config.reddit.com data: ; font-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com www.eurojackpot.de eurojackpot.de www.eurojackpot.com eurojackpot.com fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com cdn-eu.dynamicyield.com aggregator.service.usercentrics.eu data: ; img-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com jjbupmbwsn.kameleoon.io storage.kameleoon.eu storage.kameleoon.io graphical-editor.kameleoon.com simulation.kameleoon.com static.kameleoon.com images.products.kameleoon.com static.experimentation.dev westlotto.loyjoy.com app-westlotto.loyjoy.com app-cloud.loyjoy.com cloud.loyjoy.com stable.loyjoy.com app-stable.loyjoy.com app.usercentrics.eu uct.service.usercentrics.eu privacy-proxy-server.usercentrics.eu data.westlotto.de bat.bing.com ib.adnxs.com www.awin1.com fbc.wcfbc.net www.facebook.com connect.facebook.net c.paypal.com c6.paypal.com b.stats.paypal.com match.adsrvr.org scripts.psyma.com datacloud.tealiumiq.com press-order-api.sovendus.com match.adsrvr.org alb.reddit.com www.googletagmanager.com translate.google.com fonts.gstatic.com maps.gstatic.com streetviewpixels-pa.googleapis.com maps.googleapis.com googleads.g.doubleclick.net www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.cr www.google.co.in www.google.co.kr www.google.com www.google.co.ma www.google.com.br www.google.com.cy www.google.com.do www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.mx www.google.com.ph www.google.com.sg www.google.com.tr www.google.com.ua www.google.co.th www.google.co.uk www.google.co.ve www.google.co.za www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.lk www.google.lu www.google.lv www.google.me www.google.mk www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.cv www.google.mu www.google.co.ke www.google.co.id www.google.co.jp www.google.dz www.google.hn www.google.com.cu www.google.co.nz www.google.com.au www.google.lt www.google.bt www.google.co.tz www.google.com.tw www.google.co.uz www.google.tn www.google.co.il www.google.im www.google.com.pe www.google.com.qa www.google.ad www.google.am www.google.az www.google.by www.google.cl www.google.com.co www.google.com.hk www.google.mv data: blob: ; child-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com www.youtube.com www.sparkassen-internetkasse.de blob: ; frame-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com graphical-editor.kameleoon.com static.experimentation.dev news.westlotto.de app.usercentrics.eu www.awin1.com insight.adsrvr.org match.adsrvr.org www.googletagmanager.com www.facebook.com www.youtube-nocookie.com www.youtube.com c.paypal.com www.paypal.com scripts.psyma.com spielstudio.podigee.io data: ; object-src 'self'; worker-src 'self' www.westlotto.de westlotto.de www.westlotto.com westlotto.com ergebnisse.westlotto.com blob: ; block-all-mixed-content; base-uri 'self'; report-uri https://1934a11189c9ec9d302de0ee10e4c650.report-uri.com/r/t/csp/enforce; report-to cspenforcing 2 default-src 'none';script-src 'self' 'unsafe-inline' https://apps.usw2.pure.cloud/messenger/messenger.min.js https://api-cdn.usw2.pure.cloud/ https://api64.ipify.org/ https://apps.usw2.pure.cloud/ https://static.registration.bluehost.com/ https://js.stripe.com https://ct.pinterest.com https://api.livechatinc.com https://formstack.com https://pi.pardot.com https://info.anchor.com.au https://widget.trustpilot.com https://www.googletagmanager.com https://connect.facebook.net https://platform.twitter.com https://www.google-analytics.com https://www.googleadservices.com https://s.adroll.com https://static.ads-twitter.com https://s.pinimg.com https://s.yimg.com https://static.getclicky.com https://sys.greechat.com https://analytics.formstack.com https://d.adroll.mgr.consensu.org https://cdn.livechatinc.com https://sp.analytics.yahoo.com https://googleads.g.doubleclick.net https://analytics.twitter.com https://secure.livechatinc.com https://d.adroll.com https://digitalpacificgroup.formstack.com https://static.formstack.com https://hostopia.bamboohr.com https://f.vimeocdn.com https://in.getclicky.com; img-src 'self' https://sp.analytics.yahoo.com https://analytics.twitter.com https://www.google.co.in https://pixel.prfct.co https://image2.pubmatic.com https://cm.g.doubleclick.net https://x.adroll.com https://mlvgk8mdrlmi.i.optimole.com https://secure.gravatar.com https://t.co https://www.google-analytics.com https://ct.pinterest.com https://www.facebook.com https://syndication.twitter.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.au https://d.adroll.com https://pixel.advertising.com https://dsum-sec.casalemedia.com https://pixel.rubiconproject.com https://sync.outbrain.com https://simage2.pubmatic.com https://ads.yahoo.com https://eb2.3lift.com https://x.bidswitch.net https://sync.taboola.com https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://match.adsrvr.org https://rc.rlcdn.com https://csyn-r.cxense.com https://seg.sharethis.com https://resources.bamboohr.com https://crucialau.activehosted.com data: 'unsafe-inline';style-src 'self' 'unsafe-inline' https://static.formstack.com https://hostopia.bamboohr.com;font-src 'self' https://static.formstack.com https://themes.googleusercontent.com data: 'unsafe-inline'; frame-src 'self' https://apps.usw2.pure.cloud/ https://js.stripe.com https://ct.pinterest.com https://x.adroll.com https://td.doubleclick.net https://widget.trustpilot.com https://platform.twitter.com https://www.facebook.com https://secure.livechatinc.com https://player.vimeo.com https://www.youtube.com; connect-src 'self' https://api.usw2.pure.cloud/ wss://webmessaging.usw2.pure.cloud/ https://api64.ipify.org/ https://api-cdn.usw2.pure.cloud/ https://d.adroll.com https://analytics.google.com https://digitalpacificgroup.formstack.com https://www.google-analytics.com https://s.yimg.com https://ct.pinterest.com https://hostopia.bamboohr.com; media-src https://cdn.livechatinc.com; 2 default-src 'self'; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com/gtag/js *.googletagmanager.com translate.google.com cse.google.com cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com s3.amazonaws.com alt.khronos.org github.khronos.org cdn.mathjax.org www.recaptcha.net *.disqus.com *.disquscdn.com *.bootstrapcdn.com img.shields.io www.youtube.com; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.gstatic.com fonts.googleapis.com *.bootstrapcdn.com *.cloudflare.com use.fontawesome.com cdn-images.mailchimp.com platform.twitter.com *.disquscdn.com; img-src 'self' data: blob: *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.ytimg.com avatars.githubusercontent.com github.com cdn.khronos.org img.shields.io ping.eeharbor.com wikimedia.org *.disqus.com *.disquscdn.com; font-src 'self' data: fonts.gstatic.com use.fontawesome.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com; connect-src 'self' blob: *.google.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net cdnjs.cloudflare.com *.gstatic.com updates.expressionengine.com cdn.khronos.org alt.khronos.org api.github.com; frame-src 'self' *.google.com *.googletagmanager.com *.translate.google.com github.khronos.org registry.khronos.org td.doubleclick.net cx20.github.io cdn.knightlab.com www.youtube.com www.youtube-nocookie.com tamrat-b.github.io sketchfab.com disqus.com www.recaptcha.net video.wixstatic.com; media-src 'self' blob: data:; object-src data: sandbox.babylonjs.com cx20.github.io tamrat-b.github.io; child-src 'self' www.youtube.com; worker-src 'self' blob:; form-action 'self' www.paypal.com cdn.khronos.org; frame-ancestors 'self' *.translate.google.com; base-uri 'self'; 2 upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self' https://google.com https://www.google.com https://go.resilio.com https://resilio-landing-pages-staging.webflow.io; default-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://www.resilio.com/7c717382-8929-4624-baed-bd65d375a957 https://www.resilio.com/13561258-0419-46d6-a740-82d2e86e86f3 http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https: blob:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' https: data:; media-src 'self' blob: https://player.vimeo.com https://*.vimeocdn.com; frame-src 'self' https:; connect-src 'self' https://embed-cloudfront.wistia.com https://fast.wistia.net https://fast.wistia.com https://distillery.wistia.com https://pipedream.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://browser.sentry-cdn.com https://forms.hsforms.com https://forms.hscollectedforms.net https://static.hsappstatic.net https://api.hubapi.com https://hubspot-forms-static-embed.s3.amazonaws.com https://api.hsforms.com https://*.leandata.com https://api.vector.co https://api.cr-relay.com https://cdn.cr-relay.com https://pro.ip-api.com https://cdn.sitesearch360.com https://global.sitesearch360.com https://insights.sitesearch360.com https://a.omappapi.com https://z.omappapi.com https://api.omappapi.com https://bat.bing.net https://bat.bing.com https://metrics.hotjar.io https://content.hotjar.io https://vc.hotjar.io wss://ws.hotjar.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://google.com https://www.google.pl https://googleads.g.doubleclick.net https://order.resilio.com https://orders.resilio.com https://tracking.g2crowd.com https://tracking-api.g2.com https://tracking-api.production.g2.com https://api.factors.ai https://www.redditstatic.com https://pixel-config.reddit.com https://conversions-config.reddit.com https://px.ads.linkedin.com https://api.identitymatrix.ai https://aplo-evnt.com https://js.zi-scripts.com https://ws.zoominfo.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io; form-action 'self' https://forms.hsforms.com https://api.hsforms.com https://webto.salesforce.com 2 frame-ancestors 'self' https://www.lexware.de 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.google.co.in https://*.gstatic.com https://storage.googleapis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.wistia.com https://fast.wistia.com https://fast.wistia.net https://cdn.userway.org https://s.swiftypecdn.com https://browser.sentry-cdn.com https://*.abtasty.com https://*.omappapi.com https://static.addtoany.com https://www.redditstatic.com https://*.clarity.ms https://tracking-api.g2.com https://*.hotjar.com https://*.6sc.co https://bat.bing.com https://snap.licdn.com https://connect.facebook.net https://*.salesforce-sites.com https://lp.relias.com https://*.go-mpulse.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.userway.org https://*.googletagmanager.com https://*.swiftypecdn.com https://*.salesforce-sites.com https://*.omappapi.com https://cdnjs.cloudflare.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com https://*.salesforce-sites.com https://cdn.userway.org; connect-src 'self' https://*.google.com https://*.google.co.in https://*.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.cookiebot.com https://*.wistia.com https://fast.wistia.com https://fast.wistia.net https://pipedream.wistia.com https://cdn.userway.org https://api.userway.org https://*.swiftypecdn.com https://*.swiftype.com https://browser.sentry-cdn.com https://*.abtasty.com https://*.omappapi.com https://static.addtoany.com https://www.redditstatic.com https://pixel-config.reddit.com https://*.clarity.ms https://tracking-api.g2.com https://*.hotjar.com https://*.hotjar.io wss://ws.hotjar.com https://*.6sc.co https://*.6sense.com https://secure.adnxs.com https://bat.bing.com https://px.ads.linkedin.com https://snap.licdn.com https://connect.facebook.net https://www.facebook.com https://lp.relias.com https://*.youtube.com https://*.salesforce-sites.com https://*.instagram.com https://*.akstat.io https://*.go-mpulse.net; frame-src 'self' https://*.wistia.com https://fast.wistia.com https://fast.wistia.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.googletagmanager.com https://td.doubleclick.net https://cdn.userway.org https://lp.relias.com https://static.addtoany.com https://preview.relias.com https://*.instagram.com https://*.salesforce-sites.com https://www.youtube.com https://*.youtube.com; media-src 'self' https://*.wistia.com https://fast.wistia.com https://fast.wistia.net https://*.salesforce-sites.com blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.relias.com https://*.relias.com; frame-ancestors 'self'; 2 default-src 'self'; object-src 'none'; style-src 'self' 'unsafe-inline' https://*.xsolla.com https://*.xsolla.net; style-src-elem 'self' 'unsafe-inline'; script-src 'self' www.googletagmanager.com https://*.xsolla.com https://*.xsolla.net https://js.stripe.com; connect-src 'self' https://api.gx.games https://stats.opr.gg https://sentry-relay.opera-api.com https://s3.eu-north-1.amazonaws.com/prod.cloudsaves/ https://play.gxc.gg https://play.gx.games https://bonus.gx.games https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.xsolla.com https://*.xsolla.net https://api.stripe.com; img-src 'self' data: blob: https://play.gxc.gg https://play.gx.games https://bonus.gx.games www.googletagmanager.com https://*.google-analytics.com https://*.googletagmanager.com https://*.xsolla.com https://*.xsolla.net; media-src https://play.gxc.gg https://play.gx.games https://bonus.gx.games; font-src 'self'; base-uri 'self'; manifest-src 'self'; frame-src https://play.gxc.gg https://play.gx.games https://bonus.gx.games https://*.xsolla.com https://*.xsolla.net https://js.stripe.com https://hooks.stripe.com 2 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; 2 frame-ancestors https://*.zscalertwo.net 'self' *.gehealthcare.com *.gehealthcare.com https://virtualevents.6connex.com https://ecr2020admin.expo-ip.com https://ecr2020.expo-ip.com/ https://overcome.6connex.eu https://gehealthcare.6connex.eu/ https://gehealthcare-oncology.com http://ge-eanm-sympo.com https://www.genworkshealth.com https://lives2020.e-lives.org https://www.virtualexpo.rf.gd https://ecr2021.expo-ip.com https://trn.aaml.com.sa ;object-src 'none'; 2 default-src 'self' https://*.wistia.com https://*.wistia.net https://*.qualified.com https://*.qualified-preview.com https://vercel.com https://vercel.live https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: https:; connect-src 'self' https://*.litix.io https://*.wistia.com https://*.wistia.net https://*.algolia.net https://ws.zoominfo.com https://*.hsforms.net https://js.hsforms.net http://js.hsforms.net https://*.qualified.com https://*.qualified-preview.com wss://*.qualified.com wss://*.qualified-preview.com https://vercel.live wss://ws-us3.pusher.com https://*.linkedin.com https://*.google.com https://*.doubleclick.net https://*.ads-twitter.com https://*.twitter.com https://t.co https://*.rlcdn.com https://*.company-target.com https: wss:; img-src 'self' data: blob: https:; font-src 'self' data: https://*.wistia.com https://vercel.live https://assets.vercel.com https:; frame-src 'self' https://fast.wistia.com https://fast.wistia.net https://*.hsforms.net https://js.hsforms.net http://js.hsforms.net https://*.qualified.com https://*.qualified-preview.com https://vercel.live https://vercel.com https:; child-src https://*.qualified.com https://*.qualified-preview.com; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net mediastream: https://*.qualified.com https://*.qualified-preview.com; script-src 'self' https://*.wistia.com https://*.wistia.net https://src.litix.io https://js.zi-scripts.com https://jws-assets.zoominfo.com https://*.qualified.com https://*.qualified-preview.com https://go.ripple.com https://vercel.live https://vercel.com https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' blob: https://fast.wistia.com https://*.qualified.com https://*.qualified-preview.com https://vercel.live https://vercel.com https:; object-src 'none'; frame-ancestors https://*.qualified.com https://*.qualified-preview.com https://studio.ripple.com https://studio.ripple.com https://ripplecom-nextjs-git-edge-ripple-com.vercel.app https://*.vercel.app https://tagassistant.google.com 2 default-src 'self' blob: *.fineco.it *.finecobank.com finecobank.com *.promotorifinecobank.it www.youtube.com responder.wt-safetag.com www.google-analytics.com www.googletagmanager.com connect.facebook.net bat.bing.com js.omg.neodatagroup.com trz.neodatagroup.com www.google.com g.microsoft.com s2.adform.net googLeads.g.doubLeclick.net static.opentok.com cdn.cookielaw.org cdn.evgnet.com beacon.krxd.net *.evergage.com widget.trustpilot.com local.finecobank.com:3000 local.finecobank.com:4000 ajax.googleapis.com js-agent.newrelic.com bam.nr-data.net fonts.googleapis.com fonts.gstatic.com maps.google.com maps.googleapis.com tag.upflowadv.com ethn.io *.clarity.ms c.bing.com utt.impactcdn.com finecobank.sjv.io data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors finecobank.com *.finecobank.com *.fineco.it *.promotorifinecobank.it https://app.contentful.com; frame-src blob: finecobank.com *.finecobank.com *.fineco.it *.promotorifinecobank.it https://www.googletagmanager.com *.fls.doubleclick.net www.youtube.com *.mateti.net widget.trustpilot.com finecobank.sjv.io https://td.doubleclick.net https://widget.spreaker.com; img-src 'self' data: blob: *.fineco.it https://finecobank.com https://*.finecobank.com http://localhost:9095 https://www.googletagmanager.com https://jslog.krxd.net https://analytics.google.com https://t.mateti.net https://lt.morningstar.com https://www.morningstar.it https://secure.morningstareurope.com https://t.co https://www.linkedin.com https://px.ads.linkedin.com https://beacon.krxd.net https://d.omg.neodatagroup.com https://www.youronlinechoices.com https://uip.semasio.net https://server.seadform.net https://aax-eu.amazon-adsystem.com https://tracker.neodatagroup.com https://www.google-analytics.com https://*.twimg.com https://finecoitalia01.wt-eu02.net https://bat.bing.com https://www.facebook.com *.clarity.ms c.bing.com https://cm.g.doubLeclick.net https://match.adsrvr.org https://dmp.adform.net https://secure.adnxs.com https://b1sync.zemanta.com https://cms.anaLytics.yahoo.com https://trz.neodatagroup.com https://www.googLe.com https://www.googLe.it https://*.fls.doubleclick.net https://cdn.evergage.com https://cdn.cookielaw.org https://*.analytics.google.com https://ad.360yield.com https://ad.sxp.smartclip.net https://ad.yieldlab.net https://cm.adform.net https://contextual.media.net https://criteo-sync.teads.tv https://eb2.3lift.com https://exchange.mediavine.com https://ib.adnxs.com https://id5-sync.com https://ih.adscale.de https://i.liadm.com https://match.sharethrough.com https://pixel.rubiconproject.com https://r.casalemedia.com https://rtb-csync.smartadserver.com https://simage2.pubmatic.com https://sync-criteo.ads.yieldmo.com https://sync.outbrain.com https://sync-t1.taboola.com https://ups.analytics.yahoo.com https://visitor.omnitagjs.com https://x.bidswitch.net https://criteo-partners.tremorhub.com https://s.thebrighttag.com https://dis.criteo.com https://dpm.demdex.net https://cotads.adscale.de https://dis.criteo.com https://i6.liadm.com https://idsync.rlcdn.com https://*.ytimg.com https://*.googlesyndication.com https://maps.google.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.gstatic.com https://ad.doubleclick.net https://*.awin1.com https://*.dwin1.com https://*.financeads.net https://leadkongltd.go2cloud.org https://tradedoubler.com https://tbl.tradedoubler.com https://trackads.eu https://upflowadv.com https://vf.r3f.technology https://adservice.google.com; connect-src wss://*.finecobank.com https://finecobank.it https://*.fineco.it https://*.finecobank.com https://finecobank.com https://privacyportal-de.onetrust.com https://www.google.it https://www.google.com https://googleads.g.doubleclick.net https://beacon.krxd.net https://jslog.krxd.net https://ad.doubleclick.net https://aax-eu.amazon-adsystem.com https://c.amazon-adsystem.com https://s.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://*.evergage.com https://bat.bing.com https://analytics.google.com https://stats.g.doubleclick.net https://in.hotjar.com https://vc.hotjar.io https://r.mateti.net wss://*.tokbox.com https://www.google-analytics.com https://*.tokbox.com https://config.opentok.com https://anvil.opentok.com https://cdn.cookielaw.org https://www.googletagmanager.com https://widget.trustpilot.com https://*.analytics.google.com https://*.google-analytics.com https://*.googlesyndication.com https://geolocation.onetrust.com https://bam.nr-data.net https://maps.googleapis.com *.clarity.ms c.bing.com https://finecobank.sjv.io https://www.facebook.com 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' *.fineco.it *.finecobank.com finecobank.com local.finecobank.com:3000 local.finecobank.com:4000 geolocation.onetrust.com responder.wt-safetag.com static.opentok.com www.google-analytics.com s2.adform.net trz.neodatagroup.com d.omg.neodatagroup.com js.omg.neodatagroup.com www.googleadservices.com www.googletagmanager.com bat.bing.com https://widget.spreaker.com connect.facebook.net googleads.g.doubleclick.net cdn.mateti.net static.hotjar.com static.ads-twitter.com snap.licdn.com ethn.io script.hotjar.com analytics.twitter.com www.youtube.com widget.trustpilot.com cdn.cookielaw.org cdn.evgnet.com consumer.krxd.net beacon.krxd.net ajax.googleapis.com js-agent.newrelic.com bam.nr-data.net maps.google.com maps.googleapis.com tag.upflowadv.com utt.impactcdn.com *.clarity.ms c.bing.com amazon-adsystem.com *.amazon-adsystem.com 'unsafe-eval' 'unsafe-inline' https://cdn.evergage.com; base-uri none; form-action 'self' blob: *.finecobank.com *.namirialtsp.com; object-src blob: finecobank.com *.finecobank.com *.fineco.it *.promotorifinecobank.it *.fls.doubleclick.net www.youtube.com *.mateti.net widget.trustpilot.com finecobank.sjv.io; report-uri https://www.fineco.it/_csp-report 2 frame-ancestors same *.grupocpfl.com.br *.cpfl.com.br *.rge-rs.com.br grupocpfl.com.br cpfl.com.br rge-rs.com.br *.lndo.site *.web.ahdev.cloud; report-uri /report-csp-violation 2 default-src 'self' exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com tracking-api.g2.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io v2.crocdn.com *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com opps-widget.getwarmly.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com *.vibe.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com tracking-api.g2.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io v2.crocdn.com *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com opps-widget.getwarmly.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com *.vibe.co t.contentsquare.net app.contentsquare.com; img-src 'self' data: blob: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com tracking-api.g2.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io v2.crocdn.com *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com opps-widget.getwarmly.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com *.vibe.co *.contentsquare.net *.bidswitch.net *.eyeota.net *.casalemedia.com *.outbrain.com *.taboola.com ml314.com *.demdex.net; connect-src 'self' https://www.gstatic.com/ blob: data: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com tracking-api.g2.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io v2.crocdn.com *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com opps-widget.getwarmly.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com *.vibe.co *.contentsquare.net *.litix.io; style-src 'self' 'unsafe-inline' data: blob: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com tracking-api.g2.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io v2.crocdn.com *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com opps-widget.getwarmly.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com *.vibe.co; font-src 'self' a.storyblok.com maxcdn.bootstrapcdn.com fast.wistia.com fonts.gstatic.com data:; object-src 'none'; frame-ancestors 'self' localhost:3000 localhost:3010 *.storyblok.com *.netlify.app *.greenhouse.io *.g2crowd.com *.mutinycdn.com *.mutinyhq.io *.capterra.com *.chilipiper.com; 2 default-src 'self'; connect-src 'self' https://ad.doubleclick.net https://assets1-eur.mkt.dynamics.com https://consentcdn.cookiebot.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://maastrichtuniversity.blueconic.net https://public-eur.mkt.dynamics.com https://px.ads.linkedin.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com; font-src 'self' data:; frame-src 'self' https://consentcdn.cookiebot.com; img-src 'self' data: https://d6tizftlrpuof.cloudfront.net https://imgsct.cookiebot.com https://px.ads.linkedin.com https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.nl; media-src 'self'; object-src 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' https://apps.ssc.maastrichtuniversity.nl https://cdn.blueconic.net https://connect.facebook.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://googleads.g.doubleclick.net https://maastrichtuniversity.blueconic.net https://plugins.blueconic.net https://scripts.clarity.ms https://snap.licdn.com https://static.hotjar.com https://w.usabilla.com https://www.clarity.ms https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' 2 frame-ancestors 'self' https://*.zaobao.com.sg https://*.zaobao.com; 2 frame-ancestors https://*.kennesaw.edu; 2 default-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' getcody.ai trinketsofcody.com *.useresponse.com *.adsecurity.com *.qbigads.com *.mitgame.com *.mobmio.com *.univibes.ru *.admitad-connect.com *.bing.com *.clarity.ms *.ttwstatic.com *.w.org *.tapfiliate.com *.convertsocial.net *.qbigtech.com *.admitad.ru *.stage.monetize *.tinkoff.ru *.smartredirect.de mtusgate.de linkitten.com mtusimg.de convertlink.com pmf.tech *.pmf.tech fairsavings.com *.fairsavings.com *.admitad.com *.admit.ad *.admitad.academy mitgo.com *.mitgo.com takeads.com *.takeads.com univibes.org *.univibes.org *.ads-twitter.com *.trustpilot.com *.zopim.io *.zopim.com *.smooch.io *.zdassets.com *.zendesk.com *.consentmanager.net *.mindbox.cloud *.popmechanic.ru *.gravatar.com *.facebook.net *.facebook.com *.fb.com *.consensu.org *.amazonaws.com *.twitter.com *.instagram.com *.tiktok.com *.webvisor.org *.quizyworld.tech *.linkedin.com *.ampproject.org yastatic.net *.yandex.com *.yandex.net *.yandex.ru *.ya.ru *.mail.ru vk.com *.scriptcdn.net *.typekit.net *.google.net *.google.io *.google.eu *.google.su *.gooogle.com *.gogle.com *.com.google *.google.be *.google.by *.google.ca *.google.cn *.g.cn *.google.dk *.google.ee *.google.fi *.google.gg *.google.gr *.google.hr *.google.hu *.google.is *.google.it *.google.co.jp *.google.kz *.google.lv *.google.md *.google.com.mx *.google.nl *.google.pl *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.com.ua *.google.ua *.google.us *.google.co.uz *.google.de *.google.cz *.google.at *.google.ae *.google.com.co *.google.com.do *.google.jo *.google.gl *.google.sc *.google.co.ve *.google.com.uv *.google.co.ao *.google.co.in *.google.bg *.google.com *.googleapis.com *.translate.goog *.gstatic.com *.google.co.uk *.google.com.tr *.google.fr *.google.es *.google.com.eg *.google.com.cy *.google.ge *.google.co.id *.googleusercontent.com *.googletagmanager.com *.google-analytics.com *.adwords.com *.adwords.ru *.adsense.com *.adsense.ru *.feedburner.com *.doubleclick.com *.doubleclick.net *.igoogle.com *.youtu.be *.youtube.com *.youtube.ru *.blogger.com *.chromium.com *.setka.io *.google.com.gh ymetrica1.com *.google.com.pk *.google.com.br *.google.co.th *.google.com.vn *.google.lt; 2 frame-ancestors 'self' https://statshub.sportradar.com 2 upgrade-insecure-requests; default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob:; font-src * data:; connect-src *; media-src *; object-src 'none'; frame-src 'self' https://*.hsforms.net https://*.hsforms.com https://www.youtube.com https://snazzymaps.com https://consentcdn.cookiebot.com; frame-ancestors 'self'; 2 frame-ancestors 'self' *.anthem.com; 2 frame-ancestors 'self' https://riseai1.wpenginepowered.com; 2 object-src 'self'; base-uri 'self'; frame-ancestors 'self' *.benq.com *.benq.eu *.benq.com.cn *.qisda.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com http://www.jadlog.com.br https://pod-27-sunco-ws.zendesk.com https://www.gstatic.com https://cdn.cookielaw.org https://www.googletagmanager.com https://connect.facebook.net https://static.zdassets.com https://ekr.zdassets.com https://snap.licdn.com https://code.jquery.com https://oss.maxcdn.com https://www.google.com https://static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447 ; style-src 'self' 'unsafe-inline' http://www.jadlog.com.br https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.cookielaw.org https://code.jquery.com https://oss.maxcdn.com https://fonts.googleapis.com; img-src 'self' data: https://code.jquery.com https://www.jadlog.com.br https://jadloglogsticahelp.zendesk.com https://www.googletagmanager.com https://cdn.cookielaw.org https://www.facebook.com https://px.ads.linkedin.com https://*.zdassets.com https://*.zdusercontent.com https://www.google-analytics.com https://www.jadlog.com.br https://www.google.com; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; connect-src 'self' https://www.jadlog.com.br wss://pod-27-sunco-ws.zendesk.com https://www.google-analytics.com https://*.zdassets.com https://*.zendesk.com https://px.ads.linkedin.com https://cdn.cookielaw.org https://www.google.com https://geolocation.onetrust.com https://jadlog-privacy.my.onetrust.com; frame-src https://www.jadlog.com.br/jadlog/unidades https://www.jadlog.com.br/jadlog/simulacao?lang= https://jadlog.my.site.com https://www.googletagmanager.com https://www.facebook.com https://*.zendesk.com https://jadlog.force.com https://www.youtube.com https://www.google.com https://www.jadlog.com.br ; child-src 'self' https://www.googletagmanager.com; object-src 'none'; base-uri 'self';frame-ancestors https://www.google.com 2 frame-ancestors 'self' https://www.sidae.com https://m.sidae.com 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' https: blob: data: wss:; form-action 'self' forms.hsforms.com www.facebook.com; frame-ancestors 'self' *; 2 frame-ancestors 'self' https://*.theworld.org 2 frame-ancestors 'self' https://*.charlotte.edu https://*.uncc.edu https://uncc.instructure.com; frame-src 'self' blob: comgooglemaps: gsa: https://9572357.fls.doubleclick.net https://accounts.google.com https://airtable.com https://api.recollect.net https://apis.google.com https://app.smartsheet.com https://*.arcgis.com https://calculator.charlotte.edu https://calendar.google.com https://calendly.com https://canva.com https://cdnapisec.kaltura.com https://cdn.knightlab.com https://*.charlotte.edu https://datastudio.google.com https://datawrapper.dwcdn.net https://docs.google.com https://drive.google.com https://edabroad.h5p.com https://e.infogram.com https://e.issuu.com https://embed.podcasts.apple.com https://embed.styledcalendar.com https://flo.uri.sh https://forms.hsforms.com https://*.github.io https://*.hotjar.com https://*.hotjar.io https://lookerstudio.google.com https://maphub.net https://maps.google.com https://maps.mecklenburgcountync.gov https://mcmap.org https://m.facebook.com https://my.matterport.com https://platform.twitter.com https://player.vimeo.com https://public.tableau.com https://*.skedda.com https://*.spotify.com https://syndication.twitter.com https://*.uncc.edu https://uncc--full123.sandbox.my.site.com https://uncc-mps-training.s3.amazonaws.com https://uncc.my.salesforce-scrt.com https://uncc.my.site.com https://view-awesome-table.com https://vimeo.com https://vocalvideo.com https://web.facebook.com https://whova.com https://w.soundcloud.com https://www.buzzsprout.com https://www.canva.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.instagram.com https://www.theweather.com https://www.youtube.com https://www.youtube-nocookie.com https://youtu.be https://youtube.com 2 default-src 'self' https://play.vidyard.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://use.typekit.net https://www.googletagmanager.com https://www.google-analytics.com https://munchkin.marketo.net https://cdn.jsdelivr.net https://cdn.cookielaw.org https://play.vidyard.com https://code.jquery.com https://cdnjs.cloudflare.com https://snap.licdn.com https://static.ads-twitter.com https://tag.demandbase.com https://s.yimg.com https://js.zi-scripts.com https://www.storygize.net https://maps.googleapis.com https://*.googleapis.com https://www.trustradius.com https://*.en25.com https://cdn.neverbounce.com https://d30ia583fbtg8i.cloudfront.net https://api.neverbounce.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://assets.adobedtm.com https://*.adobe.com https://*.userledclient.io https://*.userled.io https://cdn.jsdelivr.net; script-src-elem 'self' 'unsafe-inline' blob: https://use.typekit.net https://www.googletagmanager.com https://www.google-analytics.com https://munchkin.marketo.net https://cdn.jsdelivr.net https://cdn.cookielaw.org https://play.vidyard.com https://code.jquery.com https://cdnjs.cloudflare.com https://snap.licdn.com https://static.ads-twitter.com https://tag.demandbase.com https://s.yimg.com https://js.zi-scripts.com https://www.storygize.net https://maps.googleapis.com https://*.googleapis.com https://www.trustradius.com https://*.en25.com https://cdn.neverbounce.com https://d30ia583fbtg8i.cloudfront.net https://api.neverbounce.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://assets.adobedtm.com https://*.adobe.com https://*.contentsquare.net https://connect.facebook.net https://*.hotjar.com https://js.driftt.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hsadspixel.net https://js.hs-analytics.net https://sdk.userledclient.io https://d.oracleinfinity.io https://images.news.avaya.com https://unpkg.com https://www.avaya.com https://service.maxymiser.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://d30ia583fbtg8i.cloudfront.net https://cdn.neverbounce.com https://www.trustradius.com https://*.adobe.com https://cdn.jsdelivr.net; img-src 'self' data: https://l.contentsquare.net https://www.facebook.com https://*.ba.contentsquare.net https://*.avaya.com https://www.google-analytics.com https://stats.g.doubleclick.net https://cdn.cookielaw.org https://play.vidyard.com https://www.google.com https://*.ads.linkedin.com https://id.rlcdn.com https://analytics.twitter.com https://t.co https://cdn.vidyard.com https://sp.analytics.yahoo.com https://*.google.com https://*.google.co.in https://segments.company-target.com https://dev.day.com https://*.googleapis.com https://*.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://avaya.com https://acrobatservices.adobe.com https://documentcloud.adobe.com https://www.linkedin.com *.userled.io *.imageboss.me *.clearbit.com *.unsplash.com *.brandfetch.io https://track.hubspot.com https://*.t.eloqua.com; font-src 'self' https://fonts.gstatic.com https://cdn.neverbounce.com https://dudodiprj2sv7.cloudfront.net; connect-src 'self' https://*.avaya.com https://www.google-analytics.com https://munchkin.marketo.net https://cdn.cookielaw.org https://www.google.com https://geolocation.onetrust.com https://api.company-target.com https://px.ads.linkedin.com https://s.yimg.com https://play.vidyard.com https://js.zi-scripts.com https://*.google-analytics.com https://analytics.google.com https://tag-logger.demandbase.com https://ws.zoominfo.com https://maps.googleapis.com https://*.googleapis.com https://*.gstatic.com https://stats.g.doubleclick.net https://www.googleadservices.com https://tag.demandbase.com https://dudodiprj2sv7.cloudfront.net https://api.neverbounce.com https://cdn.neverbounce.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://cdn.vidyard.com https://assets.adobedtm.com https://*.tt.omtrdc.net https://acrobatservices.adobe.com https://*.adobe.com https://pdfembed.adobe.com https://viewlicense.adobe.io https://*.t.eloqua.com https://driftt.imgix.net https://*.api.drift.com wss://presence.api.drift.com https://*.ba.contentsquare.net https://privacyportal-de.onetrust.com https://www.google.co.in https://*.userled.io wss://*.userled.io https://api.hubapi.com https://static.hsappstatic.net https://*.contentsquare.net wss://*.hotjar.com https://*.hotjar.io https://cdn.jsdelivr.net; frame-src 'self' https://js.driftt.com https://www.youtube.com https://player.vimeo.com https://play.vidyard.com https://www.googletagmanager.com https://s.company-target.com https://acrobatservices.adobe.com https://*.adobe.com https://*.userledclient.io https://www.google.com; worker-src blob: https://acrobatservices.adobe.com; media-src 'self' https://www.linkedin.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.t.eloqua.com; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content 2 frame-src 'self' blob: 'self' https://www.google.com.ua https://secure.wayforpay.com https://www.facebook.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.ukrnames.com https://bg.ukrnames.com https://cdn.ukrnames.ua https://apis.google.com https://accounts.google.com https://www.google.com https://embed.tawk.to https://cdn.datatables.net https://play.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' blob: 'self' https://www.ukrnames.com https://secure.wayforpay.com https://bg.ukrnames.com https://cdn.ukrnames.ua https://cdn.datatables.net https://embed.tawk.to https://cdn.jsdelivr.net https://ajax.googleapis.com https://www.googleadservices.com https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://apis.google.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://googletagmanager.com https://maps.google.com https://maps.googleapis.com https://translate.google.com https://accounts.google.com https://play.google.com; style-src 'self' 'unsafe-inline' https://secure.wayforpay.com https://embed.tawk.to https://cdn.datatables.net https://bg.ukrnames.com https://cdn.ukrnames.ua https://accounts.google.com https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' data: https://embed.tawk.to https://fonts.gstatic.com; img-src 'self' data: https://*.amazonaws.com https://embed.tawk.to https://cdn.datatables.net https://cdn.ukrnames.ua https://bg.ukrnames.com https://www.facebook.com https://m.facebook.com https://connect.facebook.net https://*.gstatic.com https://www.google.com https://www.google.ru https://www.google.es https://www.google.fr https://www.google.nl https://www.google.kz https://www.google.by https://www.google.de https://www.google.pl https://www.google.ae https://www.google.md https://www.google.ca https://www.google.com.ua https://www.google.com.tr https://www.google.co.uk https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com blob: 'self' https://bg.ukrnames.com https://cdn.ukrnames.ua https://accounts.google.com; connect-src blob: 'self' wss://www.ukrnames.com wss://*.tawk.to https://www.facebook.com https://secure.wayforpay.com https://*.tawk.to https://analytics.google.com https://stats.g.doubleclick.net 2 default-src 'self' static-cdn.mackeeper.com static-cdn.sz.mackeeper.com;frame-ancestors 'self' *.cleverbridge.com;frame-src 'self' *.liadm.com *.doubleclick.net *.hotjar.com *.google.com *.mackeeper.com *.facebook.com *.youtube.com *.trustpilot.com *.criteo.com *.googletagmanager.com;child-src 'self';form-action 'self';img-src 'self' data: *.kromtech.net *.mackeeper.com *.visualwebsiteoptimizer.com *.bing.com *.google-analytics.com *.facebook.com *.liadm.com *.doubleclick.net *.hotjar.com *.owox.com *.zoomsupport.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.taboola.com *.googletagmanager.com *.outbrain.com *.gstatic.com http://mackeeper.com https://mackeeper.com *.atdmt.com https://files.clario.co https://c.clarity.ms https://zchat.account.clario.co/images/ https://files.clario.co/images/ https://zchat.account.sz.clario.co/images/ *.shopperapproved.com *.reddit.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.bing.com *.facebook.net *.hotjar.com *.liadm.com *.visualwebsiteoptimizer.com *.kromtech.net *.mackeeper.com *.doubleclick.net *.youtube.com *.ytimg.com *.taboola.com *.outbrain.com *.trustpilot.com http://mackeeper.com https://mackeeper.com http://support.zoomsupport.com http://crm.zoomsupport.com http://chat-crm.zoomsupport.com *.criteo.net *.criteo.com https://www.dwin1.com http://www.youtube.com/player_api https://zchat.account.sz.mackeeper.com https://zchat.account.mackeeper.com https://files.clario.co *.clarity.ms *.googleoptimize.com *.sentry-cdn.com *.shopperapproved.com *.redditstatic.com;style-src 'self' 'unsafe-inline' *.googleapis.com *.kromtech.net *.mackeeper.com *.google.com *.googletagmanager.com http://mackeeper.com https://mackeeper.com *.shopperapproved.com;font-src 'self' data: *.gstatic.com *.hotjar.com *.kromtech.net *.mackeeper.com *.shopperapproved.com;object-src 'none';connect-src 'self' *.facebook.com *.mackeeper.com http://mackeeper.com https://mackeeper.com *.hotjar.io *.hotjar.com *.doubleclick.net support.mackeeper.com *.google-analytics.com https://analytics.google.com wss://*.hotjar.com *.taboola.com *.outbrain.com http://rp.liadm.com https://rp.liadm.com https://bat.bing.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.clarity.ms https://sentry.cloudmccloud.com https://sentry.clario.co https://zchat.account.clario.co/images/ https://files.clario.co/images/ https://zchat.account.sz.clario.co/images/ *.googleadservices.com *.sentry-cdn.com *.trustpilot.com *.reddit.com 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.clarity.ms https://*.quantserve.com https://*.quantcount.com https://tsdtocl.com https://google.com/pagead/form-data/1071727046 https://privacyportal.onetrust.com https://edge.adobedc.net https://cm.everesttech.net https://google.com/ccm/form-data/1071727046 https://onsemi.demdex.net https://geolocation.onetrust.com https://i.liadm.com/s/66627 https://trc.taboola.com/sg/liveintent/1/um https://cdn.cookielaw.org https://assets.adobedtm.com https://adobedc.demdex.net https://dpm.demdex.net https://data.enablementadobe.com https://*.wootric.com https://wootric-eligibility.herokuapp.com https://s.yimg.com https://static.lightning.force.com https://onsemineworg.my.salesforce.com https://service.force.com https://d.la2-c1-ia5.salesforceliveagent.com https://c.la2-c1-ia5.salesforceliveagent.com https://onsemineworg.my.site.com https://c1.sfdcstatic.com https://www.gstatic.cn https://www.recaptcha.net https://onsemineworg.my.salesforce.com https://onsemineworg.my.site.com https://d.la2-c1-ia5.salesforceliveagent.com https://service.force.com https://c1.sfdcstatic.com https://onsemi.componentsearchengine.com https://*.plexim.com https://event.on24.com https://my.onsemi.com https://www.onsemi.jp https://www.onsemi.cn https://www.onsemi.com https://identity.onsemi.com https://tags.tiqcdn.cn https://api.ipify.org https://p.adsymptotic.com https://*.ztsrv.com https://px.ads.linkedin.com https://my.demio.com https://angular-ui.github.io https://vidassets.terminus.services https://cdn.bigzeta.com https://api.bigzeta.com https://info.onsemi.com https://cdn.demio.com https://onsemi.ladesk.com https://onsemi.taleo.net https://*.gcs-web.com https://*.atdmt.com https://*.mktoresp.com https://*.marketo.com https://*.marketodesigner.com https://*.mktoweb.com https://*.experience.adobe.com https://*.adobe.net https://*.taboola.com https://*.tealiumiq.com https://*.tealium.com https://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.baidu.com https://*.geniusmonkey.com https://*.doubleclick.net https://*.gstatic.com https://*.linkedin.com https://*.pingdom.net https://*.crazyegg.com https://*.marketo.net https://*.licdn.com https://www.google.com https://*.tiqcdn.com https://*.digikey.com https://*.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.facebook.com https://*.boltdns.net https://*.brightcove.net https://*.brightcove.com https://*.brightcovecdn.com https://*.zencdn.net https://*.akamaihd.net https://*.cloud.coveo.com https://*.org.coveo.com https://*.ytimg.com https://go.onsemi.com https://*.kc-usercontent.com https://app.kontent.ai blob: data: https://cdn.linkedin.oribi.io https://767-faw-709.mktoutil.com https://sp.analytics.yahoo.com https://*.analytics.google.com https://analytics.google.com https://*.cdn.office.net https://insight.adsrvr.org https://js.adsrvr.org https://*.6sc.co https://j.6sc.co https://c.6sc.co https://ipv6.6sc.co https://b.6sc.co https://*.6sense.com https://*.inmoment.com https://googleapis.com https://gstatic.com https://*.qualtrics.com https://*.contentsquare.net https://*.hotjar.io https://cx.onsemi.com; frame-ancestors 'self' https://app.kontent.ai https://www.onsemi.com https://www.onsemi.cn https://www.onsemi.jp 2 frame-ancestors 'self' https://*.unige.it 2 frame-ancestors 'self'; default-src https: 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; font-src * 'self' data: https:; style-src * 'self' 'unsafe-inline' data: https: 2 frame-ancestors 'self' vegamovies.mq vegamovies.navy 2 default-src 'self' https://accounts.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.axept.io https://accounts.google.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://fonts.axept.io; img-src 'self' https: http: blob: data: https://axeptio.imgix.net ; font-src 'self' https://fonts.gstatic.com https://cdn.welcome-ui.com/fonts/ https://fonts.axept.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://www.google.com/recaptcha/ https://accounts.google.com/gsi/button https://form.typeform.com https://www.typeform.com/; upgrade-insecure-requests; connect-src 'self' https://api.welcometothejungle.com https://alerts.welcometothejungle.com https://*.axept.io https://api2.amplitude.com https://sr-client-cfg.amplitude.com https://accounts.google.com sp.welcometothejungle.com https://www.google.com/recaptcha/ https://www.gstatic.com https://o140309.ingest.us.sentry.io https://flag.lab.amplitude.com/sdk/v2/flags https://api.lab.amplitude.com/sdk/v2/ https://*.algolianet.com https://*.algolia.net https://*.algolia.io; 2 frame-ancestors 'self' *.amplience.net runtime.commercecloud.com *.demandware.net 2 frame-ancestors 'self' https://*.swoogo.events https://swoogo.com https://*.swoogo.com; 2 default-src 'self' https://servicios.rnpdigital.com https://www.rnpdigital.com; connect-src 'self' https://servicios.rnpdigital.com https://www.youtube.com https://*.tawk.to wss://*.tawk.to https://stats.g.doubleclick.net https://analytics.google.com https://www.google-analytics.com; form-action 'self' https://servicios.rnpdigital.com https://*.google.com https://*.tawk.to; font-src 'self' data: https://*.tawk.to https://fonts.gstatic.com; frame-ancestors 'self' https://www.rnpdigital.com https://servicios.rnpdigital.com https://www.youtube.com https://www.facebook.com; frame-src 'self' https://*.tawk.to https://www.youtube.com https://www.facebook.com https://servicios.rnpdigital.com; img-src 'self' data: https://*.tawk.to https://cdn.jsdelivr.net https://tawk.link https://s3.amazonaws.com https://www.googletagmanager.com https://www.google.co.cr https://servicios.rnpdigital.com https://www.rnpdigital.com; media-src 'self' https://*.tawk.to; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://servicios.rnpdigital.com https://www.googletagmanager.com https://*.tawk.to https://cdn.jsdelivr.net https://www.google-analytics.com https://www.youtube.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://*.tawk.to https://fonts.googleapis.com https://cdn.jsdelivr.net; 2 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: yoti: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com 1868565294.rsc.cdn77.org static.cloudflareinsights.com www.google.com www.gstatic.com fonts.gstatic.com global.frcapi.com *.googleapis.com accounts.google.com *.cdn77.org *.nk-img.com *.segpay.com *.online-metrix.net *.vscdns.com *.vsmvideo.com *.mmcdn.com *.agego.com www.youtube.com info.pornorama.com www.tjk-njk.com *.yoti.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net *.acdn5165543.com *.aacdn.net martted.com *.opoxv.com *.analvids.com tour1.analvids.com bmedia-bunny.justservingfiles.net *.justservingfiles.net *.bkcdn.net *.bxcdn.net cdn-fc.com *.pemsrv.com cdn.rtbix.com *.rtbix.com pixel-sin.ls7ksp-rtbix.top *.ls7ksp-rtbix.top *.ad1n.net *.rtbsuperhub.com *.lux.rtbsuperhub.com www.exoclick.com *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com *.asf4f.us *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com *.gtflixtv.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.cdn77.org www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com data-cdn.pornbiz.com *.vscdns.com *.vsmvideo.com *.mmcdn.com *.doubleclick.net *.google.fr *.google.com *.segpay.com *.online-metrix.net cdn.asf4f.us storage.agego.com *.gtflixtv.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net bmedia.justservingfiles.net *.tf4srv.com *.aacdn.net xenoly7.com miraco7.com clariva5.com miraex6.com go2fridayroll.com solvix8.com linktoliraspin.com clyoro7.com volexa5.com dynara3.com veltor2.com *.trackingtraffo.com trackingtraffo.com *.nowsrv.com betoholictrack.net refpa2518.com refpa3665.com melbet-ma.com melbetegypt.com 1xlite-815256.bar *.staticfilesonly.com *.analvids.com tour1.analvids.com bmedia-bunny.justservingfiles.net *.justservingfiles.net *.bkcdn.net *.bxcdn.net cdn-fc.com *.pemsrv.com cdn.rtbix.com *.rtbix.com pixel-sin.ls7ksp-rtbix.top *.ls7ksp-rtbix.top *.ad1n.net *.rtbsuperhub.com *.lux.rtbsuperhub.com; report-uri https://www.pornorama.com/csp-reports; report-to csp-endpoint 2 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: 'unsafe-inline'; 2 frame-ancestors 'self' *.3bb.co.th, font-src 'self' *.3bb.co.th *.ais.th fonts.gstatic.com *.blob.core.windows.net *.cdc.ais.th maxcdn.bootstrapcdn.com data: 2 default-src 'self' https://content.dionglobal.in/ https://prod-web.ltfinance.com https://prod-app.ltfinance.com/ https://www.ltfinance.com/ https://twphonepeuat.ltfs.com/ ; script-src http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://ltfs.allincall.in https://ltfs.allincall.in/chat/get-bot-image https://maps.googleapis.com/ *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org web-chat.nativechat.com unpkg.com/@frontify/ *.cloudinary.com https://content.dionglobal.in/ 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' * https://ltfs-sf.idealake.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com web-chat.nativechat.com *.frontify.com *.cloudinary.com; font-src 'self' * fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' * data: accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com *.google-analytics.com *.gstatic.com *.frontify.com *.cloudinary.com; media-src 'self' data: blob: *.frontify.com *.cloudinary.com https://content.dionglobal.in/;child-src 'self' https://www.google.com https://maps.google.com https://content.dionglobal.in https://cx.camsonline.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com web-chat.nativechat.com *.frontify.com cloudinary.com *.cloudinary.com https://maps.googleapis.com data: blob:; frame-src 'self' *; 2 default-src 'self' 'unsafe-eval' http: https: data: blob: 'unsafe-inline' 2 default-src 'self' https://*.e-i.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.e-i.com https://*.linkedin.com https://cdn.matomo.cloud https://cdn.tagcommander.com https://cmcic.matomo.cloud https://googleads.g.doubleclick.net https://platform.linkedin.com https://snap.licdn.com https://symposium.dashboard.data-driven.fr https://symposium.dashboard.test.data-driven.fr https://tag.aticdn.net https://tags.data-driven.fr https://www.google.com https://www.google.com/recaptcha/ https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.e-i.com; img-src 'self' blob: data: https://*.e-i.com https://*.linkedin.com https://ad.doubleclick.net https://conv.indeed.com/pagead/ https://googleads.g.doubleclick.net https://i.ytimg.com https://img.youtube.com https://manager.tagcommander.com https://pubads.g.doubleclick.net https://www.google.com https://www.google.fr https://www.googletagmanager.com; font-src 'self' data: https://*.e-i.com; object-src 'none'; media-src 'self' blob: https://*.e-i.com; base-uri 'none'; form-action 'self' https://www.linkedin.com; frame-ancestors 'self'; child-src 'self' blob: https://*.e-i.com https://*.fls.doubleclick.net https://api.linkedin.com https://bid.g.doubleclick.net https://recaptcha.google.com https://td.doubleclick.net https://www.google.com https://www.googletagmanager.com https://www.linkedin.com https://www.youtube-nocookie.com https://www.youtube.com; connect-src 'self' https://*.e-i.com https://*.googlesyndication.com https://*.linkedin.com https://ad.doubleclick.net https://adservice.google.com https://cmcic.matomo.cloud https://google.com https://googleads.g.doubleclick.net https://logs1412.xiti.com https://stats.g.doubleclick.net https://symposium.dashboard.data-driven.fr https://symposium.dashboard.test.data-driven.fr https://tags.data-driven.fr https://www.google.com https://www.googleadservices.com https://zkkwkzt.pa-cd.com; report-uri 2 script-src 'unsafe-inline' 'unsafe-eval' 'self' https://fast.wistia.com https://wistia.com https://fast.wistia.net https://pi.pardot.com https://static.addtoany.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://js-agent.newrelic.com https://bam.nr-data.net https://unpkg.com https://bam-cell.nr-data.net https://hackerone.com https://www2.earlywarning.com https://ws.zoominfo.com https://earlywarning.wistia.com https://cdn.cookielaw.org https://snap.licdn.com https://www3.earlywarning.com https://js.zi-scripts.com https://img.en25.com https://code.jquery.com/ https://s2822078.t.eloqua.com https://translate.google.com https://www.youtube.com https://cdn.jsdelivr.net https://connect.facebook.net http://img.en25.com https://googleads.g.doubleclick.net https://d8ejoa1fys2rk.cloudfront.net; object-src 'none'; img-src https://mannatstudio.com/html/serenite/assets 'self' https://www.google-analytics.com https://px.ads.linkedin.com https://paze.com https://www.paze.com https://px4.ads.linkedin.com https://aorta.clickagy.com https://dpm.demdex.net https://cdn.cookielaw.org https://www.googletagmanager.com https://fonts.gstatic.com data: https://trck.www4.paze.com/ https://image.www4.earlywarning.com/ https://cdn.honey.io https://trck.www4.zellepay.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://www.google.co.za https://www.google.co.il https://www.google.co.ma https://www.google.com.au https://www.google.co.th https://www.google.com.mx https://www.google.co.in https://www.facebook.com https://www.google.com.bh https://www.google.ca https://www.google.com.br https://earlywarning.bynder.com; media-src 'self' data https://embed-ssl.wistia.com https://earlywarning.wistia.com https://earlywarning.bynder.com; frame-src 'self' https://www.google.com https://fast.wistia.com https://earlywarning.wistia.com https://static.addtoany.com https://hackerone.com https://anchor.fm https://www.youtube.com https://s2822078.t.eloqua.com https://www.googletagmanager.com https://16651280.fls.doubleclick.net; frame-ancestors 'self'; font-src 'self' https://maxcdn.bootstrapcdn.com data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://bam.nr-data.net https://bam-cell.nr-data.net https://cdn.linkedin.oribi.io https://aorta.clickagy.com https://hemsync.clickagy.com https://ws.zoominfo.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://px.ads.linkedin.com/wa/ https://js.zi-scripts.com https://s2822078.t.eloqua.com https://px.ads.linkedin.com https://www.google.com https://www.googleadservices.com https://privacyportal.onetrust.com https://region1.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://ad.doubleclick.net https://earlywarning.bynder.com; report-uri /report-csp-violation 2 frame-ancestors https://docs.google.com https://*.googleusercontent.com; 2 frame-ancestors 'self' https://support.phorest.com/ https://phorest1547654878.zendesk.com/ https://phorest.zendesk.com/ https://www.salonownersummit.com/host 2 img-src 'self' *.twimg.com *.twitter.com img.youtube.com *.s3waas.gov.in secure.gravatar.com data: maps.gstatic.com maps.googleapis.com cbpssubscriber.mygov.in;connect-src 'self' *.s3waas.gov.in maps.googleapis.com www.google-analytics.com;object-src 'none';media-src 'self' *.s3waas.gov.in data:;child-src *;frame-src *;form-action *.s3waas.gov.in 'self';frame-ancestors 'self' *.s3waas.gov.in ;upgrade-insecure-requests;worker-src 'self' *.s3waas.gov.in 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: data: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https: http://127.0.0.1:* http://localhost:*; frame-ancestors 'self'; upgrade-insecure-requests 2 default-src * data: https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: data:; style-src https: 'unsafe-inline'; worker-src blob: https: 2 default-src 'self' *.arcteryx.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' analytics.tiktok.com assets.adobedtm.com assets.bounceexchange.com bam.nr-data.net arcteryxservice--uat.sandbox.my.site.com arcteryxservice.my.site.com s.pinimg.com *.gstatic.com *.forter.com cdn.cookielaw.org cdn.fibbl.com frontend.cdn.splashthat.com *.doubleclick.net *.newrelic.com pay.google.com rapid-cdn.yottaa.com *.hotjar.com *.cdn-apple.com *.arcteryx.com tr.snapchat.com *.googletagmanager.com *.paypal.com *.redditstatic.com *.locally.com *.google-analytics.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.arcteryx.com *.paypal.com *.photorank.me photorankstatics-a.akamaihd.net tr.snapchat.com *.igodigital.com *.evgnet.com arcteryx.us-5.evergage.com cdn.brcdn.com cdn.fibbl.com *.cartfulsolutions.com *.bounceexchange.com bat.bing.com sc-static.net ct.pinterest.com arcteryxservice--uat.sandbox.my.site.com arcteryxservice.my.site.com tag.wknd.ai *.impactcdn.com *.redditstatic.com *.adsrvr.org *.facebook.net *.creativecdn.com *.google-analytics.com bam.nr-data.net *.google.com *.cdn-apple.com *.postescanada-canadapost.ca *.tiktok.com *.doubleclick.net *.cloudfront.net *.forter.com *.youtube.com youtube.com *.googletagmanager.com s.pinimg.com *.gstatic.com *.adobedtm.com *.newrelic.com *.klarna.com *.hotjar.com *.olapic-cdn.com *.bazaarvoice.com maps.googleapis.com *.tvsquared.com *.locally.com *.cookielaw.org; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' arcteryxservice--uat.sandbox.my.site.com arcteryxservice.my.site.com cdn.auth0.com *.cloudfront.net *.postescanada-canadapost.ca frontend.cdn.splashthat.com *.arcteryx.com *.typekit.net; style-src-elem 'self' 'unsafe-inline' *.postescanada-canadapost.ca *.googleapis.com *.klarnacdn.net arcteryxservice--uat.sandbox.my.site.com arcteryxservice.my.site.com *.bounceexchange.com arcteryx.us-5.evergage.com cdn.auth0.com *.cloudfront.net frontend.cdn.splashthat.com *.arcteryx.com *.typekit.net; style-src-attr 'unsafe-inline'; connect-src * blob:; font-src 'self' data: *.klarnacdn.net *.olapic-cdn.com *.hotjar.com *.cloudfront.net *.arcteryx.com *.cdn-apple.com *.bazaarvoice.com fonts.gstatic.com use.typekit.net; media-src 'self' *.arcteryx.com videos.olapic-cdn.com images-dynamic-arcteryx.imgix.net www.youtube.com cdn.sanity.io; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://cms.arcteryx.com https://cms-staging.arcteryx.com; img-src 'self' data: blob: *.cdn.fibbl.com www.ojrq.net www.paypalobjects.com *.photorank.me photorankstatics-a.akamaihd.net *.olapic-cdn.com *.doubleclick.net *.bazaarvoice.com *.cdn-apple.com *.ytimg.com arcteryxservice--uat.sandbox.my.site.com arcteryxservice.my.site.com *.cartfulsolutions.com *.bounceexchange.com *.hotjar.com s3.amazonaws.com *.adyen.com *.reddit.com bat.bing.com cdn.cookielaw.org cdn.sanity.io *.postescanada-canadapost.ca *.cloudfront.net events.bouncex.net *.imgix.net *.arcteryx.com www.facebook.com www.google.com www.gstatic.com *.google.ca *.googleadservices.com *.googletagmanager.com *.paypal.com tag.wknd.ai cdn.brcdn.com maps.gstatic.com maps.googleapis.com mapsresources-pa.googleapis.com *.tvsquared.com *.locally.com p.brsrvr.com; frame-src 'self' ct.pinterest.com *.klarnaservices.com *.storedvalue.com arcteryxservice--uat.sandbox.my.site.com arcteryxservice.my.site.com arcteryx.locally.com match.adsrvr.org *.bounceexchange.com tr.snapchat.com *.paypal.com pay.google.com *.youtube.com amersports.demdex.net youtube.com *.cdn-apple.com www.facebook.com www.google.com *.googletagmanager.com insight.adsrvr.org *.doubleclick.net us.creativecdn.com *.klarna.com *.locally.com *.adyen.com; form-action 'self' *.arcteryx.com *.adyen.com *.cdn-apple.com *.paypal.com www.facebook.com *.bazaarvoice.com *.hotjar.com www.paypalobjects.com; 2 default-src 'self'; connect-src https://googlecdn.org https://perfops3.byteperf.com https://perfops2.byteperf.com https://perfops3.byte-test.com https://perfops1.byteperf.com https://devnull.perfops.net https://*.test.resolver.perfops.net https://test-perfops.wedos.delivery https://cdn.perftest.f5-cloud-demo.com https://test-perfops.blazingcdn.com https://eo-perfops4.qcloudteo.com https://eo-perfops6.qcloudteo.com https://perfops.cloudflareperf.com https://eo-perfops10.qcloudteo.com https://perf-test.sufycdn.com https://eo-perfops8.qcloudteo.com https://cdn.jsdelivr.net https://eo-perfops1.qcloudteo.com https://perf.qinglanbaseunicast.com https://d3888oxgux3fey.cloudfront.net https://eo-static-perfops.qcloudcdn.com https://cdn23602612.ahacdn.me https://rum.perfops.cdb.cdn.orange.com https://perfops.byte-test.com https://akamai-cdn.perfops.io https://eo-static-perfops1.qcloudcdn.com https://cdnperf.cachefly.net https://medianova-cdnperf.mncdn.com https://djlzvy5xcvhxt.cloudfront.net https://1596384882.rsc.cdn77.org https://d161f70cbh7kx6.cloudfront.net https://medianova-cdnvperf.mncdn.com https://cdnperf.vergecloud.com https://perfops.gcorelabs.com https://25748s.ha.azioncdn.net https://test-perfops.haproxy.com https://perfops.swiftycdn.net https://perfops2.byte-test.com https://eo-perfops5.qcloudteo.com https://ultrawaf.canary.scrubbingcenter.com https://eo-perfops9.qcloudteo.com https://cdnperf-rum.cdnetworks.net https://perfops.edge.run https://eo-perfops2.qcloudteo.com https://eo-static-perfops3.qcloudcdn.com https://ovh-cdn.perfops.io https://eo-perfops7.qcloudteo.com https://afdcdnperf-e8aeffg7frd0a3c0.z01.azurefd.net https://proxy.canary.scrubbingcenter.com https://perfops1.b-cdn.net https://perfops-bench.sos-ch-gva-2.exoscale-cdn.com https://eo-perfops3.qcloudteo.com https://perfops-static.freetls.fastly.net https://perfopsrumapi.akamaized.net https://test-perfops.ldgslb.com https://cpt96125.shopvoxpopulus.com https://perfopsrum.akamaized.net https://perfopsrum-eip.akamaized.net https://eo-static-perfops2.qcloudcdn.com https://perfops.test.edgekey.net https://test-perfops.idevops.suijinetworks.com https://cdnperf-rum.quantil.com https://rum.perfops.mdb.cdn.orange.com https://rum-cdn.perfops.net 'self'; img-src 'self' https://quickchart.io https://files.catbox.moe; media-src 'self' https://files.catbox.moe; style-src 'self' 'unsafe-inline'; script-src https://www.google.com https://www.gstatic.com https://cdn.perfops.net 'self' 'unsafe-inline'; frame-src https://www.google.com; 2 frame-src *; frame-ancestors 'self' https://*.eventscloud.com; 2 default-src 'self' http://widget.scpl.sber247.ru wss://widget.scpl.sber247.ru wss://comet.rabota.ru https://*.sbermarketing.ru https://sbermarketing.ru front-log.rabota.ru *.rabota.space rabota.ru *.rabota.ru https://*.yandex.md https://*.yandex.ru https://yandex.ru https://*.yandex.net https://*.yandexadexchange.net https://*.mail.ru https://vk.com https://*.odnoklassniki.ru https://*.rambler.ru https://*.adfox.ru https://*.googleapis.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.ucweb.com https://*.livetex.ru https://*.livetex.me https://*.2gis.ru https://*.2gis.com https://2gis.github.io https://*.calltouch.ru ws://*.jivosite.com https://*.jivosite.com ws://*.jivo.ru https://*.jivo.ru https://*.vimeocdn.com https://*.youtube.com https://*.youtu.be https://*.vimeo.com https://*.rutube.ru https://*.coub.com https://*.imgsmail.ru https://*.dadata.ru https://*.mediator.media https://stat.media https://*.stat.media https://static.smi2.net https://smi2.ru https://*.smi2.ru https://e-cc01-i.sber247.ru https://*.experrto.io https://sa.online.sberbank.ru https://*.online.sberbank.ru https://*.sberbank.ru https://sa.online.sberbank.ru:8098/metrics/partners https://recaptcha.net https://*.recaptcha.net https://*.recaptcha.net/recaptcha/api.js https://ad.adriver.ru https://rezumet.ru https://id.sber.ru https://yastatic.net https://*.serving-sys.ru https://sberopros.sber.ru;script-src 'unsafe-inline' 'unsafe-eval' widget.scpl.sber247.ru sp.otm-r.com *.sbermarketing.ru sbermarketing.ru *.rabota.space rabota.ru *.rabota.ru yandex.ru *.yandex.md *.yandex.ru *.yandex.net *.yandexadexchange.net *.googleusercontent.com *.googletagmanager.com *.googleapis.com creativecdn.com *.creativecdn.com www.google-analytics.com stats.g.doubleclick.net *.rambler.ru yastatic.net vk.com *.odnoklassniki.ru *.mail.ru unpkg.com *.livetex.ru *.livetex.me *.google.com ws://*.jivosite.com *.jivosite.com ws://*.jivo.ru *.jivo.ru *.gstatic.com *.ucweb.com *.2gis.ru *.2gis.com *.calltouch.ru *.adfox.ru 2gis.github.io *.vimeocdn.com *.youtube.com *.imgsmail.ru collector.mediator.media *.dadata.ru *.mediator.media *.helpdeskeddy.com anketolog.ru static.smi2.net smi2.ru stat.media *.stat.media *.smi2.ru *.criteo.net *.criteo.com cdn.ampproject.org *.buzzsprout.com e-cc01-i.sber247.ru *.experrto.io sa.online.sberbank.ru *.online.sberbank.ru *.sberbank.ru sa.online.sberbank.ru:8098/metrics/partners recaptcha.net *.recaptcha.net *.recaptcha.net/recaptcha/api.js st.top100.ru yastatic.net mc.yandex.ru tags.soloway.ru/DSPCounter.min.js content.adriver.ru/AdRiverFPS.js ad.adriver.ru telegram.org/js/telegram-web-app.js *.hybrid.ai rezumet.ru *.serving-sys.ru sberopros.sber.ru;style-src 'unsafe-inline' 'unsafe-eval' blob: *.rabota.space rabota.ru *.rabota.ru *.googleapis.com *.gstatic.com *.2gis.ru *.2gis.com *.vimeocdn.com *.jivo.ru *.yandex.md yandex.ru *.yandex.ru *.yandex.net *.yandexadexchange.net 2gis.github.io *.dadata.ru anketolog.ru static.smi2.net smi2.ru stat.media *.stat.media *.smi2.ru e-cc01-i.sber247.ru sa.online.sberbank.ru *.online.sberbank.ru *.sberbank.ru sa.online.sberbank.ru:8098/metrics/partners rezumet.ru sberopros.sber.ru;img-src * data: blob: mc.yandex.ru;font-src 'self' data: blob: *.rabota.space rabota.ru *.rabota.ru *.livetex.ru *.livetex.me *.gstatic.com sa.online.sberbank.ru *.online.sberbank.ru *.sberbank.ru sa.online.sberbank.ru:8098/metrics/partners recaptcha.net *.recaptcha.net *.recaptcha.net/recaptcha/api.js rezumet.ru yastatic.net chrome-extension:;worker-src *.rabota.space rabota.ru *.rabota.ru rezumet.ru;frame-src blob: madte.st madtest.ru *.rabota.space rabota.ru *.rabota.ru oprosso.net creativecdn.com *.creativecdn.com yastatic.net *.google.com *.livetex.ru *.livetex.me *.2gis.ru *.2gis.com yandex.ru *.yandex.md *.yandex.ru *.yandex.net *.yandex.tld *.yandexadexchange.net vk.com *.odnoklassniki.ru *.youtube.com *.ucweb.com *.imgsmail.ru *.googleusercontent.com *.googletagmanager.com *.helpdeskeddy.com anketolog.ru *.hurma.ai hurma.ai *.vimeocdn.com *.youtube.com *.youtu.be *.vimeo.com *.rutube.ru rutube.ru *.coub.com coub.com *.fls.doubleclick.net static.smi2.net smi2.ru stat.media *.stat.media *.smi2.ru *.criteo.net *.criteo.com w.soundcloud.com *.rambler.ru music.yandex.ru podcasts.apple.com podcasts.google.com *.buzzsprout.com e-cc01-i.sber247.ru *.experrto.io app.ex.co infogram.com embed.podcasts.apple.com interacty.me p.interacty.me recaptcha.net *.recaptcha.net *.recaptcha.net/recaptcha/api.js sber-zvuk.com webvisor.com *.webvisor.com mc.yandex.ru content.adriver.ru rezumet.ru id.sber.ru ad.adriver.ru *.serving-sys.ru;object-src 'self' blob:;media-src blob: *.rabota.ru rabota.ru *.rabota.space rabota.ru *.rabota.ru *.jivosite.com *.jivo.ru *.vimeocdn.com *.helpdeskeddy.com rezumet.ru;report-uri https://www.rabota.ru/snitch.txt;base-uri 'none';frame-ancestors 'self' https://metrika.yandex.ru https://webvisor.com https://*.webvisor.com https://*.telegram.org; 2 default-src https: 'self' 'unsafe-inline' 'unsafe-eval' *.steinberg.net *.usercentrics.eu *.personio.de *.personio.com *.googletagmanager.com fonts.googleapis.com *.soundcloud.com *.youtube-nocookie.com *.optimizely.com *.eu-central-1.compute.amazonaws.com *.onfastspring.com *.impactcdn.com *.twitch.tv *.twitchcdn.net; connect-src https: 'self' wss://ws.hotjar.com; img-src https: 'self' *.steinberg.net *.ytimg.com *.usercentrics.eu data:; font-src https: 'self' fonts.gstatic.com fonts.googleapis.com data:; 2 report-uri https://csp.uber.com/csp?a=web-eats-v2&ro=false 2 default-src 'self' localhost:* ws://localhost:* *.openstreetmap.org a.tile.openstreetmap.org *.tile.openstreetmap.org framework-gb.cdn.gob.mx *.framework-gb.cdn.gob.mx www.youtube.com *.www.youtube.com www.loterianacional.gob.mx www.pronosticos.gob.mx www.lotenal.gob.mx www.google.com *.www.google.com stackpath.bootstrapcdn.com *.stackpath.bootstrapcdn.com w3.org *.w3.org www.googletagmanager.com *.www.googletagmanager.com www.google-analytics.com *.www.google-analytics.com documentservices.adobe.com *.documentservices.adobe.com viewlicense.adobe.io *.viewlicense.adobe.io unpkg.com *.unpkg.com www.gob.mx *.gob.mx; object-src 'self' localhost:* ws://localhost:* www.gob.mx *.gob.mx; font-src 'self' fonts.gstatic.com *.fonts.gstatic.com framework-gb.cdn.gob.mx *.framework-gb.cdn.gob.mx kit-pro.fontawesome.com *.kit-pro.fontawesome.com www.gob.mx data: localhost:* ws://localhost:*; style-src 'self' 'unsafe-inline' www.googletagmanager.com framework-gb.cdn.gob.mx *.framework-gb.cdn.gob.mx stackpath.bootstrapcdn.com *.stackpath.bootstrapcdn.com kit-pro.fontawesome.com *.kit-pro.fontawesome.com unpkg.com *.unpkg.com localhost:* ws://localhost:*; media-src *; img-src 'self' 'unsafe-inline' *.openstreetmap.org a.tile.openstreetmap.org *.tile.openstreetmap.org * data:; script-src 'self' 'unsafe-inline' framework-gb.cdn.gob.mx *.framework-gb.cdn.gob.mx www.googletagmanager.com *.www.googletagmanager.com www.google.com *.www.google.com www.gstatic.com *.www.gstatic.com documentservices.adobe.com *.documentservices.adobe.com unpkg.com *.unpkg.com localhost:* ws://localhost:*; frame-ancestors 'self' www.google.com localhost:* www.gob.mx *.gob.mx; 2 report-uri https://o4505075539902464.ingest.us.sentry.io/api/4505075559825408/security/?sentry_key=e137a5ec37cf03e1ed168b772c98c0bc; report-to csp; default-src 'self' *.youtube.com player.simplecast.com *.lemonsqueezy.com challenges.cloudflare.com https://lemonsqueezy.nolt.io/ tally.so cdn.prod.website-files.com lemonsqueezy-assets.s3.us-east-2.amazonaws.com; frame-src 'self' https://cdn.embedly.com https://platform.twitter.com https://syndication.twitter.com https://challenges.cloudflare.com https://lemonsqueezy.nolt.io; connect-src *.lemonsqueezy.com cdn.prod.website-files.com wss://api.inkeep.com *.inkeep.com helpscout-ticket-creation.vercel.app lemonsqueezy-assets.s3.us-east-2.amazonaws.com; media-src 'self' *.lemonsqueezy.com cdn.prod.website-files.com; worker-src 'self'; img-src * blob: data:; font-src * data:; style-src 'self' *.lemonsqueezy.com cdn.prod.website-files.com fonts.googleapis.com 'unsafe-inline'; script-src 'self' challenges.cloudflare.com tally.so cdn.jsdelivr.net cdn.prod.website-files.com code.jquery.com unpkg.com d3e54v103j8qbb.cloudfront.net app.lemonsqueezy.com cdn.usefathom.com assets.lemonsqueezy.com static.cloudflareinsights.com platform.twitter.com 'sha256-I1oqzdG8ABwwJE/CwI40sJxhtAhpql7j/rpDkIXUK1Y=' 'sha256-bdA0cvgVXH8LBxO68C3ExwzyXLRynEkqpwkKp7av3Tk=' 'sha256-YMDz5wGrDesGpPQvZFf+o+To+21PWXozOWgUUKXgPNQ=' 'sha256-KZ7C6zm33y6W2F1lcdoNyLyQoU6ieDA6nnaAoMUIG6o=' 'sha256-olvdWzV5MceIt4AqqXiVXHwHOoytDlQutQSLai2rr3s=' 'sha256-mjdgHR9aXy+6OwAGlNS/XgNcYG1Uhd2U4pl8vi7+XCY=' 'sha256-P6cgBPruhraHLxxJAx7CYIaV6SC4iuvDldsKrdcDCs0=' 'sha256-muoEFIeLVS1tXqNKabm2XW0y+t0Morn0eiyH/4gWSFM=' 'sha256-IWcRBb6qdMcphojQQMlDaQsYG4F8+OUe0cC62k92Fqs=' 'sha256-DJoD3TxxO/wUfm77B3Xg8CeZ9zXmQFghzlrJFbjgsVo=' 'sha256-st/0/OS6vlRZrDF/EgOB9O90ZfXBJEMve3p4NzDKmWw=' 'sha256-rqIrJsr1KxE4sZIs0595EDTZHIse/pQFOveGXTSpgh8=' 'sha256-2+xeZ9uvzc1cztE9neSkGAsRIcQxev8HH3lZeT3IHgc=' 'sha256-ChC+cACPifjKQsvV1eZgCx7ANEc0Q3xy+MqDBFnpyRE=' 'sha256-7/HveZxd4yPf42YIfhxiZDFU/a6RtLtShZj0y0bc0xM=' 'sha256-YAhqsGAb4rs+S5kO4XH1/9mGQq/8NQVJLKJrhNpdFo8=' 'sha256-wEjQdcjT9ia3+uKiDHquc85jb4JdZAOOm9hFbAvVW0Y=' 'sha256-FF3JplMsTlEoGExFy9jNa//bI9hXN1P1Wk7TmC/697w=' 'sha256-FABljtGlF/3YMkSGHKKqY1YQmM6YGrcxBpr97RqRS9s=' 'sha256-fd/AWhZEJywiUTWydT7SaKdliz8IBLf395MJFxoGDOY=' 'sha256-6EsWsKwWbGaxnjI9bo3G4ZW6jUhVwdKYJvwQHKwlL/c=' 'sha256-Z7WzqowjPAR+oYchmMod4lGNr7Qyiu6JCcN+iYRXHCk='; 2 base-uri 'self'; form-action 'self' https://www.facebook.com https://www.sharecare.com https://www.carefirstcaremanagement.com; frame-ancestors 'self' https://staging.qualityhealth.com https://qualityhealth.com https://www.qualityhealth.com https://pagemanager.sharecare.com https://www.sharecare.com; upgrade-insecure-requests ; connect-src 'self' https://geolocation.onetrust.com https://cdn.cookielaw.org https://www.facebook.com https://smetrics.sharecare.com https://smetrics.112.2o7.net https://sharecareprod.112.2o7.net https://pagemanager.sharecare.com https://stpgmgr.wpenginepowered.com https://www.sharecare.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://privacyportal-na01.onetrust.com https://www.google.com https://googleads.g.doubleclick.net https://vjs.zencdn.net https://edge.api.brightcove.com https://manifest.prod.boltdns.net https://about.sharecare.com https://cdnjs.cloudflare.com https://s.sharecare.com https://aim-tag.hcn.health; default-src 'self'; font-src 'self' https://fonts.sharecare.com https://cdn.jsdelivr.net https://pagemanager.sharecare.com https://stpgmgr.wpenginepowered.com https://www.sharecare.com https://use.typekit.net https://fonts.gstatic.com https://pagemanager.sharecare.com; frame-src *; img-src 'self' data: https://smetrics.sharecare.com https://smetrics.112.2o7.net https://sharecareprod.112.2o7.net https://sb.scorecardresearch.com https://www.google.com https://www.facebook.com https://cdn.jsdelivr.net https://connect.facebook.net https://pagemanager.sharecare.com https://stpgmgr.wpenginepowered.com https://www.sharecare.com https://s.sharecare.com https://s3.amazonaws.com https://p.typekit.net https://cdn.tapnative.com https://tcp.googlesyndication.com https://www.medtargetsystem.com https://adservice.google.com https://cdn.ampproject.org https://*.doubleclick.net https://ad.doubleclick.net https://match.deepintent.com https://trc.lhmos.com https://*.googlesyndication.com https://secure.adnxs.com https://preferences.trustarc.com https://choices.trustarc.com https://track.customer.io https://cdn.cookielaw.org https://www.googletagmanager.com https://metrics.brightcove.com https://cf-images.us-east-1.prod.boltdns.net https://about.sharecare.com; media-src *; object-src 'none'; prefetch-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://assets.adobedtm.com https://use.typekit.net https://cdn.cookielaw.org https://s.sharecare.com https://preferences.truste.com https://sb.scorecardresearch.com https://www.googleadservices.com https://cdn.jsdelivr.net https://googleads.g.doubleclick.net https://connect.facebook.net https://www.googletagmanager.com https://www.google.com https://pi.pardot.com https://www2.sharecare.com https://pagemanager.sharecare.com https://stpgmgr.wpenginepowered.com https://www.sharecare.com https://geolocation.onetrust.com https://ajax.googleapis.com https://www.googletagservices.com https://content.tapnative.com https://securepubads.g.doubleclick.net https://www.medtargetsystem.com https://adservice.google.com https://tcp.googlesyndication.com https://match.deepintent.com https://trc.lhmos.com https://tpc.googlesyndication.com https://cdn.ampproject.org https://assets.customer.io https://ssl.google-analytics.com https://code.jquery.com https://privacyportal-na01.onetrust.com https://players.brightcove.net https://ajax.googleapis.com https://cdn.krxd.net https://vjs.zencdn.net https://edge.api.brightcove.com https://cdnjs.cloudflare.com https://aim-tag.hcn.health; style-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' *; worker-src 'self' blob:; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.youtube.com https://connect.facebook.net https://dpm.demdex.net https://s.ytimg.com https://secure.adnxs.com https://go.ucg.datafront.co https://bs.serving-sys.com https://secure-ds.serving-sys.com https://bs.serving-sys.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.youtube-nocookie.com ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.youtube.com https://connect.facebook.net https://dpm.demdex.net https://s.ytimg.com https://secure.adnxs.com https://go.ucg.datafront.co https://bs.serving-sys.com https://secure-ds.serving-sys.com https://bs.serving-sys.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.youtube-nocookie.com ; frame-src 'self' https://www.google.com https://unicreditgroup.demdex.net https://maps.google.it https://player.vimeo.com https://1c-ir.mdgms.com https://www.youtube.com https://platform.twitter.com https://syndication.twitter.com https://digitalmagazines.unicredit.eu https://iframes-uc.webfg.com https://www.youtube-nocookie.com ; connect-src 'self' https://datacloud-eu-central-1.tealiumiq.com https://datacloud.tealiumiq.com https://dpm.demdex.net https://dpm.demdex.net/id https://sucmetrics.unicreditgroup.eu https://unicreditgroup.eu.ssl.d2.sc.omtrdc.net https://www.youtube.com https://www.bing.com https://www.youtube-nocookie.com ; img-src 'self' data: https://sucmetrics.unicreditgroup.eu https://dpm.demdex.net https://img.youtube.com https://i1.ytimg.com https://i.ytimg.com https://image-store.slidesharecdn.com https://cm.everesttech.net https://pbs.twimg.com https://1c-ir.mdgms.com https://www.gstatic.com https://uconnect.tealiumiq.com https://secure.adnxs.com https://go.ucg.datafront.co http://www.unicreditgroup.eu https://platform.twitter.com https://syndication.twitter.com https://abs.twimg.com https://ton.twimg.com https://www.facebook.com https://dmp.adform.net https://go.datafront.co ; font-src 'self' data: https://fonts.gstatic.com ; style-src 'self' 'unsafe-inline' https://content.unicredit.it https://it-assets.ucgstatic.eu https://content.ucgstatic.eu https://platform.twitter.com https://ton.twimg.com ; style-src-elem 'self' 'unsafe-inline' https://content.unicredit.it https://it-assets.ucgstatic.eu https://content.ucgstatic.eu https://platform.twitter.com https://ton.twimg.com ; frame-ancestors 'self' ; object-src 'none' ; form-action 'self' ; 2 style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; upgrade-insecure-requests; 2 frame-ancestors 'self' https://distributech.com https://www.distributech.com; 2 default-src 'self'; connect-src 'self' blob: *.token.awswaf.com https://api.prod.legislation.gov.au/ https://www.legislation.gov.au/; font-src 'self'; frame-src 'self' blob: https://www.legislation.gov.au/; img-src 'self' data: https://www.googletagmanager.com https://www.legislation.gov.au/; script-src 'self' 'unsafe-inline' *.token.awswaf.com https://www.googletagmanager.com https://www.legislation.gov.au/; style-src 'self' 'unsafe-inline' https://www.legislation.gov.au/; 2 default-src 'self' data: blob: https://unpkg.com *.braintreegateway.com *.partsimg.com *.visa.com *.googlesyndication.com *.xtlo.net *.extole.io *.2mdn.net *.px-cloud.net *.quantummetric.com *.usautoparts.com *.carparts.com *.googleapis.com *.netlify.com *.youtube.com *.ytimg.com *.turnto.com polyfill.io *.braintree-api.com *.usautoparts.io *.cloudinary.com *.paypal.com www.googletagmanager.com www.google-analytics.com *.google.com bam.nr-data.net *.getblueshift.com *.adnxs.com api.edq.com *.btttag.com *.shop.pe *.forter.com *.doubleclick.net *.symantec.com *.google.com.ph *.google.ca *.google.ie *.google.co.in *.bizrate.com *.connexity.net *.facebook.com *.attentivemobile.com *.go-mpulse.net *.akstat.io *.akamaihd.net *.gstatic.com *.tvsquared.com *.bing.com *.bing-int.com *.edq.com *.amazonaws.com *.cloudfront.net cdn.quantummetric.com rl.quantummetric.com carparts-app.quantummetric.com carparts-sync.quantummetric.com gateway.us.zip.co gateway.sand.us.zip.co *.clarity.ms *.mountain.com *.attn.tv tag.wknd.ai tag.bounceexchange.com assets.bounceexchange.com api.bounceexchange.com events.bouncex.net coupons.bounceexchange.com dev.bounceexchange.com *.cdnwidget.com *.cdnbasket.net dash.bounceexchange.com 'unsafe-inline' 'unsafe-eval' *.paypalobjects.com *.newrelic.com bat.bing.com carparts.btttag.com px.owneriq.net www.gstatic.com *.cnnx.io connect.facebook.net *.googleadservices.com *.aexp-static.com *.mastercard.com www.googletagservices.com guarantee-cdn.com cdn.quadpay.com cdn.us.zip.co cdn.shop.pe *.addshoppers.com cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com tagmanager.google.com assets.quadpay.com *.cpsimg.com cld.partsimg.com wac.edgecastcdn.net images-na.ssl-images-amazon.com events.attentivemobile.com stats.g.doubleclick.net *.googletagmanager.com *.online-metrix.net *.atdmt.com *.ojrq.net c.bing.com www.cartlink.net *.dotomi.com *.americanexpress.com *.creativecdn.com pay.google.com *.optimizely.com *.kustomerapp.com *.s3.amazonaws.com *.pubnub.com *.pubnub.net *.pubnub.io *.pndsn.com *.kustomerhostedcontent.com analytics.tiktok.com cdn.jsdelivr.net js.cnnx.link google.com global.ketchcdn.com cdn.ketchjs.com api.experianaperture.io cnstrc.com *.cnstrc.com *.fullstory.com *.aws.carparts-stag.io sandbox-codal.bloomreach.io carparts.bloomreach.io *.marker.io *.quadpay.com cdn.cookielaw.org *.onetrust.com *.chargebee.com localhost:* simpletire.com *.simpletire.com *.rudderlabs.com *.rudderstack.com *.redditstatic.com *.reddit.com *.taboola.com rtqntxk2fs.us-west-2.awsapprunner.com *.criteo.com *.mediavine.com *.outbrain.com *.teads.tv *.tremorhub.com *.yieldmo.com *.1rx.io *.omnitagjs.com *.rakuten.com *.linksynergy.com *.xg4ken.com *.ezojs.com *.ezodn.com *.ezoic.net *.ezoic.com *.tiktokw.us *.siteperformancetest.net siteperformancetest.net *.bing.net *.carparts-prod.io *.kargo.com *.liadm.com alocdn.com; frame-ancestors 'self' *.youtube.com *.netlify.com *.ytimg.com *.turnto.com *.symantec.com *.buysafe.com *.xtlo.net *.extole.io *.2mdn.net *.px-cloud.net *.wpengine.com *.bloomreach.io a.usbrowserspeed.com 2 frame-ancestors 'self' https://plan-admin.yamap.com https://dev-plan-admin.yamap.com 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; script-src-elem 'self' 'unsafe-inline' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; media-src 'self' https: data: blob:; frame-src 'self' https: data: blob:; child-src 'self' https: blob:; worker-src 'self' https: blob:; manifest-src 'self' https:; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; object-src 'none'; upgrade-insecure-requests; report-to default; 2 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval', form-action 'self', img-src 'self' data: https://www.google.com https://www.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://stats.g.doubleclick.net https://snap.licdn.com https://www.facebook.com https://connect.facebook.net https://*.linkedin.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-operators.s3-eu-west-1.amazonaws.com https://cdn.jsdelivr.net, script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://stats.g.doubleclick.net https://snap.licdn.com https://www.facebook.com https://connect.facebook.net https://*.linkedin.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://*.cloudfront.net https://api.userlike.com https://cdn.jsdelivr.net https://plausible.io https://web-sdk-cdn.singular.net, style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net, base-uri 'self', 2 frame-ancestors 'self' *.finder.com *.finder.com.au https://*.foxbusiness.com https://*.superguide.com.au; 2 frame-ancestors 'self' *.crestron.com *.crestron.com:81; 2 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; style-src-elem https: 'unsafe-inline'; media-src https: blob:; img-src https: data:; font-src https: data:; worker-src https: blob:; connect-src https: wss: 2 default-src https: data: wss: blob:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; worker-src blob: https:; frame-ancestors *.pageuppeople.com; 2 frame-ancestors 'self'; default-src 'self' https:; script-src 'self' https://*.adyen.com https://*.amazon-adsystem.com https://*.bc0a.com https://*.bing.com https://*.cdn-apple.com https://*.clarity.ms https://*.cquotient.com https://*.doubleclick.net https://*.evgnet.com https://*.eye-able.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hcaptcha.com https://*.igodigital.com https://*.instagram.com https://*.cdninstagram.com https://*.jentis.de https://*.klarna.com https://*.klarnacdn.net https://*.mynewsdesk.com https://*.onetrust.eu https://*.paypal.com https://*.playmobil.com https://*.teads.tv https://*.uc8.tv 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.adyen.com https://*.eye-able.com https://*.googleapis.com https://*.hcaptcha.com https://*.jentis.de 'unsafe-inline'; img-src 'self' data: https: blob: https://*.amazon-adsystem.com https://*.bigcontent.io https://*.bing.com https://*.doubleclick.net https://*.eye-able.com https://*.facebook.com https://*.instagram.com https://*.cdninstagram.com https://*.paypal.com https://*.paypalobjects.com https://*.playmobil.com; font-src 'self' data: https: https://*.eye-able.com https://*.gstatic.com; connect-src 'self' https: wss: https://*.bing.com https://*.clarity.ms https://*.cquotient.com https://*.doubleclick.net https://*.evergage.com https://*.eye-able.com https://*.google-analytics.com https://*.googletagmanager.com https://*.hcaptcha.com https://*.jentis.de https://*.paypal.com; frame-src 'self' https: blob: data: https://*.instagram.com; object-src 'none'; base-uri 'self'; form-action 'self' https:; report-uri /_csp-report; report-to csp-endpoint; 2 script-src 'self' *.mcneel.com *.rhino3d.com *.vimeo.com *.youtube.com blob: 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com stackpath.bootstrapcdn.com www.googletagmanager.com polyfill.io unpkg.com storage.googleapis.com *.google-analytics.com www.snapengage.com code.jquery.com cdn.jsdelivr.net api.mapbox.com cdn.skypack.dev d3js.org cse.google.com www.google.com maps.googleapis.com partner.talk.naver.com ssl.pstatic.net; font-src 'self' *.mcneel.com *.rhino3d.com *.vimeo.com *.youtube.com data: fonts.gstatic.com cdnjs.cloudflare.com unpkg.com storage.googleapis.com; style-src 'self' *.mcneel.com *.rhino3d.com *.vimeo.com *.youtube.com 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com hosteduxprod.blob.core.windows.net www.google.com ssl.pstatic.net; img-src 'self' *.mcneel.com *.rhino3d.com *.vimeo.com *.youtube.com https://* data:; connect-src 'self' *.mcneel.com *.rhino3d.com *.vimeo.com *.youtube.com api.mapbox.com *.google-analytics.com cdn.jsdelivr.net www.snapengage.com ui.customsearch.ai maps.googleapis.com wss://cloudzoo.rhino3d.com; frame-src 'self' *.mcneel.com *.rhino3d.com *.vimeo.com *.youtube.com www.google.com player.bilibili.com www.bilibili.com; frame-ancestors 'self' *.mcneel.com *.rhino3d.com *.vimeo.com *.youtube.com self; 2 script-src 'self' https://*.googletagmanager.com 'nonce-5351108162844659b66cbd2455f6ee2a' 'wasm-unsafe-eval'; object-src 'self'; img-src 'self' data: https: https://*.google-analytics.com https://*.googletagmanager.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://sso.trusted.visa.com 2 frame-ancestors 'self', upgrade-insecure-requests 2 default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.youtube-nocookie.com *.itzbund.de *.energiewechsel.de *.deutschland-machts-effizient.de *.app.powerbi.com *.karriere.bafa.de *.atlas.geomer-maps.de *.twitter.com api.signalize.com; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.youtube-nocookie.com; frame-src karriere.bafa.de atlas.geomer-maps.de app.powerbi.com *.energiewechsel.de *.deutschland-machts-effizient.de *.youtube-nocookie.com *.itzbund.de *.youtube.com *.twitter.com; img-src 'self' data: *.youtube.com *.youtube-nocookie.com *.itzbund.de *.openstreetmap.org *.twimg.com; connect-src 'self' *.itzbund.de; frame-ancestors 'self' *.kfw.de *.bafa.de *.energiewechsel.de; upgrade-insecure-requests; 2 default-src 'self' https://pretix.eu https://static.pretix.cloud; script-src 'self' 'sha256-+tmFggeXIPOAC2UgcQ3LW/gPHTkwyWg3/D6FOJ5BHGo=' 'unsafe-eval' https://matomo.rami.io https://pretix.eu https://static.pretix.cloud https://support.rami.io; object-src 'none'; frame-src 'self' https://matomo.rami.io https://pretix.eu https://static.pretix.cloud https://support.rami.io https://www.youtube-nocookie.com; style-src 'self' 'unsafe-inline' data: https://cdn.pretix.cloud https://pretix.eu https://static.pretix.cloud https://support.rami.io; connect-src 'self' https://cdn.pretix.cloud https://matomo.rami.io https://pretix.eu https://static.pretix.cloud https://support.rami.io ws://support.rami.io; img-src 'self' data: https://cdn.pretix.cloud https://matomo.rami.io https://pretix.eu https://static.pretix.cloud https://support.rami.io; font-src 'self' https://pretix.eu https://static.pretix.cloud; media-src 'self' data: https://cdn.pretix.cloud https://pretix.eu https://static.pretix.cloud; form-action 'self' https: https://pretix.eu 2 default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' *.deutsche-rentenversicherung.de *.openlayers.org openlayers.org *.openstreetmap.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.deutsche-rentenversicherung.de *.googleapis.com *.google.com *.gstatic.com *.openlayers.org openlayers.org *.openstreetmap.org; object-src 'self' *.deutsche-rentenversicherung.de multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.deutsche-rentenversicherung.de;child-src *.google.com *.gstatic.com *.youtube.com ; img-src 'self' data: *.deutsche-rentenversicherung.de *.google.com *.gstatic.com *.youtube.com *.openlayers.org openlayers.org *.openstreetmap.org; frame-ancestors 'self'; connect-src 'self' *.deutsche-rentenversicherung.de; 2 frame-ancestors 'self' https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud https://*.sitecorehosted.com;frame-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.yoshki.com https://www.youtube.com https://w.soundcloud.com https://s.company-target.com https://players.brightcove.net https://vimeo.com/ https://comms.dlapiper.com https://communications.us.dlapiper.com https://inform.dlapiper.com https://inform-new.dlapiper.com https://nzcomms.dlapiper.com https://player.vimeo.com https://omny.fm https://e.infogram.com https://*.flickr.com https://*.sitecorecloud.io https://assets1-usa.mkt.dynamics.com https://*.mkt.dynamics.com https://www.google.com https://recaptcha.google.com;connect-src 'self' 'unsafe-inline' http://cdn.bc0a.com https://ad.doubleclick.net https://l.sharethis.com https://www.google.com https://ixfd2-api.bc0a.com https://www.facebook.com https://stats.g.doubleclick.net https://tag-logger.demandbase.com https://px.ads.linkedin.com https://api.company-target.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://c.go-mpulse.net https://dlapiper.containers.piwik.pro https://dlapiper.piwik.pro https://trial-eum-clienttons-s.akamaihd.net https://s.go-mpulse.net https://*.akstat.io https://*.go-mpulse.net https://trial-eum-clientnsv4-s.akamaihd.net https://*.akamaihd.net https://analytics.google.com https://www.google-analytics.com https://*.flickr.com https://*.sitecorecloud.io https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets1-usa.mkt.dynamics.com https://*.mkt.dynamics.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://edge-platform.sitecorecloud.io https://fonts.googleapis.com;font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://d35vb5cccm4xzp.cloudfront.net http://cdn.bc0a.com https://cdn.bc0a.com https://buttons-config.sharethis.com https://cdn.cookielaw.org https://s.go-mpulse.net https://dlapiper.containers.piwik.pro https://www.youtube.com https://www.googletagmanager.com https://player.vimeo.com https://platform-api.sharethis.com https://js.hs-banner.com https://*.go-mpulse.net https://e.infogram.com https://tag.demandbase.com https://www.google-analytics.com https://snap.licdn.com https://connect.facebook.net https://siteimproveanalytics.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://*.flickr.com https://*.sitecorecloud.io https://pages.sitecorecloud.io https://xmc-dlapiperukl0cbf-dlapiperba5d-devd44d.sitecorecloud.io https://cdn.cookielaw.org/scripttemplates/otSDKStub.js https://dla-piper.cnddtid.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets1-usa.mkt.dynamics.com https://*.mkt.dynamics.com https://www.google.com https://www.gstatic.com;img-src 'self' 'unsafe-inline' data: https://cdn.cookielaw.org https://assets-usa.mkt.dynamics.com https://i.vimeocdn.com https://www.linkedin.com https://segments.company-target.com https://*.dlapiper.com https://scpreview.dlapiper.com https://track.hubspot.com https://61281921.global.siteimproveanalytics.io https://l.sharethis.com https://*.akstat.io https://www.googletagmanager.com https://cdn.bfldr.com https://dlapiper.vuturevx.com https://dlapiper.vuture.net https://px.ads.linkedin.com https://id.rlcdn.com https://www.google-analytics.com https://www.facebook.com https://www.google.co.in https://www.dlapiper.com https://live.staticflickr.com https://*.flickr.com https://*.sitecorecloud.io https://www.gstatic.com https://www.google.com; 2 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob:; 2 default-src 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' http://manifest.prod.boltdns.net http://house-fastly-signed-eu-west-1-prod.brightcovecdn.com http://platform.instagram.com http://cdns.gigya.com http://cdns.eu1.gigya.com; 2 frame-ancestors 'self' https://layout-cms.fox5atlanta.com; 2 default-src 'self' *.crazyegg.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.vercel.app *.onetrust.com *.cloudfront.net *.crazyegg.com *.sitecorecloud.io jsv3.recruitics.com bat.bing.com px.ads.linkedin.com static.ads-twitter.com www.clarity.ms connect.facebook.com cse.google.com cookie-cdn.1trust.app snap.licdn.com connect.facebook.net cdn.cookielaw.org cookie-cdn.cookiepro.com www.redditstatic.com tag.demandbase.com www.google-analytics.com ngc.avature.net www.googletagmanager.com www.youtube.com x.com platform.twitter.com t.co; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.vercel.app *.onetrust.com *.cloudfront.net *.crazyegg.com *.sitecorecloud.io *.agencyq.site jsv3.recruitics.com www.google.com bat.bing.com px.ads.linkedin.com static.ads-twitter.com connect.facebook.com cse.google.com cookie-cdn.1trust.app snap.licdn.com connect.facebook.net www.redditstatic.com www.googleadservices.com googleads.g.doubleclick.net tag.demandbase.com www.google-analytics.com cdn.cookielaw.org cookie-cdn.cookiepro.com ngc.avature.net www.googletagmanager.com code.jquery.com www.youtube.com x.com platform.twitter.com t.co; connect-src 'self' *.vercel.app *.northropgrumman.com *.azurewebsites.net *.azurefd.net *.onetrust.com *.crazyegg.com *.sitecorecloud.io *.doubleclick.net www.google.com www.google-analytics.com bat.bing.com px.ads.linkedin.com static.ads-twitter.com connect.facebook.com cse.google.com cookie-cdn.1trust.app snap.licdn.com connect.facebook.net analytics.google.com conversions-config.reddit.com www.redditstatic.com pixel-config.reddit.com www.googleapis.com rum.browser-intake-datadoghq.com api.company-target.com cdn.cookielaw.org cookie-cdn.cookiepro.com pagestates-tracking.crazyegg.com assets-tracking.crazyegg.com tracking.crazyegg.com ngc.avature.net vitals.vercel-insights.com x.com platform.twitter.com t.co; base-uri 'self'; form-action 'self' login.microsoftonline.us; font-src 'self' 'unsafe-inline' *.vercel.app *.crazyegg.com *.sitecorecloud.io *.azurefd.net ngc.avature.net use.typekit.net fonts.gstatic.com *.northropgrumman.com *.agencyq.site data:; style-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.vercel.app *.northropgrumman.com *.agencyq.site *.azurefd.net *.onetrust.com *.crazyegg.com *.sitecorecloud.io ngc.avature.net www.google.com use.typekit.net p.typekit.net fonts.googleapis.com; frame-src 'self' *.vercel.app *.doubleclick.net *.agencyq.site *.northropgrumman.com *.onetrust.com *.crazyegg.com portalstospace.com login.goservicepro.com jsv3.recruitics.com ngc.avature.net s.company-target.com td.doubleclick.net www.portalstospace.com www.youtube.com x.com platform.twitter.com t.co w.soundcloud.com data: blob:; img-src 'self' data: * northropgrumman-sb1.dam.aprimo.com s1.sb.previews.aprimo.com s.gravatar.com *.crazyegg.com *.wp.com/cdn.auth0.com/avatars; media-src 'self' *.vercel.app *.agencyq.site *.northropgrumman.com *.azurewebsites.net *.azurefd.net *.onetrust.com *.crazyegg.com *.sitecorecloud.io ngc.avature.net x.com platform.twitter.com t.co img.youtube.com data:; worker-src blob: *.crazyegg.com; 2 default-src 'self' data: https:;font-src 'self' https: data:;form-action 'self' https://*.dotmetrics.net;frame-ancestors https://cue.wanews.com.au 'self';img-src 'self' data: https:;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:;style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests;report-to csp-violations;report-uri https://thewest.com.au/csp-report;connect-src 'self' https: data: wss:;frame-src 'self' https:;media-src 'self' data: blob: https:;worker-src 'self' https: data: blob: 2 upgrade-insecure-requests; default-src 'self' https: wss: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2gis.com *.dv.team dostavista.ru *.helpdeskeddy.com *.mail.ru payecom.ru *.payecom.ru *.mindbox.ru *.tildaapi.com *.tildacdn.com *.yandex.com *.yandex.by *.yandex.kz *.yandex.ru smartcaptcha.yandexcloud.net *.targetads.io *.dostavista.ru yastatic.net realweb.g2afse.com blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.tildacdn.com *.tildaapi.com *.yandex.ru; img-src 'self' *.2gis.com *.dv.team *.googleusercontent.com dostavista.ru *.dostavista.ru *.mail.ru mc.yandex.com tildacdn.com *.tildacdn.com *.tildaapi.com *.yandex.ru yastatic.net realweb.g2afse.com sm.rtb.mts.ru data: blob:; font-src 'self' fonts.gstatic.com *.2gis.com *.tildacdn.com *.tildaapi.com yastatic.net data:; connect-src 'self' app.posthog.com *.2gis.com dostavista.ru *.dostavista.ru *.dv.team *.helpdeskeddy.com *.mail.ru *.mindbox.ru *.tildaapi.com *.tildacdn.com *.targetads.io wss://mc.yandex.ru mc.yandex.com *.yandex.com *.yandex.md *.yandex.by *.yandex.kz *.yandex.ru yastatic.net; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; media-src 'self' blog.manufact.pro; frame-ancestors 'self' https:; report-uri /csp-report 2 upgrade-insecure-requests; media-src https: data: blob:; img-src https: data: blob:; object-src 'none'; worker-src 'self' blob:; default-src https: blob: https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline' 'unsafe-eval' 2 frame-ancestors https://cms-prod.monotype.com https://monotype.mindtickle.com https://admin.mindtickle.com https://support.monotype.com https://content.monotype.com; report-uri /report-csp-violation 2 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' http://alteryx.lookbookhq.com https://alteryx.lookbookhq.com http://alteryx.pathfactory.com https://alteryx.pathfactory.com https://int.bender.rocks https://ayx-sandbox.bender.rocks https://flexo.bender.rocks https://fry.bender.rocks https://perf.bender.rocks https://aml.bender.rocks https://au1.alteryxcloud.com https://eu1.alteryxcloud.com https://preprod.alteryxcloud.com https://us1.alteryxcloud.com https://app.optimizely.com; 2 default-src 'self' *.mypurecloud.ie *.cloudflare.com *.cookiebot.com *.doubleclick.net *.hotjar.com *.hotjar.io *.licdn.com *.googletagmanager.com *.google.com *.google.lt *.google.ie *.gstatic.com *.googleapis.com *.google-analytics.com *.googlesyndication.com *.linkedin.com *.youtube.com *.jsdelivr.net *.tellq.io *.typekit.net *.wufoo.com *.trueengage.com *.github.io unpkg.com 'unsafe-inline' 'unsafe-eval' data: ws:; object-src 'none'; report-uri https://cspaudit.balt.net/_/csp-report; 2 default-src 'self' ajax.googleapis.com maxcdn.bootstrapcdn.com irs.tools.investis.com *.analytics.google.com *.google.com *.google-analytics.com fonts.gstatic.com; img-src 'self' 'unsafe-inline' * data: www.w3.org irs.tools.investis.com; frame-src 'self' *.investis.com *.youtube.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.youtube-nocookie.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com fonts.googleapis.com maxcdn.bootstrapcdn.com irs.tools.investis.com fonts.gstatic.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.investisdigital.com fast.fonts.net; font-src 'self' 'unsafe-inline' fonts.googleapis.com data: fonts.gstatic.com maxcdn.bootstrapcdn.com fast.fonts.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.google.com *.cloudflareinsights.com cloudflareinsights.com *.google.com *.google-analytics.com ajax.googleapis.com irs.tools.investis.com *.googletagmanager.com *.google-analytics.com *.investisdigital.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.lfeeder.com *.youtube.com youtube-nocookie.com; connect-src 'self' *.investisdigital.com ajax.googleapis.com *.googletagmanager.com *.analytics.google.com *.google.com *.google-analytics.com *.google-analytics.com maps.googleapis.com maps.google.com *.amazonaws.com stats.g.doubleclick.net; base-uri 'none'; 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'report-sample' 'strict-dynamic' https:; style-src 'report-sample' https: 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' data: https:; font-src 'self' https: data:; frame-src 'self' https: blob:; img-src 'self' data: https:; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; script-src-elem 'unsafe-inline' 'report-sample' https: 'self'; script-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'; form-action 'self' https://login.microsoftonline.com; style-src-elem 'self' 'unsafe-inline' https:; style-src-attr 'self' 'unsafe-inline' 2 default-src 'self'; img-src 'self' blob: data: https://vercel.live/ https://vercel.com https://api-frameworks.vercel.sh https://sockjs-mt1.pusher.com/ https://emoji.slack-edge.com/ https://vercel.fides-cdn.ethyca.com/ https://hebbkx1anhila5yf.public.blob.vercel-storage.com/ https://xurtccytrzafbfk3.public.blob.vercel-storage.com/ https://gvsmhepiuiax2e6y.public.blob.vercel-storage.com/ https://4o3mjgkuedjhm5we.public.blob.vercel-storage.com/ https://ss5vlswhqmiddtca.public.blob.vercel-storage.com/ https://7oslg1lqcbxvjpfm.public.blob.vercel-storage.com/ https://9z6zzmtcb9nt0fnu.public.blob.vercel-storage.com/ https://pdgvvgmkdvyeydso.public.blob.vercel-storage.com/ https://rzlr8f5n71kfl4us.public.blob.vercel-storage.com/ https://blobs.vusercontent.net https://uploads.vusercontent.net https://avatars.githubusercontent.com https://v0chat-agent-data-prod.s3.us-east-1.amazonaws.com https://v0chat-agent-data-staging.s3.us-east-1.amazonaws.com https://v0chat-agent-data-staging-noinvite-vtest314.s3.us-east-1.amazonaws.com https://v0chat-agent-data-prod-amazon.s3.us-east-1.amazonaws.com https://v0chat-agent-data-prod-noinvite-vtest314.s3.us-east-1.amazonaws.com; script-src 'self' blob: 'unsafe-inline' https://vercel.live/ https://vercel.com https://vercel.fides-cdn.ethyca.com/ https://va.vercel-scripts.com/v1/ https://js.stripe.com/ https://unpkg.com/react-scan/dist/auto.global.js https://cdn.jsdelivr.net/npm/react-scan/dist/auto.global.js https://cdn.jsdelivr.net/npm/@huggingface/ *.cr-relay.com; style-src 'self' 'unsafe-inline' data: https://vercel.live/ https://vercel.fides-cdn.ethyca.com/ https://fonts.googleapis.com/; font-src 'self' https://fonts.gstatic.com https://vercel.live https://assets.vercel.com data:; connect-src 'self' https://v0.app https://v0sdk.com https://vercel.live/ https://vercel.com https://*.pusher.com/ https://blob.vercel-storage.com https://*.blob.vercel-storage.com https://blobs.vusercontent.net https://uploads.vusercontent.net wss://*.pusher.com/ wss://*.vercel.run https://fides-vercel.us.fides.ethyca.com/api/v1/ https://cdn-api.ethyca.com/location https://privacy-vercel.us.fides.ethyca.com/api/v1/ https://vercel.com/.well-known/otel/metrics https://huggingface.co/onnx-community/ https://cas-bridge.xethub.hf.co/xet-bridge-us/ https://cdn.jsdelivr.net/npm/@huggingface/ *.cr-relay.com https://*.s3.us-east-1.amazonaws.com; frame-src 'self' http://localhost:* https://*.vusercontent.net/ https://*.lite.vusercontent.net/ https://generated.vusercontent.net/ https://*.vercel.run/ https://*.vercel.app/ https://*.vercel.sh/ https://vercel.live/ https://vercel.com https://vercel.fides-cdn.ethyca.com/ https://js.stripe.com/ https://*.accounts.dev https://*.clerk.accounts.dev https://ops.askchapter.org https://*.auth0.com https://*.auth0c.com https://*.workos.com; frame-ancestors 'self' https://notion.site https://embed.notion.co notion://www.notion.so https://www.notion.so https://notion.so https://*.notion.so notion://notion.so https://inflight.co https://*.inflight.co https://v0-git-shu-e7sf.vercel.sh http://localhost:3000; media-src 'self' https://hebbkx1anhila5yf.public.blob.vercel-storage.com/ https://xurtccytrzafbfk3.public.blob.vercel-storage.com/ https://pdgvvgmkdvyeydso.public.blob.vercel-storage.com/ https://rzlr8f5n71kfl4us.public.blob.vercel-storage.com/ https://blobs.vusercontent.net https://uploads.vusercontent.net; report-uri /api/csp-report; 2 frame-ancestors 'self' https://*.univ-lille.fr; 2 frame-ancestors 'self' *.winfuture.de; 2 frame-ancestors 'self' https://woobox.com/ https://*.secondstreetapp.com/ https://products.bestreviews.com/ https://www.channel4000.com/ https://kdvr.com/ https://kfor.com/ https://fox2now.com/ https://fox5sandiego.com/ https://ktla.com/ https://fox40.com/ https://fox4kc.com/ https://wgntv.com/ https://fox8.com/ https://khon2.com/ https://klfy.com/ https://kron4.com/ https://krqe.com/ https://wavy.com/ https://wfla.com/ https://wivb.com/ https://wkrg.com/ https://wkrn.com/ https://woodtv.com/ https://wwlp.com/ https://channel4000.com/ https://koin.com/ https://wreg.com/ https://wric.com/ https://fox59.com/ https://wspa.com/ https://wgno.com/ https://myfox8.com/ https://nbc4i.com/ https://kxan.com/ https://wtnh.com/ https://stage.nxstrib.com/ https://nxs-staging.go-vip.net/ https://wate.com/ https://wkbn.com/ https://cbs17.com/ https://wpri.com/ https://wsav.com/ https://whnt.com/ https://who13.com/ https://abc27.com/ https://cbs42.com/ https://wjhl.com/ https://cw33.com/ https://cw39.com/ https://localdvm.com/watch-dcw50/ https://wgnradio.com/ https://phl17.com/ https://cbs4indy.com/ https://borderreport.com/ https://everythinglubbock.com/ https://myhighplains.com/ https://nxsttv-stage.go-vip.net/ https://nxstrib-com-staging.go-vip.net/ https://myarklamiss.com/ https://kark.com/ https://siouxlandproud.com/ https://keloland.com/ https://easttexasmatters.com/ https://texomashomepage.com/ https://kget.com/ https://yourbigsky.com/ https://8newsnow.com/ https://mysterywire.com/ https://fox16.com/ https://conchovalleyhomepage.com/ https://yourbasin.com/ https://nwahomepage.com/ https://ozarksfirst.com/ https://westernslopenow.com/ https://yourcentralvalley.com/ https://fourstateshomepage.com/ https://ksnt.com/ https://ksn.com/ https://bigcountryhomepage.com/ https://arklatexhomepage.com/ https://ktsm.com/ https://abc4.com/ https://valleycentral.com/ https://kxnet.com/ https://fox21news.com/ https://fox44news.com/ https://wane.com/ https://binghamtonhomepage.com/ https://wboy.com/ https://pahomepage.com/ https://wbtw.com/ https://counton2.com/ https://wcia.com/ https://wdhn.com/ https://wdtn.com/ https://localdvm.com/ https://tristatehomepage.com/ https://mytwintiers.com/ https://mychamplainvalley.com/ https://wearegreenbay.com/ https://wfxrtv.com/ https://cnyhomepage.com/ https://ourquadcities.com/ https://wjtv.com/pine-belt-news/ https://wjbf.com/ https://yourerie.com/ https://upmatters.com/ https://wjtv.com/ https://fox46.com/ https://wiproud.com/ https://wlns.com/ https://mypanhandle.com/ https://centralillinoisproud.com/ https://foxlexington.com/ https://wnct.com/ https://cenlanow.com/ https://wowktv.com/ https://wvillustrated.com// https://mystateline.com/ https://wrbl.com/ https://rochesterfirst.com/ https://localsyr.com/ https://wearecentralpa.com/ https://news10.com/ https://wtrf.com/ https://mywabashvalley.com/ https://brproud.com/ https://wvnstv.com/ https://informnny.com/ https://wytv.com/ https://pix11.com/ https://www.snntv.com/ https://www.wavy.com/ https://cw33.com/ https://www.dcnewsnow.com/ https://www.ketk.com/ https://www.ktalnews.com/ https://www.qcnews.com/ https://fox56news.com/ https://www.wtaj.com/ https://www.newsnationnow.com/ https://thehill.com/; 2 frame-ancestors 'self' https://app.optimizely.com 2 frame-ancestors 'self' https://*.toyota-europe.com https://webvisor.com https://lexus-dxp.dobit.com https://lexustest.dobit.com http://localhost:88; 2 img-src https://syndication.twitter.com data: https://utmb-cdn.azureedge.net https://bbox.blackbaudhosting.com 'self' https://cdn.utmb.edu https://www.utmb.edu https://www.utmbhealth.com https://gsbs.utmb.edu https://utmbhealth.razuna.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.youtube.com https://marvel-b1-cdn.bc0a.com https://marvel-processor.bc0a.com https://67412.global.siteimproveanalytics.io https://curator-assets.b-cdn.net https://um.simpli.fi https://utmbstorage.blob.core.windows.net https://static.ctctcdn.com https://cdn.yoshki.com https://staticmap.concept3d.com https://public.tableau.com https://i.vimeocdn.com https://i.ytimg.com https://mcusercontent.com https://cdn.ymaws.com https://anesth.utmb.edu https://acrm.org https://www.aamc.org http://uwgalv.org https://acestoassets.org https://www.galvestonartscenter.org https://dim.mcusercontent.com https://www.ilo.org https://www.nlm.nih.gov https://cdn2.percipio.com http://www.galveston.com https://support.content.office.net https://images-na.ssl-images-amazon.com https://www.orangesmile.com https://www.abos.org https://i1.wp.com/wavelengthmedical.com https://i0.wp.com/wavelengthmedical.com https://www.dropbox.com https://www.facs.org https://serve.uberads.com https://www.nidcd.nih.gov https://www.medicaldiscoverynews.com https://img.photobucket.com https://uwgalv.org https://www.freewebs.com https://www.galveston.com https://api.tiles.virtualearth.net https://assets.section508.gov https://commons.wikimedia.org https://eep.io https://guynir1.files.wordpress.com https://insight.adsrvr.org https://liveutmb.sharepoint.com https://digitalasset.intuit.com https://downloads.mailchimp.com https://chat-us.libanswers.com https://media-cldnry.s-nbcnews.com https://log.pinterest.com https://payments.blackbaud.com https://platform-cdn.sharethis.com https://sync.sharethis.com https://www9.utmb.edu https://ad.doubleclick.net https://collector-12155.tvsquared.com https://www.google.com blob: https://apps.ideal-logic.com https://researchexperts.utmb.edu https://www.googletagmanager.com https://worldwind25.arc.nasa.gov https://unpkg.com https://d2jv02qf7xgjwx.cloudfront.net https://utmbhealth.com https://app.frevvo.com https://events.utmb.edu https://d3e1o4bcbhmj8g.cloudfront.net https://localist-images.azureedge.net ; form-action 'self'; script-src https://utmb-cdn.azureedge.net https://www.youtube.com https://siteimproveanalytics.com https://meps.ahrq.gov https://fs22.formsite.com https://bat.bing.com https://bbox.blackbaudhosting.com https://payments.blackbaud.com https://cdn.jsdelivr.net https://tag.brandcdn.com 'self' 'unsafe-inline' data: blob: https://www.google.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.gstatic.com https://ajax.googleapis.com https://www.googleadservices.com https://cdn.utmb.edu https://www.utmb.edu https://www.utmbhealth.com https://doctors.utmbhealth.com https://search.utmb.edu https://utmb.hosted.panopto.com https://cdn.bc0a.com https://consents-cf.bc0a.com https://dsrportal-cdn.bc0a.com https://platform.twitter.com https://connect.facebook.net https://cdn.curator.io https://tag.simpli.fi https://tags.srv.stackadapt.com https://i.simpli.fi https://chimpstatic.com https://static.addtoany.com https://www.statcounter.com https://downloads.mailchimp.com https://mc.us14.list-manage.com https://api3.libcal.com https://askus.utmb.edu https://www.hcup-us.ahrq.gov https://www.icpsr.umich.edu https://cma.ahrq.gov https://embed.typeform.com https://ocrportal.hhs.gov https://mychart.utmb.edu https://platform-api.sharethis.com https://peopledirectory.uth.tmc.edu https://www.acs-education.com https://player.vimeo.com https://corporate.visa.com https://my.americanheart.org https://www.nlm.nih.gov https://secure.touchnet.net https://www.acponline.org https://webforms.utmb.edu https://dx.doi.org https://s7.addthis.com https://m.addthis.com https://api-public.addthis.com https://z.moatads.com https://cdn.credly.com https://www.swarminteractive.com https://assets.pinterest.com https://static.ctctcdn.com https://cdnjs.cloudflare.com https://uu.diva-portal.org https://s3.amazonaws.com https://www.heart.org https://cdn.yoshki.com https://www2.tsl.state.tx.us https://home.absurgery.org https://www.instagram.com https://cdn01.basis.net https://collector-12155.tvsquared.com https://static.hotjar.com https://180277.tctm.co https://script.hotjar.com https://adservices.brandcdn.com https://tools.cdc.gov https://www.cdc.gov https://public.tableau.com https://www.novitas-solutions.com https://www.imleagues.com https://www.medicaldiscoverynews.com https://az416426.vo.msecnd.net https://ajax.aspnetcdn.com https://maxcdn.bootstrapcdn.com https://cdn.datatables.net https://code.highcharts.com https://code.jquery.com https://mb.moatads.com https://softchalkcloud.com https://www.audacy.com https://babe71tl.micpn.com https://liveutmb-my.sharepoint.com https://chat-us.libanswers.com https://buttons-config.sharethis.com https://grmychart.utmb.edu https://t.sharethis.com https://vwp1mychart01.utmb.edu https://utrgv.utmb.edu https://grutrgv.utmb.edu https://www9.utmb.edu https://googleads.g.doubleclick.net https://apps.ideal-logic.com https://api.allorigins.win https://webformstest.utmb.edu https://cdn.rlets.com https://worldwind.arc.nasa.gov https://unpkg.com https://mychart-sup2.utmb.edu https://researchexperts.utmb.edu https://app.frevvo.com https://events.utmb.edu https://d3e1o4bcbhmj8g.cloudfront.net https://localist-images.azureedge.net https://widget.tagembed.com https://vwp5mychart01.utmb.edu https://vwp5mychart02.utmb.edu https://vwp5mychart03.utmb.edu https://vwp5mychart04.utmb.edu 'unsafe-eval'; frame-ancestors https://www.utmbhealth.com https://www.utmb.edu https://www.today.com https://www.lightboxcdn.com https://www9.utmb.edu https://utmbhealth.com https://utmb.edu https://map.concept3d.com https://findadoc-dev-blazor.azurewebsites.net https://doctors.utmbhealth.com 'self' https://utmb-providersearch-staging.azurewebsites.net https://app.frevvo.com https://localist-images.azureedge.net; connect-src 'self' 'unsafe-inline' data: https://www.google-analytics.com https://www.utmb.edu https://ixfd2-api.bc0a.com https://api.curator.io https://tags.srv.stackadapt.com https://c.statcounter.com https://api3.libcal.com https://listgrowth.ctctcdn.com https://login.microsoftonline.com https://mychart.utmb.edu https://liveutmb-my.sharepoint.com https://chat-us.libanswers.com https://www.today.com https://www.lightboxcdn.com https://l.sharethis.com https://payments.blackbaud.com https://bcp.crwdcntrl.net https://www9.utmb.edu https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://apps.ideal-logic.com https://api.allorigins.win https://ad.doubleclick.net https://utmb.edu https://www.utmbhealth.com https://utmbhealth.com https://worldwind26.arc.nasa.gov https://geojson-maps.kyd.au/json/world.geo.json https://utmb-cdn.azureedge.net https://findadoc-dev-blazor.azurewebsites.net https://doctors.utmbhealth.com https://cdn.bc0a.com https://platform-api.sharethis.com https://utmb-providersearch-staging.azurewebsites.net https://researchexperts.utmb.edu https://static.ctctcdn.com https://visitor2.constantcontact.com https://cookie-cdn.bc0a.com https://app.frevvo.com https://events.utmb.edu https://d3e1o4bcbhmj8g.cloudfront.net https://localist-images.azureedge.net https://cloud.taggbox.com; style-src https://utmb-cdn.azureedge.net https://bbox.blackbaudhosting.com 'self' 'unsafe-inline' data: https://cdn.utmb.edu https://fonts.googleapis.com https://ajax.googleapis.com https://www.gstatic.com https://www.utmb.edu https://www.utmbhealth.com https://cdn.curator.io https://tags.srv.stackadapt.com http://ffoodd.github.io https://use.fontawesome.com https://cdn-images.mailchimp.com https://webforms.utmb.edu https://maxcdn.bootstrapcdn.com https://static.ctctcdn.com https://mychart.utmb.edu https://cdn.datatables.net https://cdnjs.cloudflare.com https://code.jquery.com https://doctors.utmbhealth.com https://stackpath.bootstrapcdn.com https://downloads.mailchimp.com https://chat-us.libanswers.com https://grmychart.utmb.edu https://payments.blackbaud.com https://grutrgv.utmb.edu https://utrgv.utmb.edu https://www9.utmb.edu https://apps.ideal-logic.com https://mychart-sup2.utmb.edu https://app.frevvo.com https://events.utmb.edu https://d3e1o4bcbhmj8g.cloudfront.net https://localist-images.azureedge.net https://cloud.taggbox.com ; font-src data: 'self' https://cdn.utmb.edu https://utmb-cdn.azureedge.net https://cloud.taggbox.com https://netdna.bootstrapcdn.com 2 frame-ancestors 'self' *.connectmeinforma.com dev.totem-app.com 2 default-src 'self' 'unsafe-inline' jobs.b-ite.com; base-uri 'self'; connect-src 'self' *.preview.kkn.zd.intranet.bund.de wss://chat.userlike.com chat.userlike.com wss://umd.userlike.com userlike.com *.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.preview.kkn.zd.intranet.bund.de piwik.itzbund.de *.cloudfront.net data-8ec206415a.dnb.de jobs.b-ite.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.googleapis.com piwik.itzbund.de script.ioam.de *.de.ioam.de s.ytimg.com static.b-ite.com cs-assets.b-ite.com ajax.googleapis.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.cloudfront.net data-8ec206415a.dnb.de userlike-cdn-umm.b-cdn.net; object-src 'self' piwik.itzbund.de; media-src 'self' *.wikimedia.org *.aktion-mensch.de *.sample-videos.com *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de youtu.be files.dnb.de c18004-vod.l.core.cdn.streamfarm.net *.cloudfront.net; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de my.matterport.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de *.tile.openstreetmap.org api.userlike.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.cloudfront.net *.gsb.dev.materna.net *.preview.kkn.zd.intranet.bund.de *.preview.kkn.zd.intranet.bund.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de *.cloudfront.net userlike-cdn-umm.b-cdn.net; frame-ancestors *.gsb.dev.materna.net *.preview.kkn.zd.intranet.bund.de piwik.itzbund.de 2 frame-ancestors 'self' https://*.stanwith.me https://*.stan.store 2 default-src 'self' undefined https://sterdisplayhub.azurewebsites.net https://nmonpoendpoint.2cnt.net https://apis.dev.avrotros.io https://apis.avrotros.io https://npotag.npo-data.nl https://*.run.app/ https://*.avrotros.io https://*.avrotros.nl https://*.avrotros.site ws://localhost:* ws://0.0.0.0:* http://localhost:* http://0.0.0.0:* blob: undefined https://sterdisplayhub.azurewebsites.net https://nmonpoendpoint.2cnt.net https://apis.dev.avrotros.io https://apis.avrotros.io https://npotag.npo-data.nl https://*.run.app/ https://*.avrotros.io https://*.avrotros.nl https://*.avrotros.site ws://localhost:* ws://0.0.0.0:* http://localhost:* http://0.0.0.0:* https://*.googleusercontent.com https://*.google-analytics.com https://www.googletagmanager.com https://adscience-nocookie.nl https://stats.g.doubleclick.net https://*.google.com https://*.npo.nl https://*.fontawesome.com https://*.gstatic.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.youtube.com https://*.vimeo.com https://*.vimeocdn.com/ https://*.instagram.com https://*.ster.nl https://*.optoutadvertising.com https://www.riddle.com https://*.akamaized.net; font-src * data: https://fonts.gstatic.com https://*.fontawesome.com; img-src * data: 'report-sample'; script-src data: 'unsafe-inline' 'unsafe-eval' undefined https://sterdisplayhub.azurewebsites.net https://nmonpoendpoint.2cnt.net https://apis.dev.avrotros.io https://apis.avrotros.io https://npotag.npo-data.nl https://*.run.app/ https://*.avrotros.io https://*.avrotros.nl https://*.avrotros.site ws://localhost:* ws://0.0.0.0:* http://localhost:* http://0.0.0.0:* https://*.googleusercontent.com https://*.google-analytics.com https://www.googletagmanager.com https://adscience-nocookie.nl https://stats.g.doubleclick.net https://*.google.com https://*.npo.nl https://*.npo-data.nl https://tag.aticdn.net https://nmonpoendpoint.2cnt.net https://kmnl.tns-nipo.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.youtube.com https://*.instagram.com https://*.ster.nl https://*.optoutadvertising.com https://*.ampproject.net https://cdn.ampproject.org https://polyfill.io https://cdn.jotfor.ms https://*.fontawesome.com https://*.gstatic.com https://www.riddle.com 'report-sample'; style-src * 'unsafe-inline' 'report-sample'; media-src * blob: undefined https://sterdisplayhub.azurewebsites.net https://nmonpoendpoint.2cnt.net https://apis.dev.avrotros.io https://apis.avrotros.io https://npotag.npo-data.nl https://*.run.app/ https://*.avrotros.io https://*.avrotros.nl https://*.avrotros.site ws://localhost:* ws://0.0.0.0:* http://localhost:* http://0.0.0.0:*; frame-src *; object-src https://*.spotify.com https://media-service.vara.nl https://media.vara.nl https://player.vimeo.com https://w.soundcloud.com https://*.powned.nl https://radiobox2.omroep.nl https://icij.org https://projects.icij.org https://medicaldevices.icij.org https://medicaldevices-staging.cloud.icij.org https://*.tweedekamer.nl https://players.brightcove.net https://localfocus2.appspot.com https://localfocuswidgets.net https://*.calconic.com https://public.flourish.studio https://flo.uri.sh; base-uri 'self'; form-action 'self' 'report-sample'; manifest-src 'self' https://accounts.google.com; worker-src 'self' 2 default-src c.wgr.de 'self'; script-src c.wgr.de 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com maps.googleapis.com https://l.ecn-ldr.de; style-src c.wgr.de 'self' 'unsafe-inline'; object-src 'self'; img-src c.wgr.de 'self' data: www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.at https://*.google.ch https://*.google.lu https://googleads.g.doubleclick.net https://www.google.com https://google.com https://www.facebook.com d32wqyuo10o653.cloudfront.net *.gstatic.com *.econda-monitor.de; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.facebook.com https://www.youtube-nocookie.com; child-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.facebook.com https://www.youtube-nocookie.com; font-src c.wgr.de 'self' data:; connect-src https://mein.westermann.de/ 'self' www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.at https://*.google.ch https://*.google.lu https://www.facebook.com https://graph.facebook.com *.crosssell.info *.econda-monitor.de 2 default-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' s.exist.ru yandex.ru yastatic.net ajax.googleapis.com *.yandex.net yandex.st code.createjs.com apis.google.com www.gstatic.com www.google.com ssl.gstatic.com www.googletagmanager.com *.facebook.net www.googleadservices.com vk.com st.top100.ru www.google-analytics.com *.yandex.ru *.adfox.ru otclick-adv.ru cdn.otclick-adv.ru *.exist.ru *.exist.parts telegram.org storage.yandexcloud.net www.sravni.ru cdn.jsdelivr.net *.cdn.ngenix.net cdn.botfaqtor.ru; img-src * 'unsafe-inline' data:; font-src * 'unsafe-inline'; connect-src * 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self' *.exist.ru tc.exist.ru yastatic.net yandex.ru yandex.kz yandex.ua yandex.by *.yandex.ru *.yandex.kz *.yandex.by *.yandex.ua api-maps.yandex.ru suggest-maps.yandex.ru *.maps.yandex.net www.facebook.com staticxx.facebook.com vk.com www.google.com api-maps.yandex.ru www.elcats.ru www.japancats.ru www.youtube.com oauth.telegram.org otclick-adv.ru cdn.otclick-adv.ru www.sravni.ru storage.yandexcloud.net c.botfaqtor.ru checks.botfaqtor.ru blocked.botfaqtor.ru; media-src 'self' data: *.yandex.net *.yandex.ru; frame-ancestors 'self' https://webvisor.com https://metrica.yandex.ru https://metrika.yandex.ru; 2 frame-src 'self' *.eolo.it *.youtube.com *.googletagmanager.com *.doubleclick.net *.trustpilot.com *.creativecdn.com *.google.com *.facebook.com *.vimeo.com *.abtasty.com; frame-ancestors 'self'; upgrade-insecure-requests; 2 frame-ancestors https://app.contentstack.com/ 2 frame-ancestors 'self' https://www.virginvoyages.com https://prod.virginvoyages.com https://auth.firstmates.com https://www.firstmates.com https://tm.app.virginvoyages.com https://virginvoyages--c.vf.force.com; 2 frame-ancestors 'self' edge.fullstory.com rs.fullstory.com 2 frame-ancestors 'self' app.ynab.com 2 frame-ancestors 'self' *.commscope.com *.ruckusnetworks.com *.punchout2go.com *.ariba.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' https: data: blob:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://auth.privy.io https://rarible.com https://rarible.fun https://testnet.rarible.fun https://camp.rarible.fun https://beta-olga.rarible.fun https://beta-andre.rarible.fun https://beta-irina.rarible.fun https://beta-sigma.rarible.fun https://beta-shmeta.rarible.fun https://beta-igor.rarible.fun; child-src 'self' https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://www.crossmint.com https://www.googleadservices.com https://googleads.g.doubleclick.net; frame-src 'self' https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://www.crossmint.com https://challenges.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net; connect-src 'self' blob: https://auth.privy.io wss://relay.walletconnect.com wss://relay.walletconnect.org wss://www.walletlink.org https://*.rpc.privy.systems https://explorer-api.walletconnect.com https:; worker-src 'self' blob:; manifest-src 'self' 2 frame-ancestors 'self' https://eperfect.perfectcorp.com https://ir.perfectcorp.com https://www.perfectcorp.com https://admin.perfectcorp.com; 2 frame-ancestors 'self' https://layout-cms.fox13news.com; 2 frame-ancestors 'self' *.thalesgroup.com *.imperva.com 2 frame-ancestors 'self' https://app.contentful.com/ https://cms-cf-pdp-integration.knauf.digital/ 2 default-src 'none'; script-src 'self' 'unsafe-inline' code.etracker.com www.etracker.de default.signalize.com api.signalize.com; img-src 'self' data: api.signalize.com cdn.signalize.com i.ytimg.com; style-src 'self' 'unsafe-inline' api.signalize.com code.etracker.com; font-src 'self' data: api.signalize.com; connect-src 'self' www.etracker.de api.signalize.com; frame-src 'self' www.youtube-nocookie.com; form-action 'self'; base-uri 'self'; media-src 'self'; frame-ancestors https://newapp.etracker.com; 2 frame-ancestors 'self' https://*.uchealth.org 2 default-src 'self' data: blob: *.mega.co.nz *.mega.nz *.mega.io http://*.mega.nz http://*.mega.io; script-src 'self' *.mega.co.nz *.mega.nz *.mega.io https://*.googletagmanager.com https://analytics.google.com data: blob: https://www.redditstatic.com https://connect.facebook.net https://staticxx.facebook.com; connect-src *.mega.co.nz *.mega.nz *.mega.io http://*.mega.nz http://*.mega.io https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://www.reddit.com https://www.redditstatic.com https://stats.g.doubleclick.net https://connect.facebook.net https://graph.facebook.com https://www.facebook.com https://m.facebook.com https://pixel.facebook.com https://pixel-config.reddit.com; style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz *.mega.io data: blob:; frame-src 'self' *.megapay.nz mega: *.megaad.nz https://mega.nz/ https://mega.io/; img-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob: mega.nz https://www.reddit.com https://www.redditstatic.com https://www.facebook.com https://connect.facebook.net https://static.xx.fbcdn.net https://www.facebook.com https://m.facebook.com https://staticxx.facebook.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://alb.reddit.com; frame-ancestors 'self' https://mega.nz/; child-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob: mega.nz; 2 default-src 'self' ; base-uri 'self' ; font-src 'self' data: *.buzzsprout.com *.marketo.com *.hotjar.com *.trustarc.com fonts.gstatic.com *.teads.tv *.pathfactory.com *.wistia.com *.userway.org ; style-src 'self' 'unsafe-inline' *.marketo.com *.coveo.com engage.aveva.com tagmanager.google.com fonts.googleapis.com *.teads.tv *.pathfactory.com *.userway.org ; object-src 'none' ; worker-src 'self' blob: ; connect-src 'self' *.6sc.co *.google-analytics.com *.analytics.google.com *.doubleclick.net *.googlesyndication.com *.spotify.com *.podscribe.com *.wistia.com *.wistia.net *.clarity.ms *.linkedin.com *.accountinsight.cloud *.marketo.com *.mktoresp.com *.coveo.com *.sharethis.com *.buzzsprout.com *.crazyegg.com *.b0e8.com *.bc0a.com *.company-target.com *.hotjar.com:* wss://*.hotjar.com *.hotjar.io:* *.everesttech.net *.adobedtm.com *.omtrdc.net *.demdex.net *.addthis.com *.crwdcntrl.net *.teads.tv *.tealiumiq.com *.adsrvr.org *.trustarc.com *.demandbase.com *.google.com engage.aveva.com smetrics.aveva.com *.leadspace.com *.facebook.com *.reddit.com *.bizible.com *.pathfactory.com *.sentry-cdn.com *.userway.org ipapi.co *.ipapi.co *.adobedc.net ; img-src 'self' data: *.googlesyndication.com *.6sc.co *.podscribe.com *.33across.com *.sharethis.com *.adsrvr.org *.doubleclick.net *.1rx.io *.typepixel.com *.linkedin.com *.bing.com *.ml-api.io *.adroll.com *.clarity.ms *.buzzsprout.com *.coveo.com *.google-analytics.com *.analytics.google.com *.hotjar.com *.trustarc.com *.twitter.com *.aveva.com *.gstatic.com *.googletagmanager.com *.adnxs.com *.yoyi.com.cn *.company-target.com *.facebook.com *.reddit.com *.demdex.net *.bidr.io *.omtrdc.net *.everesttech.net *.adobedtm.com *.2o7.net *.mathtag.com *.bidswitch.net *.casalemedia.com *.rlcdn.com *.rubiconproject.com *.openx.net *.pubmatic.com *.outbrain.com *.yahoo.com *.3lift.com *.taboola.com *.teads.tv *.google.com *.google.co.in *.google.com.mx *.google.co.uk *.bizible.com *.bizibly.com *.pathfactory.com *.wistia.com *.userway.org ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.6sc.co *.cloudfront.net *.o11.tech *.aveva.com *.marketo.com *.marketo.net *.coveo.com *.clarity.ms *.adroll.com *.sharethis.com *.adsrvr.org *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com *.gvt1.com *.crazyegg.com *.b0e8.com *.bc0a.com *.brightedge.com *.demandbase.com *.hotjar.com *.cloudflare.com *.cloudflareinsights.com *.jsdelivr.net *.moatads.com *.bing.com *.leadspace.com *.thinglink.me *.trustarc.com *.accountinsight.cloud *.ceros.com okt.to *.twitter.com *.ads-twitter.com *.oktopost.com *.driftt.com *.facebook.com *.facebook.net *.licdn.com noembed.com *.adobe.com *.everesttech.net *.adobedtm.com *.demdex.net *.wistia.com *.vimeo.com *.youtube.com *.ytimg.com *.addthis.com *.addthisedge.com *.teads.tv *.tiqcdn.com *.tealiumiq.com *.pdst.fm *.wistia.net *.bizible.com *.hlx.page *.mktoweb.com *.pathfactory.com *.sentry-cdn.com *.userway.org *.redditstatic.com *.reddit.com ; frame-src 'self' *.dwcdn.net *.flourish.studio *.drift.click *.driftt.com *.mediavalet.com *.adroll.com *.adsrvr.org *.sharethis.com *.doubleclick.net *.buzzsprout.com *.marketo.com *.adobe.com *.google.com *.googletagmanager.com *.hotjar.com *.thinglink.com *.aveva.com *.trustarc.com *.w3.org *.ceros.com *.demdex.net *.facebook.com *.youtube.com *.wistia.net *.addthis.com *.vimeo.com *.slideshare.net *.mathtag.com *.teads.tv *.run.app *.company-target.com *.pathfactory.com *.userway.org ; frame-ancestors 'self' *.osisoft.com *.lookbookhq.com *.pathfactory.com *.aveva.com *.teads.tv ; media-src 'self' https: blob: data: ; 2 default-src 'self' https://*.googleapis.com https://*.gstatic.com https://themes.googleusercontent.com/ https://*.google.com https://*.google-analytics.com https://tv.uvigo.es https://syndicatedsearch.goog/ https://*.adtrafficquality.google https://app.unigow.com https://*.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.unigow.com https://*.google.com https://*.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://addtocalendar.com https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.js https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://addtocalendar.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.css; img-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.adtrafficquality.google; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com; object-src 'none'; frame-ancestors 'self'; form-action 'self'; 2 frame-ancestors 'self' https://kartra.com https://kartra.kartra.com https://app.kartra.com; 2 frame-ancestors 'self' https://hub.bmc.com; 2 sandbox; default-src 'unsafe-inline' data:; script-src 'none' 2 default-src 'self' cdn.segment.com myob.com *.myob.com *.myobdev.com *.ninetailed.co *.clarity.ms *.bing.com *.linkedin.com *.reddit.com connect.facebook.net *.facebook.com *.fullstory.com *.segmentapis.com *.google.com.au *.redditstatic.com d.impactradius-event.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.googletagmanager.com *.hsforms.net *.hsforms.com *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hubspotfeedback.com *.hs-analytics.net *.segment.io *.hsappstatic.net *.clickagy.com *.adsrvr.org *.zoominfo.com feedback.hubapi.com *.survicate.com snap.licdn.com *.pinimg.com *.google.com *.google-analytics.com fast.wistia.net *.mypurecloud.com.au *.newrelic.com *.pinterest.com *.zi-scripts.com *.doubleclick.net *.wistia.com *.youtube.com *.youtu.be *.jsdelivr.net *.algolia.io *.algolia.net *.algolia.com alg.li *.algolianet.com *.ctfassets.net *.sentry-cdn.com *.sentry.io *.contentful.com *.survicate-cdn.com *.googleapis.com *.zdassets.com *.zendesk.com *.googleadservices.com myob.74xz8u.net d.impct.site google.com recaptcha.net *.gstatic.com d34r8q7sht0t9k.cloudfront.net ipv4.pdscrb.com tracking-api.g2.com cdn.veritonic.com *.veritonicmetrics.com tr.capterra.com bzrcdn.openai.com bzr.openai.com ws: blob:; script-src 'self' cdn.segment.com myob.com *.myob.com *.myobdev.com *.ninetailed.co *.clarity.ms *.bing.com *.linkedin.com *.reddit.com connect.facebook.net *.facebook.com *.fullstory.com *.segmentapis.com *.google.com.au *.redditstatic.com d.impactradius-event.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.googletagmanager.com *.hsforms.net *.hsforms.com *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hubspotfeedback.com *.hs-analytics.net *.segment.io *.hsappstatic.net *.clickagy.com *.adsrvr.org *.zoominfo.com feedback.hubapi.com *.survicate.com snap.licdn.com *.pinimg.com *.google.com *.google-analytics.com fast.wistia.net *.mypurecloud.com.au *.newrelic.com *.pinterest.com *.zi-scripts.com *.doubleclick.net *.wistia.com *.youtube.com *.youtu.be *.jsdelivr.net *.algolia.io *.algolia.net *.algolia.com alg.li *.algolianet.com *.ctfassets.net *.sentry-cdn.com *.sentry.io *.contentful.com *.survicate-cdn.com *.googleapis.com *.zdassets.com *.zendesk.com *.googleadservices.com myob.74xz8u.net d.impct.site google.com recaptcha.net *.gstatic.com d34r8q7sht0t9k.cloudfront.net ipv4.pdscrb.com tracking-api.g2.com cdn.veritonic.com *.veritonicmetrics.com tr.capterra.com bzrcdn.openai.com bzr.openai.com 'unsafe-eval' 'unsafe-inline' ws: blob:; style-src 'self' *.myob.com *.myobdev.com *.wistia.com *.survicate.com *.survicate-cdn.com www.googletagmanager.com *.googleapis.com 'unsafe-inline' ws: blob:; img-src 'self' *.myob.com *.myobdev.com *.wistia.com *.ctfassets.net *.survicate-cdn.com data: https: ws: blob:; font-src 'self' *.myob.com *.myobdev.com *.wistia.com *.survicate-cdn.com fonts.gstatic.com data:; object-src 'none'; frame-src *; frame-ancestors *; 2 default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; frame-ancestors 'self' https://*.ergo.com https://*.ergo.de https://www.slipcase.com https://marketplace.marsh.com; 2 default-src 'self' https://jsonplaceholder.typicode.com/ https://api.ntplc.co.th/ https://*.googleapis.com https://*.googleapis.com/* https://uatweb.nteservice.com https://jsonip.com/; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com https://accounts.google.com/gsi/client http://localhost:3000 http://localhost:5001 http://localhost:3001 https://cdn.jsdelivr.net/npm/axios@1.1.2/dist/axios.min.js https://unpkg.com/vue-thailand-address@3/dist/db.web.js https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js http://localhost:5500 https://api-preweb.ntplc.co.th/ https://jsonplaceholder.typicode.com/ https://code.jquery.com/jquery-3.7.0.js https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.29.4/moment.min.js https://cdn.datatables.net/1.13.7/js/jquery.dataTables.min.js https://cdn.datatables.net/buttons/2.4.1/js/dataTables.buttons.min.js https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js https://cdn.datatables.net/buttons/2.4.1/js/buttons.html5.min.js https://cdn.datatables.net/buttons/2.4.1/js/buttons.print.min.js https://cdn.datatables.net/fixedcolumns/3.3.2/js/dataTables.fixedColumns.min.js https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/5.3.0/js/bootstrap.bundle.min.js https://cdn.datatables.net/plug-ins/1.10.25/api/sum().js https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js https://cdn.jsdelivr.net/npm/vue/dist/vue.js https://api.ntplc.co.th/ https://uatweb.nteservice.com https://cdn.jsdelivr.net/npm/air-datepicker@3.5.3/air-datepicker.min.js https://jsonip.com/ https://texttospeech.googleapis.com/* https://nt.webchat.zwiz.app/sdk.js *.google-analytics.com js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com cdn.ampproject.org *.eloqua.com *.en25.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://accounts.google.com/gsi/style http://localhost:3000 http://localhost:5001 http://localhost:3001 http://localhost:5500 https://api-preweb.ntplc.co.th/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css https://cdn.datatables.net/1.13.7/css/jquery.dataTables.min.css https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css https://cdn.datatables.net/fixedcolumns/3.3.2/css/fixedColumns.dataTables.min.css https://code.jquery.com/ui/1.12.1/themes/ui-lightness/jquery-ui.css https://cdn.jsdelivr.net/npm/vue-thailand-address@3/dist/vue-thailand-address.min.css https://www.ntplc.co.th/ https://api.ntplc.co.th/ https://uatweb.nteservice.com https://cdn.jsdelivr.net/npm/air-datepicker@3.5.3/air-datepicker.min.css https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com 'unsafe-inline'; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com *.twimg.com data: blob: https://*.googletagmanager.com http://localhost:3000 http://localhost:3001 https://api-preweb.ntplc.co.th http://localhost:5001 http://localhost:5500 platform.twitter.com https://api.ntplc.co.th/ https://ntplc.co.th/ https://www.ntplc.co.th/images/ *.google-analytics.com track.hubspot.com js.hsleadflows.net forms.hsforms.com https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com *.eloqua.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; frame-src 'self' www.youtube-nocookie.com www.google.com https://www.youtube.com https://nt.webchat.zwiz.app/ forms.hsforms.com web-chat.nativechat.com; connect-src 'self' data: accounts.google.com *.gstatic.com https://*.googletagmanager.com validate.theoplayer.com license.theoplayer.com exzillamedia-aaea.streaming.media.azure.net texttospeech.googleapis.com www.nteservice.com maps.googleapis.com https://www.youtube.com https://api-preweb.ntplc.co.th/ https://api.ntplc.co.th/ https://uatweb.nteservice.com https://jsonip.com/ https://ntplc.co.th/ https://texttospeech.googleapis.com/* https://analytics.google.com https://analytics.google.com/* https://www.google-analytics.com https://*.google-analytics.com *.google-analytics.com forms.hubspot.com *.hsforms.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://api-preweb.ntplc.co.th/ https://api.ntplc.co.th/ https://uatweb.nteservice.com web-chat.nativechat.com 2 frame-src *.youtube.com *.youtu.be acl.gov youtu.be *.addtoany.com addtoany.com static.addtoany.com; frame-ancestors *.youtube.com *.youtu.be acl.gov youtu.be *.addtoany.com addtoany.com static.addtoany.com; child-src *.youtube.com *.youtu.be acl.gov youtu.be *.addtoany.com addtoany.com static.addtoany.com; report-uri /report-csp-violation 2 default-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: blob: *; font-src 'self' data: *; frame-ancestors 'self' *.sitecorecloud.io; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 2 default-src 'self' *.myidx.cloud *.analytics.google.com *.google.com *.google-analytics.com; img-src 'self' 'unsafe-inline' farm66.static.flickr.com https://farm66.static.flickr.com *.flickr.com *.google-analytics.com www.facebook.com viz.tools.investis.com px.ads.linkedin.com t.co analytics.twitter.com www.google.com www.google.co.in www.googletagmanager.com maps.google.com maps.gstatic.com tr.lfeeder.com id.rlcdn.com segments.company-target.com *.myidx.cloud *.adnxs.com *.lfeeder.com *.linkedin.com match.prod.bidr.io data: www.w3.org; frame-src www.rolls-royce.com www.youtube-nocookie.com 'self' *.myidx.cloud s.company-target.com *.company-target.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net staticcontents.investis.com 77d8e64489354683a242e226ad9ed96b.svc.dynamics.com www.googletagmanager.com confirmsubscription.com vars.hotjar.com in.hotjar.com my.walls.io *.fls.doubleclick.net www.youtube.com www.google.com irs.tools.investis.com otp.tools.investis.com ir.tools.investis.com players.brightcove.net rolls-royce.staging.investis.com rolls-royce.production.investis.com www.facebook.com *.doubleclick.net staticzone.idigitalcontents.com viz.tools.investis.com form.typeform.com matt317952.typeform.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.myidx.cloud *.stackadapt.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net assets.investisdigital.com staticcontents.investis.com tagmanager.google.com www.googletagmanager.com viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com staticzone.idigitalcontents.com viz.tools.investis.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com fast.fonts.net embed.typeform.com; font-src 'self' 'unsafe-inline' *.myidx.cloud data: fonts.googleapis.com fonts.gstatic.com staticzone.idigitalcontents.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com tagmanager.google.com *.fonts.com fast.fonts.net *.typekit.net; script-src qvdt3feo.com www.youtube.com www.youtube.com/s/player/b2515611/www-widgetapi.vflset/www-widgetapi.js www.youtube.com/iframe_api 'self' 'unsafe-inline' 'unsafe-eval' *.myidx.cloud *.incrementdata.com static.cloudflareinsights.com *.stackadapt.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net mktdplp102cdn.azureedge.net staticcontents.investis.com js-agent.newrelic.com otp.tools.investis.com staticzone.idigitalcontents.com viz.tools.investis.com *.analytics.google.com *.google.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com *.googletagmanager.com *.google-analytics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com edge.api.brightcove.com *.googleapis.com tagmanager.google.com stats.g.doubleclick.net *.investisdigital.com googleads.g.doubleclick.net googleadservices.com cdn.jsdelivr.net cdnjs.cloudflare.com facebook.com www.gstatic.com pi.pardot.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com static.ads-twitter.com snap.licdn.com *.googleadservices.com analytics.twitter.com *.flickr.com tag.demandbase.com *.lead-analytics-1000.com *.leadforensics.com track.accountinsight.cloud *.adnxs.com fast.fonts.net *.typekit.net *.lfeeder.com embed.typeform.com; media-src 'self' *.myidx.cloud *.brightcove.com *.brightcovecdn.com brightcove.hs.llnwd.net viz.tools.investis.com rolls-royce.production.investis.com; connect-src 'self' tag.demandbase.com https://cdnjs.cloudflare.com/ https://tag.demandbase.com/d02bade8.min.js.map *.myidx.cloud *.stackadapt.com *.linkedin.com px.ads.linkedin.com/wa/ cdn.linkedin.oribi.io bam.eu01.nr-data.net facebook.com *.googlesyndication.com *.analytics.google.com *.google.com *.doubleclick.net *.google-analytics.com www.google.co.in analytics.google.com www.facebook.com tag-logger.demandbase.com www.facebook.com/tr/ in.hotjar.com staticzone.idigitalcontents.com viz.tools.investis.com *.investisdigital.com edge.api.brightcove.com www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net ipapi.connectid.cloud api.company-target.com segments.company-target.com track.incrementdata.com *.incrementdata.com *.googleadservices.com googleadservices.com facebook.com *.typekit.net *.amazonaws.com *.googleapis.com; base-uri 'none'; 2 default-src 'self' a.storyblok.com *.posthog.com blob:; base-uri 'self'; form-action 'self' pages.scandit.com; frame-ancestors www.scandit.com; connect-src 'self' *.posthog.com scandit.chilipiper.com wss://interactive-demo.scandit.com cdn.jsdelivr.net a.storyblok.com edge.meilisearch.com newassets.hcaptcha.com app.id-scanning.com cdn.linkedin.oribi.io *.scandit.com analytics.google.com 605-exc-034.mktoutil.com vimeo.com www.google-analytics.com *.hotjar.io *.hotjar.com wss://ws.hotjar.com c.ba.contentsquare.net 605-exc-034.mktoresp.com stats.g.doubleclick.net ad.doubleclick.net script.google.com bat.bing.com region1.google-analytics.com region1.analytics.google.com www.googletagmanager.com www.google.com www.google.co.uk www.google.ch www.google.co.in www.google.co.jp www.google.pl www.google.ca www.google.de www.google.ae www.google.za www.google.fr www.google.co.nz googleads.g.doubleclick.net pagead2.googlesyndication.com adservice.google.com www.google.com/rmkt/collect px.ads.linkedin.com conversions-config.reddit.com www.redditstatic.com pixel-config.reddit.com www.googleadservices.com ds.cookiehub.net consent.cookiehub.net region-eu.cookiehub.net consent-eu.cookiehub.net cookiehub.net cdn.cookiehub.eu *.clarity.ms bat.bing.net cdn.plyr.io *.convertexperiments.com tags.srv.stackadapt.com api.claydar.com *.openai.com; font-src 'self' data: fonts.gstatic.com *.posthog.com boards.cdn.greenhouse.io; frame-src challenges.cloudflare.com www.google.com scandit.chilipiper.com boards.greenhouse.io www.youtube.com *.scandit.com *.vimeo.com vimeo.com app-ab02.marketo.com www.googletagmanager.com bid.g.doubleclick.net td.doubleclick.net *.hotjar.com vc.hotjar.io app.id-scanning.com id-service.scandit.com job-boards.greenhouse.io; img-src 'self' assets.scandit.com a.storyblok.com https: data: *.posthog.com www.google-analytics.com www.googletagmanager.com chart.googleapis.com wingify-assets.s3.amazonaws.com; manifest-src 'self'; media-src 'self' data: mediastream: assets.scandit.com a.storyblok.com *.posthog.com download-video.akamaized.net vimeo.com *.vimeo.com *.vimeocdn.com vod-progressive.akamaized.net; object-src *.scandit.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.posthog.com challenges.cloudflare.com s.yimg.jp *.scandit.com *.hotjar.com scandit.chilipiper.com www.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com tagmanager.google.com www.googletagmanager.com www.gstatic.com pagead2.googlesyndication.com www.google.com boards.greenhouse.io *.vimeo.com *.vimeocdn.com app-ab02.marketo.com cdn.jsdelivr.net unpkg.com cookiehub.net cdn.cookiehub.eu munchkin.marketo.net snap.licdn.com *.terminus.services bat.bing.com www.redditstatic.com *.clarity.ms *.convertexperiments.com tags.srv.stackadapt.com qvdt3feo.com *.cloudfront.net *.oktopost.com okt.to static.claydar.com cdn.claydar.com *.openai.com; script-src-elem 'self' data: 'unsafe-inline' 'unsafe-eval' *.posthog.com challenges.cloudflare.com s.yimg.jp *.scandit.com *.hotjar.com scandit.chilipiper.com www.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com tagmanager.google.com www.googletagmanager.com www.gstatic.com pagead2.googlesyndication.com www.google.com boards.greenhouse.io *.vimeo.com *.vimeocdn.com app-ab02.marketo.com cdn.jsdelivr.net unpkg.com cookiehub.net cdn.cookiehub.eu munchkin.marketo.net snap.licdn.com *.terminus.services bat.bing.com www.redditstatic.com *.clarity.ms *.convertexperiments.com tags.srv.stackadapt.com qvdt3feo.com *.cloudfront.net *.oktopost.com okt.to static.claydar.com cdn.claydar.com *.openai.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.scandit.com pages.scandit.com app-ab02.marketo.com *.posthog.com tagmanager.google.com fonts.googleapis.com tagmanager.google.com fonts.googleapis.com www.googletagmanager.com s3.amazonaws.com cdn.jsdelivr.net cookiehub.net cdn.cookiehub.eu tags.srv.stackadapt.com; worker-src 'self' *.posthog.com unpkg.com blob: data: www.googletagmanager.com; report-uri https://eu.i.posthog.com/report/?token=phc_4EjMvxAeDz5h2LBfu1oYKVxTG9ipd5MwkbC9DNru1J5&sample_rate=0.1; report-to posthog 2 frame-ancestors 'self' https://*.dxcloud.episerver.net https://*.dxp.optimizely.com https://*.invenco.com https://*.gilbarco.com 2 default-src https:; script-src https: svrdntfctn.com *.svrdntfctn.com *.icomera.com icomera.com *.wpengine.com wpengine.com *.google-analytics.com *.googleapis.com *.chimpstatic.com 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; font-src 'self' data: *.icomera.com icomera.com *.wp.com wp.com *.wpengine.com wpengine.com *.bootstrapcdn.com *.gstatic.com *.googleapis.com *.ggpht; img-src 'self' data: elementor.com *.elementor.com *.ads.linkedin.com *.vimeocdn.com *.icomera.com icomera.com *.wpengine.com wpengine.com *.w.org *.google-analytics.com *.mailchimp.com *.gstatic.com *.googleapis.com *.ggpht secure.gravatar.com stats.g.doubleclick.net; connect-src 'self' data: ipapi.co mapplic.com *.mapplic.com px.ads.linkedin.com www.google.com svrdntfctn.com *.svrdntfctn.com *.yoast.com yoast.com *.wpengine.com *.vimeo.com vimeo.com *.google-analytics.com *.doubleclick.net *.googleapis.com; frame-src 'self' data: plugins.tawk.to *.googletagmanager.com youtube.com www.youtube.com *.vimeo.com *.google.com e.issuu.com *.googleapis.com; worker-src blob:; 2 frame-ancestors 'self' https://*.infocert.it https://tinexta.intervieweb.it; 2 default-src 'self'; script-src 'unsafe-inline' blob: https://factsmgt.com https://*.cdn.us2.com *.addevent.com https://vimeo.com https://js-na2.hubspot.com https://js-na2.hsforms.net https://js-na2.hs-scripts.com https://js-na2.hsadspixel.net https://js-na2.hsadspixel.net/fb.js https://js.hubspot.com/content-embed/v1.js https://js.hs-analytics.net https://static.hsappstatic.net https://js-na2.hs-analytics.net https://js-na2.hscollectedforms.net https://js-na2.hs-banner.com https://d-code.liadm.com transcend-cdn.com assets.apollo.io tracking-api.g2.com js.ipredictive.com *.storylane.io nelnet.jotform.com *.gstatic.com snap.licdn.com embed.eventbookings.com *.vimeo.com 'self' *.cookielaw.org *.hotjar.com *.google-analytics.com *.google.com ajax.googleapis.com *.facebook.net googleads.g.doubleclick.net *.facebook.com addevent.com static.addtoany.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com *.pardot.com *.googletagmanager.com whova.com *.factsmgt.com factsmgt.com *.cloudfront.net *.googleadservices.com 'unsafe-eval'; style-src https://*.cdn.us2.com *.bootstrapcdn.com cdnjs.cloudflare.com transcend-cdn.com www.googletagmanager.com https://use.typekit.net https://p.typekit.net https://7052064.fs1.hubspotusercontent-na1.net 'unsafe-inline' *.fontawesome.com 'self' *.googleapis.com *.cloudfront.net; img-src 'self' https://*.cdn.us2.com *.google.com *.google-analytics.com https://forms-na2.hsforms.com https://track.hubspot.com https://cta-na2.hubspot.com https://static.hsappstatic.net https://static.hubspot.com https://track-na2.hubspot.com https://perf-na2.hsforms.com https://connect.facebook.net *.googletagmanager.com googleads.g.doubleclick.net i.vimeocdn.com ct.capterra.com px.ads.linkedin.com *.cookielaw.org *.w.org *.facebook.com *.gravatar.com *.nelnet.net data: *.s3.amazonaws.com *.cloudfront.net; connect-src 'self' *.bugsnag.com *; font-src *.fontawesome.com *.gstatic.com 'self' * data:; media-src 'self'; frame-src *.pardot.com https://forms-na2.hsforms.com *.hs-sites-na2.com https://i.liadm.com info.factsmgt.com.au ad.ipredictive.com nelnet.jotform.com *.storylane.io embed.eventbookings.com *.evnt.is *.google.com *.vimeo.com *.factsmgt.com www.googletagmanager.com *.addtoany.com *.hotjar.com factsmgt.com *.facebook.com *.doubleclick.net *.youtube.com https://whova.com *.whova.com; 2 style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css; img-src 'self' https://i0.wp.com https://helio.app https://notableapp.com https://*.zurb.com https://*.gravatar.com https://*.cloudfront.net https://zurb-dot-com-prod.s3.amazonaws.com https://www.google-analytics.com https://c0.froala.com https://fast.wistia.com https://embed-ssl.wistia.com https://embedwistia-a.akamaihd.net blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.intercomcdn.com https://widget.intercom.io https://js-agent.newrelic.com https://*.honeybadger.io https://*.cloudfront.net https://*.kissmetrics.com https://www.googletagmanager.com https://code.jquery.com https://dhbhdrzi4tiry.cloudfront.net/cdn/sites/foundation.js https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 https://www.google-analytics.com/analytics.js https://helio-embed.zurb.com:443/ https://helio-embed-staging.zurb.com/ https://helio-embed.zurb.com/ https://helio-embed-staging.zurb.com:443/ https://podcast.zurb.com/ https://podcast.zurb.com:443/ https://loz.zurb.com/ https://fast.wistia.com https://fast.wistia.net; frame-ancestors 'none' 2 frame-ancestors https://www.domainesia.com/ https://my.domainesia.com/ 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; object-src 'self' https://boomi.com/wp-content/uploads/; base-uri 'self'; connect-src 'self' https: wss://*.qualified.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https:; img-src 'self' data: blob: https:; manifest-src 'self' https:; media-src 'self' blob: https:; worker-src 'self' blob: https:; 2 frame-ancestors 'self' https://api.beaches.com/ 2 default-src 'self'; default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://www.3lateral.com https://static.3lateral.com https://tracking.epicgames.com https://flackr.github.io https://static.elfsight.com https://talon-website-prod.ecosec.on.epicgames.com https://js.hcaptcha.com 'unsafe-inline'; style-src 'self' https://static.3lateral.com https://www.3lateral.com blob:https://www.3lateral.com 'unsafe-inline'; img-src 'self' https://static.3lateral.com https://tracking.epicgames.com data:; font-src 'self' https://static.3lateral.com https://fonts.gstatic.com; media-src 'self' https://static.3lateral.com; connect-src 'self' https://core.service.elfsight.com https://talon-website-prod.ecosec.on.epicgames.com https://talon-service-prod.ecosec.on.epicgames.com https://nelly-service-prod-fastly.ecosec.on.epicgames.com; object-src 'self' https://www.3lateral.com; frame-src https://newassets.hcaptcha.com 'self' https://www.youtube-nocookie.com https://player.vimeo.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' wasm-eval cdnjs.cloudflare.com konicaminoltaus.b-cdn.net script.crazyegg.com www.googletagmanager.com; script-src-elem 'self' data: 'unsafe-inline' cdnjs.cloudflare.com konicaminoltaus.b-cdn.net www.googletagmanager.com script.crazyegg.com trans.xdtsmart.com 3001.scriptcdn.net api.wire.threatspike.com bat.bing.com blob: cdn.amplitude.com connect.facebook.net dap.digitalgov.gov extensionscontrol.com extmanagers.com infird.com sc-static.net secured-pixel.com speed.ilink-tk.com stapecdn.com static.ads-twitter.com www.google-analytics.com www.upsellit.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' ka-p.fontawesome.com kit.fontawesome.com konicaminoltaus.b-cdn.net; style-src-elem 'self' 'unsafe-inline' ka-p.fontawesome.com konicaminoltaus.b-cdn.net kit.fontawesome.com cdn.honey.io fonts.googleapis.com www.gstatic.com; style-src-attr 'unsafe-inline'; img-src 'self' data: kmbscontent.konicaminolta.us konicaminoltaus.b-cdn.net www.googletagmanager.com hm.baidu.com blob: cdn.honey.io analytics.twitter.com bat.bing.com fonts.gstatic.com s.w.org s3.amazonaws.com secure.gravatar.com t.co tagging.mkt.zappos.com translate.google.com www.gstatic.com; font-src 'self' data: ka-p.fontawesome.com at.alicdn.com cdn.scite.ai cdnjs.cloudflare.com fonts.gstatic.com konicaminoltaus.b-cdn.net migaku-public-data.migaku.com moz-extension ms-browser-extension static.zip.co svcs.tql.com; connect-src 'self' www.googletagmanager.com tracking.crazyegg.com assets-tracking.crazyegg.com script.crazyegg.com pagestates-tracking.crazyegg.com www.google-analytics.com kmbscontent.konicaminolta.us hm.baidu.com trans.xdtsmart.com konicaminoltaus.b-cdn.net region1.google-analytics.com api2.amplitude.com clientstream.launchdarkly.com overbridgenet.com sr-client-cfg.amplitude.com tagging.mkt.zappos.com www.google.com zjaasd.zappos.com; media-src 'self' data:; child-src blob:; frame-src www.googletagmanager.com; worker-src blob:; report-uri https://4cb6d1b88ad70041e7bad82563439f7d.report-uri.com/r/t/csp/enforce 2 block-all-mixed-content; frame-ancestors https://bigscoots.com https://portal.bigscoots.com/ https://www.bigscoots.com 2 default-src 'self' images.ctfassets.net http://images.ctfassets.net http://videos.ctfassets.net;base-uri 'self';connect-src 'self' geolocation.onetrust.com 120-gkj-051.mktoutil.com 120-gkj-051.mktoresp.com www.google.com googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com secure.adnxs.com cdn.cookielaw.org api.lever.co vimeo.com https://pagead2.googlesyndication.com googlesyndication.com https://investors.palantir.com https://palantir.com https://px.ads.linkedin.com;font-src 'self' fonts.gstatic.com;frame-src 'self' 120-gkj-051.mktoweb.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ bid.g.doubleclick.net cdn.cookielaw.org player.vimeo.com www.youtube.com www.youtube-nocookie.com palantir.tfaforms.net www.google.com https://td.doubleclick.net https://10848750.fls.doubleclick.net;img-src 'self' cdn.cookielaw.org www.linkedin.com/px/ heapanalytics.com www.google.com googleads.g.doubleclick.net p.adsymptotic.com secure.adnxs.com px.ads.linkedin.com www.googletagmanager.com www.google-analytics.com https://ade.googlesyndication.com data: i.ytimg.com https://ad.doubleclick.net www.palantir.io palantir.com https://www.palantir.com images.ctfassets.net http://images.ctfassets.net assets.ctfassets.net https://assets.ctfassets.net videos.ctfassets.net downloads.ctfassets.net;script-src 'self' 120-gkj-051.mktoweb.com https://*.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ snap.licdn.com munchkin.marketo.net palantir.tfaforms.net player.vimeo.com cdn.cookielaw.org https://*.googletagmanager.com googleads.g.doubleclick.net doubleclick.net palantir.com 'wasm-unsafe-eval' 'sha256-3/mNUpqF9X/gMYE+bOG6g8d6I32wdYdWwWuAk90mPCM=' 'sha256-3fLttXmGXkZ5WQ3hX1PQz0O6/EPnGdGD6f73C+bHQGo=' 'sha256-PxAm6FXbbh5OkHYK9e9yK7ru41bHsXZrC7/jasSL3Ng=' 'sha256-a/7pNTd3a9x1ULIoxUTDXYWJrMtBopUlnWUwJylJTOI=' 'sha256-5VrVgGfPbUH5IoPb+tGodpswZad/XDHQfqHeVD0LMG4=' 'sha256-rl/vw6OO2nB811eUCK2TsRM+NJABb36KT2a7JHY/RV0=' 'sha256-OQzKDlDGCiO+PI2duQLxTbbZjko95b1fj34uCRWUja0=' 'sha256-YGLqxGCCQ5OYcADqsPTGeQEBKKvTHKKV9vXQxOS6g/s=' 'sha256-+obxZHq74iTlXamY+oEi2oinLv5DJBBlYZcbEulR+BU=' 'sha256-DrU88AevkT4jpUCCNzlTAahgv2PuaeUvxUJfnaqWAjc=' https://ad.doubleclick.net/ https://td.doubleclick.net https://10848750.fls.doubleclick.net;style-src 'self' 'unsafe-inline' 120-gkj-051.mktoweb.com www.googletagmanager.com hello.myfonts.net fonts.googleapis.com palantir.tfaforms.net www.palantir.io palantir.com https://www.palantir.com;object-src 'none';frame-ancestors 'self' https://resources.palantir.com; 2 frame-ancestors 'self' https://preview--link-curate-dash.lovable.app https://discovertool2.lovable.app https://id-preview--f23e5e3d-5e92-4b7c-b502-6b188deb8dc9.lovable.app https://id-preview--89f72417-f571-4394-96eb-464e8e0c0e90.lovable.app https://comfy-todo-test.lovable.app; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.corpowid.com https://static-maps.yandex.ru https://assetsgarantibbva.com *.amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon *.hangikredi.com *.tiktokw.us *.corpowid.com *.tiktok.com *.garantibbvayatirim.com.tr *.garantiyatirim.com.tr *.garantibbva.com.tr *.garanti.com.tr *.garantibbvaemeklilik.com.tr *.garantiemeklilik.com.tr *.gteknoloji.com.tr *.gteknolojidmz.com.tr *.garantibank.ro *.garantiemeklisandigi.org.tr *.api.useinsider.com https://*.useinsider.com wss://*.matriksdata.com *.matriksdata.com *.dataroid.com *.google.com *.google.com.tr *.doubleclick.net https://googleads.g.doubleclick.net *.efilli.com *.fw.garanti.com.tr *.googletagmanager.com *.fw.garantibbva.com.tr ajax.googleapis.com fonts.googleapis.com *.google-analytics.com *.analytics.google.com *.signfordeaf.com;media-src 'self' data: *.corpowid.com *.signfordeaf.com http://*.signfordeaf.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.corpowid.com *.api.useinsider.com https://*.useinsider.com;connect-src 'self' data: *.corpowid.com *.garantibbvayatirim.com.tr *.paa-reporting-advertising.amazon *.kaspersky-labs.com *.amazon-adsystem.com *.garantiyatirim.com.tr *.garantibbva.com.tr *.garanti.com.tr *.garantibbvaemeklilik.com.tr *.garantiemeklilik.com.tr *.gteknoloji.com.tr *.gteknolojidmz.com.tr *.garantibank.ro *.garantiemeklisandigi.org.tr *.assetsgarantibbva.com *.api.useinsider.com https://*.useinsider.com wss://*.matriksdata.com *.matriksdata.com *.dataroid.com *.efilli.com *.fw.garanti.com.tr *.googletagmanager.com *.fw.garantibbva.com.tr *.highcharts.com *.tiktokw.us *.corpowid.com *.tiktok.com ajax.googleapis.com fonts.googleapis.com *.google-analytics.com *.google.com *.google.com.tr *.doubleclick.net https://googleads.g.doubleclick.net *.signfordeaf.com;worker-src 'self' *.corpowid.com *.kaspersky-labs.com *.assetsgarantibbva.com *.garantibbva.com.tr; script-src-elem 'self' 'unsafe-inline' *.corpowid.com *.amazon-adsystem.com *.tiktokw.us *.corpowid.com *.tiktok.com *.hangikredi.com *.googleapis.com *.facebook *.kaspersky-labs.com *.googletagmanager.com *.dataroid.com *.efilli.com *.useinsider.com *.assetsgarantibbva.com *.garantibbva.com.tr; frame-src 'self' *.corpowid.com *.cdn-garantibbva.dataroid.com *.cdn.dataroid.com https://video.garanti.com.tr *.amazon-adsystem.com *.api.useinsider.com *.kaspersky-labs.com *.doubleclick.net *.efilli.com *.assetsgarantibbva.com *.garantibbva.com.tr; img-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.corpowid.com *.efilli.com *.api.useinsider.com *.doubleclick.net https://static-maps.yandex.ru *.assetsgaranti.com *.assetsgarantibbva.com https://assetsgarantibbva.com *.highcharts.com *.garantibbvayatirim.com.tr *.kaspersky-labs.com *.garantiyatirim.com.tr *.garantibbva.com.tr *.garanti.com.tr *.garantibbvaemeklilik.com.tr *.garantiemeklilik.com.tr *.gteknoloji.com.tr *.gteknolojidmz.com.tr *.garantibank.ro *.garantiemeklisandigi.org.tr *.api.useinsider.com https://*.useinsider.com wss://*.matriksdata.com *.matriksdata.com *.dataroid.com *.google.com *.google.com.tr *.doubleclick.net https://googleads.g.doubleclick.net *.efilli.com *.fw.garanti.com.tr *.googletagmanager.com *.fw.garantibbva.com.tr ajax.googleapis.com fonts.googleapis.com *.google-analytics.com *.analytics.google.com *.signfordeaf.com;style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.corpowid.com *.dataroid.com *.kaspersky-labs.com *.googletagmanager.com *.efilli.com *.useinsider.com *.api.useinsider.com fonts.googleapis.com ajax.googleapis.com *.assetsgarantibbva.com *.garantibbva.com.tr;font-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.corpowid.com *.useinsider.com *.assetsgarantibbva.com *.garantibbva.com.tr *.api.useinsider.com fonts.go/ogleapis.com ajax.googleapis.com fonts.gstatic.com; 2 base-uri 'self'; child-src * gap:; frame-src * gap:; connect-src *; default-src 'self' 'unsafe-inline' *.google-analytics.com *.hotjar.com *.googletagmanager.com *.dre.pt *.diariodarepublica.pt *.hotjar.io *.doubleclick.net *.knightlab.com *.google.com *.google.pt gap: 'unsafe-inline' 'unsafe-eval'; font-src 'self' fonts.gstatic.com themes.googleusercontent.com data:; img-src * data: blob:; script-src 'unsafe-inline' * 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.gstatic.com 'unsafe-inline'; frame-ancestors *.incm.pt *.dre.pt *.diariodarepublica.pt 'self' gap:; report-to outsystems-csp-report; report-uri /SecurityUtils/rest/Report/ReportViolations?Params=3cPdIwLULs6V4XxvRR2Qjx6J1ZZQfwsQNIRLOXUjbzLVVRjohJpKb0BlZeji9X%2B6qA986bveNgE4R63c8nqGhQ%3D%3D; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://snap.licdn.com https://www.redditstatic.com https://static.ads-twitter.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: https:; connect-src 'self' https://*.rpcpool.com https://*.google-analytics.com https://*.googletagmanager.com https://px.ads.linkedin.com https://www.linkedin.com https://alb.reddit.com https://*.ads-twitter.com https://analytics.twitter.com; object-src 'none'; base-uri 'self'; form-action 'self' 2 frame-ancestors 'self' *.awsapps.nvidia.com *.nvidia.com https://widget.stackla.com https://app-sj14.marketo.com https://www.youtube.com https://www.quadro-selector.com http://player.youku.com https://player.youku.com https://live.nvidia-china.com https://www.google.com *.nvidia.cn https://events.rainfocus.com https://www.twitch.tv https://store.nvidia.ru https://store.nvidia.in *.geforcenow.com https://salespro.hpe.com https://hpe.seismic.com https://cms.nvidia-docs-uat.lower.k3.m1.brightspot.cloud https://cms.nvidia-docs-qa3.lower.k3.m1.brightspot.cloud https://events.rainfocus.com https://docs.nvidia-docs-uat.lower.k3.m1.brightspot.cloud https://docs.nvidia-docs-qa3.lower.k3.m1.brightspot.cloud; 2 default-src *; style-src * 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-eval' https:; font-src https: data:; img-src 'self' blob: http: https: data:; 2 base-uri 'self' https://amli.sekindo.com; connect-src 'self' https: data: www.google-analytics.com fundingchoicesmessages.google.com pagead2.googlesyndication.com; default-src 'self'; font-src 'self' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com; frame-src 'self' https: googleads.g.doubleclick.net error-report.com; img-src 'self' data: https:; media-src 'self' blob: gcdn.2mdn.net video.primis.tech; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https: blob: www.google-analytics.com pagead2.googlesyndication.com cdn.perfops.net; style-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com cdnjs.cloudflare.com content.quantcount.com live.primis.tech html-load.com; worker-src blob:; block-all-mixed-content; report-to https://o881419.ingest.sentry.io/api/6108064/security/?sentry_key=53507701d302401b97c4a9ec903c141e 2 frame-ancestors 'self' https://teva.dev.amelia.com/ 2 default-src https: data: blob: 'self'; upgrade-insecure-requests; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self'; style-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self'; img-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self' 2 frame-ancestors https://*.openrice.com https://*.openrice.com.cn 2 frame-ancestors smc-lp.s4hana.ondemand.com bosch-pt.com.au www.bosch-pt.com.au bosch-pt.co.nz www.bosch-pt.co.nz www.bosch-professional.jp bosch-professional.jp www.bosch-pt.co.kr bosch-pt.co.kr www.bosch-pt.co.in bosch-pt.co.in vn.bosch-pt.com th.bosch-pt.com www.bosch-pt.com.tw www.bosch-pt.com.hk www.bosch-pt.com.sg bosch-pt.com.sg www.bosch-pt.com.ph bosch-pt.com.ph www.bosch-pt.co.id bosch-pt.co.id www.bosch-pt.com.my bosch-pt.com.my bosch-officeon.com boschprofessionalworld.com staging.boschprofessionalworld.com staging-2.boschprofessionalworld.com theviewer.co *.kittelberger.net *.kittelberger.de *.bosch-professional.com; 2 object-src 'self' https://hightail.com;base-uri 'self';img-src https: http: blob: data:; frame-src https://* https://www.google.com/recaptcha/ 'self';font-src 'self' https://hightail.com data: ;script-src data: 'unsafe-inline' 'unsafe-eval' 'self' https://forms.hsforms.com/embed/ https://app.link/ http://js.bizographics.com/ http://stats.pusher.com/ http://www.googleadservices.com/ https://www.googleadservices.com https://www.google-analytics.com/ https://cdn.branch.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://snap.licdn.com/ https://dc.ads.linkedin.com/ https://px.ads.linkedin.com/ https://bam.nr-data.net/ https://sjs.bizographics.com/ https://assets.zendesk.com/ https://www.bizographics.com/ https://secure.adnxs.com/ https://v2.zopim.com/ https://*.pusher.com/ https://*.hs-banner.com/ https://*.hs-scripts.com/ https://*.hs-analytics.net/ https://*.hsforms.net/ https://*.hsadspixel.net/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://googleads.g.doubleclick.net/ https://forms.hubspot.com/ https://cdnjs.cloudflare.com/ https://code.jquery.com/ https://request.eprotect.vantivprelive.com/ https://request.eprotect.vantivcnp.com/ https://*.global.ssl.fastly.net/ http://*.hs-analytics.net/ http://*.hs-scripts.com/ http://*.hsforms.net/ http://*.hsadspixel.net/ http://cdnjs.cloudflare.com/ https://static.zdassets.com/ http://www.google-analytics.com/ https://*.pendo.io/ http://ajax.googleapis.com/ https://img.en25.com/i/livevalidation_standalone.compressed.js https://img.en25.com/Web/OpenTextGlobal/ https://pendo-io-static.storage.googleapis.com/ https://*.googletagmanager.com/ https://pendo-static-5705431416832000.storage.googleapis.com/ http://cdn.jsdelivr.net/npm/cookieconsent@3/ https://cdn.cookielaw.org/ https://geolocation.onetrust.com/ https://player.vimeo.com/* https://d2t77mnxyo7adj.cloudfront.net/v1/c.js http://now.eloqua.com/visitor/ http://secure.p01.eloqua.com/visitor/ http://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js https://*.bing.com/ https://*.hotjar.com/ https://*.facebook.net/ https://*.doubleclick.net/ https://*.hsadspixel.net/ https://*.hs-scripts.com/ https://*.clarity.ms/ data https://hightail.com/; frame-ancestors 'self' https://hightail.com; 2 default-src 'self' *.googleapis.com cdnjs.cloudflare.com *.gdi-sh.de efi2.schleswig-holstein.de efi.schleswig-holstein.de phpefi.schleswig-holstein.de phpefiqs.schleswig-holstein.de *.openstreetmap.org *.openstreetmap.fr *.openstreetmap.de cdn.podigee.com phpefi.schleswig-holstein.de *.podigee-cdn.net *.kaltura.com landesportal-sh.dwebanalytics.de luftdaten.umweltbundesamt.de; base-uri 'self'; style-src 'self' 'unsafe-inline' *.openstreetmap.org *.openstreetmap.fr *.openstreetmap.de *.schleswig-holstein.de *.gdi-sh.de cdnjs.cloudflare.com cdn.podigee.com *.podigee-cdn.net *.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.youtube-nocookie.com *.ytimg.com phpefi.schleswig-holstein.de *.openstreetmap.org *.openstreetmap.de *.vimeo.com *.schleswig-holstein.de *.gdi-sh.de cdn.podigee.com *.podigee-cdn.net cdnjs.cloudflare.com landesportal-sh.dwebanalytics.de *.summ-ai.com; object-src luftdaten.umweltbundesamt.de; media-src 'self' blob: multimedia.gsb.bund.de *.youtube.com *.youtube-nocookie.com *.youtube-nocookies.com youtu.be vimeo.com *.schleswig-holstein.de; frame-src *.google.com *.gstatic.com *.vimeo.com *.schleswig-holstein.de *.gdi-sh.de *.kaltura.com cdn.podigee.com *.podigee-cdn.net *.youtube.com *.youtube-nocookie.com *.phpefiqs.schleswig-holstein.de *.readspeaker.com *.openstreetmap.de *.openstreetmap.fr luftdaten.umweltbundesamt.de; img-src 'self' data: *.seminareonlinebuchen.de *.google.com *.gstatic.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.vimeocdn.com phpefi.schleswig-holstein.de *.openlayers.org *.openstreetmap.org *.openstreetmap.fr *.openstreetmap.de *.schleswig-holstein.de *.gdi-sh.de sgx.geodatenzentrum.de *.cdninstagram.com *.podigee-cdn.net *.fbcdn.net *.bootstrapcdn.com stamen-tiles-b.a.ssl.fastly.net stamen-tiles-c.a.ssl.fastly.net stamen-tiles-d.a.ssl.fastly.net stamen-tiles-a.a.ssl.fastly.net luftdaten.umweltbundesamt.de summ-media-prod.s3.amazonaws.com; worker-src blob: 'self'; frame-ancestors 'self' *.schleswig-holstein.de; font-src 'self' cdnjs.cloudflare.com *.gdi-sh.de maxcdn.bootstrapcdn.com; connect-src 'self' blob: *.schleswig-holstein.de *.gdi-sh.de landesportal-sh.dwebanalytics.de *.summ-ai.com; 2 default-src 'self'; script-src 'unsafe-inline' https://*.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://apis.google.com https://*.google-analytics.com https://kit.fontawesome.com https://cdn.insight.sitefinity.com https://js.monitor.azure.com https://*.marker.io https://*.youtube.com 'self' https://cdn.bc0a.com https://*.bazaarvoice.com https://*.monetate.net 'unsafe-eval' https://api.astutebot.com https://bot.emplifi.io https://cdn.listrakbi.com https://s1.listrakbi.com https://onescript-recscont.listrakbi.com https://bl.listrakbi.com https://at1.listrakbi.com https://www.googletagmanager.com https://cdn.cookielaw.org https://services.listrak.com https://static.addtoany.com/ https://*.likebtn.com https://*.ipstack.com https://*.pricespider.com https://*.mapbox.com https://mediacdn.espssl.com https://*.listrakbi.com onescript-recscont.listrakbi.com https://*.crayola.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://api.ipregistry.co https://ucarecdn.com https://c.amazon-adsystem.com https://s.amazon-adsystem.com https://xd.wayin.com https://ngx.me https://eu-s.wayin.com https://ngx.me/6WtZ9tm https://challenges.cloudflare.com; connect-src https://maps.googleapis.com https://*.fontawesome.com https://dc.services.visualstudio.com https://api.insight.sitefinity.com https://*.marker.io https://s3.eu-west-1.amazonaws.com/marker.sessions.prod https://*.youtube.com 'self' https://*.bc0a.com https://*.bazaarvoice.com https://api.astutebot.com https://bot.emplifi.io https://bl.listrakbi.com https://www.google-analytics.com https://services.listrak.com https://cdn.cookielaw.org http://localhost.com in-v3.mailjet.com http://*.googleapis.com https://i.ytimg.com https://*.pricespider.com wss://*.pricespider.com https://*.mapbox.com https://*.ipstack.com blob: https://*.listrakbi.com https://*.google-analytics.com https://geolocation.onetrust.com https://www.google.com/ccm/collect https://analytics.google.com/g/collect https://*.crayola.com https://ad.doubleclick.net https://www.facebook.com https://youtube.com https://api.ipregistry.co https://api.ipify.org https://ucarecdn.com https://c.amazon-adsystem.com https://t.lt02.net https://js.monitor.azure.com https://s.amazon-adsystem.com https://stats.g.doubleclick.net https://ara.paa-reporting-advertising.amazon https://*.listrak.com https://ngx.me https://xd.wayin.com https://ngx.me/6PBMeK5 https://pagead2.googlesyndication.com/ccm/collect https://privacyportal.onetrust.com https://eastus2-3.in.applicationinsights.azure.com; font-src data: https://fonts.gstatic.com https://*.fontawesome.com 'self' https://*.bazaarvoice.com https://*.monetate.net https://w.likebtn.com https://*.pricespider.com https://mediacdn.espssl.com; img-src data: https://*.likebtn.com https://maps.gstatic.com https://maps.googleapis.com https://*.bazaarvoice.com https://*.monetate.net https://www.googletagmanager.com https://i.ytimg.com https://*.pricespider.com https://*.googletagmanager.com https://mediacdn.espssl.com https://s1.listrakbi.com https://cdn.cookielaw.org https://www.facebook.com https://www.google.com https://media-wc.espssl.com https://images.salsify.com 'self'; frame-src https://*.youtube.com https://*.marker.io https://*.bazaarvoice.com https://bot.emplifi.io https://api.astutebot.com https://bl.listrakbi.com https://services.listrak.com https://static.addtoany.com https://*.juicer.io/ https://*.listrakbi.com https://*.crayola.com https://www.googletagmanager.com https://astutebot.com https://*.monetate.net https://*.doubleclick.net https://ucarecdn.com https://s.amazon-adsystem.com blob: https://xd.wayin.com https://ngx.me https://eu-s.wayin.com https://ngx.me/6WtZ9tm; style-src 'unsafe-inline' https://*.likebtn.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://*.fontawesome.com https://*.bazaarvoice.com https://*.monetate.net https://cdn.listrakbi.com https://bl.listrakbi.com https://*.pricespider.com https://*.mapbox.com https://*.googletagmanager.com https://*.listrakbi.com https://*.jquery.com https://mediacdn.espssl.com 'self'; worker-src blob: 'self'; media-src https://ucarecdn.com 'self'; video-src https://ucarecdn.com https://www.googletagmanager.com https://xd.wayin.com https://ngx.me https://cdn.cookielaw.org 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.embedly.com *.squarespace.com *.sqsp.net *.sqspcdn.com *.squarespace-cdn.com *.googleapis.com *.gstatic.com *.google-analytics.com analytics.google.com *.googletagmanager.com *.google.com *.doubleclick.net *.googleadservices.com *.typekit.net *.pardot.com *.smartrecruiters.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.zi-scripts.com *.zoominfo.com snap.licdn.com *.linkedin.com bat.bing.com *.bing.com www2.alertus.com code.jquery.com; frame-src 'self' www2.alertus.com *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.linkedin.com *.doubleclick.net cdn.embedly.com; frame-ancestors 'self'; 2 default-src 'self'; child-src 'self' ceuedu-my.sharepoint.com googletagmanager.com www.youtube.com www.youtube-nocookie.com ceu.my.salesforce-sites.com *.matomo.cloud *.piktochart.com *.powerbi.com *.sharethis.com *.google.com *.facebook.com *.twitter.com unibuddy.co *.unibuddy.co *.doubleclick.net ceu-edu.zoom.us w.soundcloud.com datawrapper.dwcdn.net player.vimeo.com free.timeanddate.com gifcdn.com e.issuu.com www.yumpu.com *.simplecast.com *.genial.ly *.genially.com forms.office.com webto.salesforce.com bbox.blackbaudhosting.com payments.blackbaud.com; connect-src 'self' *.matomo.cloud *.google-analytics.com bam.nr-data.net l.sharethis.com *.linkedin.com *.analytics.google.com stats.g.doubleclick.net *.doubleclick.net *.google.com cdn.cookielaw.org geolocation.onetrust.com privacyportal.onetrust.com *.onetrust.com *.facebook.com *.facebook.net bbox.blackbaudhosting.com payments.blackbaud.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com use.fontawesome.com cdn.cookielaw.org; img-src 'self' data: events.ceu.edu *.google.com *.google.hu googletagmanager.com *.googletagmanager.com googleads.g.doubleclick.net ad.doubleclick.net i.ytimg.com *.matomo.cloud *.piktochart.com *.powerbi.com *.sharethis.com *.facebook.com *.twimg.com *.twitter.com *.linkedin.com www.google.at cdn.cookielaw.org optanon.blob.core.windows.net bbox.blackbaudhosting.com payments.blackbaud.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self' w.soundcloud.com datawrapper.dwcdn.net player.vimeo.com gifcdn.com www.youtube.com www.youtube-nocookie.com *.twitter.com www.yumpu.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net googletagmanager.com *.googletagmanager.com google-analytics.com cdnjs.cloudflare.com use.fontawesome.com s.ytimg.com *.matomo.cloud *.piktochart.com *.powerbi.com *.sharethis.com *.google.com *.gstatic.com *.facebook.com *.facebook.net *.twitter.com *.twimg.com js-agent.newrelic.com cdn.unibuddy.co connect.facebook.net snap.licdn.com www.youtube.com cdn.cookielaw.org *.onetrust.com bbox.blackbaudhosting.com payments.blackbaud.com https://cdnjs.cloudflare.com; script-src-elem 'self' 'unsafe-inline' *.doubleclick.net *.google.com *.googletagmanager.com cdn.cookielaw.org bbox.blackbaudhosting.com payments.blackbaud.com connect.facebook.net snap.licdn.com *.matomo.cloud *.gstatic.com capi-automation.s3.us-east-2.amazonaws.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com ws.sharethis.com cdn.cookielaw.org bbox.blackbaudhosting.com payments.blackbaud.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2 frame-ancestors http://msdcxp.msp.int http://msdcxp.msp.de 2 frame-ancestors 'self' https://layout-cms.fox4news.com; 2 default-src *; connect-src 'self' https://cdnjs.cloudflare.com https://js.zi-scripts.com https://region1.google-analytics.com https://ws.zoominfo.com; font-src *; img-src * data:; script-src * 'unsafe-inline' blob:; style-src * 'unsafe-inline'; 2 frame-ancestors 'self' https://gov.aitu.io; 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com http://www.googleadservices.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ad.doubleclick.net https://maxcdn.bootstrapcdn.com https://cdn.gigya.com https://cdns.gigya.com https://cdns1.gigya.com https://cdns2.gigya.com https://cdns3.gigya.com https://cdns4.gigya.com https://cdns5.gigya.com https://accounts.gigya.com https://accounts.eu1.gigya.com https://signin.qa.nationalexpress.com https://cdn.synthetix.com https://national-express.cloud-iq.com http://national-express.cloud-iq.com https://uktc.fospha.com https://tag.yieldoptimizer.com https://connect.facebook.net https://bat.bing.com http://bat.bing.com https://*.vo.msecnd.net http://az416426.vo.msecnd.net https://prod.limitlesslivemessenger.com https://sc-static.net https://tr.snapchat.com https://static.ads-twitter.com https://analytics.twitter.com https://platform.twitter.com https://widget.trustpilot.com https://cdn.syndication.twimg.com https://sn1.clicktripz.com js.hsforms.net https://eu.clicktripz.com http://uktc.fospha.com https://forms.hsforms.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hsadspixel.net https://js.hs-analytics.net/analytics/ https://r1.dotmailer-surveys.com http://r1.dotmailer-surveys.com https://r1.dotdigital-pages.com http://r1.dotdigital-pages.com https://d2oh4tlt9mrke9.cloudfront.net https://d2qmp7jjpd79k7.cloudfront.net https://widget.trustpilot.com https://platform-api.sharethis.com https://buttons-config.sharethis.com https://static.hotjar.com https://script.hotjar.com https://*.clarity.ms/ https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://digitalcampaignsstorage.blob.core.windows.net https://ict.infinity-tracking.net/js/ https://script.infinity-tracking.com https://widgets.moovit.com https://widgets.moovit.com/wtp/en-gb/ https://m.moovitapp.com https://nx-busapplication-qa.azureedge.net https://nx-busapplication-prd.azureedge.net https://appassets.mvtdev.com/mobile/ https://*.tiktok.com/ https://lf16-tiktok-web.ttwstatic.com https://sf16-website-login.neutral.ttwstatic.com https://secure.data-insight365.com/js/265823.js https://secure.data-insight365.com/Track/Capture.aspx https://d3dh5c7rwzliwm.cloudfront.net https://d32106rlhdcogo.cloudfront.net https://dgf0rw7orw6vf.cloudfront.net https://*.quantserve.com/ https://rules.quantcount.com https://edge.quantserve.com http://www.instagram.com https://cdn.weglot.com https://s.yimg.com/wi/ytc.js https://acdn.adnxs.com/dmp/up/pixie.js https://cdn.mookie1.com/containr.js https://*.abtasty.com blob: https://service.force.com https://*.my.salesforce.com https://*.salesforceliveagent.com/ https://*.my.salesforce-scrt.com/ https://*.my.site.com/ https://widget.tripgo.com https://*.flashtalking.com/ http://*.oracleinfinity.io/ https://dev.oathstudio.com https://book.distribusion.com https://*.mouseflow.com/ https://*.salecycle.com https://d16fk4ms6rqz1v.cloudfront.net wss://ws.salecycle.com https://mymachine.salecycle.com:8080 https://nx-busapplication-prd2-c7aggnczaxcgagdr.a01.azurefd.net https://nx-bus.co.uk;object-src 'self';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ad.doubleclick.net https://cdn.synthetix.com https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/ https://cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/ https://platform.twitter.com https://ton.twimg.com https://nx-busapplication-qa.azureedge.net https://nx-busapplication-prd.azureedge.net https://use.typekit.net/hpe8ksj.css https://p.typekit.net/p.css https://lf16-tiktok-web.ttwstatic.com https://sf16-website-login.neutral.ttwstatic.com https://script.hotjar.com https://static.hotjar.com https://cdn.weglot.com https://*.abtasty.com https://service.force.com https://*.my.salesforce-scrt.com/ https://*.my.site.com/ https://widget.tripgo.com http://*.oracleinfinity.io/ https://dev.oathstudio.com https://book.distribusion.com https://*.mouseflow.com/ https://nx-busapplication-prd2-c7aggnczaxcgagdr.a01.azurefd.net;img-src 'self' https://*.google-analytics.com https://www.google.com https://www.google.co.uk https://cm.g.doubleclick.net https://ad.doubleclick.net https://maps.gstatic.com https://maps.googleapis.com http://www.googletagmanager.com https://www.googletagmanager.com https://national-express.cloud-iq.com http://national-express.cloud-iq.com https://uktc.fospha.com https://www.facebook.com https://bat.bing.com https://cdn.jsdelivr.net https://www.nationalexpress.com https://4ez2xrmccannwebprd1.blob.core.windows.net https://zwu74omccannwebqa1.blob.core.windows.net https://4ez2xrmccannwebprd1-secondary.blob.core.windows.net http://uktc.fospha.com data: https://forms.hubspot.com https://forms.hsforms.com https://track.hubspot.com https://t.co/i/ https://abs.twimg.com https://pbs.twimg.com https://ton.twimg.com https://platform.twitter.com https://syndication.twitter.com https://analytics.twitter.com https://cdns.gigya.com https://cdns1.gigya.com https://cdns2.gigya.com https://cdns3.gigya.com https://signin.qa.nationalexpress.com https://lh3.googleusercontent.com https://lh4.googleusercontent.com https://lh5.googleusercontent.com https://lh6.googleusercontent.com https://graph.facebook.com https://platform-lookaside.fbsbx.com https://platform-cdn.sharethis.com https://l.sharethis.com https://script.hotjar.com https://static.hotjar.com https://*.clarity.ms/ https://c.bing.com https://cdn-ukwest.onetrust.com https://digitalcampaignsstorage.blob.core.windows.net https://widgets.moovit.com https://m.moovitapp.com https://nx-busapplication-qa.azureedge.net https://nx-busapplication-prd.azureedge.net https://appassets.mvtdev.com/mobile/ https://a-tiles.locationiq.com https://b-tiles.locationiq.com https://c-tiles.locationiq.com https://secure.agile-company-365.com/265823.png blob: https://d1fd8aj8bhyfe9.cloudfront.net https://d3dh5c7rwzliwm.cloudfront.net https://pixel.quantserve.com https://cdn.weglot.com https://sp.analytics.yahoo.com https://*.abtasty.com https://resources.tripgo.com https://*.flashtalking.com/ http://*.oracleinfinity.io/ https://dev.oathstudio.com https://*.mouseflow.com/ https://assets.sc-trc.com https://mymachine.salecycle.com:8080 https://nx-busapplication-prd2-c7aggnczaxcgagdr.a01.azurefd.net;frame-src 'self' https://routemap-embed.nationalexpress.com https://faq.nationalexpress.com https://cdns.eu1.gigya.com https://signin.qa.nationalexpress.com https://www.google.com https://*.fls.doubleclick.net https://www.google.com/recaptcha/ https://forms.gle https://docs.google.com https://td.doubleclick.net https://accounts.google.com https://www.googletagmanager.com https://ad.doubleclick.net https://www.facebook.com https://www.youtube.com https://contactless.nxbus.com https://live.ekashu.com https://r1.dotmailer-surveys.com http://r1.dotmailer-surveys.com https://r1.dotdigital-pages.com http://r1.dotdigital-pages.com https://nationalexpressportal.icasework.com https://national-express--bguat.my.salesforce.com https://webto.salesforce.com https://national-express.force.com https://*.my.salesforce-scrt.com/ https://*.my.site.com/ https://timetables-embed.nxbus.co.uk https://*.nationalexpress.com/%20 https://bustimetables-nx.utrackapps.com https://bustimetables-dev.utrackapps.com https://contactless.nxbus.com https://nxbusgateway.co.uk https://player.vimeo.com https://forms.hsforms.com https://tr.snapchat.com https://www.trustpilot.com https://c.sharethis.mgr.consensu.org https://widget.trustpilot.com https://platform.twitter.com https://syndication.twitter.com https://vars.hotjar.com https://widgets.moovit.com https://moovitapp.com https://m.moovitapp.com https://appassets.mvtdev.com/mobile/ https://www.tiktok.com https://nxbusdt.b2clogin.com https://nxbus.b2clogin.com https://www.loom.com http://www.instagram.com https://*.abtasty.com https://service.force.com https://*.my.salesforce.com https://*.my.salesforce-scrt.com/ https://*.my.site.com/ https://*.flashtalking.com/ http://*.oracleinfinity.io/ https://dev.oathstudio.com https://*.mouseflow.com/ https://*.salecycle.com https://d16fk4ms6rqz1v.cloudfront.net wss://ws.salecycle.com https://mymachine.salecycle.com:8080 https://citymapper.com;font-src 'self' https://fonts.gstatic.com https://script.hotjar.com https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/ https://cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/ https://digitalcampaignsstorage.blob.core.windows.net https://use.typekit.net/af/ https://cdn.weglot.com https://*.abtasty.com data: https://*.my.salesforce-scrt.com/ https://*.my.site.com/ https://dev.oathstudio.com https://book.distribusion.com https://*.mouseflow.com/;connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://maps.googleapis.com https://docs.google.com https://*.analytics.google.com https://www.google.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://dc.services.visualstudio.com https://bat.bing.com https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hsforms.com https://api.hubapi.com https://connect.facebook.net https://www.facebook.com/tr/ https://www.facebook.com/plugins/customer_chat/ https://eu.clicktripz.com https://www.clicktripz.com https://prod.api.belimitless-app.io https://l.sharethis.com https://*.hotjar.com/ https://*.hotjar.io/ wss://*.hotjar.com/ https://signin.qa.nationalexpress.com https://signin.dev.nationalexpress.com https://signin.ptbook.nationalexpress.com https://signin.stable.nationalexpress.com https://signin.www.nationalexpress.com https://signin.nationalexpress.com https://holidays.nationalexpress.com https://packagesmetasearch.api.pro.logitravel.internal https://packagesmetasearch.api.external.logitravel.com https://packagesmetasearch-api-external.logitravel.com https://*.clarity.ms/ https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://privacyportal-uk.onetrust.com https://digitalcampaignsstorage.blob.core.windows.net https://oneyou-cms.nhswebsite.nhs.uk https://webto.salesforce.com https://api.hsforms.com https://login.salesforce.com https://thekingsferry.my.salesforce.com https://*.my.salesforce-scrt.com/ https://*.my.site.com/ https://ict.infinity-tracking.net https://nx-busapplication-qa.azureedge.net https://nx-busapplication-prd.azureedge.net https://nxbusdt.b2clogin.com https://nxbus.b2clogin.com https://script.infinity-tracking.com https://qaapi.azure-api.net https://apinxbus.azure-api.net https://web.lon.infinity-tracking.com https://nas.lon.infinity-tracking.com https://nas.lon.infinity-tracking.net https://nexgen.ats.careers/api/ https://idx.liadm.com/idex/unknown/ https://pixel.quantcount.com https://cdn.weglot.com https://cdn-api-weglot.com https://s.yimg.com https://*.abtasty.com https://faq.nationalexpress.com https://api.tripgo.com https://api.geocode.earth http://*.oracleinfinity.io/ https://*.distribusion.com/ https://*.tiktok.com/ https://*.amazon-adsystem.com/ https://*.mouseflow.com/ https://*.salecycle.com https://d16fk4ms6rqz1v.cloudfront.net wss://ws.salecycle.com https://mymachine.salecycle.com:8080 https://nx-busapplication-prd2-c7aggnczaxcgagdr.a01.azurefd.net https://nx-bus.co.uk;frame-ancestors 'self' https://www.facebook.com 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-eval' https://ge.ch *.etat-ge.ch https://datawrapper.dwcdn.net/ https://cdn.ckeditor.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://*.ge.ch *.etat-ge.ch; img-src 'self' 'unsafe-inline' data: https://*.ge.ch https://ge.ch https://*.infomaniak.com https://*.infomaniak.ch https://www.google-analytics.com *.etat-ge.ch https://www.etat.ge.ch https://datawrapper.dwcdn.net; media-src 'self' https://*.infomaniak.com https://*.infomaniak.ch blob:; frame-src 'self' https://vod.infomaniak.com https://player.infomaniak.com https://*.ge.ch https://ge.ch https://www.ropag-data.ch https://sketchfab.com https://datawrapper.dwcdn.net/; frame-ancestors https://*.ge.ch https://sitg.maps.arcgis.com; child-src 'self' https://vod.infomaniak.com https://*.ge.ch https://ge.ch blob:; font-src 'self' data:; connect-src 'self' *.etat-ge.ch ge.ch *.ge.ch *.geneveid.ch https://*.infomaniak.com; report-uri /report-csp-violation 2 style-src 'self' *.googleapis.com se-forms.cz 'unsafe-inline'; default-src 'self' *.googleapis.com *.googletagmanager.com *.gstatic.com *.smartemailing.cz; connect-src 'self' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.smartemailing.cz stats.g.doubleclick.net 'unsafe-inline'; script-src 'self' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.smartemailing.cz se-forms.cz *.google.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'; frame-src 'self' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.smartemailing.cz se-forms.cz *.google.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.gstatic.com images.ctfassets.net *.google.com *.google.cz data: 'unsafe-inline'; 2 frame-ancestors 'self' https://*.benchmarkemail.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.us.zip.co https://cdn.cookielaw.org https://rapid-cdn.yottaa.com https://*.yottaa.com https://*.yottaa.net https://pay.google.com https://*.google.com https://maps.googleapis.com https://www.aaa.com https://cdn.cquotient.com https://p.cquotient.com https://dpm.demdex.net https://goodyear.tt.omtrdc.net https://goodyeardev.egain.cloud https://lciapi.ninthdecimal.com https://oclqcm45.micpn.com https://script.crazyegg.com https://tracking.crazyegg.com https://pagestates-tracking.crazyegg.com https://assets-tracking.crazyegg.com https://cdn-scripts.signifyd.com https://*.signifyd.com https://*.online-metrix.net https://goodyearmvp--sbxsft2.sandbox.my.site.com https://goodyearmvp--sbxsft2--c.sandbox.vf.force.com https://goodyearmvp--sbxsft2.sandbox.my.salesforce-scrt.com https://goodyearmvp--elevatedev.sandbox.my.site.com https://goodyearmvp--elevatedev--c.sandbox.vf.force.com https://goodyearmvp--elevatedev.sandbox.my.salesforce-scrt.com https://goodyearmvp--sit.sandbox.my.site.com https://goodyearmvp--sit--c.sandbox.vf.force.com https://goodyearmvp--sit.sandbox.my.salesforce-scrt.com https://*.sandbox.my.site.com https://*.sandbox.my.salesforce-scrt.com https://*.sandbox.vf.force.com https://goodyearmvp.my.site.com https://goodyearmvp.my.salesforce-scrt.com https://*.my.site.com https://*.my.salesforce-scrt.com https://*.force.com https://*.salesforce.com https://cdn.evgnet.com http://cdn.evgnet.com https://js.braintreegateway.com https://*.paypal.com https://*.braintreegateway.com https://api.braintreegateway.com https://api.sandbox.braintreepayments.com https://client-analytics.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://*.braintree-api.com https://origin-analytics-sand.sandbox.braintree-api.com https://gateway.us.zip.co https://api.quadpay.com https://assets.quadpay.com https://pay.google.com https://services.epxuap.com https://*.cloudflareinsights.com https://assets.adobedtm.com https://assets.adobemd.com https://edge.adobedc.net https://*.adobedc.net https://adobedc.demdex.net https://*.demdex.net https://*.omtrdc.net https://evergage.com https://*.evergage.com https://www.googletagmanager.com https://js.adsrvr.org https://connect.facebook.net https://www.youtube.com http://www.youtube.com https://youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://s.ytimg.com https://*.googlevideo.com https://*.adobeaemcloud.com https://*.goodyear.com https://s7d1.scene7.com https://*.scene7.com https://challenges.cloudflare.com https://*.cloudflare.com https://google.com https://www.google.com https://ad.doubleclick.net https://*.fls.doubleclick.net https://*.adroll.com https://www.facebook.com https://*.facebook.com https://s.pinimg.com https://ct.pinterest.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://assets.quadpay.com https://*.evergage.com https://goodyearmvp--sbxsft2.sandbox.my.site.com https://goodyearmvp--sbxsft2--c.sandbox.vf.force.com https://goodyearmvp--sbxsft2.sandbox.my.salesforce-scrt.com https://goodyearmvp--elevatedev.sandbox.my.site.com https://goodyearmvp--elevatedev--c.sandbox.vf.force.com https://goodyearmvp--elevatedev.sandbox.my.salesforce-scrt.com https://goodyearmvp--sit.sandbox.my.site.com https://goodyearmvp--sit--c.sandbox.vf.force.com https://goodyearmvp--sit.sandbox.my.salesforce-scrt.com https://*.sandbox.my.site.com https://*.sandbox.my.salesforce-scrt.com https://*.sandbox.vf.force.com https://goodyearmvp.my.site.com https://goodyearmvp.my.salesforce-scrt.com https://*.my.site.com https://*.my.salesforce-scrt.com https://*.force.com https://*.salesforce.com https://cdn.evgnet.com http://cdn.evgnet.com; img-src 'self' data: https: blob: https://www.youtube.com http://www.youtube.com https://youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://s.ytimg.com https://*.googlevideo.com https://*.adobeaemcloud.com https://*.goodyear.com https://s7d1.scene7.com https://*.scene7.com; media-src 'self' blob: https://www.youtube.com http://www.youtube.com https://youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://s.ytimg.com https://*.googlevideo.com https://*.adobeaemcloud.com https://*.goodyear.com https://s7d1.scene7.com https://*.scene7.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://assets.quadpay.com https://*.evergage.com; worker-src 'self' blob: https://*.evergage.com; frame-src 'self' https://goodyearmvp--sbxsft2.sandbox.my.site.com https://goodyearmvp--sbxsft2--c.sandbox.vf.force.com https://goodyearmvp--sbxsft2.sandbox.my.salesforce-scrt.com https://goodyearmvp--elevatedev.sandbox.my.site.com https://goodyearmvp--elevatedev--c.sandbox.vf.force.com https://goodyearmvp--elevatedev.sandbox.my.salesforce-scrt.com https://goodyearmvp--sit.sandbox.my.site.com https://goodyearmvp--sit--c.sandbox.vf.force.com https://goodyearmvp--sit.sandbox.my.salesforce-scrt.com https://*.sandbox.my.site.com https://*.sandbox.my.salesforce-scrt.com https://*.sandbox.vf.force.com https://goodyearmvp.my.site.com https://goodyearmvp.my.salesforce-scrt.com https://*.my.site.com https://*.my.salesforce-scrt.com https://*.force.com https://*.salesforce.com https://cdn.evgnet.com http://cdn.evgnet.com https://js.braintreegateway.com https://*.paypal.com https://*.braintreegateway.com https://api.braintreegateway.com https://api.sandbox.braintreepayments.com https://client-analytics.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://*.braintree-api.com https://origin-analytics-sand.sandbox.braintree-api.com https://gateway.us.zip.co https://api.quadpay.com https://assets.quadpay.com https://pay.google.com https://www.youtube.com http://www.youtube.com https://youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://s.ytimg.com https://*.googlevideo.com https://*.adobeaemcloud.com https://*.goodyear.com https://s7d1.scene7.com https://*.scene7.com https://challenges.cloudflare.com https://*.cloudflare.com https://cdn-scripts.signifyd.com https://*.signifyd.com https://*.online-metrix.net https://google.com https://www.google.com https://ad.doubleclick.net https://*.fls.doubleclick.net https://*.adroll.com https://www.facebook.com https://*.facebook.com https://s.pinimg.com https://ct.pinterest.com https://pay.google.com https://www.aaa.com; connect-src 'self' https://*.googleapis.com https://goodyearmvp--sbxsft2.sandbox.my.site.com https://goodyearmvp--sbxsft2--c.sandbox.vf.force.com https://goodyearmvp--sbxsft2.sandbox.my.salesforce-scrt.com https://goodyearmvp--elevatedev.sandbox.my.site.com https://goodyearmvp--elevatedev--c.sandbox.vf.force.com https://goodyearmvp--elevatedev.sandbox.my.salesforce-scrt.com https://goodyearmvp--sit.sandbox.my.site.com https://goodyearmvp--sit--c.sandbox.vf.force.com https://goodyearmvp--sit.sandbox.my.salesforce-scrt.com https://*.sandbox.my.site.com https://*.sandbox.my.salesforce-scrt.com https://*.sandbox.vf.force.com https://goodyearmvp.my.site.com https://goodyearmvp.my.salesforce-scrt.com https://*.my.site.com https://*.my.salesforce-scrt.com https://*.force.com https://*.salesforce.com https://cdn.evgnet.com http://cdn.evgnet.com https://js.braintreegateway.com https://*.paypal.com https://*.braintreegateway.com https://api.braintreegateway.com https://api.sandbox.braintreepayments.com https://client-analytics.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://*.braintree-api.com https://origin-analytics-sand.sandbox.braintree-api.com https://gateway.us.zip.co https://api.quadpay.com https://assets.quadpay.com https://pay.google.com https://services.epxuap.com https://*.cloudflareinsights.com https://assets.adobedtm.com https://assets.adobemd.com https://edge.adobedc.net https://*.adobedc.net https://adobedc.demdex.net https://*.demdex.net https://*.omtrdc.net https://evergage.com https://*.evergage.com https://www.googletagmanager.com https://js.adsrvr.org https://connect.facebook.net https://www.youtube.com http://www.youtube.com https://youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://s.ytimg.com https://*.googlevideo.com https://*.adobeaemcloud.com https://*.goodyear.com https://s7d1.scene7.com https://*.scene7.com https://challenges.cloudflare.com https://*.cloudflare.com https://*.yottaa.net https://script.crazyegg.com https://tracking.crazyegg.com https://pagestates-tracking.crazyegg.com https://assets-tracking.crazyegg.com https://rapid-cdn.yottaa.com https://cdn.us.zip.co https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://www.aaa.com https://*.ggp.goodyear.net https://cdn-scripts.signifyd.com https://*.signifyd.com https://*.online-metrix.net https://google.com https://www.google.com https://ad.doubleclick.net https://*.fls.doubleclick.net https://*.adroll.com https://www.facebook.com https://*.facebook.com https://s.pinimg.com https://ct.pinterest.com https://cdn.cquotient.com https://p.cquotient.com https://goodyeardev.egain.cloud https://lciapi.ninthdecimal.com https://oclqcm45.micpn.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.paypal.com https://services.epxuap.com https://services.epx.com https://*.mobile.citibank.com https://*.citibankonline.com https://www.facebook.com https://*.facebook.com; frame-ancestors 'self' https://goodyear.com https://*.goodyear.com https://*.goodyear.net https://dev.ggp.goodyear.net https://dev.emea.ggp.goodyear.net https://qa.ggp.goodyear.net https://dev1.ggp.goodyear.net https://qa1.ggp.goodyear.net https://stage.ggp.goodyear.net https://uat.ggp.goodyear.net https://preview.goodyear.com https://prod.goodyear.com https://experience.adobe.com https://goodyearmvp--sbxsft2.sandbox.my.site.com https://goodyearmvp--sbxsft2--c.sandbox.vf.force.com https://goodyearmvp--sbxsft2.sandbox.my.salesforce-scrt.com https://goodyearmvp--elevatedev.sandbox.my.site.com https://goodyearmvp--elevatedev--c.sandbox.vf.force.com https://goodyearmvp--elevatedev.sandbox.my.salesforce-scrt.com https://goodyearmvp--sit.sandbox.my.site.com https://goodyearmvp--sit--c.sandbox.vf.force.com https://goodyearmvp--sit.sandbox.my.salesforce-scrt.com https://*.sandbox.my.site.com https://*.sandbox.my.salesforce-scrt.com https://*.sandbox.vf.force.com https://goodyearmvp.my.site.com https://goodyearmvp.my.salesforce-scrt.com https://*.my.site.com https://*.my.salesforce-scrt.com https://*.force.com https://*.salesforce.com https://cdn.evgnet.com http://cdn.evgnet.com https://challenges.cloudflare.com https://*.cloudflare.com https://www.aaa.com 2 frame-ancestors 'self' stvr.sk *.stvr.sk *.dev.stvr.sk stvr.org *.stvr.org 2 frame-ancestors 'self'; upgrade-insecure-requests ; report-uri https://sentry.arkadiumhosted.com/api/2/security/?sentry_key=bcb574bf0e0200c8449ec5e88917387d 2 frame-ancestors 'self' https://layout-cms.fox9.com; 2 frame-ancestors 'self' tecnun.unav.edu www.isem.es 2 frame-ancestors 'self' discussion.academyart.edu data.fineartstudioonline.com systems.academyart.edu catalog.academyart.edu app.contentful.com 2 frame-ancestors 'self' https://*.forumfree.it/ 2 default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:; worker-src blob:; img-src 'self' https: data:; font-src 'self' https: data: 2 frame-ancestors 'self' https://www.youtube.com https://alterdata.com.br https://*.alterdata.com.br https://*.alterdatasoftware.com.br 2 child-src blob:;default-src 'self' wss://prd-ncus-data360-signalr-01.service.signalr.net https://prd-ncus-data360-signalr-01.service.signalr.net https://rum.hlx.page https://*.flashtalking.com https://inferred.litix.io https://www.gstatic.com https://*.mux.com https://*.omtrdc.net https://*.launchdarkly.com https://*.formstack.com https://s7d1.scene7.com https://prdncusecstg01.blob.core.windows.net wss://prd-ncus-ec-signalr-01.service.signalr.net https://prd-ncus-ec-signalr-01.service.signalr.net https://*.googleapis.com https://*.googleadservices.com https://*.clinch.co https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.gomoxie.solutions https://lifetime.life https://*.lifetime.life https://lifetimefitness.tt.omtrdc.net https://*.lifetimefitness.com https://lifetimefitness-survey.ehosts.net https://lifetimefitness.ehosts.net https://*.lthealth.com https://*.rarempls.com https://*.mylt.life https://*.lt.life https://*.prod.boltdns.net https://*.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://*.brightcovecdn.com https://*.brightcove.com https://*.brightcove.net https://assets.adobedtm.com https://*.demdex.net https://fonts.gstatic.com https://maps.gstatic.com https://*.bing.com https://td.doubleclick.net https://*.pbbl.co https://snap.licdn.com https://s.yimg.com https://*.clarity.ms https://*.analytics.yahoo.com https://*.privy.com https://privymktg.com https://*.facebook.net www.facebook.com graph.microsoft.com https://px.ads.linkedin.com https://www.linkedin.com https://*.pinterest.com https://*.tiktok.com *.innovid.com *.tvsquared.com https://*.onetrust.com https://*.cookielaw.org https://browser-intake-datadoghq.com https://*.datadoghq.com https://www.datadoghq-browser-agent.com https://rum.browser-intake-datadoghq.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.decibelinsight.net https://s.pinimg.com https://*.adsrvr.org https://*.agkn.com https://vjs.zencdn.net https://everestjs.net https://*.everesttech.net https://*.everestjs.net https://*.kaptcha.com data: blob: https://*.redditstatic.com https://*.reddit.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://googleadservices.com https://*.googlesyndication.com https://google.com https://*.google.com https://*.g.doubleclick.net;frame-src 'self' wss://prd-ncus-data360-signalr-01.service.signalr.net https://prd-ncus-data360-signalr-01.service.signalr.net https://rum.hlx.page https://*.flashtalking.com https://inferred.litix.io https://www.gstatic.com https://*.mux.com https://*.omtrdc.net https://*.launchdarkly.com https://*.formstack.com https://s7d1.scene7.com https://prdncusecstg01.blob.core.windows.net wss://prd-ncus-ec-signalr-01.service.signalr.net https://prd-ncus-ec-signalr-01.service.signalr.net https://*.googleapis.com https://*.googleadservices.com https://*.clinch.co https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.gomoxie.solutions https://lifetime.life https://*.lifetime.life https://lifetimefitness.tt.omtrdc.net https://*.lifetimefitness.com https://lifetimefitness-survey.ehosts.net https://lifetimefitness.ehosts.net https://*.lthealth.com https://*.rarempls.com https://*.mylt.life https://*.lt.life https://*.prod.boltdns.net https://*.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://*.brightcovecdn.com https://*.brightcove.com https://*.brightcove.net https://assets.adobedtm.com https://*.demdex.net https://fonts.gstatic.com https://maps.gstatic.com https://*.bing.com https://td.doubleclick.net https://*.pbbl.co https://snap.licdn.com https://s.yimg.com https://*.clarity.ms https://*.analytics.yahoo.com https://*.privy.com https://privymktg.com https://*.facebook.net www.facebook.com graph.microsoft.com https://px.ads.linkedin.com https://www.linkedin.com https://*.pinterest.com https://*.tiktok.com *.innovid.com *.tvsquared.com https://*.onetrust.com https://*.cookielaw.org https://browser-intake-datadoghq.com https://*.datadoghq.com https://www.datadoghq-browser-agent.com https://rum.browser-intake-datadoghq.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.decibelinsight.net https://s.pinimg.com https://*.adsrvr.org https://*.agkn.com https://vjs.zencdn.net https://everestjs.net https://*.everesttech.net https://*.everestjs.net https://*.kaptcha.com data: blob: https://*.redditstatic.com https://*.reddit.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://googleadservices.com https://*.googlesyndication.com https://google.com https://*.google.com https://*.g.doubleclick.net;img-src 'self' wss://prd-ncus-data360-signalr-01.service.signalr.net https://prd-ncus-data360-signalr-01.service.signalr.net https://rum.hlx.page https://*.flashtalking.com https://inferred.litix.io https://www.gstatic.com https://*.mux.com https://*.omtrdc.net https://*.launchdarkly.com https://*.formstack.com https://s7d1.scene7.com https://prdncusecstg01.blob.core.windows.net wss://prd-ncus-ec-signalr-01.service.signalr.net https://prd-ncus-ec-signalr-01.service.signalr.net https://*.googleapis.com https://*.googleadservices.com https://*.clinch.co https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.gomoxie.solutions https://lifetime.life https://*.lifetime.life https://lifetimefitness.tt.omtrdc.net https://*.lifetimefitness.com https://lifetimefitness-survey.ehosts.net https://lifetimefitness.ehosts.net https://*.lthealth.com https://*.rarempls.com https://*.mylt.life https://*.lt.life https://*.prod.boltdns.net https://*.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://*.brightcovecdn.com https://*.brightcove.com https://*.brightcove.net https://assets.adobedtm.com https://*.demdex.net https://fonts.gstatic.com https://maps.gstatic.com https://*.bing.com https://td.doubleclick.net https://*.pbbl.co https://snap.licdn.com https://s.yimg.com https://*.clarity.ms https://*.analytics.yahoo.com https://*.privy.com https://privymktg.com https://*.facebook.net www.facebook.com graph.microsoft.com https://px.ads.linkedin.com https://www.linkedin.com https://*.pinterest.com https://*.tiktok.com *.innovid.com *.tvsquared.com https://*.onetrust.com https://*.cookielaw.org https://browser-intake-datadoghq.com https://*.datadoghq.com https://www.datadoghq-browser-agent.com https://rum.browser-intake-datadoghq.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.decibelinsight.net https://s.pinimg.com https://*.adsrvr.org https://*.agkn.com https://vjs.zencdn.net https://everestjs.net https://*.everesttech.net https://*.everestjs.net https://*.kaptcha.com data: blob: https://*.redditstatic.com https://*.reddit.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://googleadservices.com https://*.googlesyndication.com https://google.com https://*.google.com https://*.g.doubleclick.net https://*.amazonaws.com data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' wss://prd-ncus-data360-signalr-01.service.signalr.net https://prd-ncus-data360-signalr-01.service.signalr.net https://rum.hlx.page https://*.flashtalking.com https://inferred.litix.io https://www.gstatic.com https://*.mux.com https://*.omtrdc.net https://*.launchdarkly.com https://*.formstack.com https://s7d1.scene7.com https://prdncusecstg01.blob.core.windows.net wss://prd-ncus-ec-signalr-01.service.signalr.net https://prd-ncus-ec-signalr-01.service.signalr.net https://*.googleapis.com https://*.googleadservices.com https://*.clinch.co https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.gomoxie.solutions https://lifetime.life https://*.lifetime.life https://lifetimefitness.tt.omtrdc.net https://*.lifetimefitness.com https://lifetimefitness-survey.ehosts.net https://lifetimefitness.ehosts.net https://*.lthealth.com https://*.rarempls.com https://*.mylt.life https://*.lt.life https://*.prod.boltdns.net https://*.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://*.brightcovecdn.com https://*.brightcove.com https://*.brightcove.net https://assets.adobedtm.com https://*.demdex.net https://fonts.gstatic.com https://maps.gstatic.com https://*.bing.com https://td.doubleclick.net https://*.pbbl.co https://snap.licdn.com https://s.yimg.com https://*.clarity.ms https://*.analytics.yahoo.com https://*.privy.com https://privymktg.com https://*.facebook.net www.facebook.com graph.microsoft.com https://px.ads.linkedin.com https://www.linkedin.com https://*.pinterest.com https://*.tiktok.com *.innovid.com *.tvsquared.com https://*.onetrust.com https://*.cookielaw.org https://browser-intake-datadoghq.com https://*.datadoghq.com https://www.datadoghq-browser-agent.com https://rum.browser-intake-datadoghq.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.decibelinsight.net https://s.pinimg.com https://*.adsrvr.org https://*.agkn.com https://vjs.zencdn.net https://everestjs.net https://*.everesttech.net https://*.everestjs.net https://*.kaptcha.com data: blob: https://*.redditstatic.com https://*.reddit.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://googleadservices.com https://*.googlesyndication.com https://google.com https://*.google.com https://*.g.doubleclick.net;style-src 'self' 'unsafe-inline' wss://prd-ncus-data360-signalr-01.service.signalr.net https://prd-ncus-data360-signalr-01.service.signalr.net https://rum.hlx.page https://*.flashtalking.com https://inferred.litix.io https://www.gstatic.com https://*.mux.com https://*.omtrdc.net https://*.launchdarkly.com https://*.formstack.com https://s7d1.scene7.com https://prdncusecstg01.blob.core.windows.net wss://prd-ncus-ec-signalr-01.service.signalr.net https://prd-ncus-ec-signalr-01.service.signalr.net https://*.googleapis.com https://*.googleadservices.com https://*.clinch.co https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.gomoxie.solutions https://lifetime.life https://*.lifetime.life https://lifetimefitness.tt.omtrdc.net https://*.lifetimefitness.com https://lifetimefitness-survey.ehosts.net https://lifetimefitness.ehosts.net https://*.lthealth.com https://*.rarempls.com https://*.mylt.life https://*.lt.life https://*.prod.boltdns.net https://*.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://*.brightcovecdn.com https://*.brightcove.com https://*.brightcove.net https://assets.adobedtm.com https://*.demdex.net https://fonts.gstatic.com https://maps.gstatic.com https://*.bing.com https://td.doubleclick.net https://*.pbbl.co https://snap.licdn.com https://s.yimg.com https://*.clarity.ms https://*.analytics.yahoo.com https://*.privy.com https://privymktg.com https://*.facebook.net www.facebook.com graph.microsoft.com https://px.ads.linkedin.com https://www.linkedin.com https://*.pinterest.com https://*.tiktok.com *.innovid.com *.tvsquared.com https://*.onetrust.com https://*.cookielaw.org https://browser-intake-datadoghq.com https://*.datadoghq.com https://www.datadoghq-browser-agent.com https://rum.browser-intake-datadoghq.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.decibelinsight.net https://s.pinimg.com https://*.adsrvr.org https://*.agkn.com https://vjs.zencdn.net https://everestjs.net https://*.everesttech.net https://*.everestjs.net https://*.kaptcha.com data: blob: https://*.redditstatic.com https://*.reddit.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://googleadservices.com https://*.googlesyndication.com https://google.com https://*.google.com https://*.g.doubleclick.net;connect-src 'self' wss://prd-ncus-data360-signalr-01.service.signalr.net https://prd-ncus-data360-signalr-01.service.signalr.net https://rum.hlx.page https://*.flashtalking.com https://inferred.litix.io https://www.gstatic.com https://*.mux.com https://*.omtrdc.net https://*.launchdarkly.com https://*.formstack.com https://s7d1.scene7.com https://prdncusecstg01.blob.core.windows.net wss://prd-ncus-ec-signalr-01.service.signalr.net https://prd-ncus-ec-signalr-01.service.signalr.net https://*.googleapis.com https://*.googleadservices.com https://*.clinch.co https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.gomoxie.solutions https://lifetime.life https://*.lifetime.life https://lifetimefitness.tt.omtrdc.net https://*.lifetimefitness.com https://lifetimefitness-survey.ehosts.net https://lifetimefitness.ehosts.net https://*.lthealth.com https://*.rarempls.com https://*.mylt.life https://*.lt.life https://*.prod.boltdns.net https://*.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://*.brightcovecdn.com https://*.brightcove.com https://*.brightcove.net https://assets.adobedtm.com https://*.demdex.net https://fonts.gstatic.com https://maps.gstatic.com https://*.bing.com https://td.doubleclick.net https://*.pbbl.co https://snap.licdn.com https://s.yimg.com https://*.clarity.ms https://*.analytics.yahoo.com https://*.privy.com https://privymktg.com https://*.facebook.net www.facebook.com graph.microsoft.com https://px.ads.linkedin.com https://www.linkedin.com https://*.pinterest.com https://*.tiktok.com *.innovid.com *.tvsquared.com https://*.onetrust.com https://*.cookielaw.org https://browser-intake-datadoghq.com https://*.datadoghq.com https://www.datadoghq-browser-agent.com https://rum.browser-intake-datadoghq.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.decibelinsight.net https://s.pinimg.com https://*.adsrvr.org https://*.agkn.com https://vjs.zencdn.net https://everestjs.net https://*.everesttech.net https://*.everestjs.net https://*.kaptcha.com data: blob: https://*.redditstatic.com https://*.reddit.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://googleadservices.com https://*.googlesyndication.com https://google.com https://*.google.com https://*.g.doubleclick.net; 2 default-src 'self' www.google.com www.discord.com *.cookiebot.com *.wwzapi.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.gstatic.com *.cookiebot.com https://*.i.posthog.com; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' https: blob: http://*.azureedge.net https://*.i.posthog.com; object-src 'none'; form-action 'self'; frame-ancestors 'none'; frame-src 'self' www.google.com www.discord.com *.cookiebot.com www.youtube.com; connect-src 'self' www.google.com www.discord.com *.cookiebot.com prosdevapi.azurewebsites.net *.public-portal-api.stand.hydrapi.xyz preprosstgapi.azurewebsites.net stgauth.prismray.io auth.prismray.io support.saber.games *.wwzapi.com https://*.i.posthog.com; 2 frame-ancestors 'self' https://mgmt-prod-gcp.keurig.com; 2 default-src https: 'unsafe-inline' 'unsafe-eval' ; img-src https://* data:; frame-src https://* about: javascript:; frame-ancestors 'self' http://*.vegas.com https://*.vegas.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js https://ga.jspm.io/npm:es-module-shims@1.7.1/dist/es-module-shims.js https://kit.fontawesome.com/ https://kit.fontawesome.com/29b2028b7f.js https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js *.swmed.edu *.utsouthwestern.edu https://tagmanager.google.com https://www.googleadservices.com https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.6/dist/umd/popper.min.js https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js *.taggbox.com https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://w.soundcloud.com/player/api.js https://siteimproveanalytics.com/js/siteanalyze_67564.js https://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.min.js https://www.youvisit.com/tour/Embed/js3 https://s.ytimg.com/yts/jsbin/www-widgetapi-vfldp9JMF/www-widgetapi.js https://s.ytimg.com/yts/jsbin/www-widgetapi-vflGYMLFw/www-widgetapi.js https://www.youvisit.com/SmartScript/latest/smartscript.js https://utsw.flintbox.com/embed.js https://utsw.flintbox.com/assets/iframe-container-5933c9a9de9740bee358da320c7bf82406da2e2f6e93843b06b4514c2030dfd9.js https://www.gstatic.com https://unpkg.com https://cdn.storygize.net https://bs.serving-sys.com *.pinterest.com *.hotjar.com https://platform.twitter.com https://assets.pinterest.com https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.js http://www.facebook.com/plugins/like.php https://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.8.3/underscore-min.js https://cdnjs.cloudflare.com/ajax/libs/foundation/6.4.3/js/foundation.min.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_format_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_default_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_ui_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_corechart_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_fw_module.js https://www.gstatic.com/charts/46.2/third_party/dygraphs/dygraph-tickers-combined.js https://www.gstatic.com/charts/46.2/third_party/webfontloader/webfont.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_bar_module.js https://cdnjs.cloudflare.com/ajax/libs/foundation-essential/5.2.2/js/vendor/modernizr.js https://www.google-analytics.com/analytics.js https://script.crazyegg.com/pages/scripts/0017/5050.js https://static.hotjar.com/c/hotjar-30590.js https://secure-ds.serving-sys.com/SemiCachedScripts/ebOneTag.js https://www.storygize.net/a/cecea51f-563b-4ac4-9a2a-8a3660977ad2/abdo.js https://connect.facebook.net/en_US/fbevents.js https://www.gstatic.com/charts/46.2/loader.js https://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js https://cdn.plyr.io https://connect.facebook.net https://www.storygize.net https://www.gstatic.com/recaptcha/api2/v1555968629716/recaptcha__en.js https://www.gstatic.com/charts/loader.js https://events.utsouthwestern.edu https://js.adsrvr.org/ https://insight.adsrvr.org/track https://assets.juicer.io/embed.js https://www.youtube.com/ https://player.vimeo.com/ https://www.flickr.com/ https://www.jove.com/ https://launchpad.utswneurology.com/ http://radonc.utsouthwestern.edu/ https://surgeonportal.donortracplus.org/ https://ais.swmed.edu/ https://www.facebook.com/ https://www.google.com/ https://calendar.google.com/ https://www.googletagmanager.com/ https://hroras2.swmed.edu/ https://studentservices.utsouthwestern.edu https://intrastudentservices.utsouthwestern.edu https://snap.licdn.com/li.lms-analytics/insight.min.js https://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.13.7/underscore-min.js https://static.ads-twitter.com/uwt.js https://www.redditstatic.com/ads/pixel.js https://www.clarity.ms/ https://scripts.clarity.ms/0.8.45/clarity.js; connect-src 'self' *.swmed.edu *.utsouthwestern.edu https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css https://ka-f.fontawesome.com/releases/v6.5.0/css/free-v4-shims.min.css https://ka-f.fontawesome.com/releases/v6.5.0/css/free.min.css https://ka-f.fontawesome.com/releases/v6.5.0/css/free-v5-font-face.min.css https://ka-f.fontawesome.com/releases/v6.5.0/css/free-v4-font-face.min.css https://ka-f.fontawesome.com/releases/v6.4.2/css/free.min.css https://ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-shims.min.css https://ka-f.fontawesome.com/releases/v6.4.2/css/free-v5-font-face.min.css https://ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-font-face.min.css https://www.google-analytics.com https://analytics.google.com https://cdn.linkedin.oribi.io https://lm.serving-sys.com *.taggbox.com *.crazyegg.com *.hotjar.io *.hotjar.com https://www.juicer.io https://stats.g.doubleclick.net/j/collect https://listgrowth.ctctcdn.com/v1/5626582cad2b3868b069a1d065b39fd3.json https://visitor2.constantcontact.com/api/v1/signup_forms/ https://secure-ds.serving-sys.com/adServingData/PROD/TMClient/8/6218 https://graph.facebook.com/58323112191/picture https://www.juicer.io/api/page_views https://www.juicer.io/api/feeds/home-page-393b6969-47a9-40b5-b6a5-297bc3722122 https://cdn.plyr.io https://connect.facebook.net https://www.storygize.net https://www.gstatic.com/recaptcha/api2/v1555968629716/recaptcha__en.js https://www.gstatic.com/charts/loader.js https://events.utsouthwestern.edu https://assets.juicer.io/embed.js https://www.youtube.com/ https://player.vimeo.com/ https://www.flickr.com/ https://www.jove.com/ https://launchpad.utswneurology.com/ http://radonc.utsouthwestern.edu/ https://surgeonportal.donortracplus.org/ https://ais.swmed.edu/ https://www.facebook.com/ https://www.google.com/ https://calendar.google.com/ https://www.googletagmanager.com/ https://hroras2.swmed.edu/ https://studentservices.utsouthwestern.edu https://intrastudentservices.utsouthwestern.edu https://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.min.js.map http://ent/web-sourcemaps/api.js-4950e94a9243.map https://px.ads.linkedin.com/ https://insight.adsrvr.org/track/realtimeconversion https://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.css.map https://pixel-config.reddit.com/pixels/a2_f2f20uxiakcb/config https://o.clarity.ms/collect; frame-ancestors https://utsouthwestern.edu https://apply.utsouthwestern.edu/; frame-src 'self' *.swmed.edu *.adsrvr.org https://app.powerbi.com/ *.utsouthwestern.edu https://app.truelook.com/ https://utsw.flintbox.com/ https://td.doubleclick.net *.taggbox.com https://forms.office.com/ *.hotjar.com https://www.youvisit.com https://cdn.youvisit.com https://w.soundcloud.com https://platform.twitter.com https://www.facebook.com https://yoshki.com/badge-apta.html https://cdn.plyr.io https://connect.facebook.net https://www.storygize.net https://www.gstatic.com/recaptcha/api2/v1555968629716/recaptcha__en.js https://www.gstatic.com/charts/loader.js https://events.utsouthwestern.edu https://assets.juicer.io/embed.js https://www.youtube.com/ https://player.vimeo.com/ https://www.flickr.com/ https://www.jove.com/ https://launchpad.utswneurology.com/ http://radonc.utsouthwestern.edu/ https://surgeonportal.donortracplus.org/ https://ais.swmed.edu/ https://www.facebook.com/ https://www.google.com/ https://calendar.google.com/ https://www.googletagmanager.com/ https://hroras2.swmed.edu/ https://studentservices.utsouthwestern.edu https://intrastudentservices.utsouthwestern.edu https://px.ads.linkedin.com 2 default-src https: 'unsafe-inline' 'unsafe-eval' blob:; img-src * data: https:; object-src 'none'; connect-src 'self' https: wss:; script-src 'unsafe-inline' https: 'unsafe-eval'; worker-src 'self' blob:; upgrade-insecure-requests; block-all-mixed-content; media-src 'self' blob: data: https:; font-src 'self' data: https://use.typekit.net https://cdnjs.cloudflare.com https://fonts.gstatic.com; base-uri 'self'; 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.xn--d1aqf.xn--p1ai 2 frame-ancestors 'self' https://app.experiencewelcome.com/ 2 default-src 'self' data: blob: *.conac.cn *.bjwlxy.edu.cn *.gov.cn *.jiathis.com *.bjwlxy.cn *.baidu.com *.bshare.cn *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 2 object-src 'self'; frame-src 'self' www.google.com cloud.hostingraja.in www.googletagmanager.com chat.hostingraja.in www.youtube.com https://widget.trustpilot.com https://securegw-stage.paytm.in/ https://secure.paytmpayments.com/ https://accounts.paytm.com/ paytm https://staticpg.paytm.in/ https://api.razorpay.com/ https://checkout.stripe.com/ https://td.doubleclick.net/ https://secure.paytmpayments.com/ https://clients.hostingraja.in/ https://consentcdn.cookiebot.com/ https://livechat.sgp1.whgi.net/ https://ml42.hostingraja.in/ https://embed.upmind.app/ https://api.upmind.io/ https://secure.livechatinc.com/; 2 frame-ancestors 'self' *.lsr.ru https://crystal-resort.ru https://zilartmuseum.ru http://webvisor.com https://webvisor.com https://metrika.yandex.ru https://mc.yandex.ru; 2 frame-ancestors 'self' engage.navan.com app.contentful.com app.navan.com 2 frame-ancestors 'self' *.blinds-2go.co.uk; 2 img-src 'self' blob: data: https://www.googletagmanager.com https://www.google.co.kr https://i.ytimg.com https://perf-na1.hsforms.com https://track.hubspot.com https://forms.hsforms.com https://admin.counterpointresearch.com https://test.counterpointresearch.com https://counterpointresearch.com https://display.counterpointresearch.com https://loki.counterpointresearch.com data:; 2 frame-ancestors 'self' https://info.thryv.com https://info.thryv.com.au https://info.thryv.ca https://info.thryv.co.nz https://www.thryv.com https://www.thryv.com.au https://www.thryv.ca https://www.thryv.co.nz 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com *.stitcher.com use.typekit.net https://fonts.gstatic.com data:; media-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.gstatic.com *.bakermckenzie-podcastlibrary-wordpress.onenorth.com bakermckenzie-podcastlibrary-wordpress.onenorth.com blob: ; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.oribi.io *.onetrust.com *.stitcher.com *.google-analytics.com translate.googleapis.com stats.g.doubleclick.net cdn.cookielaw.org https://px.ads.linkedin.com *.mktoresp.com blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.ceros.site *.googletagmanager.com *.siteimprove.com siteimproveanalytics.com cdnjs.cloudflare.com translate.google.com *.google-analytics.com app-static.turtl.co static.ads-twitter.com munchkin.marketo.net cdn.cookielaw.org snap.licdn.com *.ceros.com connect.facebook.net *.cloudfront.net; img-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: filesystem: *.google-analytics.com *.bakermckenzie.com bakermckenzie.com *.googletagmanager.com gstatic.com *.gstatic.com translate.google.com *.siteimproveanalytics.io px.ads.linkedin.com *.linkedin.com p.adsymptotic.com cdn.cookielaw.org; frame-src 'self' baker-mckenzie.ceros.site gateway.zscalertwo.net *.youtube.com *.stitcher.com *.libsyn.com *.buzzsprout.com *.spotify.com *.podbean.com *.soundcloud.com *.podcasts.apple.com omny.fm *.vbrick.com *.bryter.io *.bakermckenzie.com *.youtube-nocookie.com *.vimeo.com *.google.com *.googletagmanager.com *.yoshki.com app-static.turtl.co view.ceros.com 2 frame-src 'self' https://app.cofcsports.com https://google.com https://www.google.com https://*.snapchat.com https://*.adsrvr.org charleston.gpinsights.org https://td.doubleclick.net https://*.fls.doubleclick.net https://www.googletagmanager.com https://googletagmanager.com https://go.pardot.com https://cofc.secure.force.com https://forms.charleston.edu https://forms.cofc.edu https://cofc-edu.my.salesforce-sites.com youtube.com *.youtube.com vimeo.com *.vimeo.com calendar.charleston.edu *.charleston.edu https://cofc.tfaforms.net www.imleagues.com imleagues.com *.k12insight.com k12insight.com cofc.edu *.cofc.edu cofc.zoom.us fm-cofc.maps.arcgis.com cougarconnect.cofc.edu outlook.office365.com *.arcgis.com teams.microsoft.com *.lightcastcc.com *.camstreamer.com *.buzzsprout.com buzzsprout.com; 2 base-uri 'self'; child-src 'self'; connect-src 'self' https://*.meo.pt https://*.botschool.ai https://api.botschool.ai wss://api.botschool.ai wss://api.ng.botschool.ai https://webchat.ng.botschool.ai https://*.engagement.coremedia.cloud wss://*.engagement.coremedia.cloud https://*.byside.com wss://*.byside.com https://cdn-api-weglot.com https://cloudflarestream.com https://*.creativecdn.com https://*.evergage.com https://www.facebook.com https://*.google-analytics.com https://adservice.google.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://www.googleadservices.com https://*.googleapis.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com https://in.hotjar.com https://*.inmobi.com https://*.inside-graph.com wss://*.inside-graph.com https://*.qualifio.com https://*.qualifioapp.com https://*.qualtrics.com https://cmp.quantcast.com https://*.cmp.quantcast.com https://pixel.quantcount.com https://analytics.tiktok.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.weglot.com https://visit-server.inmobi-choice.io https://*.weglot.io https://*.clarity.ms https://*.doubleclick.net https://quantcast.mgr.consensu.org https://*.quantcast.mgr.consensu.org https://*.userway.org https://www.google.pt https://services.sapo.pt https://services.telecom.pt https://signet-spot.telecom.pt https://analytics-ipv6.tiktokw.us; default-src 'self'; font-src 'self' data: https://*.meo.pt https://cdnjs.cloudflare.com https://*.evergage.com https://use.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com https://eu-cdn.inside-graph.com https://connect.facebook.net https://fast.fonts.net; form-action 'self' https://*.meo.pt https://*.engagement.coremedia.cloud https://*.byside.com https://www.facebook.com https://connect.facebook.net; frame-ancestors 'self' https://en.meo.pt https://sapo.pt https://hp2025.bk.sapo.pt https://cinema.sapo.pt https://mag.sapo.pt https://preview.sapo.pt https://hp2025.staging.sapo.pt https://tv.sapo.pt https://www.sapo.pt; frame-src 'self' https://*.meo.pt https://youtu.be https://*.engagement.coremedia.cloud https://stags.bluekai.com https://*.byside.com https://*.creativecdn.com https://www.facebook.com https://*.figma.com https://www.google.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com https://vars.hotjar.com https://*.inside-graph.com https://meo.speedtestcustom.com https://meoteste.speedtestcustom.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.youtube.com https://*.smark.io https://*.meo.velocidi.io https://*.brightcove.net https://*.doubleclick.net https://*.userway.org https://qualifio.sapo.pt https://signet-spot.telecom.pt; img-src 'self' data: https: https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.vwo.io; media-src 'self' blob: data: https://*.meo.pt; report-to cspenforce; report-uri https://cspreport.apps.meo.pt/Services/Rest.svc/CSP/pkX84pGsGX/Enforce; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.meo.pt https://*.botschool.ai https://img.botschool.ai https://webchat.ng.botschool.ai https://*.engagement.coremedia.cloud https://tags.bkrtx.com https://*.byside.com https://cdnjs.cloudflare.com https://*.creativecdn.com https://*.evergage.com https://cdn.evgnet.com https://*.google-analytics.com https://optimize.google.com https://www.google.com https://www.googleadservices.com https://*.googleapis.com https://www.googleoptimize.com https://*.googlesyndication.com https://www.googletagmanager.com https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com https://*.hotjar.com https://*.inmobi.com https://*.inside-graph.com https://code.jquery.com https://*.qualifio.com https://*.qualifioapp.com https://*.qualtrics.com https://cmp.quantcast.com https://rules.quantcount.com https://secure.quantserve.com https://*.serving-sys.com https://analytics.tiktok.com https://unpkg.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.weglot.com https://p.smrk.io https://*.meo.velocidi.io https://u.heatmap.it https://*.clarity.ms https://mstat.acestream.net https://*.doubleclick.net https://connect.facebook.net https://quantcast.mgr.consensu.org https://*.userway.org https://selo.confio.pt; style-src 'self' 'unsafe-inline' https://*.meo.pt https://*.botschool.ai https://img.botschool.ai https://webchat.ng.botschool.ai https://*.engagement.coremedia.cloud https://s3.amazonaws.com https://*.byside.com https://cdnjs.cloudflare.com https://*.evergage.com https://use.fontawesome.com https://optimize.google.com https://*.googleapis.com https://www.googletagmanager.com https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com https://*.inside-graph.com https://unpkg.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://cdn.weglot.com https://fast.fonts.net https://*.userway.org https://selo.confio.pt; worker-src 'self' blob:; object-src 'none' 2 frame-ancestors 'self' https://layout-cms.fox10phoenix.com; 2 frame-ancestors 'self' *.tabby.ai *.tabby.sa *.tabby.dev *.tabbysa.dev 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ingest.promptwatch.com https://cdn-cookieyes.com https://cdn.tolt.io https://unpkg.com https://cdn.jsdelivr.net https://www.youtube.com https://www.youtube-nocookie.com https://tally.so https://va.vercel-scripts.com https://www.googletagmanager.com https://widget.kapa.ai https://www.google.com https://www.gstatic.com https://metrics.kapa.ai https://proxyhog.prisma-data.net https://cdn.cr-relay.com https://app.enzuzo.com/ https://static.ads-twitter.com https://snap.licdn.com https://vercel.live https://58qr5yci46.execute-api.us-east-1.amazonaws.com https://analytics.twitter.com https://t.co https://static.ads-twitter.com https://px.ads.linkedin.com https://snap.licdn.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://*.fontawesome.com https://raw.githubusercontent.com https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.tolt.io https://vercel.live https://proxyhog.prisma-data.net https://hcaptcha.com https://*.hcaptcha.com; font-src 'self' data: https://fonts.gstatic.com https://vercel.live https://assets.vercel.com https://*.fontawesome.com; img-src 'self' data: http://localhost:3002 http://127.0.0.1:3002 https://www.prisma.io https://prisma.io https://cdn.sanity.io https://prisma.io https://prismalens.vercel.app https://api.producthunt.com https://www.google.com https://www.google.com/s2/favicons https://*.gstatic.com https://pbs.twimg.com/ https://cdn.tolt.io https://cdn-cookieyes.com https://website-prisma.vercel.app https://www.cursor.com/ https://cursor.com/ https://analytics.twitter.com https://t.co https://static.ads-twitter.com https://px.ads.linkedin.com https://snap.licdn.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://vercel.live https://vercel.com data: blob: https://td.doubleclick.net https://raw.githubusercontent.com https://*.meetupstatic.com https://www.prisma.io; connect-src 'self' https://ingest.promptwatch.com https://api.github.com https://p2zxqf70.api.sanity.io https://www.youtube.com https://cdn.jsdelivr.net https://accelerate-analytics-exporter.prisma-data.net https://www.prisma-status.com https://api.rippling.com https://api.producthunt.com https://*.tally.so https://va.vercel-scripts.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app https://metrics.kapa.ai https://cdn-cookieyes.com https://log.cookieyes.com https://*.algolia.net https://*.algolianet.com https://proxyhog.prisma-data.net https://directory.cookieyes.com https://api.cr-relay.com https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://internal-t.posthog.com https://vercel.live wss://ws-us3.pusher.com https://react-tweet.vercel.app https://cdn.tolt.io https://58qr5yci46.execute-api.us-east-1.amazonaws.com https://analytics.twitter.com https://t.co https://static.ads-twitter.com https://px.ads.linkedin.com https://snap.licdn.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://raw.githubusercontent.com https://www.google-analytics.com https://unpkg.com https://proxy.kapa.ai https://hcaptcha.com https://*.hcaptcha.com https://ka-p.fontawesome.com; media-src 'self' https://*.prisma.io https://unpkg.com https://cdn.jsdelivr.net https://www.youtube.com; frame-src 'self' https://www.youtube.com https://youtube.com https://youtube-nocookie.com https://tally.so https://*.tally.so https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://vercel.live/ https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://calculator.prisma.io/ https://ppg-pricing-calculator.vercel.app https://hcaptcha.com https://*.hcaptcha.com; child-src 'self' https://www.youtube.com https://youtube.com https://youtube-nocookie.com https://tally.so https://*.tally.so https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; worker-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://v3.lenna.ai https://connect.facebook.net https://www.google.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css https://v3.lenna.ai/chat/assets/index.css; img-src 'self' https: blob: data: https://www.facebook.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/ data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; media-src 'self' storage.cybiteam.id; connect-src 'self' https://cms.cybiteam.id https://api-crm.cybiteam.id https://cbn.speedtestcustom.com https://analytics.google.com https://www.googletagmanager.com https://www.google-analytics.com https://v3.lenna.ai https://app.lenna.ai https://cms.lenna.ai https://lenna.ai https://storage.cybiteam.id https://api.ipify.org https://connect.facebook.net https://cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/ https://socket.lenna.ai wss://socket.lenna.ai https://www.google.com; frame-src 'self' https://cbn.speedtestcustom.com https://www.googletagmanager.com https://td.doubleclick.net blob:; upgrade-insecure-requests; 2 default-src 'self'; style-src 'self' *.arcgis.co *.freshchat.com *.typeform.com *.bootstrapcdn.com *.doublethedonation.com doublethedonation.com *.chatbot.com 'unsafe-inline' *.google.com *.google.ca *.googleapis.com; script-src 'self' *.gstatic.com *.issuu.com *.fw-cdn.com *.freshchat.com *.fontawesome.com *.arcgis.co *.createjs.com *.typeform.com *.chatbot.co *.facebook.net *.bing.com youtube.com *.youtube.com *.pardot.com *.licdn.com *.cookieinformation.com *.classy.org *.gofundme.com *.googletagmanager.com *.google-analytics.com *.doublethedonation.com doublethedonation.com *.newrelic.com *.sharethis.com *.googleoptimize.com *.rainforest-alliance.org *.google.com *.google.ca *.gstatic.co *.gstatic.com *.chatbot.com 'unsafe-inline' *.googleadservices.com *.doubleclick.net 'unsafe-eval'; img-src 'self' rainforest-alliance.org *.rainforest-alliance.org rainforest-alliance.org *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.sharethis.com *.bing.com *.facebook.com *.linkedin.com *.doublethedonation.com doublethedonation.com *.gravatar.com *.chatbot.com data: *.google.com *.google.ca *.gstatic.com; font-src 'self' *.rainforest-alliance.org *.fontawesome.com *.doublethedonation.com doublethedonation.com data: *.googletagmanager.com *.google.com *.google.ca *.gravatar.com *.bootstrapcdn.com *.gstatic.com data:; connect-src 'self' *.google.com *.google.ca *.fontawesome.com *.googleadservices.com *.hirehive.com *.classy.org *.gofundme.com *.linkedin.com *.cookieinformation.com *.google-analytics.com *.appspot.com *.doubleclick.net *.bing.com *.nr-data.net *.doublethedonation.com doublethedonation.com *.chatbot.com *.sharethis.com; frame-src 'self' *.issuu.com *.soundcloud.com *.googletagmanager.com *.linkedin.com *.freshchat.com *.my.site.com *.arcgis.com *.facebook.com *.typeform.com *.juicer.io *.vimeo.com *.cookieinformation.com *.rainforest-alliance.org *.classy.org *.gofundme.com *.powerbi.com *.google.com *.google.ca youtube.com *.youtube.com *.chatbot.co *.chatbot.com *.doubleclick.net; frame-ancestors 'none'; 2 default-src 'self'; script-src 'self' https://cdn.prod.website-files.com cdn.prod.website-files.com https://script.crazyegg.com https://sc.lfeeder.com https://www.googletagmanager.com https://*.cloudfront.net https://a.quora.com https://www.redditstatic.com https://bat.bing.com https://analytics.twitter.com https://static.ads-twitter.com https://t.co https://plausible.io https://snap.licdn.com https://js.hs-scripts.com https://cdn.vector.co https://cdn.intellimize.co https://js.hsforms.net https://hubspotonwebflow.com https://cdn.jsdelivr.net https://cdn.jetboost.io https://api.jetboost.io https://js.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://s3-us-west-2.amazonaws.com/b2bjsstore/ https://*.liadm.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://static.hsappstatic.net https://www.google.com https://google.com https://recaptcha.net https://boards.greenhouse.io https://w.chatlio.com https://www.gstatic.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-eu1.net https://cdnjs.cloudflare.com/ajax/libs/highlight.js/ https://googleads.g.doubleclick.net https://js.pusher.com https://*.osano.com https://static.reo.dev/ https://unpkg.com/@rive-app/ https://ob.sornavellon.com https://obs.sornavellon.com https://a.usbrowserspeed.com https://www.youtube.com https://api.embed.ly https://analytics.webflow.com https://b2bjsstore.s3.us-west-2.amazonaws.com https://*.pathfactory.com https://js.zi-scripts.com https://ws.zoominfo.com http://js.zi-script.com/ blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https://services.min.io https://cdn.prod.website-files.com cdn.prod.website-files.com https://*.quora.com https://analytics.twitter.com https://t.co https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.hsforms.com https://bat.bing.com https://*.lfeeder.com https://track.hubspot.com https://*.liadm.com https://*.reddit.com https://d10lpsik1i8c69.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://*.linkedin.com https://*.chatlio.com https://www.googleadservices.com https://*.doubleclick.net https://fonts.gstatic.com https://obs.sornavellon.com https://api.vector.co blob:; connect-src 'self' https://cdn.prod.website-files.com cdn.prod.website-files.com https://services.min.io https://dl.min.io https://a.quora.com https://analytics.google.com https://www.google-analytics.com https://plausible.io https://*.linkedin.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://*.intellimize.co https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://accounts.finsweet.com https://hubspotonwebflow.com https://pro.ip-api.com https://api.vector.co https://cs.lf-discover.com https://static.hsappstatic.net https://api.hubapi.com https://a.usbrowserspeed.com https://alocdn.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://js.zi-scripts.com https://ws.zoominfo.com https://*.liadm.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://cdn.jsdelivr.net https://api.jetboost.io https://*.algolia.net https://*.algolianet.com https://api.chatlio.com https://bat.bing.com https://pipedream.wistia.com https://*.reddit.com https://www.redditstatic.com https://settings.luckyorange.net https://*.crazyegg.com wss://in.visitors.live wss://visitors.live https://*.luckyorange.com https://www.googleadservices.com wss://ws.pusherapp.com https://api-cdn.chatlio.com https://www.googletagmanager.com https://*.webflow.com wss://realtime.webflow.com https://prodregistryv2.org https://internet-up.ably-realtime.com https://*.osano.com https://api.reo.dev https://unpkg.com/@rive-app/ https://obs.sornavellon.com https://www.gstatic.com https://googleads.g.doubleclick.net https://pubsub.googleapis.com/v1/projects/lucky-orange/ https://webflow-prod-assets.s3.amazonaws.com/ https://s3.amazonaws.com/webflow-prod-assets/ https://*.pathfactory.com blob: data:; style-src 'self' https://cdn.prod.website-files.com cdn.prod.website-files.com https://boards.greenhouse.io https://w.chatlio.com https://cdnjs.cloudflare.com/ajax/libs/highlight.js/ https://d10lpsik1i8c69.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://fonts.googleapis.com https://www.googletagmanager.com https://fonts.googleapis.com https://googleads.g.doubleclick.net 'unsafe-inline'; font-src 'self' data: https://cdn.prod.website-files.com cdn.prod.website-files.com https://fonts.gstatic.com https://d3e54v103j8qbb.cloudfront.net https://*.pathfactory.com; media-src 'self' https://cdn.prod.website-files.com cdn.prod.website-files.com https://d10lpsik1i8c69.cloudfront.net https://*.chatlio.com; object-src 'none'; frame-src 'self' https://*.intellimizeio.com https://www.googletagmanager.com https://app.storylane.io https://cdn.embedly.com https://job-boards.greenhouse.io https://forms.hsforms.com https://www.google.com https://google.com https://i.liadm.com https://webflow.com https://www.youtube.com https://api.vector.co; frame-ancestors 'self' https://*.hubspot.com http://minio.lookbookhq.com https://minio.lookbookhq.com http://minio.pathfactory.com https://minio.pathfactory.com http://resources.min.io https://resources.min.io https://learn.min.io https://app.finsweet.com; worker-src 'self' blob:; base-uri 'none'; 2 frame-ancestors 'self'; report-uri https://hdsex.org/api/v1/tools/csp-reporter 2 frame-ancestors 'self' https://layout-cms.fox5dc.com; 2 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' *; frame-ancestors 'self' https: https://paynow.pmnts-sandbox.io https://paynow.pmnts.io; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.nyi.net; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' www.youtube.com www.youtube-nocookie.com; font-src 'self' data:; img-src 'self' pbs.twimg.com data:; media-src 'self' pb.twimg.com data:; frame-src 'self' www.google.com www.youtube.com www.youtube-nocookie.com; frame-ancestors 'self' 2 default-src 'self';font-src 'self';form-action 'self' https://*.scalable.capital;script-src-attr 'unsafe-inline';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://bat.bing.com https://static.ads-twitter.com https://pa.videobeat.net https://amplify.outbrain.com https://cdn.jsdelivr.net https://www.google-analytics.com https://*.cookiebot.com https://*.force.com https://snap.licdn.com https://secure.quantserve.com https://rules.quantcount.com https://www.googleoptimize.com https://*.salesforceliveagent.com https://scalablecap.my.salesforce.com https://scalablecap.my.salesforce-sites.com https://*.scalable.capital https://app.usercentrics.eu https://privacy-proxy.usercentrics.eu https://*.adjust.com;style-src https://scalablecap.secure.force.com https://service.force.com https://scalablecap.my.salesforce-sites.com 'self' 'unsafe-inline';img-src 'self' data: https://*.scalable.capital https://bat.bing.com https://pa.videobeat.net https://px.ads.linkedin.com https://pixel.quantserve.com https://cdn.linkedin.oribi.io https://www.linkedin.com https://www.google-analytics.com https://www.google.com https://www.google.de https://www.google.es https://www.google.it https://www.google.fr https://www.google.nl https://www.google.at https://googleads.g.doubleclick.net https://www.googletagmanager.com https://www.googleadservices.com https://*.usercentrics.eu;object-src 'none';frame-src https://service.force.com https://*.scalable.capital https://scalable.capital https://www.youtube-nocookie.com;connect-src 'self' https://stats.g.doubleclick.net/ https://www.google-analytics.com https://bat.bing.com https://eu-api.friendlycaptcha.eu https://cdn.linkedin.oribi.io https://api.friendlycaptcha.com https://*.scalable.capital https://scalable.capital https://scalablecap.my.salesforce-sites.com https://scalablecap.secure.force.com https://*.usercentrics.eu https://*.adjust.com;worker-src blob: ;child-src blob: ;frame-ancestors 'self' https://*.scalable.capital;base-uri 'self';upgrade-insecure-requests 2 frame-ancestors none; report-uri /report-csp-violation 2 default-src 'none';media-src 'self';style-src 'self' https: 'unsafe-inline' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com cdn.cookielaw.org ssl.google-analytics.com www.google-analytics.com www.googletagmanager.com region1.google-analytics.com; img-src 'self' data: cdn.cookielaw.org ssl.google-analytics.com www.google-analytics.com www.googletagmanager.com region1.google-analytics.com; ;connect-src 'self' cdn.cookielaw.org region1.google-analytics.com ;manifest-src 'self' cdn.cookielaw.org; report-uri /csp_report_parser; 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;frame-ancestors *;img-src 'self' data: blob: https:;font-src 'self' data: blob: https:;base-uri 'self';object-src 'none';worker-src 'self' blob:;upgrade-insecure-requests; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tailwindcss.com https://cdn.ampproject.org https://platform.twitter.com https://*.twimg.com https://platform.x.com https://www.instagram.com https://connect.facebook.net https://*.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://*.twimg.com https://*.fbcdn.net; font-src 'self' https://fonts.gstatic.com https://*.fbcdn.net; img-src 'self' data: blob: https: http:; media-src 'self' blob: https: http:; frame-src 'self' https://vod.rudaw.net https://www.youtube.com https://live.rudaw.net https://cdn.ampproject.org https://platform.twitter.com https://syndication.twitter.com https://platform.x.com https://www.instagram.com https://www.facebook.com https://web.facebook.com https://m.facebook.com https://*.facebook.com https://*.fbcdn.net https://*.fbsbx.com; connect-src 'self' http://localhost:8000 http://localhost:8090 https://api.rudaw.net https://*.cartocdn.com https://*.basemaps.cartocdn.com https://api.maptiler.com https://vod.rudaw.net https://www.youtube.com https://live.rudaw.net https://rudaw.net https://images.rudaw.net https://tts.rudaw.ai https://tts-storage-2.rudaw.ai https://syndication.twitter.com https://*.twimg.com https://www.instagram.com https://www.facebook.com https://*.facebook.com https://graph.facebook.com https://*.fbcdn.net https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://region1.google-analytics.com; worker-src blob: 'self'; frame-ancestors 'self' https://rudaw.net https://manage.rudaw.dev 2 default-src 'none' ; worker-src 'self' blob: ; media-src https://s3-eu-west-1.amazonaws.com https://*.devrdx.com https://storage.devrdx.com https://visomdm.com https://*.visomdm.com 'self' blob: data: ; frame-src https://radix-downloads.s3.eu-west-1.amazonaws.com https://charts.mongodb.com *.bluesnap.com *.hotjar.com https://www.youtube.com *.google.com *.googletagmanager.com https://visomdm.com https://*.visomdm.com ; connect-src https://api.descope.com *.productfruits.com https://app.grapesjs.com wss://*.visomdm.com https://pro.ip-api.com *.hotjar.io *.devrdx.com *.glbth.com https://*.devrdx.com *.visomdm.com https://visomdm.com https://rdxstate.vtv.vodafone.com wss://*.devrdx.com wss://*.glbth.com wss://*.hotjar.com wss://*.tawk.to wss://*.xirsys.com *.hotjar.com *.tawk.to *.hubapi.com *.hs-banner.com *.hsappstatic.net *.google.com 'self' ; font-src 'self' *.tawk.to *.gstatic.com *.hotjar.com ; img-src *.productfruits.com *.ggpht.com tawk.link blob: *.googleusercontent.com *.googleadservices.com https://www.youtube.com https://www.google.com https://*.gstatic.com https://*.mzstatic.com https://cdn.jsdelivr.net/emojione/ *.tawk.to https://storage.devrdx.com https://*.devrdx.com https://visomdm.com https://*.visomdm.com *.tile.openstreetmap.org *.hubspot.net *.hubspot.com *.hotjar.com *.hotjar.io data: 'self' ; style-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net/emojione/ *.productfruits.com https://cdnjs.cloudflare.com *.googleapis.com https://embed.tawk.to/ ; script-src 'self' https://cdn.jsdelivr.net/emojione/ *.productfruits.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.usemessages.com *.hs-banner.com *.hotjar.com *.tawk.to *.openstreetmap.org https://www.youtube.com https://apis.google.com *.google.com *.googletagmanager.com *.doubleclick.net *.gstatic.com *.ip-api.com 'sha256-jxahBNaefKb7HUgrP6SFqod39I6KB1wnzxNv+Gahh2s=' 'sha256-mf7OlEdaUdLAGAIDqicGf/kRbd9P604n4ooz6WIWPZc=' 'sha256-YJ3eJPxdzm7qieW1lfM307T3jCkb8WIfRGJEnAE84p0=' 'sha256-HCQgNWRxpMGyJmBen1qvR4yz7uVPEl0DqYaArRIfx5g=' 'sha256-b396cohaMJcF59VTKtPy3L1JtgVI6xgY6LjYLoPuR9I=' https://itunes.apple.com/ ; frame-ancestors 'self' 2 frame-ancestors 'self' https://layout-cms.foxla.com; 2 frame-ancestors *.frankfurt-airport.com *.fraport.de https://fraportag.sharepoint.com https://external.airport.ai; 2 frame-ancestors 'self' https://join-stories.com https://*.join-stories.com 2 default-src blob: ws: data: 'self' 'unsafe-inline' 'unsafe-eval' *.pobeda.aero *.flypobeda.ru yandex.ru yandex.com *.yandex.ru *.yandex.com yastatic.net smartcaptcha.yandexcloud.net www.youtube.com vk.com *.vk.com vkvideo.ru *.tripster.ru *.mail.ru; frame-ancestors 'self' https://*.yandex.ru https://*.webvisor.com 2 frame-ancestors 'self' https://layout-cms.fox5ny.com; 2 default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://app.flutterflow.io https://how-didi-do-app-5tfwqa.flutterflow.app *.run.app; 2 default-src * blob:;script-src data: 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net *.newrelic.com *.hongkongdisneyland.com *.go.com *.wdpromedia.com *.content.disney.io *.disneyinternational.com *.wdprapps.disney.com connect.facebook.net *.scorecardresearch.com *.dilcdn.com *.wdpro.wdig.com *.tt.omtrdc.net dpm.demdex.net assets.adobedtm.com tags.bkrtx.com d1ivexoxmp59q7.cloudfront.net disneyparks.sp1.convertro.com stags.bluekai.com tags.bluekai.com bat.bing.com *.doubleclick.net *.clicktale.net s.yimg.com/wi/ytc.js *.ads-twitter.com *.twitter.com *.facebook.com *.lpsnmedia.net *.liveperson.net *.googleadservices.com *.yahoo.com tag.mtrcs.samba.tv *.proofhq.com *.googletagmanager.com *.google-analytics.com static.tacdn.com *.resonate.com *.reson8.com *.sojern.com *.appdynamics.com *.eum-appdynamics.com *.go-mpulse.net *.akstat.io *.gam-apigw.wdprapps.disney.com *.my.site.com *.my.salesforce-scrt.com *.salesforce.com *.disney.com *.disneyaccount.com www.googletagmanager.com tagmanager.google.com *.demdex.net *.contentsquare.com *.cookielaw.org *.onetrust.com amazon-adsystem.com *.amazon-adsystem.com *.apptentive.com *.bluekai.com *.branch.io app.link www.googleadservices.com www.google.com pagead2.googlesyndication.com snap.licdn.com www.redditstatic.com cdn.resonate.com sc-static.net *.snapchat.com analytics.tiktok.com js.adsrvr.org https://*.screenmeet.com;connect-src wss://*.liveperson.net *.liveperson.net *.lpsnmedia.net *.my.site.com *.hongkongdisneyland.com *.my.salesforce-scrt.com *.salesforce.com 'self' *.disney.com *.disneyaccount.com *.go.com *.demdex.net adobedc.demdex.net edge.adobedc.net *.tt.omtrdc.net *.akstat.io *.go-mpulse.net *.clicktale.net *.contentsquare.net *.google-analytics.com *.analytics.google.com analytics.google.com *.googletagmanager.com *.cookielaw.org *.onetrust.com amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon *.apptentive.com bat.bing.com *.branch.io *.doubleclick.net www.googleadservices.com *.google.com pagead2.googlesyndication.com cdn.linkedin.oribi.io pixel-config.reddit.com *.reson8.com *.snapchat.com analytics.tiktok.com *.tiktokw.us s.yimg.com insight.adsrvr.org https://*.screenmeet.com wss://*.screenmeet.com *.launchdarkly.com;media-src blob: *.lpsnmedia.net *.wdprapps.disney.com *.my.site.com *.my.salesforce-scrt.com *.salesforce.com;img-src * data: *.lpsnmedia.net *.my.site.com *.my.salesforce-scrt.com *.salesforce.com *.akstat.io *.clicktale.net *.contentsquare.net *.google-analytics.com *.googletagmanager.com *.cookielaw.org px.ads.linkedin.com cnv.event.prod.bidr.io alb.reddit.com https://*.screenmeet.com;style-src 'self' 'unsafe-inline' *.lpsnmedia.net *.go.com *.wdpromedia.com *.wdprapps.disney.com *.liveperson.net *.gam-apigw.wdprapps.disney.com *.twdc.com *.my.site.com *.my.salesforce-scrt.com *.salesforce.com tagmanager.google.com fonts.googleapis.com *.apptentive.com;frame-src 'self' *.go.com *.fls.doubleclick.net stags.bluekai.com tags.bluekai.com assets.adobedtm.com *.lpsnmedia.net *.liveperson.net *.facebook.com *.tamgrt.com *.flashtalking.com *.clicktale.net disney.idmelabs.com disney.id.me *.demdex.net cdn1.parksmedia.wdprapps.disney.com cdn2.parksmedia.wdprapps.disney.com *.go-mpulse.net *.akstat.io *.gam-apigw.wdprapps.disney.com *.my.site.com *.my.salesforce-scrt.com *.salesforce.com s.amazon-adsystem.com *.bluekai.com *.doubleclick.net *.snapchat.com *.adsrvr.org *.disney.com *.disneyaccount.com *.wdpromedia.com 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com tagmanager.google.com *.tt.omtrdc.net blob: https://*.screenmeet.com;font-src * data: fonts.gstatic.com;child-src data: 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net *.newrelic.com *.hongkongdisneyland.com *.go.com *.wdpromedia.com *.content.disney.io *.disneyinternational.com *.wdprapps.disney.com connect.facebook.net *.scorecardresearch.com *.dilcdn.com *.wdpro.wdig.com *.tt.omtrdc.net dpm.demdex.net assets.adobedtm.com tags.bkrtx.com d1ivexoxmp59q7.cloudfront.net disneyparks.sp1.convertro.com stags.bluekai.com tags.bluekai.com bat.bing.com *.doubleclick.net *.clicktale.net s.yimg.com/wi/ytc.js *.ads-twitter.com *.twitter.com *.facebook.com *.lpsnmedia.net *.liveperson.net *.googleadservices.com *.yahoo.com tag.mtrcs.samba.tv *.proofhq.com *.googletagmanager.com *.google-analytics.com static.tacdn.com *.resonate.com *.reson8.com *.sojern.com *.appdynamics.com *.eum-appdynamics.com *.go-mpulse.net *.akstat.io *.gam-apigw.wdprapps.disney.com *.my.site.com *.my.salesforce-scrt.com *.salesforce.com *.disney.com *.disneyaccount.com www.googletagmanager.com tagmanager.google.com *.demdex.net *.contentsquare.com *.cookielaw.org *.onetrust.com amazon-adsystem.com *.amazon-adsystem.com *.apptentive.com *.bluekai.com *.branch.io app.link www.googleadservices.com www.google.com pagead2.googlesyndication.com snap.licdn.com cdn.resonate.com sc-static.net *.snapchat.com analytics.tiktok.com js.adsrvr.org blob:;worker-src data: 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net *.newrelic.com *.hongkongdisneyland.com *.go.com *.wdpromedia.com *.content.disney.io *.disneyinternational.com *.wdprapps.disney.com connect.facebook.net *.scorecardresearch.com *.dilcdn.com *.wdpro.wdig.com *.tt.omtrdc.net dpm.demdex.net assets.adobedtm.com tags.bkrtx.com d1ivexoxmp59q7.cloudfront.net disneyparks.sp1.convertro.com stags.bluekai.com tags.bluekai.com bat.bing.com *.doubleclick.net *.clicktale.net s.yimg.com/wi/ytc.js *.ads-twitter.com *.twitter.com *.facebook.com *.lpsnmedia.net *.liveperson.net *.googleadservices.com *.yahoo.com tag.mtrcs.samba.tv *.proofhq.com *.googletagmanager.com *.google-analytics.com static.tacdn.com *.resonate.com *.reson8.com *.sojern.com *.appdynamics.com *.eum-appdynamics.com *.go-mpulse.net *.akstat.io *.gam-apigw.wdprapps.disney.com *.my.site.com *.my.salesforce-scrt.com *.salesforce.com *.disney.com *.disneyaccount.com www.googletagmanager.com tagmanager.google.com *.demdex.net *.contentsquare.com *.cookielaw.org *.onetrust.com amazon-adsystem.com *.amazon-adsystem.com *.apptentive.com *.bluekai.com *.branch.io app.link www.googleadservices.com www.google.com pagead2.googlesyndication.com snap.licdn.com cdn.resonate.com sc-static.net *.snapchat.com analytics.tiktok.com js.adsrvr.org blob: 2 frame-ancestors 'self' *.pucv.cl; 2 default-src 'self'; connect-src 'self' blob: https://t.co https://analytics.twitter.com https://dgc-test-vdocs.mmspos.com https://vdocs.digicel.mmspos.com https://mock.eu.apidog.com https://api.stripe.com https://*.iubenda.com https://*.mux.com https://*.ada.support https://*.datadoghq.com https://*.hotjar.com wss://*.hotjar.com https://*.analytics.google.com https://*.clarity.ms https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gp https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.nf https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tk https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://*.googletagmanager.com https://*.hotjar.io https://*.linkedin.co https://*.linkedin.com https://*.mypurecloud.com https://*.mypurecloud.ie wss://*.mypurecloud.com https://ads-api.twitter.com https://cdn.linkedin.oribi.io https://connect.facebook.net https://*.facebook.com https://google.com https://gtm-mr26nnc-ztexm.uc.r.appspot.com https://maps.googleapis.com https://static.ads-twitter.com https://webto.salesforce.com https://www.facebook.com https://www.googleadservices.com https://*.curator.io/ https://*.eskimi.com https://pagead2.googlesyndication.com https://siteintercept.qualtrics.com https://tally.so https://*.novemberfive.co https://*.posthog.com https://*.sentry.io https://*.avo.app https://*.digicelgroup.com https://www.datocms-assets.com https://translate.googleapis.com https://translate-pa.googleapis.com https://stats.g.doubleclick.net https://us.i.posthog.com https://us-assets.i.posthog.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect-js.stripe.com https://*.js.stripe.com https://js.stripe.com https://*.googletagmanager.com https://googletagmanager.com https://googleads.g.doubleclick.net https://siteintercept.qualtrics.com https://ssl.google-analytics.com https://tagmanager.google.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://tally.so https://*.novemberfive.co https://*.posthog.com https://*.sentry.io https://*.avo.app https://*.digicelgroup.com https://*.ads-twitter.com https://static.ads-twitter.com https://www.digicelgroup.com https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://embeds.iubenda.com https://cdn.iubenda.com https://static.ada.support https://www.youtube.com https://apps.mypurecloud.com; script-src-elem 'self' 'unsafe-inline' blob: https://js.stripe.com https://*.eskimi.com https://*.iubenda.com https://*.youtube.com https://*.hotjar.com https://googleads.g.doubleclick.net https://*.ada.support https://*.mypurecloud.com https://*.mypurecloud.ie https://api-cdn.mypurecloud.ie https://*.ads-twitter.com https://*.clarity.ms https://*.google-analytics.com https://*.licdn.com https://*.googletagmanager.com https://connect.facebook.net https://maps.googleapis.com https://static.ads-twitter.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://tally.so https://*.novemberfive.co https://*.posthog.com https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://embeds.iubenda.com https://cdn.iubenda.com https://static.ada.support https://www.youtube.com https://apps.mypurecloud.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mypurecloud.ie https://*.mypurecloud.com https://cdn.curator.io https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com https://*.posthog.com https://*.gstatic.com; object-src 'none'; img-src 'self' data: https://*.stripe.com https://*.bing.com https://*.clarity.ms https://*.facebook.com https://connect.facebook.net https://*.google-analytics.com https://*.googletagmanager.com https://*.linkedin.com https://*.qualtrics.com https://img.youtube.com https://*.mypurecloud.com https://*.mypurecloud.ie https://analytics.twitter.com https://t.co https://curator-assets.b-cdn.net https://google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://ssl.gstatic.com https://www.google.com https://*.google.com https://www.googleadservices.com https://www.gstatic.com https://*.analytics.google.com https://googletagmanager.com https://*.g.doubleclick.net https://*.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gp https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.nf https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tk https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://*.digicelbusiness.com https://tally.so https://*.novemberfive.co https://*.datocms-assets.com https://*.posthog.com https://*.digicelgroup.com blob: https://i.ytimg.com https://cms.dgc-prod.maplewave.com https://digicelgroup.com https://digicel2681.zendesk.com; font-src 'self' https://fonts.gstatic.com https://*.posthog.com data:; base-uri 'none'; media-src 'self' https://*.datocms-assets.com https://*.mux.com https://*.posthog.com blob: data:; frame-src 'self' blob: https://dgc-test-vdocs.mmspos.com https://vdocs.digicel.mmspos.com https://connect-js.stripe.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://leafletjs.com https://*.ada.support https://*.digicelgroup.com https://*.qualtrics.com https://*.doubleclick.net https://*.mypurecloud.com https://*.mypurecloud.ie https://*.googletagmanager.com https://*.appspot.com https://bid.g.doubleclick.net https://digicel.bigidprivacy.cloud https://service.digiceltt.com https://www.facebook.com https://*.shuftipro.com https://www.youtube.com https://tally.so https://*.novemberfive.co https://*.avo.app https://safeframe.googlesyndication.com https://*.safeframe.googlesyndication.com https://modal.style https://stg-fw-network-weather-bjg0fjaehec7hab8.a01.azurefd.net https://fw-network-weather-erbmfndchbfqc3ag.a03.azurefd.net data:; form-action https://*.qualtrics.com https://www.facebook.com https://tally.so https://*.novemberfive.co; frame-ancestors 'self' https://*.posthog.com https://*.digicelgroup.com https://*.novemberfive.co https://*.datocms.com; 2 frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 2 default-src 'self' https://*.directupload.net https://*.directupload.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.directupload.net https://*.directupload.eu; img-src 'self' https://ssl.google-analytics.com data: https://*.directupload.net https://*.directupload.eu; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; font-src 'self' https://fonts.gstatic.com; object-src 'none'; frame-src 'self' https://www.google.com https://*.directupload.net https://*.directupload.eu; worker-src 'self'; frame-ancestors 'self'; connect-src 'self' https://www.googletagmanager.com https://region1.google-analytics.com https://www.google-analytics.com https://stats.g.doubleclick.net; 2 frame-ancestors 'self' https://planeetta.ladesk.com 2 default-src 'self' * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src 'self' * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src 'self' * 'unsafe-inline' data: blob:; img-src 'self' * data: blob:; font-src 'self' * data:; connect-src 'self' *; media-src 'self' *; frame-src 'self' *; object-src 'self' * 2 frame-ancestors https://*.storyblok.com; 2 default-src https:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 2 default-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://noembed.com https://cdn.plyr.io https://*.privacyrequest.net https://privacyrequest.net https://*.fontawesome.com https://*.gstatic.com https://*.vimeo.com https://*.consentmanager.net https://*.performmedia.com https://*.wp.com https://*.google.com 'unsafe-eval' 'unsafe-inline'; 2 default-src 'self' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca lbrs.ca *.lbrs.ca bkls.ca *.bkls.ca *.quialu.ca *.cloudflare.com *.cloudflareinsights.com *.termly.io *.dialoginsight.com *.ofsys.com *.facebook.com *.facebook.net *.maxmind.com *.mmapiws.com *.paypal.com *.paypalobjects.com *.wordpress.com google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; script-src-elem 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca lbrs.ca *.lbrs.ca bkls.ca *.bkls.ca *.quialu.ca *.cloudflare.com *.cloudflareinsights.com *.termly.io *.dialoginsight.com *.ofsys.com *.facebook.com *.facebook.net *.maxmind.com *.mmapiws.com *.paypal.com *.paypalobjects.com *.wordpress.com google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; style-src 'report-sample' 'self' 'unsafe-inline' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca *.typekit.net google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; style-src-elem 'report-sample' 'self' 'unsafe-inline' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca *.typekit.net google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; object-src none; base-uri self; connect-src 'self' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca lbrs.ca *.lbrs.ca bkls.ca *.bkls.ca *.quialu.ca *.typekit.net *.termly.io *.dialoginsight.com *.ofsys.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net *.maxmind.com *.mmapiws.com *.podcastics.com *.paypal.com *.paypalobjects.com *.wordpress.com google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; font-src 'self' data: *.gstatic.com *.typekit.net; frame-src 'self' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca lbrs.ca *.lbrs.ca bkls.ca *.bkls.ca *.quialu.ca *.cloudflare.com *.cloudflareinsights.com *.termly.io *.braintreegateway.com *.braintree-api.com *.paypal.com *.paypalobjects.com *.facebook.com *.facebook.net *.podcastics.com *.fliphtml5.com google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; fenced-frame-src 'self' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca lbrs.ca *.lbrs.ca bkls.ca *.bkls.ca *.quialu.ca *.cloudflare.com *.cloudflareinsights.com *.termly.io *.braintreegateway.com *.braintree-api.com *.paypal.com *.paypalobjects.com *.facebook.com *.facebook.net *.podcastics.com *.fliphtml5.com google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; img-src 'self' blob: data: leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca lbrs.ca *.lbrs.ca bkls.ca *.bkls.ca *.lab0.io *.librairiemoderne.com *.squarespace-cdn.com *.cjoint.com *.twimg.com librairiebertrand.com *.imgur.com *.dialoginsight.com *.ofsys.com *.facebook.com *.facebook.net *.paypal.com *.paypalobjects.com google.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; manifest-src 'self' leslibraires.ca *.leslibraires.ca booksellers.ca *.booksellers.ca lbrs.ca *.lbrs.ca bkls.ca *.bkls.ca leslibraires.cloudflareaccess.com; media-src self data: blob:; child-src blob:; report-uri https://o4505964188139520.ingest.sentry.io/api/4505964295684096/security/?sentry_key=0c267b745f30d4da27e8d996a22eb2b4&sentry_environment=production; report-to csp-endpoint; worker-src blob:; upgrade-insecure-requests; 2 base-uri 'self'; font-src 'self' https: data:; form-action 'self' https://www.facebook.com *.visualwebsiteoptimizer.com https://forms.hsforms.com; frame-ancestors 'self' https://cms.colombiahosting.com.co; img-src 'self' https: data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://stablechat.mysecurecloudhost.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net; upgrade-insecure-requests; worker-src blob:; 2 default-src 'self' https://static.zdassets.com https://ekr.zdassets.com https://avm-cs.zendesk.com avm.zendesk.com v2.zopim.com fritz.com avm.de service.avm.de news.avm.de bingo.avm.de scope.avm.de piwik.avm.de assets.avm.de www.commerce-connector.com www.surveygizmo.eu ; img-src 'self' https://fritz.com https://*.fritz.com https://avm.de https://*.avm.de service.avm.de data: https://shoplogos.commerce-connector.de https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://i.vimeocdn.com https://static.zdassets.com https://gpt.avm.botario.com https://www.gravatar.com https://cdn.plyr.io ; media-src 'self' *.fritz.com *.avm.de service.avm.de static.zdassets.com https://maps.googleapis.com https://maps.gstatic.com https://vimeo.com https://i.ytimg.com https://i.vimeocdn.com https://cdn.plyr.io blob: data: ; font-src 'self' https://fritz.com https://*.fritz.com https://avm.de https://*.avm.de service.avm.de https://fonts.gstatic.com data: ; style-src 'self' fritz.com *.fritz.com avm.de *.avm.de service.avm.de https://fonts.googleapis.com 'unsafe-inline' ; connect-src 'self' fritz.com *.fritz.com avm.de *.avm.de service.avm.de https://maps.googleapis.com https://noembed.com https://avm.zendesk.com https://static.zdassets.com https://ekr.zdassets.com https://pod-28.zendesk.com https://pod-28-sunco-ws.zendesk.com wss://widget-mediator.zopim.com wss://pod-28.zendesk.com wss://pod-28-sunco-ws.zendesk.com https://gpt.avm.botario.com wss://gpt.avm.botario.com https://cdn.plyr.io ; script-src 'self' avm.de *.avm.de fritz.com *.fritz.com service.avm.de piwik.avm.de https://player.vimeo.com https://vimeocdn.com https://*.vimeocdn.com https://www.youtube-nocookie.com https://maps.googleapis.com https://static.zdassets.com https://pod-28.zendesk.com https://pod-28-sunco-ws.zendesk.com https://gpt.avm.botario.com 'unsafe-eval' 'unsafe-inline' blob: ; script-src-elem 'self' avm.de *.avm.de service.avm.de fritz.com *.fritz.com piwik.avm.de https://maps.googleapis.com https://player.vimeo.com https://vimeocdn.com https://*.vimeocdn.com https://www.youtube-nocookie.com https://www.youtube.com https://static.zdassets.com https://pod-28.zendesk.com https://pod-28-sunco-ws.zendesk.com https://widget-mediator.zopim.com https://gpt.avm.botario.com 'unsafe-inline' blob: ; worker-src 'self' blob: ; frame-src 'self' fritz.com *.fritz.com avm.de *.avm.de service.avm.de https://player.vimeo.com https://www.youtube-nocookie.com https://gpt.avm.botario.com ; frame-ancestors 'self' avm.de *.avm.de service.avm.de fritz.com *.fritz.com 2 frame-ancestors 'self' https://agcovirtualshowroom.com https://www.agcovirtualshowroom.com; 2 font-src 'self' data: https://*.cipd.org https://*.hotjar.com https://*.typekit.net https://dhm5hy2vn8l0l.cloudfront.net https://fonts.gstatic.com https://l55685555563p3op3c43n3n3y2772529.germany-2.evergage.com; style-src-elem 'self' 'unsafe-inline' https://*.cipd.org https://*.evergage.com https://*.typekit.net https://cdn.jsdelivr.net https://cipd.my.site.com https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com https://p.typekit.net https://use.typekit.net https://web-sdk-eu.aptrinsic.com https://www.googletagmanager.com/debug/badge.css; style-src 'unsafe-inline' https://*.cipd.co.uk https://*.cipd.org https://*.evergage.com https://*.hotjar.com https://*.typekit.net https://cipd.my.site.com https://fonts.googleapis.com/ https://googletagmanager.com https://maxcdn.bootstrapcdn.com https://tagmanager.google.com; script-src-attr 'unsafe-eval' 'unsafe-inline' https://cipd.my.site.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.collect.igodigital.com https://*.eventbrite.co.uk https://*.evergage.com https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://*.idio.episerver.net https://*.infogram.com https://*.onetrust.com https://*.optimizely.com https://*.youtube.com https://7227074.collect.igodigital.com https://auth.cipd.co.uk https://bat.bing.com https://cdn-ukwest.onetrust.com https://cdn.evgnet.com https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com/ https://cipd.my.site.com https://code.jquery.com/ https://common.optimizely.com https://connect.facebook.net https://e.infogram.com https://infogram.com https://js.monitor.azure.com https://l55685555563p3op3c43n3n3y2772529.germany-2.evergage.com https://maxcdn.bootstrapcdn.com https://metrics.responsetap.com https://s3.amazonaws.com https://siteimproveanalytics.com https://snap.licdn.com https://static-ssl.responsetap.com https://web-sdk-eu.aptrinsic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://zingtree.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.evergage.com https://*.google.com https://*.googletagmanager.com https://*.hotjar.com https://*.infogram.com https://cdn.evgnet.com https://cdnjs.cloudflare.com/ https://cipd.my.site.com https://e.infogram.com https://googleads.g.doubleclick.net https://googletagmanager.com https://l55685555563p3op3c43n3n3y2772529.germany-2.evergage.com https://maxcdn.bootstrapcdn.com https://pagead2.googlesyndication.com https://tagmanager.google.com https://www.facebook.com https://www.facebook.com/tr https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com; style-src-attr 'unsafe-inline'; frame-src 'self' https://*.acast.com/ https://*.cipd.org https://*.eventbrite.co.uk https://*.evergage.com https://*.optimizely.com https://*.sfmc-content.com https://*.siteimprove.com https://cipd.my.site.com https://dashboard.find.episerver.net https://e.infogram.com https://infogram.com https://td.doubleclick.net https://w.soundcloud.com https://www.google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com https://zingtree.com; img-src 'self' data: https://*.ads.linkedin.com https://*.analytics.google.com https://*.cipd.co.uk https://*.cipd.org https://*.evbuc.com https://*.eventbrite.co.uk https://*.evergage.com https://*.facebook.com https://*.facebook.net https://*.g.doubleclick.net https://*.global.siteimproveanalytics.io https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.hotjar.com https://*.idio.co https://*.idio.episerver.net https://*.linkedin.com https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://cdn-ukwest.onetrust.com https://cipd.my.salesforce-scrt.com https://cipd.my.site.com https://common.optimizely.com https://fonts.gstatic.com/s/i/googlematerialicons/label_off/v6/gm_grey-48dp/1x/gm_label_off_gm_grey_48dp.png https://fonts.gstatic.com/s/i/googlematerialicons/more/v6/gm_blue-48dp/1x/gm_more_gm_blue_48dp.png https://google.com https://googleads.g.doubleclick.net https://googletagmanager.com https://i.ytimg.com https://nova.collect.igodigital.com https://optimizely-public-design-assets.s3.amazonaws.com https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://region1.google-analytics.com https://ssl.gstatic.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com www.googletagmanager.com; connect-src 'self' http://10.43.17.25:15871 https://*.ads.linkedin.com https://*.analytics.google.com https://*.cipd.co.uk https://*.cipd.org https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.co.uk https://*.google.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.linkedin.com https://*.optimizely.com https://*.services.visualstudio.com https://*.siteimprove.com https://1752680588.rsc.cdn77.org https://ad.doubleclick.net https://cdn-ukwest.onetrust.com https://cdn.evergage.com https://cdn.linkedin.oribi.io https://cdnjs.cloudflare.com/ https://cipd.my.salesforce-scrt.com https://esp-eu.aptrinsic.com https://geolocation.onetrust.com https://google.com https://googleads.g.doubleclick.net https://js.monitor.azure.com https://l55685555563p3op3c43n3n3y2772529.germany-2.evergage.com https://maxcdn.bootstrapcdn.com https://mc6nwrf4gjb-1fq62qzxpl40b1z0.pub.sfmc-content.com https://pagead2.googlesyndication.com https://privacyportal-uk.onetrust.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.googleadservices.com wss://*.hotjar.com www.google.com www.googletagmanager.com; default-src 'self' 'unsafe-eval' https://*.acast.com/ https://*.cipd.co.uk https://*.cipd.org https://*.idio.episerver.net https://auth.cipd.co.uk https://p.typekit.net https://use.typekit.net; form-action 'self' https://mc6nwrf4gjb-1fq62qzxpl40b1z0.pub.sfmc-content.com; frame-ancestors https://*.cipd.org https://*.evergage.com; child-src https://*.evergage.com; 2 default-src 'none'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://forms.hsforms.com https://forms-na1.hsforms.com https://api.hsforms.com; script-src 'self' 'unsafe-inline' https://js.hsforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hubspot.com https://js.usemessages.com https://static.hsappstatic.net https://app.hubspot.com https://cp.hubspot.com https://cta-service-cms2.hubspot.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://snap.licdn.com https://platform.linkedin.com https://platform.twitter.com https://connect.facebook.net; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://static.hsappstatic.net https://js.hsforms.net https://fonts.googleapis.com; style-src-attr 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com https://static.hsappstatic.net https://js.hsforms.net; img-src 'self' data: https://www.mediasmart.io https://ads.mediasmart.es https://3ma79ae7cua.com https://3426102.fs1.hubspotusercontent-na1.net https://blog.mediasmart.io https://cdn2.hubspot.net https://7052064.fs1.hubspotusercontent-na1.net https://track.hubspot.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://px.ads.linkedin.com https://snap.licdn.com https://www.facebook.com; media-src 'self' https://cdn2.hubspot.net https://7052064.fs1.hubspotusercontent-na1.net; connect-src 'self' https://api.hsforms.com https://forms.hsforms.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://track.hubspot.com https://app.hubspot.com https://cp.hubspot.com https://cta-service-cms2.hubspot.com https://api.hubapi.com https://js.hs-banner.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://px.ads.linkedin.com https://snap.licdn.com; frame-src https://app.hubspot.com https://www.google.com https://www.youtube-nocookie.com https://player.vimeo.com https://platform.twitter.com; worker-src 'self'; manifest-src 'self'; upgrade-insecure-requests; 2 frame-ancestors 'self' https://tcms.tennischannel.com 2 frame-ancestors 'self' https://liveperson.vanillastaging.com/ https://vanillastaging.com/ https://*.vanillastaging.com/ 2 script-src * 'unsafe-inline' 'unsafe-eval' 'self' *.263.net 2 default-src 'self' *.adobe.io *.omtrdc.net www.facebook.com www.google-analytics.com; frame-src 'self' https://www.googletagmanager.com/ https://acrobatservices.adobe.com/ https://tools.eurolandir.com/ https://gamma.euroland.com/ https://www.youtube.com/ https://wavedw.santandergroup.net/ https://td.doubleclick.net/ https://documentservices.adobe.com https://open.spotify.com https://www.tiktok.com/ https://tr.snapchat.com *.google.com *.fls.doubleclick.net https://documentcloud.adobe.com https://irs.tools.investis.com https://lpcdn.lpsnmedia.net https://platform.twitter.com https://www.facebook.com https://www.linkedin.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://www.instagram.com/ https://player.cnbc.com https://www.bloomberg.com https://waveplayer01.santandergroup.net https://syndication.twitter.com/ ; media-src 'self' https://waveplayer01.santandergroup.net https://www.santander.com; img-src 'self' https://bat.bing.net/ https://cdn.cookielaw.org https://adservice.google.com https://*.inspiringbenefits.com https://*.linkedin.com https://abs.twimg.com https://analytics.twitter.com https://bat.bing.com https://dev.day.com https://*.g.doubleclick.net https://i.ytimg.com https://pbs.twimg.com https://platform.twitter.com https://px.ads.linkedin.com https://syndication.twitter.com https://t.co https://ton.twimg.com https://www.facebook.com https://*.google-analytics.com https://www.google.com https://www.google.es https://www.google.de https://www.google.fr https://www.google.it https://www.google.pt https://www.google.pl https://www.google.co.uk https://www.google.com.mx https://www.google.com.ar https://www.google.com.br https://www.google.cl https://www.google.com.uy https://www.google.com.co https://www.google.com.pe *.omtrdc.net data: w3.org/svg/2000 https://*.clarity.ms https://dummyimage.com https://www.santander.com https://*.bing.com https://*.googletagmanager.com; script-src 'self' https://tools.euroland.com/ https://tools.eurolandir.com/ https://acrobatservices.adobe.com/ https://qvdt3feo.com/ https://sf16-website-login.neutral.ttwstatic.com/ https://www.tiktok.com/embed.js https://lf16-tiktok-web.ttwstatic.com/obj/tiktok-web/tiktok/falcon/embed/embed_v1.0.11.js https://lf16-tiktok-web.ttwstatic.com/obj/tiktok-web/tiktok/falcon/embed/embed_lib_v1.0.11.js track.adform.net 'unsafe-inline' 'unsafe-eval' https://tr.snapchat.com cdn-dev.wdesk.org cdn-prod.wdesk.com sc-static.net platform.instagram.com documentservices.adobe.com www.googletagmanager.com maps.googleapis.com gruposantand-stage.adobemsbasic.com gruposantand-prod.adobemsbasic.com geolocation.onetrust.com cdn.cookielaw.org tbcdn.talentbrew.com player.vimeo.com www.youtube.com www.google.com www.gstatic.com lptag.liveperson.net accdn.lpsnmedia.net lo.v.liveperson.net lpcdn.lpsnmedia.net fonts.gstatic.com www.google-analytics.com player.vimeo.com s.ytimg.com www.youtube.com irs.tools.investis.com tags.tiqcdn.com www.adobe.io tag.oniad.com sstats.adobe.com documentcloud.adobe.com p13n.adobe.io viewlicense.adobe.io use.typekit.net santander.com www.santander.com gruposantand-prod.adobemsbasic.com static-exp1.licdn.com bat.bing.com stackadapt.com srv.stackadapt.com tags.srv.stackadapt.com syndication.twitter.com cdn.syndication.twimg.com licdn.com www.linkedin.com www.omtrdc.net www.instagram.com platform.twitter.com tbcdn.talentbrew.com maps.googleapis.com player.vimeo.com www.google.com www.google.es www.google-analytics.com www.gstatic.com www.google.com www.gstatic.com lptag.liveperson.net accdn.lpsnmedia.net lo.v.liveperson.net lpcdn.lpsnmedia.net www.youtube.com player.vimeo.com s.ytimg.com www.youtube.com irs.tools.investis.com tags.tiqcdn.com r3---sn-h5q7dne6.googlevideo.com ikuna.s3.amazonaws.com assets.adobedtm.com www.googletagmanager.com static.ads-twitter.com snap.licdn.com connect.facebook.net analytics.twitter.com https://www.googleadservices.com googleads.g.doubleclick.net https://accdn.lpsnmedia.net/api/account/52492817/configuration/setting/accountproperties/ https://assets.adobedtm.com/fdfbb5376673/978974bd73e8/launch-a4fb25bd3770.min.js sc-static.net/scevent.min.js https://bat.bing.com/bat.js https://cdn.syndication.twimg.com/timeline/profile https://connect.facebook.net/en_US/fbevents.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10781141842/ https://lpcdn.lpsnmedia.net/le_unified_window/10.17.0.8-release_5442/ui-framework.js https://lptag.liveperson.net/tag/tag.js https://platform.twitter.com/widgets.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.ads-twitter.com/uwt.js https://tags.srv.stackadapt.com/events.js https://tags.tiqcdn.com/utag/santander/corporate-main-aem/prod/utag.js https://www.clarity.ms/tag/b84z53kzvw https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.youtube.com/iframe_api https://www.clarity.ms https://www.go-mpulse.net https://www.google-analytics.com; style-src tbcdn.talentbrew.com 'self' 'unsafe-inline' https://sf16-website-login.neutral.ttwstatic.com/ https://lf16-tiktok-web.ttwstatic.com/ https://platform.twitter.com https://tags.srv.stackadapt.com https://ton.twimg.com https://tags.srv.stackadapt.com/sa.css; connect-src 'self' https://*.googletagmanager.com https://www.googleadservices.com/ https://www.facebook.com/ https://bat.bing.net/ https://www.google.com https://cdn-prod.wdesk.com/ https://googleads.g.doubleclick.net/pagead/landing https://www.google.com/pagead/landing https://px.ads.linkedin.com https://cdn.linkedin.oribi.io/partner/3624849/domain/ https://*.tiktok.com https://adservice.google.com https://analytics.google.com https://cdn.cookielaw.org https://bat.bing.com https://collect.tealiumiq.com *.omtrdc.net https://region1.analytics.google.com https://*.g.doubleclick.net https://tags.srv.stackadapt.com https://viewlicense.adobe.io https://www.clarity.ms https://*.clarity.ms https://www.google-analytics.com https://www.google.es https://www.facebook.com/tr/ https://*.go-mpulse.net https://*.akstat.io https://*.akamaihd.net https://tr.snapchat.com/p https://*.onetrust.com data:; font-src 'self' data:; object-src 'self' https://8853727.fls.doubleclick.net https://documentcloud.adobe.com https://irs.tools.investis.com https://lpcdn.lpsnmedia.net https://platform.twitter.com https://www.facebook.com https://www.linkedin.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://www.instagram.com/ https://player.cnbc.com https://www.bloomberg.com https://waveplayer01.santandergroup.net https://syndication.twitter.com; 2 font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.omds.acidgreen.com.au *.explore.omsystem.com *.fontawesome.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.omds.acidgreen.com.au *.explore.omsystem.com cl.s51.exct.net * *.adyen.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.sanity.studio 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.omds.acidgreen.com.au *.explore.omsystem.com *.zendesk.com * *.adyen.com *.google.com/ instafeed.pixlee.co photos.pixlee.co *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.omds.acidgreen.com.au *.explore.omsystem.com explore.omsystem.com blob: *.getolympus.com *.akstat.io *.cookielaw.org *.ggpht.com https://www.magezon.com *.bing.com *.bing.net *.criteo.com *.doubleclick.net *.elfsightcdn.com *.facebook.com *.facebook.net *.google.com *.googleapis.com *.googletagmanager.com *.igodigital.com *.mczbf.com *.olympus.eu *.omappapi.com *.pricespider.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cf www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ge www.google.gg www.google.gl www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sr www.google.tn www.google.tt www.google.vu https://id5-sync.com *.quantserve.com alb.reddit.com *.linkedin.com https://tg.socdm.com https://cs.adingo.jp https://ads.stickyadstv.com https://idsync.rlcdn.com https://exchange.mediavine.com https://jadserve.postrelease.com https://criteo-partners.tremorhub.com https://ad.yieldlab.net https://x.bidswitch.net https://ib.adnxs.com https://r.casalemedia.com https://ad.360yield.com https://contextual.media.net https://sync.outbrain.com https://simage2.pubmatic.com https://pixel.rubiconproject.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://criteo-sync.teads.tv https://eb2.3lift.com https://aa.agkn.com https://ade.clmbtech.com https://sync.1rx.io https://a.twiago.com https://sync.targeting.unrulymedia.com *.zendesk.com * https://*.gstatic.com *.adyen.com https://images.unsplash.com maps.gstatic.com *.calcurates.com https://firebasestorage.googleapis.com *.pxlecdn.com *.pixlee.com *.cdninstagram.com *.sanity.io www.facebook.com *.magentosite.cloud shop.olympus.com.au www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cash.app *.payments-amazon.com *.paypal.com *.checkout.visa.com *.mastercard.com *.omds.acidgreen.com.au *.explore.omsystem.com *.go-mpulse.net *.cookielaw.org *.weglot.com www.gstatic.com *.om-digitalsolutions.com *.pricespider.com cdnjs.cloudflare.com api.tiles.mapbox.com *.adobedtm.com *.bing.com *.criteo.com *.doubleclick.net *.elfsight.com *.facebook.net *.googleapis.com *.googletagmanager.com *.googleadservices.com *.googleads.g.doubleclick.net *.igodigital.com *.mczbf.com *.omappapi.com *.pixlee.com *.js-agent.newrelic.com *.bam.nr-data.net *.cardinalcommerce.com merchant-center-analytics.goog analytics.tiktok.com *.quantserve.com www.redditstatic.com https://trck.linkster.co https://unpkg.com snap.licdn.com *.tradedoubler.com *.zdassets.com *.zendesk.com acds-events.adobe.io *.adyen.com pay.google.com *.ratepay.com *.visa.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com *.google.com/ *.avada.io *.shopify.com *.marketo.com *.pxlecdn.com *.pixlee.co https://acsbapp.com https://*.acsbapp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.omds.acidgreen.com.au *.explore.omsystem.com *.weglot.com *.fontawesome.com api.tiles.mapbox.com *.omappapi.com *.pricespider.com *.gstatic.com *.cash.app https://fonts.googleapis.com/ widget.freshworks.com m2epro.freshdesk.com https://fonts.bunny.net *.marketo.com assets.pixlee.com *.addthis.com *.moatads.com *.addthisedge.com maxcdn.bootstrapcdn.com *.scandiweb.dev assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.googleapis.com *.gstatic.com *.scandiweb.dev *.omsystem.com https://cdn.pubble.io *.commondatastorage.googleapis.com *.sanity.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io *.newrelic.com *.nr-data.net player.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adobedc.net *.demdex.net *.omds.acidgreen.com.au *.explore.omsystem.com *.akamaihd.net *.akstat.io *.go-mpulse.net *.cookielaw.org *.weglot.com cdn-api-weglot.com *.om-digitalsolutions.com *.bing.com *.bing.net *.criteo.com *.doubleclick.net *.elfsight.com *.facebook.com *.googleapis.com *.gstatic.com *.mczbf.com *.mapbox.com *.omappapi.com *.onetrust.com *.pricespider.com *.pixlee.com *.bam.nr-data.net *.js-agent.newrelic.com merchant-center-analytics.goog analytics.tiktok.com *.quantserve.com www.redditstatic.com conversions-config.reddit.com pixel-config.reddit.com *.linkedin.com rules.quantcount.com pixel.quantcount.com *.zdassets.com *.zendesk.com wss://pod-28-sunco-ws.zendesk.com https://olympus.registria.com *.googletagmanager.com *.googleadservices.com *.googleads.g.doubleclick.net * https://getolympus.registria.com *.adyen.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io bam.nr-data.net *.marketo.com *.addthis.com https://acsbapp.com https://*.acsbapp.com www.facebook.com *.exct.net explore.omsystem.com *.cardinalcommerce.com apps.elfsight.com *.facebook.net *.merchant-center-analytics.goog api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://inbound-analytics.pixlee.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://3706dfdc-3ec8-4812-add5-b403178623a6.sansec.watch/; report-to report-endpoint; 2 frame-ancestors 'self' *.kiwify.com.br *.kiwify.com 2 default-src https:; connect-src https: wss:; font-src https: data:; frame-src https: twitter:; frame-ancestors http: https:; img-src https: data: blob:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; child-src 'self' blob:; style-src 'unsafe-inline' https:; 2 frame-ancestors 'self' *.telia.ee 2 "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com *.google-analytics.com www.google-analytics.com *.bluemail.me bluemail.me; style-src 'self' 'unsafe-inline' 'unsafe-hashes' fonts.googleapis.com *.bluemail.me bluemail.me; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: www.google-analytics.com *.bluemail.me bluemail.me https://logos-typeapp.s3.amazonaws.com; connect-src 'self' *.google-analytics.com www.google-analytics.com reg3.bluemailapp.com logos-typeapp.s3.amazonaws.com *.bluemail.me bluemail.me; frame-src 'self' *.bluemail.me bluemail.me https://www.youtube.com https://www.youtube-nocookie.com; manifest-src 'self'; object-src 'none'; form-action 'self'; base-uri 'self';" always; 2 default-src https://vgen.co https://*.vgen.co https://vsona.co https://*.vsona.co https://api.vgen.co https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://pagead2.googlesyndication.com https://www.recaptcha.net *.sentry.io *.posthog.com cdn.lr-in-prod.com chat.stream-io-api.com wss://chat.stream-io-api.com js.stripe.com *.youtube.com *.doubleclick.net analytics.google.com storage.googleapis.com www.sandbox.paypal.com www.paypal.com 'self'; font-src https://assets.vgen.co https://fonts.gstatic.com 'self' data:; frame-ancestors 'self'; frame-src https://*.googletagmanager.com www.google.com www.gstatic.com https://www.recaptcha.net open.spotify.com youtube.com *.youtube.com js.stripe.com www.sandbox.paypal.com www.paypal.com 'self'; img-src https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://* https://api.vgen.co 'self' blob: data:; media-src *.vgen.co https://api.vgen.co storage.googleapis.com *.youtube.com player.twitch.tv 'self' blob: data:; object-src 'none'; script-src https://vgen.co https://assets.vgen.co https://*.googletagmanager.com www.google.com www.gstatic.com https://www.recaptcha.net https://www.gstatic.cn https://gstatic.cn *.sentry.io *.posthog.com youtube.com *.youtube.com static.cloudflareinsights.com cdn.lr-in-prod.com js.stripe.com *.paypal.com assets.pinterest.com widgets.pinterest.com 'self' 'unsafe-inline'; style-src https://assets.vgen.co www.gstatic.com fonts.googleapis.com 'self' 'unsafe-inline'; worker-src 'self' blob:; upgrade-insecure-requests; 2 value 2 frame-ancestors 'self' zendesk.com training.finalsite.com www.taistn.com www.tri-association.org www.swaes.org www.qais.qc.ca www.partnersinmission.com www.paispa.org www.nysais.org www.nwais.org www.njais.org www.nesacenter.org www.mn-ais.org www.maisschools.com www.mais-web.org www.lmais.org isasw.finalsite.com www.theibsc.org www.fobisia.org www.fcis.org www.cristoreynetwork.org www.cobis.org.uk www.cisontario.ca www.cois.org www.capss.org www.cais.ca www.cabe.org aisne.finalsite.com www.aims-mi.org www.acaap.net www.aassa.com www.aaie.org https://www.finalsite.co.uk www.finalsite.co.uk *.pendo.io pendo-io-static.storage.googleapis.com www.boarding.org.au app.getguru.com; 2 frame-ancestors 'self' https://*.elal.com https://*.elal.co.il https://elal.clearmash.com https://experience.adobe.com https://*.amadeus.com; 2 script-src * 'unsafe-inline' 'unsafe-eval';connect-src *;frame-src *;worker-src 'self' blob:; 2 default-src 'self'; media-src 'self' https://clickhouse.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://js.navattic.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://tag.unifyintent.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.algolia.io https://*.algolia.net https://*.algolianet.com https://ajax.cloudflare.com https://buttons.github.io https://cdnjs.cloudflare.com https://cdn.ampproject.org https://cdn.cr-relay.com https://cdn.redocly.com https://cdn.segment.com https://static.cloudflareinsights.com https://yastatic.net https://app.clearbit.io https://marketo.clearbit.com https://tag.clearbitscripts.com https://x.clearbitjs.com https://discover.clickhouse.com https://js.driftt.com https://widget.drift.com https://connect.facebook.net https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://boards.greenhouse.io https://widget.kapa.ai https://munchkin.marketo.net https://bam.nr-data.net https://js-agent.newrelic.com otel.fyi https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com https://analytics.ahrefs.com https://cdn-prod.securiti.ai https://cookie-cdn.cookiepro.com https://embed.lu.ma https://platform.twitter.com https://js.stripe.com https://player.vimeo.com https://www.youtube.com https://snap.licdn.com https://static.reo.dev https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn-prod.securiti.ai https://discover.clickhouse.com https://embed.lu.ma https://fonts.googleapis.com; img-src * 'self' data: https: https://*.google-analytics.com https://*.googletagmanager.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://www.google.com https://www.facebook.com https://bzr.openai.com; object-src 'self' https://blog-images.clickhouse.com; connect-src 'self' https://js.navattic.com https://ads-twitter.com https://analytics.twitter.com https://bam.nr-data.net https://px.ads.linkedin.com https://api.unifyintent.com/analytics/v1/* https://ads.reddit.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://google.com https://ad.doubleclick.net/ https://*.algolia.io https://*.algolia.net https://*.algolianet.com https://hn.algolia.com https://cdn.ampproject.org https://cdn.linkedin.oribi.io https://cdn.plyr.io https://cdn.segment.com https://*.clickhouse.com https://clickhouse.com https://*.clickhouse.cloud https://clickhouse.cloud https://*.clickhouse-dev.com https://clickhouse-dev.com https://*.clickhouse-staging.com https://clickhouse-staging.com wss://js.driftt.com wss://widget.drift.com https://www.facebook.com https://connect.facebook.net https://app.clearbit.com https://app.clearbit.io https://app.securiti.ai https://cdn-prod.securiti.ai https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://privacyportal.cookiepro.com https://api.github.com https://www.google.com https://cdn.growthbook.io https://boards-api.greenhouse.io https://ipinfo.io https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app/proxy/ https://*.mktoresp.com https://*.mktoutil.com https://noembed.com https://yoast.com otel.fyi https://events.redditmedia.com https://pixel.redditmedia.com https://pixel-config.reddit.com https://conversions-config.reddit.com https://www.reddit.com https://www.redditstatic.com https://analytics.ahrefs.com https://*.ingest.sentry.io https://api.segment.io https://api.segment.io/v1/ https://cdn.segment.com/v1/projects/dZuEnmCPmWqDuSEzCvLUSBBRt8Xrh2el/settings https://cdn.segment.com/v1/projects/pYKX60InlEzX6aI1NeyVhSF3pAIRj4Xo/settings https://cdn.segment.com/analytics-next/bundles/* https://cdn.segment.com/next-integrations/integrations/* wss://api.segment.io https://api.vimeo.com https://vimeo.com https://api.cr-relay.com https://api.reo.dev https://bzr.openai.com; frame-src 'self' blob: https://capture.navattic.com https://app.hex.tech https://bid.g.doubleclick.net https://boards.greenhouse.io https://js.driftt.com https://platform.twitter.com https://player.vimeo.com https://js.stripe.com https://luma.com https://webto.salesforce.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://*.clickhouse.com https://*.clickhouse-dev.com https://*.clickhouse-staging.com https://blog-images.clickhouse.com; font-src 'self' data: https://fonts.gstatic.com; form-action 'self' https://webto.salesforce.com; frame-ancestors 'self' https://*.clickhouse.com; worker-src 'self' blob:; 2 default-src 'self'; script-src 'self' https://www.nate.com https://cdnjs.cloudflare.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://main.nateimg.co.kr; object-src 'none'; 2 frame-ancestors 'self' https://*.swansea.ac.uk https://*.swan.ac.uk https://app.myday.cloud myday://app.myday.cloud https://swanseauni.myday.cloud https://swansea-uk.libwizard.com; 2 frame-ancestors 'self' https://*.cite-sciences.fr https://*.palais-decouverte.fr https://*.universcience.fr; 2 frame-ancestors 'self' https://app.mutinyhq.com https://docs.google.com ajax.cloudflare.com cloudflareinsights.com 2 base-uri 'self';connect-src 'self' portal.dimdi.de *.itzbund.de;frame-ancestors 'self' piwikweb.prod.gsb.service.zivb.net;frame-src icd.who.int https://icdapi-de-prerelease.azurewebsites.net;img-src 'self' data: https://www.youtube.com https://piwik.itzbund.de;media-src 'self' multimedia.gsb.bund.de https://www.youtube.com;object-src 'none' multimedia.gsb.bund.de;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://piwik.itzbund.de https://icdcdn.who.int;style-src 'self' 'unsafe-inline' https://icdcdn.who.int; 2 default-src 'self' https://buerokratt.ria.ee/; connect-src 'self' *.siteimprove.com https://stats.g.doubleclick.net/ https://region1.google-analytics.com/ https://cdn.jsdelivr.net/ https://ruuter.buerokratt.ria.ee/ https://search.service.eu-live.vportal.ee https://www.google-analytics.com https://www.googletagmanager.com https://matomo.ria.ee/ https://ruuter.buerokratt.ria.ee/v2/public/backoffice https://buerokratt.ria.ee/widget_bundle.js https://search.service.eu-live.vportal.ee/v1/search/ria https://search.service.eu-live.vportal.ee/v1/globalsearch/total https://form.service.eu-live.vportal.ee/v1/ https://search.service.eu-live.vportal.ee/v1/events/ria https://inaadress.maaamet.ee; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://buerokratt.ria.ee; frame-src 'self' https://*.rocket.chat https://www.google.com https://www.youtube.com https://*.vimeo.com https://*.siteimprove.com https://xgis.maaamet.ee; img-src 'self' data: *.openstreetmap.org https://i.ytimg.com https://pbs.twimg.com https://matomo.ria.ee https://buerokratt.ria.ee/ https://www.google-analytics.com https://www.googletagmanager.com *.fbcdn.net *.cdninstagram.com https://inaadress.maaamet.ee https://unpkg.com *.maaamet.ee *.cloudflare.com; script-src 'self' 'unsafe-inline' https://*.rocket.chat https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://cdn.siteimprove.net/cms/overlay.js blob: https://browser-update.org https://matomo.ria.ee https://ajax.cloudflare.com https://static.cloudflareinsights.com https://*.cloudflareinsights.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com https://api.mapbox.com https://buerokratt.ria.ee https://cdn.jsdelivr.net https://inaadress.maaamet.ee https://unpkg.com unpkg.com https://matomo.ria.ee/ 'unsafe-eval'; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.rocket.chat https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://cdn.siteimprove.net/cms/overlay.js https://browser-update.org https://matomo.ria.ee static.cludflareinsaights.com https://static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 https://*.cloudflareinsights.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com cdnjs.cloudflare.com https://api.mapbox.com https://buerokratt.ria.ee https://cdn.jsdelivr.net https://inaadress.maaamet.ee https://unpkg.com unpkg.com https://ruuter.buerokratt.ria.ee/v2/public/backoffice https://buerokratt.ria.ee/widget_bundle.js; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://*.cloudflareinsights.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com cdnjs.cloudflare.com https://api.mapbox.com https://cdn.jsdelivr.net https://unpkg.com https://use.fontawesome.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://*.cloudflareinsights.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com cdnjs.cloudflare.com https://api.mapbox.com https://cdn.jsdelivr.net https://unpkg.com https://use.fontawesome.com unpkg.com https://inaadress.maaamet.ee; frame-ancestors 'self'; upgrade-insecure-requests 2 default-src 'self' 'unsafe-inline' zollweb.preview.zoll.intranet.bund.de *.zoll.de zoll.de *.itzbund.de itzbund.de *.zoll.de *.talent-im-einsatz.de zoll.de *.geodatenzentrum.de *.openstreetmap.de *.bundesfinanzministerium.de *.youtube.com https://medien.zoll.bund.de *.stage.bio; img-src 'self' zollweb.preview.zoll.intranet.bund.de *.zoll.de zoll.de *.itzbund.de *.geodatenzentrum.de *.bundesfinanzministerium.de *.openstreetmap.de data: *.stage.bio; script-src 'self' 'unsafe-inline' 'unsafe-eval' zollweb.preview.zoll.intranet.bund.de *.zoll.de zoll.de *.itzbund.de itzbund.de *.zoll.de zoll.de *.geodatenzentrum.de *.openstreetmap.de *.youtube.com *.stage.bio 2 connect-src 'self' data: blob: https://surveystats.hotjar.io https://*.hotjar.io https://*.clarity.ms https://l.getsitecontrol.com https://dash.getsitecontrol.com https://gse.gigaset.com *.hotjar.com wss://*.hotjar.com *.getsitectrl.com https://api.chatchamp.com aggregator.service.usercentrics.eu analytics.google.com api.chatchamp.io api.usercentrics.eu graphql.usercentrics.eu stats.g.doubleclick.net www.google.de bat.bing.com halc.iadvize.com in.hotjar.com s.adroll.com ct.pinterest.com https://fast-static.smarketer.de https://*.billwerk.com sandbox.billwerk.com api.trustedshops.com shops-si.trustedshops.com trustbadge.api.etrusted.com vc.hotjar.io ws3.hotjar.com ws7.hotjar.com wss://ws3.hotjar.com wss://ws7.hotjar.com www.facebook.com www.google.ch www.google.com www.google.fr ws6.hotjar.com wss://ws6.hotjar.com www.google.co.uk ws10.hotjar.com ws4.hotjar.com ws8.hotjar.com wss://ws1.hotjar.com wss://ws10.hotjar.com wss://ws4.hotjar.com wss://ws8.hotjar.com www.google.be www.google.hr www.google.it www.google.nl www.google.ru ws12.hotjar.com ws18.hotjar.com ws2.hotjar.com wss://ws12.hotjar.com wss://ws18.hotjar.com wss://ws2.hotjar.com ws5.hotjar.com wss://ws5.hotjar.com www.google.es www.google.se www.google.com.tr www.google.cz ws17.hotjar.com wss://ws17.hotjar.com ws15.hotjar.com wss://ws15.hotjar.com www.google.co.in ws16.hotjar.com wss://ws16.hotjar.com www.google.com.cy www.google.pl ws9.hotjar.com wss://ws9.hotjar.com ws11.hotjar.com wss://ws11.hotjar.com app.getsitecontrol.com ws1.hotjar.com www.google.at d.adroll.com ws13.hotjar.com ws14.hotjar.com wss://ws13.hotjar.com wss://ws14.hotjar.com www.google.gr api.trustbadge.etrusted.com www.google.cl www.google.co.cr www.google.co.za www.google.com.ar www.google.rs service.gigaset.com www.google.ba www.google.dk www.google.ae network-eu.bazaarvoice.com www.google.hu wss://ff.kis.v2.scr.kaspersky-labs.com www.google.com.mx www.bing.com www.google.co.il www.google.co.ma www.google.co.ve www.google.com.bd www.google.com.co www.google.com.lb www.google.com.pe www.google.ie www.google.lu www.google.no www.google.pt www.google.ro www.google.si *.convertize.io pop1.getsitecontrol.com maps.googleapis.com *.etracker.de s.clcktrax.com *.analytics.google.com consent-api.service.consent.usercentrics.eu gcmatomo.gigaset.com https://fast.smarketer.de https://eu-api.friendlycaptcha.eu https://api.friendlycaptcha.com api.bazaarvoice.com accounts-eu.freshworks.com gigaset-org.freshworks.com https://mycliplister.com https://*.mycliplister.com https://*.etrusted.com https://googleads.g.doubleclick.net https://gigaset.freshdesk.com https://*.paypal.com https://www.paypal.com https://*.ads.linkedin.com https://google.com https://www.googleadservices.com https://challenges.cloudflare.com https://*.bazaarvoice.com https://*.cmp.usercentrics.eu https://*.google-analytics.com https://*.eye-able.com https://*.civiccomputing.com https://s2.getsitecontrol.com https://www.googletagmanager.com https://*.doubleclick.net; default-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.iamsmartad.com aggregator.service.usercentrics.eu analytics.google.com api.chatchamp.io api.usercentrics.eu app.usercentrics.eu connect.facebook.net data: googleads.g.doubleclick.net graphql.usercentrics.eu https://pixel.mathtag.com tr.outbrain.com widgets.trustedshops.com www.facebook.com www.google.com www.google.de https://www.googletagmanager.com www.youtube.com halc.iadvize.com bat.bing.com widgets.getsitecontrol.com in.hotjar.com script.hotjar.com static.hotjar.com vars.hotjar.com pixel.convertize.io p.typekit.net use.typekit.net ct.pinterest.com https://fast-static.smarketer.de s.pinimg.com ups.xplosion.de display.ugc.bazaarvoice.com s.adroll.com gse.gigaset.com ff.kis.v2.scr.kaspersky-labs.com fonts.googleapis.com https://mpsnare.iesnare.com gcmatomo.gigaset.com accounts-eu.freshworks.com gigaset-org.freshworks.com https://*.etrusted.com https://*.fresworks.com https://*.gigaset.com https://*.paypal.com https://*.linkedin.com https://*.eye-able.com https://*.eye-able-cdn.com https://cdn.eye-able.com https://*.bazaarvoice.com https://*.cmp.usercentrics.eu https://*.googleadservices.com https://*.google-analytics.com https://*.civiccomputing.com https://s2.getsitecontrol.com; font-src https://script.hotjar.com use.typekit.net data: 'self' st.getsitecontrol.com fonts.gstatic.com github.com static3.avast.com gcmatomo.gigaset.com https://fonts.gstatic.com https://apps.bazaarvoice.com; form-action 'self' https://www.facebook.com https://feldtest.gigaset.com https://security.gigaset.com https://service.gigaset.com https://api.bazaarvoice.com https://ct.pinterest.com https://gigaset-org.freshworks.com https://accounts-eu.freshworks.com; frame-ancestors 'self' www.gigaset.com *.google.com; img-src 'self' 'report-sample' https://c.clarity.ms/c.gif https://c.bing.com https://dsum-sec.casalemedia.com https://script.hotjar.com https://smarttracking.defacto-x.net https://m2.getsitecontrol.com https://trc.taboola.com https://d.adroll.com https://www.google.ee https://www.google.is app.usercentrics.eu googleads.g.doubleclick.net pixel.mathtag.com test.gse.gigaset.com tr.outbrain.com widgets.magentocommerce.com widgets.trustedshops.com www.facebook.com www.gigaset.com www.google.com www.google.de display.ugc.bazaarvoice.com network-eu-stg.bazaarvoice.com photos-uat-eu.bazaarvoice.com bat.bing.com data: d.adroll.com cdn.pay1.de image-charts.com www.googletagmanager.com ct.pinterest.com img.youtube.com network-eu-stg-a.bazaarvoice.com app.getsitecontrol.com media.getsitecontrol.com gse.gigaset.com insight.adsrvr.org network-eu.bazaarvoice.com pro-gse.gigaset.com www.google.ch www.google.co.uk www.google.com.tr www.google.com.tw www.google.es www.google.fr www.google.it www.google.nl www.google.pl photos-eu.bazaarvoice.com test.gigaset.com www.google.at www.google.be aax-eu.amazon-adsystem.com ads.yahoo.com cm.g.doubleclick.net connect.facebook.net network-eu-a.bazaarvoice.com stats.g.doubleclick.net sync.outbrain.com sync.taboola.com www.google.co.il www.google.cz www.google.hr www.google.lu www.google.ru www.google.sk www.gstatic.com www.google.com.lb translate.google.com www.google.se www.google.co.ao www.google.co.in www.google.co.kr www.google.com.mx www.google.hu www.google.no px.ads.linkedin.com www.awin1.com www.google.com.cy ib.adnxs.com i.ytimg.com www.google.az www.google.co.za www.google.com.bd www.google.fi www.google.pt www.google.co.cr www.google.ci www.google.com.sa www.google.rs www.google.gr android-webview-video-poster www.google.com.ar www.google.tn www.google.com.vn www.google.cl www.google.iq maps.googleapis.com maps.gstatic.com www.google.com.mt www.google.mn www.google.ro www.google.si www.google.ba blob: www.google.com.eg www.google.ae www.google.dk www.google.li pixel.rubiconproject.com pagead2.googlesyndication.com www.google.co.id www.google.co.ma www.google.ge www.google.ie www.linkedin.com analytics.google.com fcmatch.google.com fcmatch.youtube.com sync.mathtag.com ups.analytics.yahoo.com www.google.by www.google.cn www.google.co.ve www.google.com.br www.google.com.co www.google.com.et www.google.com.gt www.google.com.kw www.google.com.om www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.ua dpm.demdex.net *.advertising.com *.pubmatic.com *.3lift.com *.bidswitch.net *.outbrain.com *.openx.net *.convertize.io www.etracker.de uct.service.usercentrics.eu s.clcktrax.com photos-us.bazaarvoice.com gcmatomo.gigaset.com https://mycliplister.com https://*.mycliplister.com https://*.etrusted.com https://fonts.gstatic.com contentorigin.bazaarvoice.com https://www.paypalobjects.com https://*.paypal.com https://t.paypal.com https://*.ads.linkedin.com https://*.eye-able-cdn.com https://cdn.eye-able.com https://*.bazaarvoice.com https://*.googleadservices.com https://*.google-analytics.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample' https://*.clarity.ms https://s2.getsitecontrol.com https://cdn.iamsmartad.com amplify.outbrain.com app.usercentrics.eu connect.facebook.net googleads.g.doubleclick.net js.chatchamp.com pixel.mathtag.com tr.outbrain.com widgets.trustedshops.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.youtube.com halc.iadvize.com widgets.getsitecontrol.com analytics-static.ugc.bazaarvoice.com bat.bing.com display.ugc.bazaarvoice.com network-eu-stg.bazaarvoice.com stg.api.bazaarvoice.com script.hotjar.com static.hotjar.com a.adroll.com d.adroll.com d.adroll.mgr.consensu.org s.adroll.com pixel.convertize.io secure.pay1.de s.pinimg.com cdn.xplosion.de ups.xplosion.de sandbox.billwerk.com selfservice.sandbox.billwerk.com https://*.billwerk.com https://selfservice.billwerk.com apps.bazaarvoice.com asn-trk.advolution.de st.getsitecontrol.com api.bazaarvoice.com network-eu.bazaarvoice.com tpc.googlesyndication.com gse.gigaset.com me.kis.v2.scr.kaspersky-labs.com static.iadvize.com www.google.com www.dwin1.com ad1.adfarm1.adition.com adfarm1.adition.com gc.kis.v2.scr.kaspersky-labs.com secure.adnxs.com snap.licdn.com maps.googleapis.com s2.adform.net track.adform.net www.pagespeed-mod.com 'unsafe-eval' cdn.taboola.com ff.kis.v2.scr.kaspersky-labs.com www.google.de www.google.it imagesrv.adition.com https://mpsnare.iesnare.com https://l.getsitecontrol.com/p7jz5lm4.js *.etracker.com *.etracker.de cdn.iamstudent.com s.clcktrax.com https://api.signalize.com/accounts/X3ssZWx/signalize.min.js *.analytics.google.com gcmatomo.gigaset.com https://fast-static.smarketer.de https://fast.smarketer.de https://mycliplister.com https://*.mycliplister.com https://*.etrusted.com https://*.googletagmanager.com https://app.usercentrics.eu https://accounts-eu.freshworks.com https://service.gigaset.com https://gigaset-org.freshworks.com https://www.paypal.com https://pay.google.com https://www.sandbox.paypal.com https://x.klarnacdn.net https://www.gstatic.com https://challenges.cloudflare.com https://*.eye-able.com https://*.bazaarvoice.com https://web.cmp.usercentrics.eu https://*.google-analytics.com https://*.civiccomputing.com; style-src data: 'self' 'unsafe-inline' display.ugc.bazaarvoice.com s.adroll.com p.typekit.net use.typekit.net gse.gigaset.com gc.kis.v2.scr.kaspersky-labs.com fonts.googleapis.com me.kis.v2.scr.kaspersky-labs.com translate.googleapis.com gcmatomo.gigaset.com https://*.etrusted.com https://www.googletagmanager.com https://*.eye-able-cdn.com https://cdn.eye-able.com https://*.bazaarvoice.com https://*.google-analytics.com; child-src blob:; frame-src https://www.pinterest.de https://ir.tools.investis.com pixel.mathtag.com www.google.com www.facebook.com vars.hotjar.com secure.pay1.de www.youtube.com bid.g.doubleclick.net js.chatchamp.com api.bazaarvoice.com display.ugc.bazaarvoice.com tpc.googlesyndication.com cms.gigaset.com gigaset-prov.gigaset.com gigaset.secure.force.com where-to-buy.co www.googletagmanager.com player.vimeo.com ad2.adfarm1.adition.com 'self' gigaset-net.gigaset.com ct.pinterest.com forms.office.com verify.iamstudent.com www.iamstudentverify.com pwm-image.trendmicro.com www.pinterest.com gcmatomo.gigaset.com app.usercentrics.eu gigaset.my.salesforce-sites.com https://*.etrusted.com https://*.doubleclick.net https://*.reepay.com https://challenges.cloudflare.com https://*.cmp.usercentrics.eu https://*.google-analytics.com; 2 connect-src wss: https:; upgrade-insecure-requests; object-src blob: 'self'; frame-ancestors 'self' *.dev.wdr.io https://content.tuni.fi; default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 2 frame-ancestors 'self' https://thdomain.thnic.co.th https://thdomain1.thnic.co.th https://thdomain2.thnic.co.th; 2 frame-ancestors 'self' https://*.designcrowd.com; 2 object-src 'none'; base-uri 'none'; default-src https://isnic.is https://www.isnic.is/; style-src https://isnic.is https://www.isnic.is/; font-src https://isnic.is https://www.isnic.is/; script-src https://isnic.is https://www.isnic.is/; img-src https://isnic.is https://www.isnic.is/ https://www.rix.is; connect-src https://isnic.is https://www.isnic.is/; frame-ancestors 'none'; report-uri /default/csp; 2 base-uri 'self' about: *;child-src 'none';connect-src 'self' webpack://* *;default-src 'self';font-src 'self' data: fonts.gstatic.com *;form-action 'self' https: *;frame-ancestors 'none';frame-src 'self' data: https:;img-src * 'self' data: https:;manifest-src 'self';media-src 'self' https: *;object-src 'none';prefetch-src 'self' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.hs-scripts.com *.hsforms.net *.hsforms.com *.clearbit.com www.google-analytics.com;style-src 'self' 'unsafe-inline' https:;worker-src 'self'; 2 frame-ancestors https://*.zscalertwo.net *.sick.com *.sickcn.net *.sickcn.com *.crm4.dynamics.com cdn.appdynamics.com; 2 default-src 'self' 'unsafe-inline'; object-src 'none'; child-src 'self'; frame-ancestors 'none'; base-uri 'none'; upgrade-insecure-requests; img-src * data:; connect-src *; media-src https://*.digitale-sammlungen.de; frame-src https://www.youtube.com; form-action 'self'; 2 frame-ancestors 'self' https://layout-cms.fox2detroit.com; 2 default-src 'self' https://privacyportal.cookiepro.com https://pagestrip.com; script-src *.googleapis.com *.gstatic.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com *.twimg.com platform.linkedin.com cdnjs.cloudflare.com *.doubleclick.net *.googleadservices.com *.recaptcha.net munchkin.marketo.net *.eloqua.com *.en25.com *.pagestrip.com player.vimeo.com *.ssl.cf1.rackcdn.com *.youtube.com s3.amazonaws.com magna.us5.list-manage.com *.baidu.com *.usersnap.com *.adform.net *.adnxs.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.net *.hs-banner.com forms-eu1.hsforms.com *.cookielaw.org *.google.com *.mediavalet.com cdn.jsdelivr.net cdnjs.com code.jquery.com consent.cookiebot.com consentcdn.cookiebot.com cookie-cdn.cookiepro.com cse.google.com dec.azureedge.net downloads.mailchimp.com emea3.recruitmentplatform.com fast.fonts.net geolocation.onetrust.com js-eu1.hsforms.net kendo.cdn.telerik.com maxcdn.bootstrapcdn.com mc.us5.list-manage.com platform.stumbleupon.com/1/widgets.js publish.twitter.com rum-static.pingdom.net s.ytimg.com s7.addthis.com secure.adnxs.com sjs.bizographics.com snap.licdn.com stackpath.bootstrapcdn.com syndication.twitter.com unpkg.com v1.addthisedge.com walls.io www.youtube.com/iframe_api z.moatads.com *.hsleadflows.net js-eu1.hubspot.com www.52cloudacute.com www.acuteimaginative.com js.hsforms.net player.podigee-cdn.net *.googletagmanager.com 'self' cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com *.pagestrip.com *.ssl.cf1.rackcdn.com cdn.jsdelivr.net cdn.mediavalet.com cdn-images.mailchimp.com cdnjs.cloudflare.com dec.azureedge.net downloads.mailchimp.com emea3.recruitmentplatform.com fast.fonts.net form.asana.com maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com www.youtube.com player.podigee-cdn.net 'self' 'unsafe-inline'; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.google-analytics.com https://www.google.co.uk https://dec.azureedge.net https://*.dec.sitefinity.com https://px.ads.linkedin.com *.eloqua.com https://i3.ytimg.com https://i.ytimg.com https://ml.globenewswire.com https://p.adsymptotic.com https://downloads.mailchimp.com https://resource.globenewswire.com https://cookie-cdn.cookiepro.com https://shp.qpic.cn https://img.youtube.com https://magna.com https://cdnjs.cloudflare.com https://clients1.google.com https://www.google.com https://www.googletagmanager.com *.magna.com *.pagestrip.com https://puui.qpic.cn https://cms.sps-digital.com https://stats.g.doubleclick.net https://www.google.ca https://hm.baidu.com https://mcusercontent.com https://cdn-images.mailchimp.com https://www.google.vg https://www.google.de https://www.google.fr *.rackcdn.com *.adnxs.com *.hsforms.com *.hubspot.com cdn.mediavalet.com https://insights.apps-magna.com https://media.corporate-ir.net https://px4.ads.linkedin.com https://images.podigee-cdn.net ; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://maxcdn.bootstrapcdn.com *.pagestrip.com *.magna.com player.podigee-cdn.net; frame-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://mpt-product-information.com/ https://td.doubleclick.net/ https://www.recaptcha.net/ https://magna.gcs-web.com/ https://my.walls.io/ https://www.google.com/ https://forms-eu1.hsforms.com/ https://www.facebook.com/ https://magna.s2.positionierung.at/ https://form.asana.com/ https://app.truelook.cloud/ https://embed.mediavalet.com/ https://js.hsforms.net https://player.podigee-cdn.net https://magna.jifflenow.com/ https://scribehow.com/ *.googletagmanager.com; connect-src 'self' *.google-analytics.com https://*.googleapis.com/ *.mktoresp.com *.linkedin.oribi.io *.addthis.com *.hs-banner.com *.hubspot.com *.hubapi.com forms-eu1.hscollectedforms.net *.google.com *.analytics.google.com *.dec.sitefinity.com *.pagestrip.com analytics.google.com cdn.cookielaw.org cookie-cdn.cookiepro.com emea3.recruitmentplatform.com forms-eu1.hsforms.com geolocation.onetrust.com global3.recruitmentplatform.com hm.baidu.com m.addthis.com magna-na.magna.com pagead2.googlesyndication.com pagestrip.com privacyportal.cookiepro.com px.ads.linkedin.com rum-collector-2.pingdom.net s7.addthis.com stats.g.doubleclick.net www.google.ca www.google.de www.google.se www.google.vg googleads.g.doubleclick.net ib.adnxs.com www.facebook.com fclog.baidu.com forms.hsforms.com cdn.mediavalet.com unpkg.com static.hsappstatic.net cdnjs.cloudflare.com *.googletagmanager.com; media-src 'self' data: blob: *.ssl.cf1.rackcdn.com *.cf2.rackcdn.com *.cf1.rackcdn.com *.iosr.cf1.rackcdn.com https://cms.sps-digital.com https://cdn.mediavalet.com; child-src 'self' https://embed.mediavalet.com/ https://td.doubleclick.net/ https://magna.gcs-web.com https://s7.addthis.com https://consentcdn.cookiebot.com/ https://www.google.com https://v.qq.com/ https://walls.io/ https://cse.google.com/ https://pagestrip.com https://*.pagestrip.com https://my.walls.io https://www.magnapeople.com https://mpt-product-information.com/ https://magna-staging.jifflenow.com/ https://magna.jifflenow.com/ https://www.recaptcha.net https://www.mpt-product-information.com https://bid.g.doubleclick.net https://open.spotify.com/ https://www.youtube-nocookie.com/ https://forms-eu1.hsforms.com/ https://magna.s2.positionierung.at/ 2 frame-ancestors self https://jumpshare.com https://*.jumpshare.com 2 frame-ancestors 'self' *.ganjing.com 2 default-src 'none'; font-src 'self' data: *.cloudfront.net *.nr-data.net *.newrelic.com *.gstatic.com *.googleapis.com *.adobeaemcloud.com *.pmigcpes.com https://static.dwcdn.net https://use.typekit.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://*.coveo.com https://*.mulesoft-cloudhub-nonprod.pmideep.com https://*.google.com *.gigya.com https://*.sprinklr.com *.nr-data.net *.newrelic.com https://www.gstatic.com https://www.google-analytics.com https://*.cloudfront.net https://*.cookielaw.org https://www.youtube.com https://code.jquery.com https://*.googleapis.com https://s3.amazonaws.com *.adobeaemcloud.com *.pmicom.pmigcpes.com *.aws.pmicloud.biz; style-src 'self' 'unsafe-inline' https://www.pmi.com https://*.coveo.com https://www.googletagmanager.com https://cdn.cookielaw.org https://*.googleapis.com https://s3.amazonaws.com *.adobeaemcloud.com *.pmigcpes.com *.aws.pmicloud.biz https://*.typekit.net; img-src 'self' data: blob: *.businesswire.com *.twitter.com https://*.stopillegal.com https://static.xx.fbcdn.net https://t.co https://connect.facebook.net https://www.google.com.ua *.linkedin.com https://*.google-analytics.com https://*.googletagmanager.com https://www.pmi.com https://*.gstatic.com https://*.gigya.com https://*.doubleclick.net https://*.ytimg.com https://*.sprinklr.com https://marlboro-germany.videomarketingplatform.co https://www.facebook.com https://www.google.es https://www.google.ch https://www.google.rs https://*.krxd.net https://www.google.nl https://*.amazonaws.com https://www.google.com https://www.google.pl https://dev.day.com https://*.cookielaw.org https://www.google.com.tr https://cdn.wyng.com https://*.cloudfront.net *.adobeaemcloud.com *.pmigcpes.com *.qualtrics.com https://mms.businesswire.com; connect-src 'self' *.ltmsphrcl.net blob: *.tt.omtrdc.net *.analytics.google.com *.twitter.com *.go-mpulse.net *.pmi.gbqofs.io https://www.facebook.com https://fonts.gstatic.com https://t.co https://www.google.com.ua https://ad.doubleclick.net https://analytics.google.com https://*.onetrust.com https://*.akstat.io https://*.akamaihd.net https://www.googletagmanager.com *.crwdcntrl.net *.linkedin.com *.qualtrics.com https://www.google.com https://lottie.host https://*.coveo.com *.treasuredata.com https://www.gstatic.com *.nr-data.net https://js-agent.newrelic.com https://*.mulesoft-cloudhub-nonprod.pmideep.com https://*.googleapis.com *.google-analytics.com https://*.onetrust.io https://*.krxd.net https://*.sprinklr.com https://*.gigya.com https://stats.g.doubleclick.net https://*.wyng.com https://api.offerpop.com https://wyng.io https://cdn.cookielaw.org https://cdn.plyr.io https://noembed.com/embed https://unpkg.com https://cdn.jsdelivr.net *.pmicom.pmigcpes.com https://*.akstat.io https://*.akamaihd.net; frame-src 'self' https://pmi.com https://pmipccx.fra1.qualtrics.com https://*.qualtrics.com *.crwdcntrl.net https://*.pmi.com https://www.google.com https://marlboro-germany.videomarketingplatform.co https://www.facebook.com https://www.youtube.com https://*.gigya.com https://cdn.krxd.net https://*.doubleclick.net https://www.youtube-nocookie.com https://cdn.cookielaw.org https://language-mastercomms.23video.com https://globalcomms.23video.com https://global-comms-new-workspace.twentythree.com https://philipmorrisinternational.gcs-web.com; script-src-elem 'self' 'unsafe-inline' https://*.gbqofs.com https://*.ads-twitter.com https://*.go-mpulse.net *.qualtrics.com *.crwdcntrl.net *.licdn.com https://*.pmi.com https://unpkg.com/ https://*.coveo.com https://www.gstatic.com https://www.google.com https://www.gstatic.com *.treasuredata.com https://*.gigya.com *.nr-data.net https://js-agent.newrelic.com https://connect.facebook.net https://apis.google.com https://*.mulesoft-cloudhub-nonprod.pmideep.com https://*.googleapis.com https://spx-components.cdn.sprinklr.com https://s3.amazonaws.com https://*.cloudfront.net https://*.sprinklr.com https://*.krxd.net https://cdn.cookielaw.org https://code.jquery.com https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube.com *.adobeaemcloud.com *.pmicom.pmigcpes.com *.aws.pmicloud.biz; media-src 'self' https://proserve-microexperiences.s3.amazonaws.com https://*.sprinklr.com https://cdn.wyng.com https://*.twentythree.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.pmi.com; manifest-src 'self'; frame-ancestors 'self' https://www.google.com https://www.recaptcha.net; worker-src 'self' blob: https://www.recaptcha.net; report-to endpoint-csp; report-uri https://csp-report.igcpes-prd.eu-west-1.aws.pmicloud.biz/v1/gc/csp 2 default-src 'self' *; base-uri 'self'; font-src 'self' https: data:; form-action http://*.enterprisedb.com http://enterprisedb.com http://enterprisedb.okta.com 'self'; frame-ancestors 'self'; img-src 'unsafe-inline' 'self' blob: data: *; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self' * blob:; script-src-attr 'unsafe-inline'; style-src 'unsafe-inline' 'self' *; upgrade-insecure-requests 2 frame-ancestors 'self' https://*.febas.de 2 default-src 'self' 'unsafe-inline' data:; style-src 'self' 'unsafe-inline'; frame-src https://civi.digitalcourage.de https://digitalcourage.video https://streaming.media.ccc.de; 2 default-src 'self' fl.ru *.fl.ru static.fl.ru smartcaptcha.yandexcloud.net production-flru.website.yandexcloud.net *.mail.ru *.yandex.ru; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru static.fl.ru production-flru.website.yandexcloud.net *.acstat.com artfut.com www.artut.com counter.rambler.ru mc.yandex.ru *.mail.ru *.tns-counter.ru; img-src data: blob: *; media-src *.fl.ru *.usedesk.ru static.fl.ru production-flru.website.yandexcloud.net; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru static.fl.ru production-flru.website.yandexcloud.net; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru static.fl.ru smartcaptcha.yandexcloud.net yookassa.ru production-flru.website.yandexcloud.net *.hcaptcha.com *.soundcloud.com direct.yandex.ru mc.yandex.ru *.yandex.md yastatic.net *.typeform.com *.adriver.ru rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru static.fl.ru; connect-src 'self' *.fl.ru fl.ru fl.ru:* *.fl.ru:* ws://fl.ru:* wss://fl.ru:* ws://*.fl.ru:* wss://*.fl.ru:* static.fl.ru ws://*.usedesk.ru *.usedesk.ru *.hcaptcha.com *.popmechanic.ru *.mradx.net *.mail.ru vk.com *.vk.com *.adriver.ru *.acstat.com static.fl.ru *.mail.ru wss://mc.yandex.ru mc.yandex.ru *.yandex.ru yandex.ru ymetrica1.com yastatic.net yastat.net; 2 upgrade-insecure-requests; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; 2 frame-ancestors 'self' https://*.tsum.ru https://*.tsum.com; report-uri https://sentry.tsum.com/api/14/security/?sentry_key=009c465ac17e4f3fb722940ac763c938 2 default-src 'self'; font-src 'self' https://*.zohocdn.com; script-src 'self' 'unsafe-inline' *.zohopublic.eu *.zohocdn.com connect.facebook.net bat.bing.com bat.bing.net static.ads-twitter.com *.googletagmanager.com *.doubleclick.net *.google-analytics.com *.redditstatic.com analytics.tiktok.com pixel.byspotify.com *.googlesyndication.com; style-src 'self' 'unsafe-inline' *.zohopublic.eu *.zohocdn.com *.doubleclick.net; object-src 'none'; base-uri 'self'; connect-src 'self' *.zohopublic.eu *.facebook.com bat.bing.com bat.bing.net *.google-analytics.com *.google.com *.google.es *.doubleclick.net *.trackingplan.com *.googlesyndication.com *.reddit.com *.redditstatic.com analytics.tiktok.com *.tiktokw.us *.googleadservices.com pixels.spotify.com; frame-src 'self' salesiq.zohopublic.eu *.facebook.com *.youtube.com *.youtube-nocookie.com *.doubleclick.net *.googletagmanager.com; img-src 'self' data: hostwordpress.es *.hostwordpress.es *.zohopublic.eu *.zohocdn.com analytics.twitter.com t.co *.facebook.com google.com google.es *.ytimg.com bat.bing.com bat.bing.net *.google.com *.google.es *.googletagmanager.com secure.gravatar.com *.reddit.com analytics.tiktok.com *.tiktokw.us googleads.g.doubleclick.net *.googleadservices.com desk.zoho.com helpdesk.cdmon.com media.helpdesk.cdmon.com; manifest-src 'self'; media-src 'self' https://*.zohocdn.com; worker-src 'none'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.adobe.com https://*.franke.com https://*.scene7.com https://*.franke.coffee https://*.pardot.com https://*.googleadservices.com https://*.facebook.net https://*.licdn.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.adobedtm.com https://*.go-mpulse.net https://*.cookiebot.com https://www.googletagmanager.com https://*.clarity.ms https://*.yimg.jp https://*.pinimg.com https://*.doubleclick.net https://*.googlesyndication.com https://*.pinterest.com https://*.stackadapt.com https://munchkin.marketo.net https://cdn.cookielaw.org https://*.onetrust.com https://*.adform.net https://*.teads.tv https://*.byspotify.com https://*.amazon-adsystem.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://*.franke.com https://*.scene7.com https://*.googleapis.com https://*.stackadapt.com https://*.onetrust.com; connect-src 'self' https://*.adobe.io https://*.franke.com https://*.scene7.com https://*.oribi.io https://*.akamaihd.net https://*.akstat.io https://*.azurewebsites.net https://*.googleapis.com https://*.go-mpulse.net https://*.demdex.net https://*.omtrdc.net https://*.clarity.ms https://*.google.com https://www.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.pinterest.com https://*.cookiebot.com https://*.linkedin.com https://*.adobedc.net https://*.stackadapt.com https://*.mktoresp.com https://cdn.cookielaw.org https://*.onetrust.com https://*.adform.net https://*.teads.tv https://*.byspotify.com https://*.amazon-adsystem.com https://*.reporting-advertising.amazon https://*.bizographics.com https://*.adsymptotic.com https://connect.facebook.net https://*.facebook.com https://*.pinimg.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat; frame-src 'self' https://*.adobe.com https://*.facebook.com https://*.google.com https://*.demdex.net https://www.youtube.com https://player.vimeo.com https://player.youku.com https://*.cookiebot.com https://*.doubleclick.net https://*.pinterest.com https://*.adform.net https://*.teads.tv; img-src 'self' * data://* data: blob:; font-src 'self' https://*.gstatic.com data://* https://*.onetrust.com; media-src 'self' https://*.franke.com; 2 default-src 'self' 'unsafe-inline' https: 2 frame-ancestors 'self' https://layout-cms.fox32chicago.com; 2 default-src 'none'; frame-ancestors 'self' serato.sanity.studio; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://*.googletagmanager.com https://*.facebook.net https://connect.facebook.net https://*.app-us1.com https://analytics.tiktok.com https://*.hotjar.com https://*.zdassets.com https://serato.zendesk.com https://*.iubenda.com https://insights.serato.com https://static.serato.com; font-src 'self' https://fast.fonts.net https://static.serato.com https://*.hotjar.com; style-src 'self' 'unsafe-inline' https://fast.fonts.net https://static.serato.com https://*.hotjar.com https://*.iubenda.com; img-src 'self' data: https://*.cdn.sera.to https://cdn.sanity.io https://static.serato.com https://serato.com https://bat.bing.com https://*.bing.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.facebook.com https://*.hotjar.com https://serato.zendesk.com https://*.iubenda.com https://insights.serato.com https://www.google.co.nz https://www.google.com.br https://www.google.es https://www.google.com.mx https://www.google.co.jp https://www.google.com.au https://www.google.co.id https://www.google.co.in https://www.google.co.ke https://www.google.com.ng; connect-src 'self' https://*.serato.com https://*.sanity.io https://serato-limited.breezy.hr/json https://gtm-p9hq86n-mgfkm.uc.r.appspot.com https://analytics.google.com https://www.google-analytics.com https://bat.bing.com https://*.facebook.net https://connect.facebook.net https://*.app-us1.com https://analytics.tiktok.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.zdassets.com https://serato.zendesk.com wss://serato.zendesk.com https://*.iubenda.com https://insights.serato.com; media-src 'self' https://static.serato.com https://*.cdn.sera.to https://cdn.sanity.io; frame-src 'self' https://youtube.com https://www.youtube.com https://w.soundcloud.com https://embed.music.apple.com https://gtm-p9hq86n-mgfkm.uc.r.appspot.com https://*.iubenda.com https://insights.serato.com 2 frame-ancestors 'self'; default-src 'self' https: data: blob: 'unsafe-eval' 'unsafe-inline' wss://*.rcrsv.io; 2 frame-ancestors 'self' *.itslearning.com; upgrade-insecure-requests 2 frame-ancestors 'self' https://hullfilm360.com; 2 default-src 'self' snowplow-web.wogaa.sg static.zdassets.com www.facebook.com cdn.syndication.twimg.com video.fsin8-1.fna.fbcdn.net video.fsin8-2.fna.fbcdn.net snowplow-web.wogaa.sg www.google-analytics.com ekr.zdassets.com flexanswer1654.zendesk.com onemap.gov.sg widget-mediator.zopim.com www.google.com www.gstatic.com static.elfsight.com;style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com www.lta.gov.sg www.mytransport.sg www.mytransport.lta.gov.sg webchat.vica.gov.sg lf16-tiktok-web.ttwstatic.com sf16-website-login.neutral.ttwstatic.com cdn.jsdelivr.net platform.twitter.com assets.dcube.cloud www.facebook.com fonts.googleapis.com assets.wogaa.sg www.gstatic.com;script-src 'self' https://dmuat.lta.gov.sg https://datamall.lta.gov.sg www.lta.gov.sg www.mytransport.sg www.mytransport.lta.gov.sg webchat.vica.gov.sg lf16-tiktok-web.ttwstatic.com sf16-website-login.neutral.ttwstatic.com www.tiktok.com static.elfsight.com assets-stage-elfsight-com.sfo2.cdn.digitaloceanspaces.com 'unsafe-inline' 'unsafe-eval' googleads.g.doubleclick.net d3pdo5aouiodr4.cloudfront.net zx54f7wti6.execute-api.ap-southeast-1.amazonaws.com googleads.g.doubleclick.net www.googleadservices.com www.google.com platform.twitter.com connect.facebook.net assets.dcube.cloud cdn.syndication.twimg.com www.facebook.com assets.adobedtm.com www.google-analytics.com www.googletagmanager.com cdn.jsdelivr.net app-script.monsido.com assets.wogaa.sg static.zdassets.com unpkg.com www.gstatic.com;font-src 'self' cdnjs.cloudflare.com www.lta.gov.sg www.mytransport.sg www.mytransport.lta.gov.sg s3-us-west-2.amazonaws.com assets.dcube.cloud assets.wogaa.sg fonts.gstatic.com;img-src data: 'self' www.lta.gov.sg www.mytransport.sg www.mytransport.lta.gov.sg files.elfsightcdn.com bucket-common.vica.gov.sg dpm.demdex.net cm.everesttech.net d33wubrfki0l68.cloudfront.net www.google.com is4-ssl.mzstatic.com www.google.com.sg pbs.twimg.com syndication.twitter.com platform.twitter.com abs.twimg.com www.facebook.com scontent.fsin8-2.fna.fbcdn.net scontent.fsin8-1.fna.fbcdn.net maps-a.onemap.sg maps-b.onemap.sg maps-c.onemap.sg tracking.monsido.com www.google-analytics.com www.onemap.gov.sg docs.onemap.sg ncspteltd.sc.omtrdc.net cdn.jsdelivr.net;child-src blob: *;connect-src 'self' *;worker-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' * 2 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; 2 default-src 'self' ; script-src 'self' *.bluemscdn.net 'unsafe-inline' 'unsafe-eval' blob: https://*.segment.com https://*.boost.ai https://*.hotjar.com https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://*.visualwebsiteoptimizer.com https://www.google.com https://*.gstatic.com https://*.appboycdn.com https://*.doubleclick.net https://*.northbeam.io https://*.appsflyer.com https://*.tiktok.com https://*.segmentstream.com https://maps.googleapis.com https://*.iesnare.com https://*.typeform.com https://*.rudderlabs.com https://cdn.jsdelivr.net *.bluems.com/ https://*.getblue.io/ https://www.googletagmanager.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.typeform.com *.bluemscdn.net/ https://www.googletagmanager.com;img-src 'self' data: https: https://*.typeform.com https://www.googletagmanager.com *.getblue.io; font-src 'self' data: https:; connect-src 'self' data: wss://*.boost.ai *.appsflyersdk.com *.bluems.com https://*.google.com.co https://www.google.com.co https://www.google-analytics.com https://analytics.google.com https://*.segmentstream.com https://*.csidetm.com https://*.stytch.com https://*.seondnsresolve.com https://*.seondfresolver.com https://*.deviceinfresolver.com https://*.seonintelligence.com https://*.onelink.me https://*.appsflyer.com https://*.tiktok.com https://*.tiktokw.us https://*.pangle-ads.com https://*.doubleclick.net https://*.launchdarkly.com https://*.strich.io https://*.google.com https://*.pndsn.com https://*.bold.co https://bold.co https://*.segment.com https://*.segment.io https://api.segment.io https://cdn.segment.com https://*.amazonaws.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.boost.ai https://*.maze.co https://*.braze.eu https://*.googleapis.com https://*.seondf.com https://iteratehq.com https://*.sentry.io https://*.auth0.com https://*.kustomerapp.com https://*.shopifysvc.com https://*.boldcf.co https://boldcf.co https://www.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.iesnare.com https://*.typeform.com https://*.rudderlabs.com https://*.browser-intake-datadoghq.com https://*.datadoghq.com https://*.googlevideo.com https://www.googletagmanager.com *.getblue.io; media-src 'self' blob: https://*.googlevideo.com; frame-src 'self' *.facebook.com *.doubleclick.net https://www.googletagmanager.com https://www.google.com https://*.typeform.com https://www.youtube.com https://www.youtube-nocookie.com *.bluems.com/ https://*.getblue.io/; manifest-src 'self' https://bold.co https://*.bold.coframe-ancestors 'self' https://bold.co https://web.bold.co https://www.bold.co 2 default-src 'self'; script-src 'sha256-HLcA1CDTwKDheRtAqwh6iM6SYZPA1z1OyiDmdfapFAc=' 'sha256-9bZc2e8ZEdu9do2uwbvDUAwV6DQyl6m+y+xdvA6yND0=' 'sha256-UOTA5xvdRKEvExl5ejqWOgPNsJq15wX0UXum1hT3T7w=' 'sha256-lesBel43sM1Hnt05BLbYUoe4p9V6UNMbsLu5baxxQXQ=' 'sha256-1xtiB6mV1iIKZ5iz9CxA5lEnfEg8d0XEH3FL9L8NBqo=' 'sha256-mjdgHR9aXy+6OwAGlNS/XgNcYG1Uhd2U4pl8vi7+XCY=' 'sha256-MV9bA0yIdcnaDsqiOwg8ociCJ6LKf3ypwP9bwwFo8jE=' 'sha256-56fVshFxRRxVyaImwAfue5qo7UywcjJhyHgfpvefTyU=' 'sha256-h22vznkbGW3tYDKWXop2DgBJlSw0N4UouYJ9GkwDlxY=' 'sha256-B/EEyBsbiRVfwqlfeVkYlenShx4ELN1VOCtvDyCtC0M=' 'sha256-FxEuILqAUgbtCfxYqdlmpZ3DC4yLn3j3U3toY2/wRqo=' 'sha256-2re9JVGSjlSg4UpYsbctXX1FZd1rXx1e4yeLx0dclKA=' 'sha256-IG/safYLH7UyAknpvWYOFJn+hx+LW3Wpv1Qk8+sAvIY=' 'sha256-+L5pzLvzulCb/IXlICzGfGFu6Sa45SNa7dhzyDugRG0=' 'self' *.mimecastprotect.com *.typekit.net https://sc.lfeeder.com/ https://bat.bing.com/ https://www.clarity.ms/ https://scripts.clarity.ms https://cdn.snitcher.com/ https://snid.snitcher.com https://vimeo.com/ https://www.vimeo.com/ https://acsbapp.com/ http://tools.euroland.com/ https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://code.jquery.com/ https://d3e54v103j8qbb.cloudfront.net/ https://tools.euroland.com/ https://www.google-analytics.com/ https://www.gstatic.com/ https://www.gstatic.com/ https://cc.cdn.civiccomputing.com/ https://player.vimeo.com https://www.googletagmanager.com/ https://www.google.com/; font-src 'self' data: https://acsbapp.com/ https://fonts.gstatic.com/ https://use.typekit.net/; style-src 'self' 'unsafe-inline' embed.typeform.com https://fonts.googleapis.com/; connect-src 'self' https://cs.lf-discover.com/ https://b.clarity.ms/ https://bat.bing.net/ https://bat.bing.com/ https://radar.snitcher.com https://snid.snitcher.com api.typeform.com *.google-analytics.com *.webflow.com *.acsbapp.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://clapi.civiccomputing.com/ https://pagead2.googlesyndication.com/ https://apikeys.civiccomputing.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.google.com/ https://our.umbraco.com/ *.google.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' td.doubleclick.net rive.app form.typeform.com https://cdn.embedly.com/ https://gamma.euroland.com/ https://www.googletagmanager.com/ https://www.google.com/ https://www.youtube.com/ https://player.vimeo.com/ https://tools.eurolandir.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://tr.lfeeder.com/ https://bat.bing.com/ https://c.clarity.ms cat.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://entaingroup.com/ https://www.googletagmanager.com/ https://web1.acsbapp.com/ https://acsbapp.com/ https://uploads-ssl.webflow.com/ https://i.vimeocdn.com/ https://dashboard.umbraco.com/ https://our.umbraco.com/ https://www.google.com/ https://www.google-analytics.com/ https://www.bing.com/ https://www.github.com/ https://github.com/; object-src 'none'; base-uri 'self'; media-src 'self' https://web1.acsbapp.com/; worker-src blob: 'self'; 2 form-action *.a1.hr *.tomato.com.hr *.corvus.hr *.paypal.com *.corvuspay.com; 2 default-src 'self' blob: *.aman-d8.my127.site *.boltdns.net *.akamaihd.net *.typekit.net *.nr-data.net *.buyatab.com *.aman.com *.quantummetric.com cloud.typography.com *.sojern.com 'unsafe-inline' 'unsafe-eval'; worker-src blob: *.aman.com *.rudderlabs.com; script-src 'self' 'unsafe-inline' blob: *.googleapis.com 'unsafe-eval' *.googletagmanager.com *.newrelic.com *.nr-data.net *.typekit.net *.buyatab.com *.aman.com *.ipstack.com *.quantummetric.com *.doubleclick.net *.googleadservices.com impactradius-event.com utt.impactcdn.com *.cinnox.com *.gstatic.com *.onetrust.com *.synxis.com *.recaptcha.net *.google.com logs-01.loggly.com ojrq.net *.zencdn.net *.thehotelsnetwork.com *.google-analytics.com https://d2wy8f7a9ursnm.cloudfront.net/v6/bugsnag.min.js *.analytics.google.com s.yimg.jp snap.licdn.com connect.facebook.net d.line-scdn.net p.relay-t.io js.sentry-cdn.com *.yahoo.co.jp *.clarity.ms bat.bing.com cdn.linkedin.oribi.io https://cdn.jsdelivr.net/gh/jonthornton/jquery-timepicker@1.14.0/jquery.timepicker.min.js https://cdn.jsdelivr.net/gh/jackocnr/intl-tel-input@v17.0.19/build/js/intlTelInput-jquery.min.js https://cdn.jsdelivr.net/gh/jackocnr/intl-tel-input@v17.0.19/build/js/intlTelInput.min.js https://cdn.jsdelivr.net/gh/jackocnr/intl-tel-input@v17.0.19/build/js/utils.js fxgate.baidu.com secure-hotel-tracker.com newbooking.azds.com *.cinnox.cn https://*.googletagmanager.com aman-d8.my127.site browser.sentry-cdn.com *.visualwebsiteoptimizer.com app.vwo.com https://acsbapp.com https://accesswidget-log-receiver.acsbapp.com https://global.localizecdn.com https://js.appboycdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://js.adsrvr.org https://*.cloudflare.com api.mapbox.com js-agent.newrelic.com https://tags.srv.stackadapt.com https://srv.stackadapt.com https://ap.srv.stackadapt.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com *.sojern.com *.rudderlabs.com cdn.rudderlabs.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' cloud.typography.com *.buyatab.com *.aman.com *.cinnox.com *.googleapis.com *.bootstrapcdn.com *.synxis.com *.thehotelsnetwork.com https://cdn.jsdelivr.net/gh/jonthornton/jquery-timepicker@1.14.0/jquery.timepicker.min.css https://cdn.jsdelivr.net/gh/jackocnr/intl-tel-input@v17.0.19/build/css/intlTelInput.min.css newbooking.azds.com cdnjs.cloudflare.com *.cinnox.cn *.aman-d8.my127.site *.visualwebsiteoptimizer.com app.vwo.com https://use.fontawesome.com api.mapbox.com https://tags.srv.stackadapt.com https://srv.stackadapt.com https://ap.srv.stackadapt.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com; img-src 'self' data: about: *.googletagmanager.com *.buyatab.com *.aman.com *.cinnox.com *.boltdns.net *.google-analytics.com *.onetrust.com *.thehotelsnetwork.com https://www.google.com https://www.google.com.uk https://www.google.co.uk https://px.ads.linkedin.com https://cdn.jsdelivr.net/gh/jackocnr/intl-tel-input@v17.0.19/build/img/flags.png bat.bing.com tr.line.me ad.doubleclick.net doubleclick.net www.facebook.com *.clarity.ms newbooking.azds.com dbmajt85xhr99.cloudfront.net controlcenter-p1.synxis.com newbooking.azds.com dbmajt85xhr99.cloudfront.net d1t1qzzb2zwrre.cloudfront.net *.bing.com *.linkedin.com *.cinnox.cn https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com *.aman-d8.my127.site *.visualwebsiteoptimizer.com chart.googleapis.com app.vwo.com appboy-images.com braze-images.com cdn.braze.eu https://ade.googlesyndication.com *.mapbox.com https://*.cloudflare.com api.mapbox.com https://tags.srv.stackadapt.com https://srv.stackadapt.com https://ap.srv.stackadapt.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com; media-src 'self' blob: *.buyatab.com *.aman.com *.akamaihd.net *.boltdns.net *.aman-d8.my127.site; frame-src *; frame-ancestors 'self'; child-src *; font-src 'self' data: *.typekit.net *.aman.com *.gstatic.com *.cinnox.com *.thehotelsnetwork.com newbooking.azds.com dbmajt85xhr99.cloudfront.net d1t1qzzb2zwrre.cloudfront.net *.cinnox.cn *.aman-d8.my127.site https://use.fontawesome.com; connect-src 'self' *.aman.com *.boltdns.net *.thehotelsnetwork.com *.quantummetric.com *.akamaihd.net *.doubleclick.net *.google-analytics.com *.nr-data.net ws: 'unsafe-eval' *.googleapis.com *.onetrust.com *.synxis.com *.cinnox.com impactradius-event.com utt.impactcdn.com ojrq.net logs-01.loggly.com amanresorts.pxf.io sessions.bugsnag.com p.relay-t.io cdn.linkedin.oribi.io pagead2.googlesyndication.com *.clarity.ms newbooking.azds.com *.analytics.google.com *.cinnox.cn https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com *.aman-d8.my127.site px.ads.linkedin.com am.yahoo.co.jp *.visualwebsiteoptimizer.com app.vwo.com https://cdn.acsbapp.com/config/stage.www.aman.com/config.json https://cdn.acsbapp.com/cache/app/wildcards.json https://sdk.iad-01.braze.com https://sdk.fra-02.braze.eu https://www.facebook.com *.mapbox.com p.typekit.net use.typekit.net insight.adsrvr.org bat.bing.com apm.yahoo.co.jp https://tags.srv.stackadapt.com https://srv.stackadapt.com https://ap.srv.stackadapt.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com *.sojern.com; upgrade-insecure-requests 2 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'self'; 2 manifest-src 'self' *.nationwidechildrens.org www.nationwidechildrens.org *.kidsmentalhealthfoundation.org www.kidsmentalhealthfoundation.org; frame-ancestors 'self' *.nationwidechildrens.org www.nationwidechildrens.org *.columbuschildrens.net www.columbuschildrens.net *.kidsmentalhealthfoundation.org www.kidsmentalhealthfoundation.org; report-uri https://cahg.nationwidechildrens.org/CAHubGateway/api/Hub/ContentSecurityPolicyReport 2 frame-ancestors 'self' https://www.einpresswire.com https://www.milesight.cn https://m.milesight.cn https://console-develop-debug.milesight.com https://console-test.milesight.com https://console-stress.milesight.com https://console-pre.milesight.com https://console.milesight.com https://good360vr.com https://www.delmation.nl 2 default-src 'self'; worker-src 'self' blob: https://www.youtube.com/ https://fast.wistia.com https://s7.addthis.com https://forms.hubspot.com https://forms.hsforms.com; frame-src 'self' https://app.hubspot.com https://google.com https://www.google.com https://platform.twitter.com https://player.vimeo.com https://sidebar.bugherd.com https://www.youtube.com https://player.vimeo.com/ https://www.google.com/ https://optimize.google.com https://youtube.com https://vars.hotjar.com https://fast.wistia.com https://fast.wistia.net/ https://s7.addthis.com https://forms.hubspot.com https://forms.hsforms.com https://www.facebook.com https://td.doubleclick.net https://app.vwo.com https://consentcdn.cookiebot.com https://play.hubspotvideo.com/; connect-src 'self' wss://*.pusher.com https://*.mouseflow.com https://static.hsappstatic.net https://cdn.jsdelivr.net https://browser.sentry-cdn.com https://sockjs.pusher.com https://boards-api.greenhouse.io https://www.googletagmanager.com https://google.com https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.hubspot.com https://*.hsforms.com https://js.hs-banner.com https://pipedream.wistia.com https://px.ads.linkedin.com https://api.hubapi.com https://analytics.google.com https://sessions.bugsnag.com https://px.ads.linkedin.com/wa/ https://cdn.linkedin.oribi.io/ https://neo.tildacdn.com https://forms.tildacdn.com https://search.tildacdn.com https://feeds.tildacdn.com https://insta.tildacdn.com https://assets8.lottiefiles.com https://assets9.lottiefiles.com https://assets10.lottiefiles.com https://thumb.tildacdn.com https://stat.tildacdn.com https://sysstat.tildacdn.com https://assets6.lottiefiles.com https://hubspot-forms-static-embed.s3.amazonaws.com wss://ws.hotjar.com wss://ws2.hotjar.com wss://ws6.hotjar.com wss://ws7.hotjar.com https://ws2.hotjar.com https://ws6.hotjar.com https://ws7.hotjar.com https://in.hotjar.com https://content.hotjar.io https://trc-events.taboola.com/ https://api.hubapi.com/ https://www.facebook.com/tr/ https://embed-ssl.wistia.com https://api.hubspot.com https://forms.hsforms.com https://distillery.wistia.com https://fast.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://embedwistia-a.akamaihd.net https://m.addthis.com https://s7.addthis.com https://cta-service-cms2.hubspot.com https://dev.visualwebsiteoptimizer.com https://app.vwo.com https://r1.visualwebsiteoptimizer.com https://r2.visualwebsiteoptimizer.com https://r3.visualwebsiteoptimizer.com https://feeds.tildaapi.one https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://consent.cookiebot.com https://*.hubspotusercontent-na1.net; font-src 'self' data: https://fonts.gstatic.com https://cdn1.hubspot.net https://static.hsappstatic.net https://use.fontawesome.com https://dev.visualwebsiteoptimizer.com; img-src 'self' data: blob: https://*.mouseflow.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-eu1.net https://i.ytimg.com https://i.vimeocdn.com https://static.hsappstatic.net https://www.bugherd.com https://www.googletagmanager.com https://*.hsforms.com https://px.ads.linkedin.com https://tr.lfeeder.com https://track.hubspot.com https://www.google.co.za https://www.google.com https://px4.ads.linkedin.com/ https://forms-na1.hsforms.com https://sc.lfeeder.com https://tr.lfeeder.com/ https://lftracker.leadfeeder.com https://scontent-frt3-1.cdninstagram.com https://scontent-frx5-1.cdninstagram.com https://scontent-frx5-2.cdninstagram.com https://img.youtube.com https://assets8.lottiefiles.com https://tr.outbrain.com https://thumb.tildacdn.com https://s-insta.tildacdn.com https://stat.tildacdn.com https://static.tildacdn.com https://static.tildacdn.one https://optim.tildacdn.one https://static3.tildacdn.com https://www.entersekt.com https://trc.taboola.com https://p.adsymptotic.com/d/px/ https://www.linkedin.com https://cds.taboola.com https://www.facebook.com/tr/ https://www.google.com/pagead/ https://www.google.co.za/pagead/ https://googleads.g.doubleclick.net/pagead/ https://extensionscdn.joomla.org https://optimize.google.com https://www.google-analytics.com https://www.google.com/ads/ga-audiences https://www.google.co.za/ads/ga-audiences https://stats.g.doubleclick.net https://embed-ssl.wistia.com https://fast.wistia.com https://embedwistia-a.akamaihd.net https://forms.hsforms.com https://no-cache.hubspot.com https://perf.hsforms.com https://perf-na1.hsforms.com https://dev.visualwebsiteoptimizer.com https://r1.visualwebsiteoptimizer.com https://r2.visualwebsiteoptimizer.com https://r3.visualwebsiteoptimizer.com https://thb.tildacdn.one http://imgsct.cookiebot.com/ https://forms.hubspot.com; media-src 'self' data: blob: https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-eu1.net https://embedwistia-a.akamaihd.net; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.mouseflow.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-eu1.net https://browser.sentry-cdn.com https://cdn.jsdelivr.net https://connect.facebook.net https://fast.wistia.com https://google.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://*.hubspot.com https://js.usemessages.com https://platform.linkedin.com https://platform.twitter.com https://player.vimeo.com https://sc.lfeeder.com https://snap.licdn.com https://*.bugherd.com https://www.googletagmanager.com https://www.gstatic.com https://static.hsappstatic.net https://www.youtube.com https://player.vimeo.com/ https://cdn.matomo.cloud/entersekt.matomo.cloud/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://tr.lfeeder.com https://lftracker.leadfeeder.com https://neo.tildacdn.com https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js https://stat.tildacdn.com https://tr.outbrain.com https://script.hotjar.com https://amplify.outbrain.com https://static.tildacdn.com https://www.entersekt.com https://static.hotjar.com https://trc.taboola.com https://cdn.taboola.com https://googleads.g.doubleclick.net/pagead/ https://www.google.com/pagead/ https://www.google.co.za/pagead/ https://www.googleadservices.com/pagead/ https://appscdn.joomla.org https://ajax.googleapis.com https://js.hscta.net https://cta-service-cms2.hubspot.com https://api.usemessages.com https://s.ytimg.com https://src.litix.io https://js.hs-scripts.com https://optimize.google.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com https://fast.wistia.net https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com https://s7.addthis.com https://m.addthisedge.com https://m.addthis.com https://px.ads.linkedin.com https://www.linkedin.com/px/li_sync https://secure.hiss3lark.com/Track/Capture.aspx https://js.hubspot.com https://dev.visualwebsiteoptimizer.com https://app.vwo.com https://static.tildacdn.one https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://static.hsappstatic.net https://static.tildacdn.com https://www.entersekt.com https://use.fontawesome.com https://entersekt.info https://optimize.google.com https://app.vwo.com https://static.tildacdn.one 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://www.googletagmanager.com https://connect.facebook.net https://snap.licdn.com https://web.synerise.com https://web.snrbox.com https://chat.synerise.com https://www.instagram.com https://static.cdninstagram.com https://cdnjs.cloudflare.com https://d06424af-1fc5-4638-b4e7-01795e9fdb23-00-3v804p0f7kl0k.spock.replit.dev https://synerise-www.replit.app http://synerise-www.replit.app https://www.synerise.com http://www.synerise.com https://synerise.com http://synerise.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.snrcdn.net https://static.cdninstagram.com;img-src 'self' data: blob: https: http:;font-src 'self' https://fonts.gstatic.com data:;connect-src 'self' https://ai-api.synerise.com https://synerise.ghost.io https://*.synerise.com https://web.synerise.com https://chat.synerise.com https://*.snrbox.com https://www.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.facebook.com https://connect.facebook.net https://snap.licdn.com https://px.ads.linkedin.com https://www.chatbase.co https://*.chatbase.co https://www.instagram.com https://static.cdninstagram.com wss: ws: https://d06424af-1fc5-4638-b4e7-01795e9fdb23-00-3v804p0f7kl0k.spock.replit.dev https://synerise-www.replit.app http://synerise-www.replit.app https://www.synerise.com http://www.synerise.com https://synerise.com http://synerise.com;frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://chat.synerise.com https://www.instagram.com https://www.google.com;media-src 'self' https: blob: data:;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests 2 default-src 'self';style-src 'unsafe-inline' https:;font-src https: data: ;media-src 'unsafe-inline' 'unsafe-eval' https://*.vendernetworks.com/ https://*.ownernetworks.com/ https://*.s3.amazonaws.com/ blob:;script-src 'unsafe-inline' 'unsafe-eval' https://*.ownernetworks.com https://*.tenantnetworks.com https://*.vendernetworks.com https://*.barefoot.com https://*.google.com https://*.gstatic.com https://*.googleapis.com ;img-src https: data: blob:;frame-src https:;connect-src https:; 2 default-src 'self'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' https://*.googlesyndication.com www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://www.instagram.com/embed.js https://*.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://tagmanager.google.com https://www.linkedin.com https://platform.twitter.com/ https://platform.x.com https://www.youtube.com https://player.vimeo.com https://vimeo.com https://prismic.io https://www.onelink-edge.com https://maps.googleapis.com https://data.worldcoin.org https://api.pactsafe.com https://static.cdn.prismic.io https://geolocation.onetrust.com https://vitals.vercel-insights.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://xapis.onelink-edge.com https://va.vercel-scripts.com https://verifi.podscribe.com https://d34r8q7sht0t9k.cloudfront.net https://ipv4.podscribe.com https://vercel.live https://us-central1-relyance-ext.cloudfunctions.net https://consent.app.relyance.ai https://cdn-consent.relyanceconsent.ai https://analytics.ahrefs.com https://onelinksmartscript.appsflyer.com world.org *.vimeocdn.com *.tiktok.com *.ttwstatic.com *.onetrust.com; font-src 'self' https://fonts.gstatic.com data: https://fonts.googleapis.com; style-src 'self' https://fonts.googleapis.com https://maps.googleapis.com https://data.worldcoin.org https://api.pactsafe.com https://www.googletagmanager.com *.tiktok.com *.ttwstatic.com *.onetrust.com 'unsafe-inline'; connect-src 'self' https://*.googlesyndication.com www.googletagmanager.com https://www.facebook.com https://www.google.com/ https://connect.facebook.net https://app-backend.toolsforhumanity.com https://www.googleadservices.com https://tagmanager.google.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://www.linkedin.com https://www.onelink-edge.com https://maps.googleapis.com https://data.worldcoin.org https://api.pactsafe.com https://api.operator.worldcoin.org https://vitals.vercel-insights.com https://vault.pactsafe.io https://secure.ethicspoint.com https://geolocation.onetrust.com https://metrics.worldcoin.org https://googleads.g.doubleclick.net https://xapis.onelink-edge.com https://player.vimeo.com https://vimeo.com https://noembed.com https://verifi.podscribe.com https://d34r8q7sht0t9k.cloudfront.net https://ipv4.podscribe.com https://us-central1-relyance-ext.cloudfunctions.net https://fleet.orb.worldcoin.org https://consent.app.relyance.ai https://cdn-consent.relyanceconsent.ai https://analytics.ahrefs.com https://impressions.onelink.me https://engagements.appsflyersdk.com https://app.appsflyersdk.com https://tiles.openfreemap.org https://demotiles.maplibre.org https://assets.orbapp.world.org https://assets.orbapp.worldcoin.org world.org *.vimeocdn.com *.gstatic.com *.tiktokw.us *.tiktok.com *.ttwstatic.com *.onetrust.com; worker-src 'self' blob:; img-src 'self' blob: data: www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://www.google.com https://tagmanager.google.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google-analytics.com https://worldcoin-company-website.cdn.prismic.io https://www.linkedin.com https://media.licdn.com https://i.ytimg.com https://images.prismic.io https://world-id-assets.com https://staging.world-id-assets.com https://prismic-io.s3.amazonaws.com https://maps.googleapis.com https://data.worldcoin.org https://api.pactsafe.com https://googleads.g.doubleclick.net https://xapis.onelink-edge.com https://verifi.podscribe.com https://d34r8q7sht0t9k.cloudfront.net https://ipv4.podscribe.com https://raw.githubusercontent.com https://i.ibb.co https://orbapp.worldcoin.org https://impressions.onelink.me https://assets.orbapp.world.org https://assets.orbapp.worldcoin.org world.org *.gstatic.com *.vimeocdn.com *.tiktok.com *.ttwstatic.com *.onetrust.com; media-src 'self' blob: data: https://platform.twitter.com/ https://platform.x.com https://www.linkedin.com https://media.licdn.com https://worldcoin-company-website.cdn.prismic.io https://images.prismic.io https://prismic-io.s3.amazonaws.com https://maps.googleapis.com https://data.worldcoin.org https://api.pactsafe.com https://googleads.g.doubleclick.net https://xapis.onelink-edge.com https://verifi.podscribe.com https://d34r8q7sht0t9k.cloudfront.net https://ipv4.podscribe.com https://raw.githubusercontent.com world.org *.vimeocdn.com *.tiktok.com *.ttwstatic.com *.onetrust.com; frame-src 'self' https://www.googletagmanager.com/ https://connect.facebook.net https://www.facebook.com https://platform.twitter.com/ https://platform.x.com https://www.youtube.com https://player.vimeo.com https://www.instagram.com https://vimeo.com https://maps.googleapis.com https://worldcoin-company-website.prismic.io https://data.worldcoin.org https://td.doubleclick.net https://verifi.podscribe.com https://d34r8q7sht0t9k.cloudfront.net https://ipv4.podscribe.com https://vercel.live world.org *.vimeocdn.com *.google.com 2 default-src 'self' wss: https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.atriumhealth.org https://*.evgnet.com https://*.fortawesome.com https://*.googleapis.com https://*.odeza.com https://atriumhealth.secure.force.com https://atriumhealthbotv4windows.azurewebsites.net https://az416426.vo.msecnd.net https://cdnjs.cloudflare.com https://clres.s3.amazonaws.com https://code.jquery.com https://dev.virtualearth.net https://developers.google.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://static.cloud.coveo.com https://unpkg.com https://www.bing.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://connect.facebook.net https://js.stripe.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.atriumhealth.org https://*.evgnet.com https://*.fortawesome.com https://use.fortawesome.com https://*.googleapis.com https://*.odeza.com https://atriumhealth.us-7.evergage.com https://az416426.vo.msecnd.net https://cdnjs.cloudflare.com https://clres.s3.amazonaws.com https://code.jquery.com https://dev.virtualearth.net https://developers.google.com https://maxcdn.bootstrapcdn.com https://r.bing.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://static.cloud.coveo.com https://unpkg.com https://www.bing.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://connect.facebook.net https://js.stripe.com https://kit.fontawesome.com/11daf4ca86.js; 2 default-src 'self' spacehey.com *.spacehey.com spacehey.net *.spacehey.net ws://socket.spacehey.com wss://socket.spacehey.com; script-src 'self' spacehey.com *.spacehey.com spacehey.net *.spacehey.net tibushlabs.de; style-src 'unsafe-inline' 'self' spacehey.com *.spacehey.com spacehey.net *.spacehey.net; img-src data: 'self' spacehey.com *.spacehey.com spacehey.net *.spacehey.net tibushlabs.de; frame-src https:; connect-src https: ws://socket.spacehey.com wss://socket.spacehey.com; form-action https:; object-src 'none'; 2 default-src 'self' https://*.stan.com.au; child-src 'self' https://*.paypal.com https://*.paypalobjects.com https://www.youtube.com.au; connect-src 'self' blob: https://*.akamaihd.net https://*.akamaized.net https://*.analytics.google.com https://*.braintreegateway.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.com.au https://*.googletagmanager.com https://*.paypal.com https://*.paypalobjects.com https://*.quantserve.com https://*.stan.com.au https://*.stan.video https://*.stripe.com https://*.visualwebsiteoptimizer.com https://ad.doubleclick.net https://ads.tiktok.com https://analytics-ipv6.tiktokw.us https://analytics.pangle-ads.com https://analytics.tiktok.com https://api.ipify.org https://app.vwo.com https://ara.paa-reporting-advertising.amazon https://bat.bing.com https://c.amazon-adsystem.com https://conversions-config.reddit.com https://evnt.byspotify.com https://google.com https://insight.adsrvr.org https://ipv4.podscribe.com https://match.adsrvr.org https://moda-cdp-message-prd-7jirubb0.uc.gateway.dev https://pagead2.googlesyndication.com https://payments.braintree-api.com https://pixel-config.reddit.com https://pixel.tapad.com https://pixels.spotify.com https://s.amazon-adsystem.com https://sink.pdst.fm https://us-central1-adaptive-growth.cloudfunctions.net https://verifi.podscribe.com https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.redditstatic.com; form-action 'self' https://*.stan.com.au https://www.facebook.com https://www.paypal.com; font-src 'self' data: https://fonts.gstatic.com https://www.stan.com.au; frame-ancestors none; frame-src 'self' https://*.amazon-adsystem.com https://*.paypal.com https://*.paypalobjects.com https://*.stripe.com https://*.visualwebsiteoptimizer.com https://4913904.fls.doubleclick.net https://app.vwo.com https://apps.rokt.com https://insight.adsrvr.org https://match.adsrvr.org https://servedby.flashtalking.com https://td.doubleclick.net https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' blob: data: https://*.akamaihd.net https://*.analytics.google.com https://*.bing.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.com.au https://*.googletagmanager.com https://*.paypal.com https://*.paypalobjects.com https://*.quantcount.com https://*.quantserve.com https://*.stan.com.au https://*.stripe.com https://*.visualwebsiteoptimizer.com https://ad.doubleclick.net https://ade.googlesyndication.com https://ads.tiktok.com https://alb.reddit.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://app.vwo.com https://chart.googleapis.com https://google.com https://googletagmanager.com https://i.ytimg.com https://pagead2.googlesyndication.com https://ssl.gstatic.com https://verifi.podscribe.com https://wingify-assets.s3.amazonaws.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googletagmanager.com https://*.paypal.com https://*.paypalobjects.com https://*.quantcount.com https://*.quantserve.com https://*.stan.com.au https://*.stripe.com https://*.visualwebsiteoptimizer.com https://ads.tiktok.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://app.vwo.com https://apps.rokt.com https://bat.bing.com https://c.amazon-adsystem.com https://cdn.pdst.fm https://connect.facebook.net https://d34r8q7sht0t9k.cloudfront.net https://googletagmanager.com https://js.adsrvr.org https://pagead2.googlesyndication.com https://pixel.byspotify.com https://redditstatic.s3.amazonaws.com https://sdk.lifesight.io https://tagmanager.google.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.paypalobjects.com https://www.redditstatic.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.test.streamco.com.au https://*.visualwebsiteoptimizer.com https://app.vwo.com https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com; worker-src 'self' blob:; report-uri https://api.stan.com.au/features/v1/collect-csp; 2 default-src 'self' https://*.lifepointspanel.com https://*.clarity.ms; connect-src 'self' https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://*.doubleclick.net https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.at https://www.google.be https://www.google.com.br https://www.google.ca https://www.google.cl https://www.google.cn https://www.google.com.co https://www.google.cz https://www.google.de https://www.google.dk https://www.google.com.eg https://www.google.es https://www.google.fi https://www.google.fr https://www.google.com.gh https://www.google.gr https://www.google.com.hk https://www.google.hu https://www.google.co.id https://www.google.co.in https://www.google.ie https://www.google.co.il https://www.google.it https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.com.mx https://www.google.co.ma https://www.google.com.ng https://www.google.nl https://www.google.no https://www.google.co.nz https://www.google.com.ph https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.ru https://www.google.com.sa https://www.google.com.sg https://www.google.sn https://www.google.sk https://www.google.co.za https://www.google.se https://www.google.ch https://www.google.co.th https://www.google.com.tr https://www.google.co.tz https://www.google.co.ug https://www.google.com.ua https://www.google.ae https://www.google.co.uk https://www.google.com.vn https://www.google-analytics.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://capig.lifepointspanel.com *.nr-data.net https://www.facebook.com https://click.prod.mplat-ppcprotect.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://pixel-config.reddit.com https://api.branch.io https://api2.branch.io; font-src 'self' data: https://www.lifepointspanel.com https://panel-lifepointsportals.drupal.production.platone.red https://content.lifepointspanel.com https://cdn.jsdelivr.net; frame-src 'self' https://*.trustpilot.com https://consent.kantar.com https://bid.g.doubleclick.net https://td.doubleclick.net https://10766450.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com; img-src 'self' data: https://*.lifepointspanel.com https://panel-lifepointsportals.drupal.production.platone.red https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://*.googletagmanager.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://fonts.gstatic.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://google.com https://www.google.com.ar https://www.google.com.au https://www.google.at https://www.google.be https://www.google.com.br https://www.google.ca https://www.google.cl https://www.google.cn https://www.google.com.co https://www.google.cz https://www.google.de https://www.google.dk https://www.google.com.eg https://www.google.es https://www.google.fi https://www.google.fr https://www.google.com.gh https://www.google.gr https://www.google.com.hk https://www.google.hu https://www.google.co.id https://www.google.co.in https://www.google.ie https://www.google.co.il https://www.google.it https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.com.mx https://www.google.co.ma https://www.google.com.ng https://www.google.nl https://www.google.no https://www.google.co.nz https://www.google.com.ph https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.ru https://www.google.com.sa https://www.google.com.sg https://www.google.sn https://www.google.sk https://www.google.co.za https://www.google.se https://www.google.ch https://www.google.co.th https://www.google.com.tr https://www.google.co.tz https://www.google.co.ug https://www.google.com.ua https://www.google.ae https://www.google.co.uk https://www.google.com.vn https://www.google.cat https://adservice.google.com https://www.googleadservices.com https://*.googlesyndication.com https://10766450.fls.doubleclick.net https://ad.doubleclick.net https://*.clarity.ms https://*.bing.com https://bat.bing.net https://www.facebook.com https://s1.adform.net https://sb.scorecardresearch.com https://sb.voicefive.com https://secure.insightexpressai.com https://a.e-webtrack.net https://img.macromill.com https://www.insightexpressai.com https://www.rlcdn.com https://flextrack.msi-aci.com https://ads.e-webtrack.net https://*.nudatasecurity.com https://alb.reddit.com; object-src 'none'; script-src 'self' 'unsafe-inline' blob: https://*.lifepointspanel.com https://panel-lifepointsportals.drupal.production.platone.red https://bat.bing.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://js-agent.newrelic.com https://redditstatic.com https://*.trustpilot.com https://www.clarity.ms https://www.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://tag.simpli.fi https://a.e-webtrack.net https://analytics.tiktok.com https://client.prod.mplat-ppcprotect.com https://www.redditstatic.com https://cdn.branch.io https://app.link cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://www.lifepointspanel.com https://content.lifepointspanel.com https://panel-lifepointsportals.drupal.production.platone.red https://cdn.jsdelivr.net; frame-ancestors 'self' 2 frame-ancestors self *.deluxe.com deluxe.lookbookhq.com *.adobeaemcloud.com;, default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline'; 2 default-src 'self' * data: blob:; connect-src 'self' * data: blob: webpack:; img-src 'self' * 'unsafe-inline' data: blob:; script-src 'self' * 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' * 'unsafe-inline' data: blob:; object-src 'none'; worker-src 'self' data: blob: career.io *.career.io careerio.careerminds.com *.careerio.careerminds.com careerio.topcv.com *.careerio.topcv.com careerio.topresume.com *.careerio.topresume.com careers.chegg.com *.careers.chegg.com careers.coursereport.com *.careers.coursereport.com careers.nscs.org *.careers.nscs.org cv.dk *.cv.dk cvapp.ar *.cvapp.ar cvapp.bg *.cvapp.bg cvapp.cl *.cvapp.cl cvapp.cz *.cvapp.cz cvapp.de *.cvapp.de cvapp.es *.cvapp.es cvapp.fi *.cvapp.fi cvapp.fr *.cvapp.fr cvapp.gr *.cvapp.gr cvapp.hu *.cvapp.hu cvapp.ie *.cvapp.ie cvapp.it *.cvapp.it cvapp.mx *.cvapp.mx cvapp.no *.cvapp.no cvapp.nz *.cvapp.nz cvapp.ro *.cvapp.ro cvapp.rs *.cvapp.rs cvapp.vn *.cvapp.vn cveasy.pl *.cveasy.pl cvkungen.se *.cvkungen.se cvster.nl *.cvster.nl lebenslaufapp.at *.lebenslaufapp.at lebenslaufapp.ch *.lebenslaufapp.ch onlinecurriculo.com.br *.onlinecurriculo.com.br onlinecurriculo.pt *.onlinecurriculo.pt app.resume.ai *.app.resume.ai resume.ai *.resume.ai resume.io *.resume.io resumeapp.co.kr *.resumeapp.co.kr rirekisho.jp *.rirekisho.jp ust.stape.io *.ust.stape.io learning.career.io *.learning.career.io learning.careerio.careerminds.com *.learning.careerio.careerminds.com learning.careerio.topcv.com *.learning.careerio.topcv.com learning.careerio.topresume.com *.learning.careerio.topresume.com learning.coursereport.com *.learning.coursereport.com learning.resume.io *.learning.resume.io directory.futurelearn.com *.directory.futurelearn.com; frame-src https:; frame-ancestors 'self' vwo.com *.vwo.com 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com maxcdn.bootstrapcdn.com files.bizhub.sh cdnjs.cloudflare.com *.stripe.com *.compute.amazonaws.com iwsuibuilder-v21-develo.elasticbeanstalk.com recaptcha.net; connect-src 'self' api.locize.io *.stripe.com *.taxjar.com files.bizhub.sh www.google-analytics.com piwik.konicaminolta.eu bizhub.singles *.bizhub.singles develop.singles *.develop.singles 0a0243a9.green *.0a0243a9.green 0a0243a9.xyz *.0a0243a9.xyz 9a3420a0.xyz *.9a3420a0.xyz konicaminoltamarketplace.com *.konicaminoltamarketplace.com bizhubmarketplace.com *.bizhubmarketplace.com developmarketplace.com *.developmarketplace.com *.compute.amazonaws.com iwsuibuilder-v21-develo.elasticbeanstalk.com *.amazonaws.com; font-src 'self' files.bizhub.sh fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com ajax.aspnetcdn.com *.google.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com files.bizhub.sh maxcdn.bootstrapcdn.com cdnjs.cloudflare.com ajax.aspnetcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' polyfill.io *.stripe.com cdn.polyfill.io www.google-analytics.com www.googletagmanager.com *.google.com www.gstatic.com cdnjs.cloudflare.com ajax.aspnetcdn.com piwik.konicaminolta.eu recaptcha.net; img-src 'self' data: files.bizhub.sh cdnjs.cloudflare.com s3.us-west-2.amazonaws.com www.google-analytics.com *.stripe.com *.stripecdn.com; frame-src 'self' *.stripe.com *.stripecdn.com recaptcha.net 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: http://pipedream.wistia.com; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 2 default-src 'self' localhost:* cabify.website *.cabify.com *.cabifil.es; manifest-src 'self' localhost:* cabify.website *.cabify.com *.cabifil.es; style-src 'self' localhost:* 'unsafe-inline' cabify.website *.cabify.com *.cabifil.es *.youtube.com *.calendly.com calendly.com *.stackadapt.com; script-src 'self' localhost:* 'unsafe-inline' 'unsafe-eval' cabify.website *.cabify.com *.cabifil.es rum.browser-intake-datadoghq.com *.datadoghq.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.googleadservices.com *.jotform.com *.google-analytics.com *.youtube.com *.google.com *.gstatic.com *.licdn.com *.facebook.net *.amplitude.com *.outbrain.com *.taboola.com *.talent.com *.tiktok.com *.linkedin.com *.stackadapt.com qvdt3feo.com *.calendly.com calendly.com *.criteo.com *.criteo.net unpkg.com; img-src * data:; media-src 'self' https://storage.googleapis.com; connect-src 'self' localhost:* ws://localhost:* cabify.website *.cabify.com *.cabifil.es *.oribi.io *.jotform.com *.google-analytics.com *.doubleclick.net *.googleadservices.com *.google.com *.googleapis.com *.youtube.com translate.googleapis.com *.googlesyndication.com rum.browser-intake-datadoghq.com *.datadoghq.com *.clarity.ms *.outbrain.com *.googletagmanager.com *.amplitude.com *.facebook.com *.facebook.net *.linkedin.com *.stackadapt.com *.calendly.com calendly.com *.tiktok.com *.pangle-ads.com *.criteo.com *.criteo.net unpkg.com; frame-src 'self' localhost:* cabify.website *.cabify.com *.cabifil.es *.oribi.io *.jotform.com *.google-analytics.com *.doubleclick.net *.googleadservices.com *.google.com *.googleapis.com *.youtube.com translate.googleapis.com *.googlesyndication.com rum.browser-intake-datadoghq.com *.datadoghq.com *.clarity.ms *.googletagmanager.com *.amplitude.com *.facebook.com *.facebook.net *.linkedin.com *.stackadapt.com *.calendly.com calendly.com *.whatsapp.com *.criteo.com *.criteo.net unpkg.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub57d126e9dea45259c0e69381468deb10&dd-evp-origin=content-security-policy&ddsource=csp-report 2 default-src *.ewe.de *.delivery.consentmanager.net; script-src 'self' 'unsafe-inline' js.adsrvr.org osnatel.de *.ewe.de www.youtube.com *.intelliad.de price-finder-widget.production.wlp.cloud dzn97c6tb0xj.cloudfront.net d2gm32i8dgh326.cloudfront.net s.ytimg.com empfehlen-admin.pso-vertrieb.de ewe-journeys.production.wlp.cloud ewe-experiences-bff.production.wlp.cloud connect.facebook.net www.dwin1.com *.adform.net 9be340225ba0.eu-central-1.captcha-sdk.awswaf.com www.ewe-empfehlen.de *.doubleclick.net *.g.doubleclick.net *.googleadservices.com *.gstatic.com journeyengine.production.wlp.cloud ewe-journeys.production.wlp.cloud experiences.ewe.de pub-6ab8a7ede2cb46eb872c4868a049f49c.r2.dev tracking-ewe.production.wlp.cloud pub-9e9b8076c1e04ada8d131e726daedf4b.r2.dev cdn.sitesearch360.com cdn.cai.tools.sap js.sitesearch360.com apps.mypurecloud.de lantern.roeyecdn.com cdn.consentmanager.net delivery.consentmanager.net *.criteo.com *.criteo.net *.delivery.consentmanager.net *.osnatel.de 9be340225ba0.bd016d34.eu-central-1.captcha.awswaf.com 9be340225ba0.bd016d34.eu-central-1.token.awswaf.com d1mg6zysadblio.cloudfront.net prod.d4e2h3cyl61pd.amplifyapp.com ewe.sabio.de *.epilot.io *.epilot.cloud static.site24x7rum.eu analytics.tiktok.com www.googletagmanager.com www.redditstatic.com; connect-src 'self' *.ewe.de 3k53vn4sgd.execute-api.eu-central-1.amazonaws.com/prod/address-autocomplete price-finder-widget.production.wlp.cloud api.luk.ewe-solar.de cdn.consentmanager.net api.luk.ewe-waerme.de ewe-journeys.production.wlp.cloud ewe-experiences-bff.production.wlp.cloud ewe-journeys.staging.wlp.cloud ewe-experiences-bff.staging.wlp.cloud global.sitesearch360.com *.g.doubleclick.net *.criteo.com *.criteo.net ewe-ckd-faq-bot-3q50idha.sapcai.eu10.hana.ondemand.com api.mypurecloud.de insights.sitesearch360.com *.adform.net api-cdn.mypurecloud.de wss://webmessaging.mypurecloud.de www.google.com/pagead/ www.google.com/ccm/ www.google.com/rmkt/ ewe-journeys.production.wlp.cloud experiences.ewe.de ewe-gw.production.wlp.cloud ewe-experiences-bff.production.wlp.cloud experiences-bff.ewe.de ewe-journeys.staging.wlp.cloud ewe-gw.staging.wlp.cloud sentry.taktsoft.com mpgm8yfu.apicdn.sanity.io track.ewe.de www.facebook.com pub-6ab8a7ede2cb46eb872c4868a049f49c.r2.dev tracking-ewe.production.wlp.cloud *.delivery.consentmanager.net cdn.sitesearch360.com *.osnatel.de insight.adsrvr.org 9be340225ba0.bd016d34.eu-central-1.token.awswaf.com *.epilot.io *.epilot.cloud col.site24x7rum.eu analytics.tiktok.com analytics-ipv6.tiktokw.us pixel-config.reddit.com www.redditstatic.com ads.reddit.com match.adsrvr.org; img-src 'self' *.ewe.de *.intelliad.de *.amazonaws.com *.doubleclick.net *.g.doubleclick.net *.facebook.com *.adform.net *.smartadserver.com adservice.google.com *.gstatic.com cdn.consentmanager.net a.delivery.consentmanager.net connect.facebook.net adservice.google.de cdn.cai.tools.sap blob: data: ewe-journeys.production.wlp.cloud experiences.ewe.de ewe-prices.production.wlp.cloud cdn.sanity.io ewe-journeys.staging.wlp.cloud *.criteo.com *.criteo.net *.tile.openstreetmap.org www.google.com/pagead/ www.google.de/pagead/ i.ytimg.com alb.reddit.com; style-src 'self' 'unsafe-inline' *.ewe.de cdnjs.cloudflare.com cdn.consentmanager.net ewe-journeys.production.wlp.cloud price-finder-widget.production.wlp.cloud experiences.ewe.de ewe-journeys.staging.wlp.cloud pub-6ab8a7ede2cb46eb872c4868a049f49c.r2.dev tracking-ewe.production.wlp.cloud www.redditstatic.com; font-src 'self' *.ewe.de cdnjs.cloudflare.com data: ewe-journeys.production.wlp.cloud price-finder-widget.production.wlp.cloud experiences.ewe.de ewe-journeys.staging.wlp.cloud pub-6ab8a7ede2cb46eb872c4868a049f49c.r2.dev tracking-ewe.production.wlp.cloud cdn.consentmanager.net delivery.consentmanager.net d.delivery.consentmanager.net; frame-src ewe-journeys.production.wlp.cloud ewe-experiences-bff.production.wlp.cloud www.facebook.com widget.whappodo.com youtube.com www.youtube.com www.youtube-nocookie.com journeyengine.production.wlp.cloud ewe-journeys.production.wlp.cloud apps.mypurecloud.de td.doubleclick.net *.ewe.de gum.criteo.com fledge.eu.criteo.com fledge.criteo.com cdn.consentmanager.net prod.d26yotydwxqhxn.amplifyapp.com staging.d26yotydwxqhxn.amplifyapp.com insight.adsrvr.org match.adsrvr.org d1mg6zysadblio.cloudfront.net *.epilot.io *.epilot.cloud prod.d4e2h3cyl61pd.amplifyapp.com; media-src 'self' data.ewe.de; 2 default-src 'self' https: http:; base-uri 'self' *.cloudfront.net; block-all-mixed-content; font-src 'self' https: data:; frame-ancestors 'self' https: data:; frame-src 'self' https: data:; img-src 'self' data: blob: *.newrelic.com *.commercecloud.salesforce.com *.lumens.com *.signifyd.com *.online-metrix.net s7d1.scene7.com s7d5.scene7.com images.ctfassets.net storage.googleapis.com cdn.ywxi.net www.gstatic.com *.google.com *.paypal.com *.bing.com *.facebook.com *.everesttech.net *.omtrdc.net *.ydesigngroup.com *.listrakbi.com *.doubleclick.net *.liadm.com *.agkn.com *.rtactivate.com *.dtstmio.com *.cloudfront.net *.datasteam.io *.equalweb.com *.cookielaw.org *.googletagmanager.com *.demdex.net *.espssl.com *.powerreviews.com sdk.helloextend.com api.helloextend.com api-demo.helloextend.com *.cloudinary.com *.facebook.net *.clarity.ms *.modernimpact.com *.amazonaws.com *.adnxs.com *.ojrq.net *.gladly.com *.smooch.io *.gstatic.com; manifest-src 'self' https: http:; media-src 'self' https: http: data: blob:; object-src 'self' https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.online-metrix.net *.newrelic.com *.nr-data.net runtime.commercecloud.com *.googleapis.com *.lumens.com cdn.gladly.qa *.gladly.com *.smooch.io d1fc8wv8zag5ca.cloudfront.net cdnjs.cloudflare.com www.googlecommerce.com *.curalate.com *.google.com *.googletagmanager.com *.google-analytics.com js.cnnx.link *.shopmy.us *.paypal.com *.datasteam.io *.facebook.net *.impactradius-event.com *.pinimg.com *.googleadservices.com *.usabilla.com *.zi-scripts.com *.bing.com *.taboola.com *.adobedtm.com cnstrc.com *.cnstrc.com *.listrakbi.com *.omtrdc.net *.listrak.com *.equalweb.com tags.pw.adn.cloud www.paypalobjects.com *.stape.ma *.pinterest.com *.agkn.com *.zoominfo.com *.adn.cloud *.facebook.com *.cookielaw.org *.bing-int.com *.powerreviews.com sdk.helloextend.com api.helloextend.com api-demo.helloextend.com *.signifyd.com *.iesnare.com *.doubleclick.net *.gladly.chat *.clarity.ms *.kyc.red *.tintup.com *.publitas.com *.cquotient.com *.scene7.com *.verygoodvault.com *.shopmy.us *.appboycdn.com *.cloudflareinsights.com; script-src-attr 'self' 'unsafe-inline' 'unsafe-hashes' https: http:; style-src 'self' https: 'unsafe-inline'; connect-src 'self' runtime.commercecloud.com *.lumens.com *.signifyd.com *.newrelic.com *.nr-data.net cdn.gladly.qa *.gladly.com *.smooch.io d1fc8wv8zag5ca.cloudfront.net cdnjs.cloudflare.com www.googlecommerce.com *.google.com *.googletagmanager.com *.google-analytics.com js.cnnx.link *.paypal.com *.datasteam.io *.facebook.net *.impactradius-event.com *.pinimg.com *.googleadservices.com *.usabilla.com *.zi-scripts.com *.bing.com *.taboola.com *.adn.cloud *.demdex.net *.omtrdc.net *.doubleclick.net *.listrak.com *.cnstrc.com *.listrakbi.com *.mobify-storefront.com *.evyy.net *.impct.site *.pinterest.com *.stape.ma *.zoominfo.com *.equalweb.com *.facebook.com *.run.app *.cookielaw.org *.onetrust.com *.powerreviews.com sdk.helloextend.com api.helloextend.com api-demo.helloextend.com *.cloudinary.com *.agkn.com *.gladly.chat wss://*.gladly.chat *.clarity.ms *.ydesigngroup.com *.sinter-collect.com *.verygoodvault.com *.braze.com; upgrade-insecure-requests 2 default-src 'self' blob:; img-src 'self' *.ecpay.com.tw *.boxcdn.net *.maropost.com *.amazonaws.com *.adyen.com *.cloudfront.net *.userlike.com flp-service.zendesk.com static.zdassets.com consent.cookiefirst.com *.ytimg.com *.livehelpnow.net *.pcdn.co *.sharethis.com *.contentsquare.net *.content-square.fr *.contentsquare.com *.googleapis.com *.s3.us-east-1.amazonaws.com *.s3.us-east-2.amazonaws.com *.gstatic.com *.clicktale.net pixy.org *.chargebee.com *.nextsphere.com *.ppipe.net *.myecheck.com *.oppwa.com *.flptitan.com *.foreverliving.com *.flpi.com foreverliving.com seeklogo.com stats.g.doubleclick.net *.google.com www.google.com.sg data: www.google.co.in *.vimeocdn.com *.youtube.com *.s3.amazonaws.com x1.xingassets.com blob: oppwa.com *.google-analytics.com s3-us-west-2.amazonaws.com *.facebook.com *.googletagmanager.com *.boxcloud.com app.tlinky.com *.fedex.com tile.openstreetmap.org *.basemaps.cartocdn.com *.google.co.uk sp.tinymce.com *.r2.dev *.tinymce.com *.google.ie ecpg-stage.ecpay.com.tw widgets.trustedshops.com *.google.com.mm; script-src 'self' *.forever-giving.org *.cdn-apple.com *.ecpay.com.tw *.userlike.com *.cdn01.boxcdn.net api.smooch.io *.adyen.com *.nexiopay.com *.cdn.jsdelivr.net *.jsdelivr.net *.amazonaws.com *.worldpay.com *.cloudfront.net *.mgipayments.com *.boxcdn.net *.boxcloud.com *.box.com *.s3-eu-west-1.amazonaws.com *.payvision.com *.siteprerender.com siteprerender.com *.google.com *.mgr.consensu.org *.livehelpnow.net *.contentsquare.net *.content-square.fr *.contentsquare.com *.sharethis.com walls.io *.facebook.net *.cdn-javascript.net cdn-javascript.net x-apple-ql-id *.static-resource.com static-resource.com flpqa.com flp.com flp360.social *.flpqa.com *.flp.com *.flp360.social *.clicksapp.net clicksapp.net *.s3.us-east-1.amazonaws.com *.clicktale.net *.chargebee.com *.authorize.net *.ppipe.net www.youtube.com *.oppwa.com *.s3-us-west-2.amazonaws.com *.myecheck.com *.googleapis.com *.flptitan.com foreverliving.com *.foreverliving.com *.flpi.com *.cloudflare.com *.bootstrapcdn.com *.s3.amazonaws.com *.dropbox.com *.nextsphere.com www.googletagmanager.com *.google-analytics.com blob: *.gstatic.com test.acaptureservices.com *.clicksafe.lloydstsb.com oppwa.com acaptureservices.com consent.cookiefirst.com dl.dropboxusercontent.com graph.microsoft.com static.zdassets.com js.live.net cdn.tiny.cloud *.paypal.com *.b-cdn.net ecpg-stage.ecpay.com.tw js.hs-scripts.com clickapp.net *.nexiopaysandbox.com *.tiny.cloud *.paypalobjects.com app.tlinky.com *.r2.dev widgets.trustedshops.com flp-service.zendesk.com applepay.cdn-apple.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.ecpay.com.tw *.livehelpnow.net *.adyen.com *.cookiefirst.com *.clicktale.net *.chargebee.com *.cdn.jsdelivr.net *.contentsquare.net *.content-square.fr *.contentsquare.com *.google-analytics.com *.nextsphere.com x-apple-ql-id *.s3-us-west-2.amazonaws.com *.ppipe.net *.typekit.net *.oppwa.com *.myecheck.com sp.tinymce.com *.tinymce.com cdn.tiny.cloud *.tiny.cloud *.acaptureservices.com *.flptitan.com *.foreverliving.com foreverliving.com *.flpi.com *.google.com fonts.googleapis.com cdnjs.cloudflare.com ecpg-stage.ecpay.com.tw oppwa.com *.s3.amazonaws.com maxcdn.bootstrapcdn.com *.r2.dev app.tlinky.com *.nexiopaysandbox.com *.nexiopay.com *.boxcdn.net googletagmanager.com cdn.honey.io 'unsafe-inline'; font-src 'self' applepay.cdn-apple.com *.cdn-apple.com *.ecpay.com.tw *.boxcdn.net *.cdn01.boxcdn.net *.nexiopay.com *.box.com *.cdn.jsdelivr.net *.cloudfront.net *.livehelpnow.net *.clicktale.net *.chargebee.com *.nextsphere.com *.ppipe.net *.contentsquare.net *.content-square.fr *.contentsquare.com *.typekit.net *.myecheck.com flpqa.com flp.com flp360.social *.flpqa.com *.flp.com *.flp360.social *.bootstrapcdn.com *.oppwa.com *.flptitanqa.com *.flptitan.com *.foreverliving.com foreverliving.com *.flpi.com ecpg-stage.ecpay.com.tw data: cdnjs.cloudflare.com fonts.gstatic.com *.b-cdn.net *.s3.amazonaws.com oppwa.com 'unsafe-inline'; connect-src 'self' applepay.cdn-apple.com *.cdn-apple.com wss://umd.userlike.com wss://chat.userlike.com *.nexiopay.com *.s3.us-east-2.amazonaws.com v2.zopim.com ekr. flp-service.zendesk.com *.1drv.com *.cloudfront.net *.cookiefirst.com *.adyen.com *.userlike.com *.box.com *.boxcloud.com api.ipify.org *.livehelpnow.net *.consensu.org *.vimeocdn.com cdn.tiny.cloud *.tiny.cloud *.contentsquare.net *.content-square.fr *.contentsquare.com *.sharethis.com *.googleapis.com www.google.com.sg stats.g.doubleclick.net www.facebook.com *.s3.us-west-2.amazonaws.com *.socialsales.io *.clicktale.net sp.tinymce.com *.tinymce.com *.nextsphere.com *.ppipe.net vimeo.com *.authorize.net *.myecheck.com *.oppwa.com *.flpi.com s3-us-west-2.amazonaws.com *.s3.amazonaws.com *.acaptureservices.com *.s3-us-west-2.amazonaws.com *.chargebee.com *.google.com oppwa.com *.mgipayments.com *.google-analytics.com www.googletagmanager.com graph.microsoft.com google.com *.worldpay.com *.zdassets.com *.trustedshops.com api.trustbadge.etrusted.com trustbadge.api.etrusted.com logging.trustbadge.com dl.dropboxusercontent.com *.google.co.in youtube.com *.boxcdn.net *.youtube.com wss://api.smooch.io *.s3-eu-west-1.amazonaws.com js.live.net connect.facebook.net js.hs-scripts.com *.gstatic.com clickapp.net cdn.jsdelivr.net static-resource.com cdn-javascript.net *.nexiopaysandbox.com *.flptitan.com ecpg-stage.ecpay.com.tw tile.openstreetmap.org *.basemaps.cartocdn.com flptitan.com *.r2.dev foreverliving.com app.tlinky.com vera-api.xyz *.fbo.flptitan.com *.foreverliving.com *.fbo.foreverliving.com www.dropbox.com *.ecpay.com.tw zendesk-eu.my.sentry.io data: blob:; media-src 'self' *.forever-giving.org *.boxcdn.net *.amazonaws.com *.userlike.com *.flptitan.com app.tlinky.com *.cloudfront.net *.youtube.com *.youtu.be *.foreverliving.com *.s3-us-west-2.amazonaws.com *.s3.us-west-2.amazonaws.com blob:; frame-src 'self' *.forever-giving.org forever-giving.org applepay.cdn-apple.com *.cdn-apple.com *.datatrans.com *.mfgroup.ch *.nexiopay.com *.ngenius-payments.com *.boxcdn.net *.flpqa.com *.userlike.com *.adyen.com *.amazonaws.com *.cloudfront.net *.facebook.com *.mgipayments.com *.livehelpnow.net *.sandbox.ngenius-payments.com *.acehubpaymentservices.com *.contentsquare.net *.content-square.fr *.contentsquare.com *.sharethis.com *.mgr.consensu.org walls.io *.chargebee.com x-apple-ql-id *.youtube.com *.ppipe.net *.socialsales.io socialsales.io *.worldpay.com *.nextsphere.com vimeo.com *.oppwa.com *.myecheck.com *.acaptureservices.com *.flptitan.com *.foreverliving.com *.clicksafe.lloydstsb.com foreverliving.com flptitan.com *.boxcloud.com *.flpi.com *.google.com *.vimeo.com oppwa.com dl.dropboxusercontent.com graph.microsoft.com acs-public.tp.mastercard.com content.googleapis.com *.nexiopaysandbox.com app.tlinky.com *.r2.dev youtu.be youtube.com www.googletagmanager.com *.cardinalcommerce.com; frame-ancestors 'self' *.socialsales.io socialsales.io *.nexiopay.com foreverliving.com *.foreverliving.com *.flptitan.com flptitan.com *.contentsquare.net *.flptitan.com:8080 *.content-square.fr *.contentsquare.com *.chargebee.com youtu.be app.tlinky.com flpqa.com flp.com flp360.social *.flpqa.com *.nexiopaysandbox.com *.boxcdn.net *.flp.com *.flp360.social vimeo.com *.vimeo.com *.youtube.com youtube.com *.worldpay.com 2 default-src 'unsafe-inline' 'unsafe-eval' https: data:; block-all-mixed-content; upgrade-insecure-requests 2 frame-ancestors 'self' acquia.lookbookhq.com acquia.docebosaas.com www.acquiaacademy.com acquia.seismic.com app.veertly.com widen--servcom.sandbox.my.site.com widen--sitepreview.na135.force.com community.widen.com acquia.atlassian.net rise.articulate.com www.drupal.org new.drupal.org; report-uri /report-csp-violation 2 base-uri 'none';frame-ancestors https://*.montecarlosbm.com;form-action 'self' javascript:; manifest-src 'self';default-src 'none';frame-src https:;style-src-elem https: 'unsafe-inline';script-src 'unsafe-eval';style-src https: 'unsafe-inline';script-src-elem https: 'unsafe-inline'; media-src blob:; img-src https: data:; font-src 'self' data: https:; worker-src 'self' blob:;connect-src * wss: https:; 2 default-src 'self' https:; connect-src https: wss:; font-src 'self' https: data:; frame-src 'self' https: data:; img-src 'self' https: data:; media-src 'self' https: blob:; object-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https: 'unsafe-inline' 2 frame-ancestors 'self' https://app.unbouncepreview.com https://app.unbounce.com https://learn.salfinc.com https://learn.self.inc; 2 default-src 'self'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; form-action 'self' https://*.hsforms.com https://*.hubspot.com https://forms.hsforms.com https://www.facebook.com; frame-ancestors 'self' https://*.hubspot.com https://*.shopware.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.gstatic.com https://ssl.google-analytics.com https://a.clarity.ms https://js.hs-scripts.com https://js.hsforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://js.hubspot.com https://js.hubspotfeedback.com https://*.usercentrics.eu https://connect.facebook.net https://sst.shopware.com https://static.oktopost.com https://okt.to https://bat.bing.com https://snap.licdn.com https://tracking.g2crowd.com https://cdn.dreamdata.cloud https://www.clarity.ms https://scripts.clarity.ms https://cdn.amplitude.com https://www.redditstatic.com https://capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.usercentrics.eu https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://*.usercentrics.eu; img-src 'self' data: blob: https:; media-src 'self' https: https://videos.ctfassets.net; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://*.hubspot.com https://forms.hubspot.com https://forms.hsforms.com https://share.hsforms.com https://meetings.hubspot.com https://*.usercentrics.eu https://player.simplecast.com https://sst.shopware.com https://www.googletagmanager.com https://www.facebook.com https://tv.shopware.com; connect-src 'self' https://api2.amplitude.com https://api.eu.amplitude.com https://sr-client-cfg.amplitude.com https://sr-client-cfg.eu.amplitude.com https://api-sr.eu.amplitude.com https://cdn.amplitude.com https://diagnostics.prod.us-west-2.amplitude.com https://diagnostics.prod.eu-central-1.amplitude.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://*.googleads.g.doubleclick.net https://*.doubleclick.net https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://i.ytimg.com https://s.ytimg.com https://cdn.contentful.com https://graphql.contentful.com https://images.ctfassets.net https://downloads.ctfassets.net https://wingify.com https://*.hubspot.com https://api.hsforms.com https://track.hubspot.com https://*.usercentrics.eu https://aggregator.service.usercentrics.eu https://privacy-proxy.usercentrics.eu https://*.pusher.com https://*.oktopost.com https://bat.bing.com https://snap.licdn.com https://tracking.g2crowd.com https://cdn.dreamdata.cloud https://www.clarity.ms https://scripts.clarity.ms https://alb.reddit.com https://www.reddit.com https://graph.facebook.com https://www.facebook.com wss: https:; worker-src 'self' blob:; child-src 'self' blob: https:; manifest-src 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.i.posthog.com https://plausible.io https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https://connect.craft.do https://connect.luki.io https://*.i.posthog.com https://plausible.io https://static.cloudflareinsights.com https://cloudflareinsights.com; font-src 'self' data:; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://*.craft.me https://*.lovable.app; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 2 frame-ancestors 'self' https://*.nd-aktuell.de https://*.nd-online.de https://*.warenform.de; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.abus.com https://www.youtube.com https://i.ytimg.com https://www.googletagmanager.com https://abus.containers.piwik.pro https://*.akstat.io https://abus.piwik.pro https://*.google-analytics.com https://connect.facebook.net https://www.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://service.excentos.com https://m.excentos.com https://image-scaler.excentos.com https://mycliplister.com https://*.mycliplister.com https://cdn.mycliplister.com https://letscast.fm https://*.letscast.fm https://*.hotjar.com https://*.hotjar.io https://vc.hotjar.io https://*.visualwebsiteoptimizer.com https://app.vwo.com https://useruploads.vwo.io https://cdn.walls.io https://my.walls.io https://abus-privacy.my.onetrust.com https://*.onetrust.io https://api.friendlycaptcha.com https://*.go-mpulse.net https://abusbr.pi-asp.de https://*.ryte.com https://snap.licdn.com https://cdn.eye-able.com data: blob: wss:; 2 connect-src 'self' https://vimeo.com https://s7g10.scene7.com https://track.adform.net https://unpkg.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://swedbankab.d3.sc.omtrdc.net *.swedbank.net https://dpm.demdex.net https://*.swedbank.se https://dpm.swedbank.se https://dpu.swedbank.se https://agent.nina-nuance.com/ https://www.swedbank.se https://swedbank.se https://enklafondhjalpen.swedbank.se https://agent-locator.nina-nuance.com https://agent-fp.nina-nuance.com https://swedbank.dfs.investis.com https://agent-ha.nina-nuance.com https://report.swedbank.glassboxdigital.io http://storybook-sb-9031-acorn-ui.apps.scp-west-zone02-z01.swedbank.net https://maps.googleapis.com/ https://www.google.com/ app.swedbank.test app.swedbank.se online.swedbank.se 2 frame-ancestors 'self' experience.adobe.com invescogroup.experiencecloud.adobe.com *.invesco.com *.invesco.net 2 worker-src 'self' blob: *.yousician.com yousician.com; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.yousician.com yousician.com analytics.tiktok.com assets.yousician.com bat.bing.com *.clarity.ms cdn-ukwest.onetrust.com connect.facebook.net fonts.googleapis.com fonts.gstatic.com p.typekit.net use.typekit.net www.google-analytics.com www.google.com www.google.fi tpc.googlesyndication.com pagead2.googlesyndication.com www.googletagmanager.com www.googleadservices.com unpkg.com ep2.adtrafficquality.google googleads.g.doubleclick.net https://*.ampproject.org https://www.youtube.com https://*.youtube.com https://s.axon.ai https://res4.applovin.com https://*.applovin.com https://accounts.google.com https://appleid.cdn-apple.com; 2 frame-ancestors home.siberianhealth.com; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *; img-src data: * ; frame-ancestors 'self'; form-action 'self' https://*.facebook.com https://*.azureedge.net https://*.dynamics.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.leonardo.com *.leonardocompany.com *.finmeccanica.com https://www.youtube.com https://cdn.jsdelivr.net https://*.walls.io https://walls.io https://consent.trustarc.com https://*.googletagmanager.com https://region1.google-analytics.com https://region1.analytics.google.com https://www.google-analytics.com https://*.usercentrics.eu https://assets.investisdigital.com https://maps.googleapis.com https://maps.gstatic.com; frame-ancestors 'self' *.leonardo.com *.leonardocompany.com; connect-src 'self' *.leonardo.com *.leonardocompany.com *.finmeccanica.com https://cdn.jsdelivr.net https://*.walls.io https://walls.io https://*.youtube.com https://*.usercentrics.eu https://consent.trustarc.com https://consent-pref.trustarc.com https://*.googletagmanager.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://www.google.it https://api.investisdigital.com https://assets.investisdigital.com https://maps.googleapis.com; img-src 'self' data: *.leonardo.com *.leonardocompany.com *.finmeccanica.com https://*.walls.io https://leonardo.canto.global https://*.googletagmanager.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.google-analytics.com https://consent.trustarc.com https://consent-pref.trustarc.com https://www.google.it https://*.google.com https://*.g.doubleclick.net https://maps.googleapis.com https://images.investisdigital.com https://assets.investisdigital.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.walls.io https://cdn.jsdelivr.net https://assets.investisdigital.com https://fonts-cdn.walls.io; font-src 'self' data: https://fonts.walls.io https://fonts-cdn.walls.io https://consent.trustarc.com https://fonts.gstatic.com; media-src 'self' https://*.canto.global https://*.cloudfront.net; frame-src 'self' https://*.walls.io https://*.usercentrics.eu https://consent.trustarc.com https://consent-pref.trustarc.com https://www.googletagmanager.com https://qfx.tools.investis.com https://syndication.teleborsa.it https://*.youtube.com; 2 default-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; connect-src * data: blob:; img-src * data: blob:; style-src * 'unsafe-inline' data: blob:; font-src * data: blob:; 2 default-src 'self' https://piwik.bzga.de/ https://shop.bioeg.de/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://youtu.be/ https://piwik.bzga.de/piwik.js https://eu.frcapi.com/; font-src 'self' data:; img-src 'self' data: https://*.typo3.org https://shop.bioeg.de/; script-src 'self' https://piwik.bzga.de/piwik.js; worker-src blob: 'self'; style-src 'self' 'unsafe-inline'; style-src-elem 'self'; connect-src 'self' https://eu.frcapi.com/ https://api.friendlycaptcha.eu/ https://api.friendlycaptcha.com/ https://piwik.bzga.de/piwik.js https://piwik.bzga.de/piwik.php; frame-src 'self' https://eu.frcapi.com/ https://www.youtube-nocookie.com/; frame-ancestors 'self' 2 frame-ancestors 'none'; report-uri https://prod-plk-csp-service.rbictg.com/csp; report-to csp-endpoint 2 frame-ancestors 'self' https://www.mscbook.com https://virtual-tours.msccruises.com; 2 frame-ancestors 'self' *.ramtrucks.com; 2 frame-ancestors 'self' https://*.plugshare.com *.google-analytics.com *.analytics.google.com 2 frame-ancestors 'self' https://support.turbovpn.com 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ytimg.com vimeo.com *.vimeo.com www.youtube.com www.google.com www.google.no assets.adobedtm.com sparebank1.d3.sc.omtrdc.net *.cicero.no *.sparebank1.no *.googletagmanager.com cdn.tt.omtrdc.net activitymap.adobe.com cdn.ontame.io; style-src 'self' 'unsafe-inline' *.sparebank1.no www.youtube.com services-test.cicero.no services.cicero.no translate.googleapis.com; img-src 'self' cache.kartverket.no *.sparebank1oa.no *.sb1ostlandet.no *.sb1sorost.no *.rhbank.no *.sb1.no *.sr-bank.no *.bank.no *.smn.no *.snn.no *.s1g.no *.sb1ls.no *.sb1sornorge.no *.unimicro.no *.unieconomy.no *.vimeocdn.com collector.ontame.io *.ytimg.com secure.adnxs.com track.adform.net *.doubleclick.net assets.adobedtm.com sparebank1.d3.sc.omtrdc.net alliansesamarbeidets.tt.omtrdc.net cm.everesttech.net www.facebook.com *.sparebank1.no *.boost.ai www.google.no www.google.com *.demdex.net www.googletagmanager.com www.gstatic.com data:; connect-src 'self' guide.kakadu.no marketplace-api.unieconomy.no *.cicero.no *.demdex.net *.omtrdc.net *.brreg.no *.sparebank1.no publish.ne.cision.com translate.googleapis.com edge.adobedc.net; font-src 'self' *.sparebank1.no services-test.cicero.no services.cicero.no data:; media-src 'self'; frame-ancestors 'self'; frame-src 'self' web103.reachmee.com kommunikasjon.ntb.no kunde.byggekamera.no newsweb.oslobors.no gateway.euronext.com www.podbean.com outlook.office365.com dev.app.kakadu.no www.kakadu.no snnfinans.no sdk.companywebcast.com candidate.hr-manager.net ir.oms.no channel.royalcast.com www.sr-finans.no *.sparebank1.no lt.morningstar.com www.youtube.com vimeo.com *.vimeo.com assets.adobedtm.com *.demdex.net sparebank1.demdex.net www.sign.nets.eu www.e-sign.nets.eu www.sb1finans.no www.snnfinans.no www.googletagmanager.com *.doubleclick.net www.ident.nets.eu www.sb1fo.no www.webcruiter.no *.easycruit.com sb1mobilbank://event www.sign-preprod1.nets.eu nam11.safelinks.protection.outlook.com nordmore.pameldingssystem.no players.brightcove.net agreeable-forest-0b9a11903.1.azurestaticapps.net activitymap.adobe.com pr.globenewswire.com signant.no; report-uri /logservlet/csp 2 frame-ancestors 'self' https://cx360.corp.ackodev.com https://cx360.corp.acko.com https://app.ola.riskcovry.com https://lead360.corp.ackodev.com https://lead360.corp.acko.com https://cmp.mygate.com https://uapp.kappa.mgmaglev.xyz https://cmp.env.mgmaglev.xyz https://app.mygate.com https://appnew.mygate.com https://apptest.mygate.com https://cx360v2.corp.ackodev.com https://cx360v2.corp.acko.com https://auto-policy-frontend-ui-master.internal.ackodev.com https://auto-policy-frontend.internal.live.acko.com https://*.ackodrive.com https://ackodrive.com https://lead-pre-sales-panel.corp.acko.com 2 frame-ancestors 'self';default-src https: data: 'unsafe-eval' 'unsafe-inline'; img-src * data:; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: code.createjs.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: www.csipiemonte.it i.scdn.co i.ytimg.com; font-src 'self' https: data:; connect-src 'self' https: open.spotify.com youtube.com google.com; media-src 'self' https: open.spotify.com youtube.com; frame-src 'self' https://open.spotify.com https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; 2 frame-ancestors 'self' https://*.quikr.com; frame-src 'self' https://*.doubleclick.net https://www.googletagmanager.com https://*.adtrafficquality.google https://*.safeframe.googlesyndication.com https://*.google.com https://www.youtube.com https://*.facebook.com https://www.googleadservices.com https://api.juspay.in https://sender.cleverwebserver.com https://*.clvrads.com https://console.googletagservices.com 2 default-src https://*.experimentation.dev *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.thernovotools.com *.thernovotools-preview.com dock.ui.bosch.tech *.hotjar.com wss://*.hotjar.com s096l072-hc-mwf-prd.app.intra bott-fs.nautilus bott-fs.kittelberger.net vc.hotjar.io in.hotjar.com script.hotjar.com *.bosch-thermotechnology.com *.boschtt-documents.com www.bimstore.co.uk *.kittelberger.net *.mycliplister.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: ; media-src blob: data: *.sprinklr.com *.boschtt-documents.com services.kittelberger.net *.mycliplister.com mycliplister.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' ; font-src *.sprinklr.com bott-fs.nautilus bott-fs.kittelberger.net script.hotjar.com fonts.gstatic.com *.bosch-thermotechnology.com www.bosch-thermotechnology.us www.heizung-steuern.com fonts.gstatic.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: data: ; object-src data: 'self'; img-src *.sprinklr.com track.securedvisit.com sv.bosch-homecomfort.com track.sv.rkdms.com images.securedvisit.com *.google-analytics.com *.googletagmanager.com *.kameleoon.eu *.kameleoon.com *.experimentation.dev s096l072-hc-mwf-prd.app.intra bott-fs.nautilus bott-fs.kittelberger.net optimize.google.com www.google-analytics.com www.googletagmanager.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: data: blob:; style-src 'unsafe-inline' *.sprinklr.com content.securedvisit.com bosch-tt.kittelberger.net bott-fs.nautilus bott-fs.kittelberger.net *.bosch-thermotechnology.com cdn.datatables.net optimize.google.com fonts.googleapis.com www.bosch-easycontrol.com www.heizung-steuern.com www.bosch-thermotechnology.us *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' 'unsafe-inline' https: ; script-src blob: *.sprinklr.com track.sv.rkdms.com content.securedvisit.com api.securedvisit.com *.google-analytics.com *.googletagmanager.com *.experimentation.dev *.kameleoon.io *.kameleoon.eu *.kameleoon.com bott-fs.nautilus bott-fs.kittelberger.net dock.ui.bosch.tech optimize.google.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: 'unsafe-inline' 'unsafe-eval'; frame-src *.sprinklr.com api.securedvisit.com dqm.crownpeak.com *.thernovotools.com *.thernovotools-preview.com mailto: bosch.mi4biz.net www.boschthermolife.com junkers-de-de-b.boschtt-documents.com optimize.google.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: blob:; frame-ancestors bosch.mi4biz.net bott-fs.kittelberger.net *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: ; connect-src 'self' blob: *.sprinklr.com wss://*.sprinklr.com public-eur.mkt.dynamics.com assets-eur.mkt.dynamics.com cxppusa1formui01cdnsa01-endpoint.azureedge.net *.google.de *.googleadservices.com widget.trustpilot.com track.securedvisit.com sv.bosch-homecomfort.com mplus-bosch.alo-tech.com activities.ttprivacy-preview.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.ecorebates.com googleads.g.doubleclick.net www.google.com *.experimentation.dev *.kameleoon.io *.kameleoon.eu *.kameleoon.com *.buderus.com *.googlesyndication.com event-tracking-services.global.commerce-connector.com fi-v2.global.commerce-connector.com fi-v2-configs.global.commerce-connector.com api-eu.global.commerce-connector.com www.facebook.com facebook.com wss://*.hotjar.com *.hotjar.io wss://endpoint.chatbot-suite.bosch.tech endpoint.chatbot-suite.bosch.tech www.bosch-thermotechnology.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.google-analytics.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com dock.ui.bosch.tech mycliplister.com *.mycliplister.com stats.g.doubleclick.net *.googleapis.com *.bosch-thermotechnology.com *.hotjar.com px.ads.linkedin.com bat.bing.net bat.bing.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.segment.com https://cdn.acsbapp.com https://www.gstatic.com https://platform.twitter.com https://js.hsforms.net https://js.hs-scripts.com https://js.hubspot.com https://js.hsadspixel.net https://js.hsleadflows.net https://js.hs-analytics.net https://www.google.com https://*.osano.com https://cmp.osano.com https://*.google-analytics.com https://*.hs-banner.com https://www.googletagmanager.com https://consensys.io https://prod.spline.design https://cdn.jsdelivr.net https://static.cloudflareinsights.com https://cdn.skypack.dev https://unpkg.com https://*.consensys.io https://www.youtube.com https://snap.licdn.com https://static.ads-twitter.com https://www.redditstatic.com https://static.hotjar.com https://connect.facebook.net https://vercel.live https://vercel.com; style-src 'self' 'unsafe-inline' https://*.osano.com https://www.googletagmanager.com https://fonts.googleapis.com https://consensys.io https://vercel.live; img-src 'self' blob: data: https://www.googletagmanager.com https://images.ctfassets.net https://downloads.ctfassets.net https://i.ytimg.com https://images.lumacdn.com https://forms-na1.hsforms.com https://px.ads.linkedin.com https://*.ads.linkedin.com https://pbs.twimg.com https://*.reddit.com https://t.co https://*.twitter.com https://analytics.twitter.com https://perf-na1.hsforms.com https://track.hubspot.com https://fonts.gstatic.com https://consensys.io https://app.spline.design https://googleads.g.doubleclick.net https://www.google.com https://www.google.fr https://snap.licdn.com https://*.ads-twitter.com https://static.ads-twitter.com https://*.hotjar.com https://static.hotjar.com https://*.facebook.com https://www.facebook.com https://vercel.live https://vercel.com https://*.pusher.com; font-src 'self' https://consensys.io https://fonts.gstatic.com https://vercel.live https://assets.vercel.com; connect-src 'self' blob: https://www.gstatic.com https://acsbapp.com https://*.acsbapp.com https://forms.hsforms.com https://forms-na1.hubspot.com https://forms.hubspot.com https://api.lu.ma https://tagassistant.google.com https://*.googletagmanager.com wss://*.googletagmanager.com https://api.segment.io https://cdn.segment.com https://price.api.cx.metamask.io https://account.api.cx.metamask.io https://px.ads.linkedin.com https://*.osano.com https://cmp.osano.com https://*.google-analytics.com https://www.google.com https://*.googleadservices.com https://*.google.fr https://js.hs-banner.com https://cta-service-cms2.hubspot.com https://*.reddit.com https://*.redditstatic.com https://api.hubspot.com https://api.hubapi.com https://prod.spline.design https://cdn.jsdelivr.net https://unpkg.com https://api.web3modal.org https://pulse.walletconnect.org https://vimeo.com https://snap.licdn.com https://*.ads-twitter.com https://static.ads-twitter.com https://*.hotjar.com https://static.hotjar.com https://*.facebook.com https://connect.facebook.net https://www.facebook.com https://vercel.live https://vercel.com https://*.pusher.com wss://*.pusher.com; frame-src 'self' https://platform.twitter.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://forms.hsforms.com https://*.osano.com https://www.googletagmanager.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://vercel.live https://vercel.com; worker-src 'self' blob: https://www.gstatic.com https://*.osano.com https://cmp.osano.com https://cdn.jsdelivr.net https://prod.spline.design; media-src 'self' https://video.twimg.com https://videos.ctfassets.net https://firebasestorage.googleapis.com https://assets.unicorn.studio; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hsforms.com; frame-ancestors 'self' https://app.contentful.com https://www.google.com; upgrade-insecure-requests 2 frame-ancestors 'self' http://plugins-cdn.datocms.com https://isabel-corporate-website.admin.datocms.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.hsforms.com https://*.hsforms.net https://*.hs-sites-eu1.com https://*.hubspot.com https://www.google.com https://www.recaptcha.net https://*.convertcalculator.com https://www.facebook.com https://16772608.fls.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hs-scripts.com https://js-eu1.hs-scripts.com https://*.hsadspixel.net https://*.cookielaw.org https://*.onetrust.com https://*.matomo.cloud https://*.clarity.ms https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://snap.licdn.com https://*.convertcalculator.com https://connect.facebook.net; connect-src 'self' https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hubapi.com https://*.hscollectedforms.net https://*.hsadspixel.net https://static.hsappstatic.net https://api-eu1.hubspot.com https://*.cookielaw.org https://*.onetrust.com https://*.matomo.cloud https://*.clarity.ms https://www.google.com https://*.licdn.com https://*.convertcalculator.com https://www.facebook.com https://connect.facebook.net https://px.ads.linkedin.com 2 frame-ancestors https://www.notion.so 2 'self' script-src https://ajax.googleapis.com/ajax/*; object-src 'self' 2 img-src *.sistrix.com *.sistrix.de *.sistrix.it *.sistrix.fr *.sistrix.es *.facebook.com *.linkedin.com *.ytimg.com secure.gravatar.com data: https: 'self'; style-src *.sistrix.com *.sistrix.de *.sistrix.it *.sistrix.fr *.sistrix.es *.vimeocdn.com *.vimeo.com data: https: 'unsafe-inline' 'self'; object-src *.sistrix.com *.sistrix.de *.sistrix.it *.sistrix.fr *.sistrix.es data: https: 'unsafe-inline' 'self'; script-src *.sistrix.com *.sistrix.de *.sistrix.it *.sistrix.fr *.sistrix.es data: https: 'unsafe-eval' 'unsafe-inline' 'self'; 2 frame-ancestors 'self' *.straumann.com *.nuvoimplants.com *.straumanngroup.com portfolio.neodent.com 2 frame-ancestors 'self' https://layout-cms.fox35orlando.com; 2 upgrade-insecure-requests; frame-ancestors 'self' dotroll.com *.dotroll.com 2 frame-ancestors 'self' *.interactivebrokers.com *.interactivebrokers.ca *.interactivebrokers.com.hk *.interactivebrokers.hk *.interactivebrokers.ch *.interactivebrokers.eu *.interactivebrokers.ie *.interactivebrokers.lu *.interactivebrokers.hu *.interactivebrokers.com.sg *.ibkr.com.sg *.interactivebrokers.ch *.interactivebrokers.co.uk *.interactivebrokers.com.au *.interactivebrokers.co.jp *.interactivebrokers.co.in *.ibkram.com IBKR.docebosaas.com *.interactiveadvisors.com *.ibkr.com *.ibkr.com.cn *.clientam.com *.youtube.com *.interactivebrokers.ie *.interactivebrokers.lu *.interactivebrokers.hu *.clientam.ch *.clientam.com.hk *.go-mpulse.net *.akstat.io impact.interactivebrokers.com *.ibkrcampus.com widgets.tipranks.com site.recognia.com *.portfolioanalyst.com portfolioanalyst.com www.portfolioanalyst.com www.interactivebrokers.com https://www.interactivebrokers.com/ *.doubleclick.net googleleads.g.doubleclick.net *.lynxbroker.com site.recognia.com ibkr.paxosclients.com worldtrader.hsbc.ae *.xstaging.tv *.ibkrcampus.com ibkrcampus.com *.ibkrguides.com ibkrcampusstg.wpenginepowered.com *.greenwichcompliance.com; 2 default-src 'self' 'unsafe-inline' player.podigee-cdn.net fonts.googleapis.com *.google.at *.google.de *.google.es *.google.ch *.google.com blob:; img-src 'self' cm.everesttech.net secure.gravatar.com i.ytimg.com *.google.at *.google.de *.google.es *.google.ch *.google.com *.axelspringer.com www.googletagmanager.com imgsct.cookiebot.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' player.podigee-cdn.net www.everestjs.net tags.tiqcdn.com cmp.axelspringer.com www.googletagmanager.com *.google.at *.google.de *.google.es *.google.ch *.google.com consentcdn.cookiebot.com www.googletagmanager.com consent.cookiebot.com ajax.googleapis.com blob:; font-src 'self' player.podigee-cdn.net fonts.gstatic.com data:; frame-ancestors www.axelspringer.com; frame-src open.spotify.com player.podigee-cdn.net www.axelspringer.com cmp.axelspringer.com resources-production.la.welt.de www.youtube.com axelspringerse.demdex.net *.google.at *.google.de *.google.es *.google.ch *.google.com www.googletagmanager.com embed.acast.com consentcdn.cookiebot.com blob:; connect-src 'self' as.axelspringer.com dpm.demdex.net cmp.axelspringer.com *.google.at *.google.de *.google.es *.google.ch *.google.com consentcdn.cookiebot.com *.google-analytics.com googleads.g.doubleclick.net 2 font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com https://www.mczbf.com https://www.emjcd.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com *.adyen.com c1.sfdcstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * https://www.mczbf.com https://www.emjcd.com *.meetanshi.com meetanshi.com https://plumrocket.com *.adyen.com *.weltpixel.com api.razorpay.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://www.mczbf.com https://www.emjcd.com https://firebasestorage.googleapis.com *.meetanshi.com meetanshi.com https://meetanshi.com/media/logo.png https://plumrocket.com *.adyen.com cdn.razorpay.com www.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://www.mczbf.com https://www.emjcd.com *.avada.io *.shopify.com *.meetanshi.com meetanshi.com https://quickheal.verloop.io checkout.razorpay.com cdn-ops.verloop.io bat.bing.com connect.facebook.net *.salesforceliveagent.com *.force.com *.salesforce.com *.salesforce-sites.com *.site.com *.gokwik.co *.jsdelivr.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://www.mczbf.com https://www.emjcd.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com *.adyen.com service.force.com *.salesforce-sites.com *.site.com *.gokwik.co *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn-ops.verloop.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com * https://www.mczbf.com https://www.emjcd.com https://get.geojs.io *.avada.io *.meetanshi.com meetanshi.com *.adyen.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.salesforceliveagent.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src *.adyen.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 object-src 'none'; img-src * data: blob:; default-src 'self' data: blob: https: *.sentry.io *.stripe.com *.clym.io https://*.hcaptcha.com wss://*.relay.crisp.chat; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' https://*.clym.io https://*.clym-sdk.net https://*.clym-widget.net; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.stripe.com apis.google.com *.clym.io *.clym-sdk.net *.clym-widget.net *.hcaptcha.com *.crisp.chat vercel.live *.googletagmanager.com *.facebook.net googleads.g.doubleclick.net *.ahrefs.com *.g2.com *.redditstatic.com *.licdn.com; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://consent.trustarc.com https://tags.srv.stackadapt.com https://apxl.io https://px.mountain.com https://dx.mountain.com https://*.vimeo.com https://*.buzzsprout.com https://*.turtl.co https://preview.ppd.com https://www.ppd.com https://cdn.propensity.com https://cdnjs.cloudflare.com https://connect.facebook.net https://cookie-cdn.cookiepro.com https://dev.visualwebsiteoptimizer.com https://players.brightcove.net https://script.hotjar.com https://snap.licdn.com https://static.addtoany.com https://static.hotjar.com https://tag.demandbase.com https://vjs.zencdn.net https://ws-assets.zoominfo.com https://*.clarity.ms https://*.googletagmanager.com https://*.google.com https://www.gstatic.com https://*.gstatic.com https://*.doubleclick.net https://*.google-analytics.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hsappstatic.net https://*.hubspot.com https://*.hsadspixel.net https://js.zi-scripts.com https://koi-3qnoj7ouly.marketingautomation.services https://www.redditstatic.com https://googleads.g.doubleclick.net blob:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://tags.srv.stackadapt.com https://*.turtl.co https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://apxl.io https://tags.srv.stackadapt.com https://www.redditstatic.com https://www.facebook.com https://yoast.com https://analytics.google.com https://analytics.propensity.com https://analytics.propensity-abm.com https://api.company-target.com wss://ws.hotjar.com https://*.hotjar.io https://*.hotjar.com https://api.hubapi.com https://cookie-cdn.cookiepro.com https://cta-service-cms2.hubspot.com https://dev.visualwebsiteoptimizer.com https://edge.api.brightcove.com https://fastly-signed-us-east-1-prod.brightcovecdn.com https://forms.hsforms.com https://geolocation.onetrust.com https://js.zi-scripts.com https://manifest.prod.boltdns.net https://pixel-config.reddit.com https://px.ads.linkedin.com https://tag-logger.demandbase.com https://ws.zoominfo.com https://segments.company-target.com https://*.clarity.ms https://*.googletagmanager.com https://*.google.com https://google.com https://*.doubleclick.net https://*.google-analytics.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://stats.g.doubleclick.net https://www.facebook.com https://*.hsappstatic.net; font-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.gstatic.com https://netdna.bootstrapcdn.com; frame-ancestors 'self' https://ppd.pathfactory.com https://explore.ppd-fsp.com; frame-src 'self' https://player.simplecast.com https://ppd.pathfactory.com https://explore.ppd-fsp.com https://*.vimeo.com https://*.buzzsprout.com https://*.visualwebsiteoptimizer.com https://app.hubspot.com https://*.turtl.co https://app-3qnoj7ouly.marketingautomation.services https://forms.hsforms.com https://forms.office.com https://players.brightcove.net https://s.company-target.com https://static.addtoany.com https://td.doubleclick.net https://*.googletagmanager.com https://*.google.com; img-src 'self' data: https://firepixels.net https://adpxls.com https://pxlscout.com https://srvpxl.com https://apxl.io https://ib.adnxs.com https://*.vimeocdn.com https://www.linkedin.com https://*.buzzsprout.com https://*.visualwebsiteoptimizer.com https://*.turtl.co https://www.ppd.com https://*.redditstatic.com https://*.sitescout.com https://www.facebook.com https://secure.gravatar.com https://alb.reddit.com https://cf-images.us-east-1.prod.boltdns.net https://clickserv.sitescout.com https://cookie-cdn.cookiepro.com https://dev.visualwebsiteoptimizer.com https://c.bing.com https://ppd.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://segments.company-target.com https://metrics.brightcove.com https://id.rlcdn.com https://*.hubspot.com https://*.hsforms.com https://*.googletagmanager.com https://*.google.com https://c.clarity.ms; manifest-src 'self'; media-src 'self' blob: data: https://*.brightcovecdn.com https://manifest.prod.boltdns.net https://*.ppd.com; worker-src 'self' blob: data: https://preview.ppd.com; 2 default-src 'self'; child-src https://notificacion.incibe-cert.es/; connect-src 'self' https://*.googleusercontent.com https://maps.googleapis.com https://*.flickr.com https://www.google-analytics.com/ https://stats.g.doubleclick.net https://*.google-analytics.com https://*.analytics.google.com; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com data:; frame-src 'self' https://*.incibe.es https://*.osi.es https://antibotnet.osi.es/ https://www.youtube.com https://www.vimeo.com https://*.vimeo.com https://www.google.com https://platform.twitter.com https://www.facebook.com https://syndication.twitter.com https://www.youtube-nocookie.com https://notificacion.incibe-cert.es/ https://player.flipsnack.com/; img-src 'self' https://i.ytimg.com/ https://www.facebook.com https://cdn.syndication.twimg.com https://*.twimg.com https://platform.twitter.com https://maps.gstatic.com https://maps.googleapis.com https://developers.google.com https://*.global.siteimproveanalytics.io https://live.staticflickr.com https://*.google-analytics.com data:; script-src 'self' 'unsafe-inline' https://siteimproveanalytics.com https://www.google.com https://www.gstatic.com https://*.facebook.net https://www.facebook.com https://*.twitter.com https://twitter.com https://*.flickr.com https://www.google-analytics.com https://www.googletagmanager.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://unpkg.com platform.twitter.com; script-src-elem 'self' 'unsafe-inline' https://siteimproveanalytics.com https://www.google.com https://www.gstatic.com https://*.facebook.net https://www.facebook.com https://*.twitter.com https://twitter.com https://*.flickr.com https://www.google-analytics.com https://www.googletagmanager.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://unpkg.com platform.twitter.com; style-src 'self' 'unsafe-inline' https://*.twimg.com https://platform.twitter.com https://fonts.googleapis.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-elem 'self' 'unsafe-inline' https://platform.twitter.com https://*.twimg.com https://fonts.googleapis.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; frame-ancestors 'self' https://*.incibe.es/ https://proxy.sni-des-publica.sni.dev.incibe.es/ 2 default-src * data: blob: 'unsafe-inline' 2 upgrade-insecure-requests; default-src 'self' *.argeweb.nl https://cdn.euc-freshbots.ai https://in.hotjar.com; style-src 'self' *.argeweb.nl 'unsafe-inline' yourhosting.freshchat.com https://cdn.euc-freshbots.ai https://code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css https://libraries.hund.io/ https://app.vwo.com/ https://fonts.googleapis.com https://*.google.com; img-src 'self' *.argeweb.nl data: https: https://jwpltx.com https://www.facebook.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googleadservices.com https://*.google.nl https://*.adnxs.com https://*.msn.com https://*.doubleclick.net https://ads.yahoo.com https://www.google-analytics.com https://*.openx.net https://*.bidswitch.net; script-src 'self' *.argeweb.nl data: 'unsafe-inline' 'unsafe-eval' *.puzzel.com yourhosting.freshchat.com https://cdn.euc-freshbots.ai https://code.jquery.com/jquery-1.12.4.js https://code.jquery.com/ui/1.12.1/jquery-ui.js https://libraries.hund.io/ https://heatmap.visualwebsiteoptimizer.com/ https://app.vwo.com/ https://dev.visualwebsiteoptimizer.com/ https://api.livechatinc.com/ https://cdn.livechatinc.com/ https://secure.livechatinc.com/ https://www.clickcease.com/monitor/stat.js https://snap.licdn.com https://embed.typeform.com https://www.chartjs.org https://www.google-analytics.com https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://www.linkedin.com/px/* https://px.ads.linkedin.com/ https://sjs.bizographics.com/insight.min.js https://script.hotjar.com https://*.jwpcdn.com https://static.hotjar.com https://www.google-analytics.com https://connect.facebook.net https://*.openx.net https://*.bidswitch.net https://www.googleadservices.com https://www.googletagmanager.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://flex.msn.com https://static.mailplus.nl https://m7.mailplus.nl https://bat.bing.com https://googleads.g.doubleclick.net; frame-src 'self' *.argeweb.nl *.hsforms.com yourhosting.freshchat.com https://app.vwo.com/ https://secure.livechatinc.com/ https://form.typeform.com/ https://awps01.argewebhosting.nl https://www.youtube.com https://argeweb.typeform.com https://vars.hotjar.com https://*.google.com https://*.facebook.com https://*.doubleclick.net https://*.googletagmanager.com; font-src 'self' data: *.argeweb.nl fonts.gstatic.com; child-src 'self' *.argeweb.nl https://*.google.com; connect-src 'self' *.analytics.google.com *.linkedin.com *.puzzel.com *.argeweb.nl argeweb.netwerkstatus.nl *.google-analytics.com https://rts-euc.freshworksapi.com wss://rts-euc.freshworksapi.com https://www.euc-freshbots.ai https://cdn.euc-freshbots.ai https://monitor.clickcease.com/ https://api.livechatinc.com/ https://ws9.hotjar.com/ wss://ws9.hotjar.com/ https://ws8.hotjar.com/ wss://ws8.hotjar.com/ https://awps01.argewebhosting.nl/netwerkstatus/test.php https://www.google-analytics.com https://stats.g.doubleclick.net https://app.convertflow.co https://ws2.hotjar.com wss://ws10.hotjar.com wss://ws3.hotjar.com wss://ws2.hotjar.com https://vc.hotjar.io wss://ws1.hotjar.com https://in.hotjar.com https://analytics.google.com; form-action https:; frame-ancestors 'self'; report-uri /debug/csp; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' chrome-extension: data: *.portland.gov *.ssl.fastly.net cdnjs.cloudflare.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net unpkg.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com fontlibrary.org use.fontawesome.com *.googleapis.com *.gstatic.com *.googleusercontent.com *.portlandoregon.gov *.portlandmaps.com *.arcgis.com server.arcgisonline.com *.openstreetmap.org *.opentopomap.org *.tiles.wmflabs.org *.loop11.com *.rawgit.com api.mapbox.com *.recollect.net coolingsearch.org cdn.ckeditor.com; frame-src 'self' https://www.youtube.com/embed/ https://player.vimeo.com https://www.google.com/maps/ https://www.portlandoregon.gov/ https://www.portlandmaps.com/ *.arcgis.com arcg.is https://online.tableau.com/ https://public.tableau.com/ *.recollect.net https://app.smartsheet.com/ https://publish.smartsheet.com/ https://app.rankedvote.co/ 2 frame-ancestors 'self' *.dkv.com *.erg.ravespace.cloud *.ergo-reiseversicherung.de *.ergo:* *.ergo.com:* *.ergo.de *.ergocarbon.com *.ergodirekt.de:*; report-uri https://csp-reporting.ergo.com/csp-reports?tenant=dospa; report-to csp-endpoint; 2 frame-ancestors 'self' https://platform.netmeds.tech 2 default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; style-src * 'unsafe-inline'; 2 frame-ancestors 'self' *.dodge.com; 2 base-uri 'self'; object-src 'none'; manifest-src 'none'; img-src 'self' www.google.com.ag www.google.vu www.google.gl stats.g.doubleclick.net px4.ads.linkedin.com www.linkedin.com info.fastspring.com embed-fastly.wistia.com translate.google.com s.w.org www.google.bf www.google.hr www.google.gy www.google.ht www.google.tt www.google.im www.google.tl www.google.is www.google.com.bz www.google.com.af www.google.je www.google.com.tj www.google.com.gi www.google.gg www.google.co.bw www.google.ad www.google.lu www.google.tm www.google.ne www.google.co.vi www.google.sc www.google.cv www.google.bt www.google.st www.google.cf www.google.bi www.google.cz www.google.ee www.google.ba www.google.cm www.google.mk www.google.ml www.google.gr www.google.sn www.google.co.mz www.google.ws www.google.cg www.google.sk www.google.com.pg www.google.lv www.google.com.fj uploads-ssl.webflow.com alb.reddit.com analytics.twitter.com b.6sc.co cdn.bizible.com cdn.bizibly.com cookie-cdn.cookiepro.com googleads.g.doubleclick.net px.ads.linkedin.com t.co www.facebook.com www.google.com www.googletagmanager.com fastspring.com ahrefs.com embed-ssl.wistia.com fast.wistia.com fonts.gstatic.com connect.facebook.net data: pagead2.googlesyndication.com www.googleadservices.com community.fastspring.com content.api.getguru.com secure.gravatar.com ct.capterra.com www.google.ae www.google.at www.google.be www.google.ca www.google.ch www.google.ci www.google.cl www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.ro www.google.la www.google.bg www.google.com.sl www.google.dz www.google.com.mm www.google.com.mt www.google.com.do www.google.co.ao www.google.mw www.google.mg www.google.mv www.google.co.ls www.google.al www.google.no www.google.com.bn www.google.com.bo www.google.kg www.google.rw www.google.tg www.google.bj www.google.gm www.google.bs www.google.ga www.google.td www.google.cd www.google.co.uz www.google.co.za www.google.co.zm www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.br www.google.com.co www.google.com.cy www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.uy www.google.com.vc www.google.com.vn www.google.de www.google.am www.google.az www.google.by www.google.co.cr www.google.co.zw www.google.com.gt www.google.com.pr www.google.dk www.google.lt www.google.md www.google.sr www.google.dj www.google.es www.google.fi www.google.fr www.google.ge www.google.hn www.google.hu www.google.ie www.google.iq www.google.it www.google.jo www.google.kz www.google.lk www.google.me www.google.mn www.google.mu www.google.nl www.google.pl www.google.pt www.google.rs www.google.se www.google.si www.google.tn; script-src-elem 'self' blob: js.chilipiper.com code.jquery.com marketo.clearbit.com yoast.com fastspring.com ajax.googleapis.com connect.facebook.net cookie-cdn.cookiepro.com fast.wistia.com munchkin.marketo.net script.hotjar.com static.hotjar.com www.google-analytics.com www.google.com www.googletagmanager.com cdn.bizible.com cdn1.leandata.com challenges.cloudflare.com googleads.g.doubleclick.net snap.licdn.com static.ads-twitter.com tag.clearbitscripts.com www.redditstatic.com x.clearbitjs.com j.6sc.co fastspring.ymeadows.com widget-static.ymeadows.com browser.sentry-cdn.com cdn.jsdelivr.net cdn.leandata.com go.fastspring.com www.gstatic.com 'unsafe-inline'; font-src 'self' fonts.gstatic.com fastspring.com data: fast.wistia.com use.typekit.net; frame-src blob: fastspring.com www.fastspring.com go.fastspring.com www.youtube.com challenges.cloudflare.com www.google.com www.facebook.com www.googletagmanager.com share.transistor.fm; style-src-elem 'self' use.typekit.net fastspring.com go.fastspring.com cdnjs.cloudflare.com fonts.googleapis.com www.gstatic.com 'unsafe-inline'; connect-src 'self' tag.clearbitscripts.com o4505518331658240.ingest.us.sentry.io analytics.google.com stats.g.doubleclick.net region1.analytics.google.com embed-fastly.wistia.com app.leandata.com translate.googleapis.com app.wistia.com translate-pa.googleapis.com fonts.googleapis.com cdn.bizibly.com widget-static.ymeadows.com uploads-ssl.webflow.com munchkin.marketo.net ajax.googleapis.com x.clearbitjs.com connect.facebook.net cdn.bizible.com challenges.cloudflare.com v0154cdjqw-3.algolianet.com fg8vvsvnieiv3ej16jby.litix.io ad.doubleclick.net v0154cdjqw-1.algolianet.com v0154cdjqw-2.algolianet.com o1101993.ingest.us.sentry.io api.nelioabtesting.com app.clearbit.com c.6sc.co cookie-cdn.cookiepro.com fastspring.com geolocation.onetrust.com ipv6.6sc.co pagead2.googlesyndication.com pixel-config.reddit.com privacyportal.cookiepro.com px.ads.linkedin.com www.facebook.com www.google-analytics.com www.google.com go.fastspring.com fastspring.ymeadows.com vc.hotjar.io analytics.twitter.com content.hotjar.io distillery.wistia.com embed-cloudfront.wistia.com fast.wistia.com metrics.hotjar.io pipedream.wistia.com www.googleadservices.com www.googletagmanager.com boards-api.greenhouse.io region1.google-analytics.com t.co v0154cdjqw-dsn.algolia.net 803-uzr-015.mktoresp.com 803-uzr-015.mktoutil.com googleads.g.doubleclick.net my.yoast.com wss://ws.hotjar.com; media-src 'self' blob: data: embed-cloudfront.wistia.com fast.wistia.com embed-ssl.wistia.com; script-src 'self' 'unsafe-eval' cdn1.leandata.com cdn.leandata.com www.gstatic.com www.google.com challenges.cloudflare.com j.6sc.co static.ads-twitter.com fastspring.ymeadows.com widget-static.ymeadows.com ajax.googleapis.com cdn.bizible.com go.fastspring.com munchkin.marketo.net www.google-analytics.com x.clearbitjs.com browser.sentry-cdn.com www.redditstatic.com cookie-cdn.cookiepro.com script.hotjar.com tag.clearbitscripts.com www.googletagmanager.com connect.facebook.net snap.licdn.com static.hotjar.com fastspring.com googleads.g.doubleclick.net 'unsafe-inline'; style-src 'self' 'unsafe-inline' go.fastspring.com www.gstatic.com fonts.googleapis.com; default-src 'self'; frame-ancestors 'self' login.fastspring.com; form-action 'self' www.facebook.com; worker-src 'self'; style-src-attr 'unsafe-inline'; script-src-attr 'unsafe-inline'; upgrade-insecure-requests; report-uri https://fastspring.report-uri.com/r/d/csp/enforce 2 frame-ancestors 'self' https://layout-cms.q13fox.com; 2 frame-ancestors 'self' https://layout-cms.fox29.com; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.blacknut.com *.blacknut.net *.blacknutlemag.com *.blacknut.biz *.google-analytics.com *.googletagmanager.com *.youtube.com *.googleapis.com *.stripe.com data: *.jsdelivr.net *.facebook.com *.facebook.net *.doubleclick.net *.google.com *.google.fr *.gouv.fr js.hs-scripts.com js.hs-analytics.net js.hscollectedforms.net js.hsadspixel.net *.hubspot.com *.hubapi.com *.google.ie *.googleadservices.com *.metaffiliation.com api.mixpanel.com ipinfo.io freegeoip.net marketing-image-production.s3.amazonaws.com fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.usemessages.com u360.d-bi.fr analytics.google.com *.google.com *.google.ie *.clarity.ms clarity.microsoft.com *.gstatic.com *.firebaseio.com *.taboola.com *.adnxs.com *.affilae.com *.hs-banner.com *.blacknut.biz *.api.sanity.io *.sanity.build s3.eu-west-1.amazonaws.com blacknut-prod-images.b-cdn.net blacknut-prod-videos.b-cdn.net *.ads-twitter.com 2 default-src 'self'; base-uri 'self'; object-src 'none'; img-src 'self' data: blob: https: https://imgsct.cookiebot.com; media-src 'self' data: blob: https://assets.contento.io; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://assets.calendly.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zyte.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://cct.google https://js.hs-scripts.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hs-banner.com https://js.hsforms.net https://js-eu1.hsforms.net https://*.hsforms.com https://*.hubspot.com https://bat.bing.com https://connect.facebook.net https://snap.licdn.com https://static.ads-twitter.com https://www.clickcease.com https://cdn.cr-relay.com https://cdn.bc0a.com https://www.clarity.ms https://rum-static.pingdom.net https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://widget.intercom.io https://js.intercomcdn.com https://app.intercom.io https://assets.calendly.com https://cdn.jsdelivr.net https://vercel.live https://cdn.platform.openai.com; connect-src 'self' https://*.zyte.com https://www.google.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://ixfd2-api.bc0a.com https://cdn.bc0a.com https://rum-collector-2.pingdom.net https://px.ads.linkedin.com https://www.clarity.ms https://*.clarity.ms https://static.hsappstatic.net https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://*.hubapi.com https://*.hsforms.com https://forms-eu1.hsforms.com https://*.hubspot.com https://*.intercom.io https://api-iam.intercom.io https://assets.calendly.com https://calendly.com https://cdn.jsdelivr.net https://vimeo.com https://featureassets.org https://prodregistryv2.org https://beyondwickedmapping.org https://statsigapi.net https://api.statsigcdn.com https://cloudflare-dns.com https://api.openai.com https://cdn.platform.openai.com wss://api.openai.com wss://*.intercom.io; frame-src 'self' https://*.zyte.com https://zytelabs.github.io/ https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://*.hubspot.com https://*.hsforms.com https://calendly.com https://vercel.live https://cdn.platform.openai.com https://zyte.privacy.saymine.io; form-action 'self' https://*.zyte.com https://*.hsforms.com https://*.hubspot.com https://zytelabs.github.io/; frame-ancestors 'self'; upgrade-insecure-requests 2 default-src 'self' osbasahpublisher-ac-europewest3.lfr.cloud ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.pstatic.net www.youtube.com js.usemessages.com js.ipredictive.com *.datadoghq-browser-agent.com *.hubspot.com *.ad-stir.com *.microad.jp *.im-apps.net s.yimg.jp analytics-js-cdn.liferay.com *.monsido.com ce.lijit.com *.clarity.ms view.ceros.com mc.yandex.ru www.gstatic.com www.google.com www.google.co.in www.otis.com liferaydev.otis.com liferayqa.otis.com liferayuat.otis.com geolocation.onetrust.com googleads.g.doubleclick.net heyotis.appspot.com js.hsforms.net *.opendns.com survey.survicate.com forms.hsforms.com fm.ipinyou.com stats.ipinyou.com www2-heyotis.snapengage.com stm-cdn.cn.miaozhen.com www.googleadservices.com console.e-bot7.de fm.ipinyou.com surveys-static.survicate.com www.googletagmanager.com cdn.cookielaw.org bat.bing.com omuscmslfrpcdn03.azureedge.net storage.googleapis.com bat.bing.com connect.facebook.net heyotis.appspot.com j.6sc.co js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hs-adspixel.net js.hsadspixel.net js.hs-leadflows.net omuscmslfrpcdn03.azureedge.net secure.loki8lave.com snap.licdn.com storage.googleapis.com www.google-analytics.com hm.baidu.com mc.yandex.ru assets.adobedtm.com wcs.naver.net *.doubleclick.net *.adobedtm.com stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' *.survicate.com www.googleadservices.com www.googletagmanager.com www.google.com www.google.co.in www.otis.com liferaydev.otis.com liferayqa.otis.com liferayuat.otis.com fonts.googleapis.com omuscmslfrpcdn03.azureedge.net stats.g.doubleclick.net googleads.g.doubleclick.net; object-src 'none'; base-uri 'self'; connect-src 'self' rum.browser-intake-datadoghq.com www.googleadservices.com www.googletagmanager.com *.naver.com *.datadoghq-browser-agent.com *.hubspot.com *.ad-stir.com *.microad.jp *.im-apps.net static.hsappstatic.net osbasahpublisher-ac-europewest3.lfr.cloud cdn.linkedin.oribi.io idx.liadm.com surveys-static.survicate.com analytics.google.com *.clarity.ms geolocation.onetrust.com www.clarity.ms b.clarity.ms f.clarity.ms mc.yandex.ru console.e-bot7.de www.google.com www.google.co.in www.facebook.com omuscmslfrpcdn03.azureedge.net www2-heyotis.snapengage.com privacyportal.onetrust.com www.otis.com liferaydev.otis.com liferayqa.otis.com liferayuat.otis.com forms.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com heyotis.appspot.com stm-collect.cn.miaozhen.com c.6sc.co respondent.survicate.com cdn.cookielaw.org api.hubapi.com bat.bing.com forms.hubspot.com secure.adnxs.com stats.g.doubleclick.net www.google-analytics.com pagead2.googlesyndication.com analytics-js-cdn.liferay.com ad.doubleclick.net googleads.g.doubleclick.net; font-src 'self' data: www.google.com www.google.co.in www.otis.com liferaydev.otis.com liferayqa.otis.com liferayuat.otis.com *.survicate.com omuscmslfrpcdn03.azureedge.net fonts.gstatic.com; frame-src 'self' otis-summer-map.armstrong.space app.hubspot.com *.ad-stir.com *.microad.jp *.im-apps.net www.youtube.com https://player.flipsnack.com https://*.zscalerthree.net www.googletagmanager.com td.doubleclick.net forms.monday.com ad.ipredictive.com forms.office.com service.otiselevator.com view.ceros.com mc.yandex.md players.brightcove.net console.e-bot7.de js.hsforms.net www.facebook.com www.google.com www.google.co.in www.gstatic.com www.otis.com liferaydev.otis.com liferayqa.otis.com liferayuat.otis.com forms.hsforms.com *.fls.doubleclick.net ; img-src 'self' https: http: data: www.googleadservices.com stats.g.doubleclick.net googleads.g.doubleclick.net www.google.com www.google.co.in www.googletagmanager.com; media-src 'self' www2-heyotis.snapengage.com www.google.com www.google.co.in www.otis.com liferaydev.otis.com liferayqa.otis.com liferayuat.otis.com heyotis.appspot.com omuscmslfrpcdn03.azureedge.net ; worker-src 'self' blob: www.otis.com liferaydev.otis.com liferayqa.otis.com liferayuat.otis.com; 2 default-src 'self' https://consent.badoo.com; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-f49o5VkNZzQbWJevX7kFtg==' badoocdn.com *.badoocdn.com https://consent.badoo.com https://*.googletagmanager.com https://tr.snapchat.com https://tr-shadow.snapchat.com; style-src 'self' 'unsafe-inline'; connect-src 'self' *.badoo.com *.badoo.eu *.badoo.us https://consent.badoo.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://tr.snapchat.com https://tr-shadow.snapchat.com https://*.sentry.io; child-src 'self' blob:; font-src * data:; manifest-src 'self'; base-uri 'self'; frame-src * bds: bdp:; img-src * data: blob:; media-src * data: blob:; report-uri /jss/csp_report.phtml?token=badoo_homepage&env=production; upgrade-insecure-requests; 2 default-src 'self' https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: 'wasm-unsafe-eval'; worker-src blob:; child-src blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' fonts.gstatic.com data: https:; img-src 'self' data: https: blob:; media-src 'self' video.tesa.com *.youtube.com *.zohocdn.com static.zdassets.com aifanfan.baidu.com; connect-src 'self' https: blob: wss://*.hotjar.com wss://*.zohopublic.eu wss://*.zopim.com; frame-ancestors 'none' 2 frame-ancestors 'self' https://layout-cms.fox26houston.com; 2 default-src 'self'; base-uri 'self'; img-src * data: 'unsafe-inline'; style-src * 'unsafe-inline'; script-src * data: 'unsafe-inline' 'unsafe-eval'; font-src 'self' thyssenkrupp.com *.thyssenkrupp.com *.recruitmentplatform.com *.bootstrapcdn.com; connect-src *; frame-ancestors 'self'; frame-src *; media-src * blob:; object-src * data: 'unsafe-eval'; worker-src blob: 2 img-src 'self' *.commercecloud.salesforce.com *.mobify-storefront.com data: *.doubleclick.net *.collect.igodigital.com ct.pinterest.com ib.adnxs.com images.ctfassets.net *.images.ctfassets.net p.yotpo.com zoundindustries--int.sandbox.my.site.com zoundindustries--int.sandbox.my.salesforce-scrt.com zoundindustries.my.salesforce.com zoundindustries.my.site.com zoundindustries.my.salesforce-scrt.com yotpo-editor-production.s3.amazonaws.com marshallheadphones-development.improove.tv marshallheadphones-ondemand02.improove.tv *.gstatic.com *.analytics.google.com *.google-analytics.com www.googletagmanager.com www.google.com maps.googleapis.com maps.google.com *.staging-marshall.com *.qa-marshall.com *.marshall.com i.ytimg.com i.vimeocdn.com *.facebook.com www.mczbf.com *.hotjar.com idsync.rlcdn.com ade.googlesyndication.com www.googleadservices.com *.google.com googleads.g.doubleclick.net services.sheerid.com *.usercentrics.eu api.usercentrics.eu app.usercentrics.eu eclubcdntest.blob.core.windows.net cdn.voyado.com *.clarity.ms services.postcodeanywhere.co.uk *.paypal.com *.paypalobjects.com *.venmo.com data:;media-src assets.ctfassets.net *.assets.ctfassets.net *.akamaized.net player.vimeo.com *.vimeocdn.com download-video-ak.vimeocdn.com *.usercentrics.eu api.usercentrics.eu app.usercentrics.eu;script-src 'self' 'unsafe-inline' blob: storage.googleapis.com www.googletagmanager.com action.dstillery.com s.pinimg.com connect.facebook.net acdn.adnxs.com static.hotjar.com 100016846.collect.igodigital.com js.adsrvr.org analytics.tiktok.com www.google-analytics.com action.media6degrees.com *.pingdom.net api.cquotient.com staticw2.yotpo.com widgetsrepository.yotpo.com cdn-widgetsrepository.yotpo.com maps.googleapis.com player.vimeo.com *.youtube.com/ *.youtube-nocookie.com/ *.my.salesforce.com service.force.com *.salesforceliveagent.com *.my.site.com static.lightning.force.com www.google.com www.gstatic.com zoundindustries.my.site.com zoundindustries.my.salesforce-scrt.com zoundindustries--int.sandbox.my.site.com zoundindustries--int.sandbox.my.salesforce-scrt.com connect.facebook.net www.mczbf.com *.hotjar.com cdn.jsdelivr.net assets.voyado.com js.klarna.com static.redeal.se static.onsite.voyado.com *.engage-x.io *.usercentrics.eu api.usercentrics.eu app.usercentrics.eu web.cmp.usercentrics.eu members.cj.com track.marshall.com api.onsite js.playground.klarna.com *.ada.support *.eu.ada.support googleads.g.doubleclick.net js.playground.klarna.com www.clarity.ms scripts.clarity.ms api.addressy.com *.addressy.com static.cloudflareinsights.com *.paypal.com *.paypalobjects.com *.venmo.com 'unsafe-inline';script-src-attr 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline' https: staticw2.yotpo.com *.hotjar.com cdn.jsdelivr.net *.usercentrics.eu api.usercentrics.eu app.usercentrics.eu api.addressy.com *.addressy.com static.cloudflareinsights.com *.paypal.com *.paypalobjects.com *.venmo.com 'unsafe-inline';connect-src 'self' api.cquotient.com *.doubleclick.net *.analytics.google.com analytics.google.com *.google-analytics.com www.google-analytics.com www.googletagmanager.com analytics.tiktok.com ct.pinterest.com *.pingdom.net preview.contentful.com cdn.contentful.com staticw2.yotpo.com api.yotpo.com api-cdn.yotpo.com maps.googleapis.com geolocation.onetrust.com webto.salesforce.com test.salesforce.com *.my.site.com zoundindustries.my.site.com zoundindustries.my.salesforce-scrt.com vimeo.com/ *.googlesyndication.com www.google.com server-side-tagging-iglp74couq-uc.a.run.app/ zoundindustries--int.sandbox.my.site.com zoundindustries--int.sandbox.my.salesforce-scrt.com *.hotjar.com *.hotjar.io connect.facebook.net *.facebook.com www.mczbf.com wss://*.hotjar.com eu.klarnaevt.com js.klarna.com/ *.voyado.com *.engage-x.io *.usercentrics.eu api.usercentrics.eu app.usercentrics.eu adservice.google.com www.googleadservices.com js.playground.klarna.com track.marshall.com *.ada.support *.eu.ada.support *.clarity.ms api.addressy.com *.addressy.com services.postcodeanywhere.co.uk static.redeal.se *.paypal.com *.paypalobjects.com *.venmo.com;frame-src 'self' *.doubleclick.net insight.adsrvr.org ct.pinterest.com/ player.vimeo.com/ *.youtube.com/ *.youtube-nocookie.com/ *.spotify.com/ *.my.salesforce.com www.google.com www.googletagmanager.com *.facebook.com zoundindustries--int.sandbox.my.site.com zoundindustries--int.sandbox.my.salesforce-scrt.com zoundindustries.my.site.com zoundindustries.my.salesforce-scrt.com services.sheerid.com js.klarna.com/ https://osm.klarnaservices.com/learn-more/index.html marshall-prod.sitestorage.se static.onsite.voyado.com *.usercentrics.eu api.usercentrics.eu app.usercentrics.eu track.marshall.com *.ada.support *.eu.ada.support *.paypal.com *.paypalobjects.com *.venmo.com;frame-ancestors *.contentful.com *.ada.support *.eu.ada.support;upgrade-insecure-requests;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none' 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.mediasetinfinity.es; 2 default-src 'self' *.antwerpen.be undefined;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self' perceleninfoplatform-o.antwerpen.be perceleninfoplatform-a.antwerpen.be perceleninfoplatform.antwerpen.be;img-src 'self' *.antwerpen.be *.clarity.ms *.google-analytics.com acpaasui.s3.amazonaws.com ad.doubleclick.net clarity.ms data: geo.api.vlaanderen.be googleads.g.doubleclick.net server.arcgisonline.com tiles.arcgis.com www.google.com ytimg.com;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.antwerpen.be www.google-analytics.com www.googletagmanager.com googlesyndication.com *.googlesyndication.com facebook.com *.facebook.com *.facebook.net instagram.com *.instagram.com soundcloud.com *.soundcloud.com spotify.com *.spotify.com tiktok.com https://sf16-website-login.neutral.ttwstatic.com *.tiktok.com twitframe.com *.twitter.com vimeo.com *.vimeo.com youtube.com *.youtube.com https://cdn.antwerpen.be/mtn/5.3.3/metanav.min.js enquete.agconsult.com *.enquete.agconsult.com clarity.ms *.clarity.ms hotjar.com *.hotjar.com;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests;connect-src 'self' *.antwerpen.be *.google-analytics.com *.clarity.ms acpaasui.s3.amazonaws.com ad.doubleclick.net clarity.ms googleads.g.doubleclick.net perceleninfoplatform-a.antwerpen.be perceleninfoplatform-o.antwerpen.be perceleninfoplatform.antwerpen.be soundcloud.com vimeo.com www.google.be www.google.com;frame-src 'self' 10655204.fls.doubleclick.net facebook.com *.facebook.com googletagmanager.com *.googletagmanager.com instagram.com *.instagram.com soundcloud.com *.soundcloud.com spotify.com *.spotify.com tiktok.com *.tiktok.com twitframe.com *.twitter.com vimeo.com *.vimeo.com youtube.com *.youtube.com survey.alchemer.eu 2 default-src * 'unsafe-inline' 'unsafe-eval' data:; img-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' https://a.cms.omniupdate.com; 2 script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.golfgalaxy.com golfgalaxy2.btttag.com *.dickssportinggoods.com *.cardinalcommerce.com *.akamaihd.net *.scene7.com app.link *.bazaarvoice.com *.radar.com *.googleapis.com *.certona.net *.certona.com res-x.com *.attn.tv *.res-x.com maxcdn.bootstrapcdn.com *.go-mpulse.net akstat.io h.online-metrix.net tags.tiqcdn.com s.pinimg.com a.wishabi.com analytics.twitter.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com bat.bing.com beacon.riskified.com *.branch.io qognvtzku-x.global.ssl.fastly.net ciunnwhq.micpn.com connect.facebook.net ct.pinterest.com utt.impactcdn.com d2oh4tlt9mrke9.cloudfront.net dickssportinggoods.demdex.net dicks-sporting-goods.pxf.io dpm.demdex.net *.tt.omtrdc.net dsg2.btttag.com e.dickssportinggoods.com edge1.certona.net f.wishabi.net gateway.dcsg.com *.getmetrical.com img.riskified.com match.adsrvr.org *.kampyle.com *.nextdoor.com network.bazaarvoice.com network-a.bazaarvoice.com pinterest.adsymptotic.com pixel.rubiconproject.com pixel.tapad.com r.dlx.addthis.com sc-static.net smetrics.dickssportinggoods.com snap.adsrvr.org so.rlcdn.com static.ads-twitter.com t.co tr.snapchat.com www.facebook.com www.googletagmanager.com www.hlserve.com www.res-x.com x.skimresources.com *.criteo.com cdn.hlserve.com b.hlserve.com www.google.com *.g.doubleclick.net *.googlesyndication.com adservice.google.com c.riskified.com www.googleadservices.com dsg2m.btttag.com www.google-analytics.com cdnjs.cloudflare.com *.cloudfront.net *.iesnare.com code.jquery.com www.paymentjs.firstdata.com www.gstatic.com www.everestjs.net *.braintreegateway.com www.paypal.com *.paypalobjects.com tagtracking.vibescm.com cdn.auth0.com polyfill.io cdn.tagdelivery.com *.truefitcorp.com *.affirm.com *.afterpay.com *.hlserve.com *.anyguide.com resources.digital-cloud.medallia.com *.anyroad.com checkoutshopper-live.adyen.com *.stylitics.com prod.accdab.net *.cdn-net.com *.syndigo.com *.zoovu.com *.curalate.com assets-barracuda-runner.azureedge.net *.liveperson.net *.lpsnmedia.net *.adoberesources.net *.adobedc.net *.attn.tv analytics.tiktok.com *.quantummetric.com *.bambuser.com *.mycustomizer.com *.flippenterprise.net *.collectivevoice.com ln-rules.rewardstyle.com accounts.google.com *.monetate.net creatives.attn.tv *.monetate.net ep2.adtrafficquality.google mczbf.com sjwoe.com cj.dotomi.com emjcd.com idsync.rlcdn.com *.mczbf.com *.cj.com *.tnapplications.com *.minionplatform.com *.jebbit.com blob:; worker-src *.golfgalaxy.com *.dickssportinggoods.com *.techlab-cdn.com blob:; frame-ancestors *.golfgalaxy.com *.dickssportinggoods.com *.tt.omtrdc.net; child-src *.golfgalaxy.com *.dickssportinggoods.com *.quantummetric.com *.adyen.com *.afterpay.com *.paypal.com *.paypalobjects.com *.cj.com *.cardinalcommerce.com *.liveperson.net *.lpsnmedia.net dickssportinggoods.demdex.net *.criteo.com *.criteo.net *.minionplatform.com maps.google.com hosted.where2getit.com mobile.where2getit.com fit.dksxchange.com www.thinglink.com dicks-cti.gvcommerce.com www.youtube.com *.truefitcorp.com *.affirm.com *.g.doubleclick.net *.pinterest.com *.googleapis.com tr.snapchat.com resources.digital-cloud.medallia.com *.hlserve.com *.facebook.com static.ads-twitter.com *.tagdelivery.com *.fls.doubleclick.net prod.accdab.net www.cdn-net.com *.doubleclick.net *.googlesyndication.com *.safeframe.googlesyndication.com www.google.com accounts.google.com *.anyroad.com *.mycustomizer.com *.collectivevoice.com ln-rules.rewardstyle.com display.ugc.bazaarvoice.com api.bazaarvoice.com *.bazaarvoice.com *.bambuser.com golfgalaxy-cti.gvcommerce.com creatives.attn.tv *.tt.omtrdc.net *.monetate.net www.googletagmanager.com ep2.adtrafficquality.google *.techlab-cdn.com blob:; 2 img-src hm.vostok.zone35.net *.b-ite.com *.hm.edu flockler.com fl-1.cdn.flockler.com social-proxy.flocklr.com media-api.flockler.com media.licdn.com cloud.ccm19.de *.cdninstagram.com *.xx.fbcdn.net 'self' data:; font-src *.assisto.beranet.de formulare.hm.edu formulare-test.hm.edu assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu data:; script-src *.assisto.beranet.de *.b-ite.com plugins.flockler.com matomo.hm.edu assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu cloud.ccm19.de 'unsafe-inline'; script-src-elem *.assisto.beranet.de *.b-ite.com plugins.flockler.com matomo.hm.edu formulare.hm.edu formulare-test.hm.edu assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu cloud.ccm19.de 'unsafe-inline' 'self'; script-src-attr 'unsafe-inline'; connect-src wss://hm.vostok.zone35.net cdn.jsdelivr.net hm.vostok.zone35.net *.beranet.de hm-edu-search-api.e-spirit.cloud *.b-ite.com stats-api.flockler.app api.flockler.app *.hm.edu cloud.ccm19.de matomo.hm.edu; style-src *.assisto.beranet.de *.b-ite.com assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu cloud.ccm19.de 'unsafe-inline'; style-src-elem *.assisto.beranet.de *.b-ite.com formulare.hm.edu formulare-test.hm.edu mediapool.hm.edu mediapool-prem.hm.edu assets.hm.edu cloud.ccm19.de 'unsafe-inline'; style-src-attr 'unsafe-inline'; default-src 'self' matomo.hm.edu search.hm.edu formulare.hm.edu formulare-test.hm.edu cloud.ccm19.de assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu 'unsafe-inline'; media-src 'self' dms.licdn.com media-api.flockler.com data:; frame-src 'self' cloud.ccm19.de mstream.hm.edu video.hm.edu www.youtube.com www.youtube-nocookie.com media-api.flockler.com *.cloudflarestream.com; child-src 'self'; frame-ancestors 'none'; base-uri 'self'; worker-src 'none'; manifest-src 'none'; report-to https://sentry.hm.edu/api/9/security/?sentry_key=3d6f839d908181cf6622e6f584d2efe3; report-uri https://sentry.hm.edu/api/9/security/?sentry_key=3d6f839d908181cf6622e6f584d2efe3; 2 default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https: https://was-nam-us-prd-bhapi.azurewebsites.net wss://*.qualified.com wss://directline.botframework.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://bhgateway.azurewebsites.net; font-src 'self' https:; frame-ancestors 'self' https; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://developers.kakao.com https://t1.kakaocdn.net https://unpkg.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://det86k4hnp18e.cloudfront.net; img-src 'self' data: https: blob:; media-src 'self' https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://unpkg.com https://cdn.jsdelivr.net https://renewal-hr-applicant-fileupload.s3.ap-northeast-2.amazonaws.com; frame-src 'self' https://www.youtube.com https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; worker-src 'self' blob: data:; child-src 'self' blob: data: 2 frame-ancestors 'self' https://victorinox.studio.frontend.commercetools.com https://victorinox.my.site.com https://victorinox.lightning.force.com ; default-src 'self' ; media-src 'self' data: *.victorinox.com *.swissarmy.com *.wenger.ch static.zdassets.com https://*.cdn.imgeng.in; frame-src 'self' https: mailto: tel: assets.bounceexchange.com dash.bounceexchange.com dash-staging.bounceexchange.com https://victorinox.my.site.com https://victorinox.lightning.force.com https://dem.mysingleromance.com https://euob.greencolumnart.com https://obseu.greencolumnart.com; worker-src 'self' blob: ; child-src 'self' blob: *.victorinox.com *.swissarmy.com *.wenger.ch *.tangiblee.com *.photorank.me *.pinterest.com https://web.facebook.com https://fbsbx.com https://*.google.com https://www.youtube.com https://www.facebook.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://emersya.com/ https://www.pinterest.com https://www.pinterest.co.uk https://www.pinterest.ch https://www.pinterest.de https://www.pinterest.fr https://www.pinterest.it https://www.pinterest.at https://www.pinterest.se https://www.pinterest.ru https://www.pinterest.ie https://secure.img-cdn.mediaplex.com *.fls.doubleclick.net *.doubleclick.net vars.hotjar.com victorinox-fr-affiliate-programme.sjv.io player.vimeo.com assets.bounceexchange.com assets.bounceexchange.com; img-src 'self' data: https: https://api.qrserver.com *.abtasty.com *.amazonaws.com https://cdn.optimizely.com assets.bounceexchange.com events.bouncex.net https://*.cdn.imgeng.in; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.victorinox.com *.swissarmy.com *.wenger.ch *.paypalobjects.com *.cloudfront.net *.cdn4.forter.com *.baidu.com *.onetrust.com *.getback.ch *.taboola.com *.yahoo.co.jp *.bazaarvoice.com *.cdn77.org *.zoovu.com *.tangiblee.com *.contentsquare.com *.zopim.com *.bdimg.com maps.google.com load.sumome.com load.sumo.com https://*.googletagmanager.com https://*.google-analytics.com www.googleadservices.com www.sc.pages03.net static.hotjar.com tag.wknd.ai assets.bounceexchange.com api.bounceexchange.com dev.bounceexchange.com tag.bounceexchange.com dash-staging.bounceexchange.com bat.bing.com snap.licdn.com t.contentsquare.net contentsquare.com static.ads-twitter.com analytics.tiktok.com analytics.twitter.com platform.twitter.com script.hotjar.com googleads.g.doubleclick.net s.yimg.jp px.adhigh.net assets.zendesk.com intljs.rmtag.com static.zdassets.com ut.rd.linksynergy.com br-victorinox.netmng.com tags.srv.stackadapt.com d.impactradius-event.com s.pinimg.com cdn.tangiblee.com cscoreproweustor.blob.core.windows.net js.monitor.azure.com api.channelsight.com cdn.channelsight.com https://widget.channelsight.com *.klaviyo.com emersya.com cdn.emersya.com cdn.brcdn.com f.monetate.net se.monetate.net cdn.cookielaw.org cdn.jsdelivr.net cdnjs.cloudflare.com maps.googleapis.com photorankstatics-a.akamaihd.net https://*.google.com www.paypal.com www.gstatic.com www.gstatic.cn www.dwin1.com connect.facebook.net openpay.s3.amazonaws.com swissarmy.cardconnect.com:* vx.local:* *.clarity.ms *.openpay.mx *.googlesyndication.com https://services.postcodeanywhere.co.uk *.sprinklr.com https://rum-static.pingdom.net https://rum-collector-2.pingdom.net *.teads.tv www.googleoptimize.com https://eubroken.mysingleromance.com https://dem.mysingleromance.com https://euob.greencolumnart.com https://obseu.greencolumnart.com *.rakuten.com *.linksynergy.com *.xg4ken.com *.nxtck.com *.leadsrx.com *.dash-staging.bounceexchange.com *.dash.bounceexchange.com https://checkoutshopper-test.adyen.com https://live.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-us.adyen.com https://applepay.cdn-apple.com https://contest.victorinox.com https://view.juneapp.com https://unpkg.com *.google-analytics.com *.netlify.app *.netlify.com https://emea02-nonprod.cluster.observability.cloud.sap:9999 *.youtube.com https://emea01.cluster.observability.cloud.sap:9999 https://victorinox-swiss-army.locally.com *.abtasty.com *.googleapis.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https://*.affirm.com https://*.friendlycaptcha.com https://mpsnare.iesnare.com https://victorinox--uat.sandbox.my.site.com https://victorinox--uat.sandbox.lightning.force.com/ https://victorinox--uat.sandbox.my.salesforce-scrt.com https://victorinox.my.site.com https://victorinox.my.salesforce-scrt.com https://storage.emersya.com https://io.fusedeck.net https://*.collect.igodigital.com tag.wknd.ai tag.bounceexchange.com assets.bounceexchange.com api.bounceexchange.com dash.bounceexchange.com dash-staging.bounceexchange.com; font-src 'self' data: *.victorinox.com *.swissarmy.com *.wenger.ch *.hotjar.com *.cdn77.org *.cloudfront.net *.tangiblee.com olapic-data.s3.amazonaws.com photorankstatics-a.akamaihd.net fonts.gstatic.com emersya.com cdn.emersya.com fast.fonts.net cdnjs.cloudflare.com cdn.megabonus.com static3.avast.com cdn.honey.io netdna.bootstrapcdn.com assets.bounceexchange.com *.sprinklr.com *.channelsight.com *.abtasty.com *.gstatic.com *.googleapis.com assets.bounceexchange.com; form-action 'self' https: api.bounceexchange.com; connect-src 'self' ws: wss: *.victorinox.com *.swissarmy.com *.wenger.ch *.forter.com *.klaviyo.com *.amazonaws.com *.onetrust.com *.paypal.com *.paypalobjects.com *.openpay.mx *.taboola.com *.victorinox.com *.tangiblee.com *.contentsquare.net *.contentsquare.com *.bazaarvoice.com *.getback.ch *.hotjar.com *.zoovu.com *.facebook.com https://*.google.com *.instagram.com sumo.com api.openweathermap.org https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com emersya.com cdn.emersya.com ws.emersya.com cdn.cookielaw.org d2o5idwacg3gyw.cloudfront.net photorankstatics-a.akamaihd.net photorankapi-a.akamaihd.net https://*.g.doubleclick.net https://ad.doubleclick.net analytics.tiktok.com ekr.zdassets.com swissarmy.zendesk.com widget-mediator.zopim.com bat.bing.com px.adhigh.net hm.baidu.com tags.srv.stackadapt.com ct.pinterest.com api.channelsight.com https://widget.channelsight.com dc.services.visualstudio.com vc.hotjar.io victorinox-fr-affiliate-programme.sjv.io events.bouncex.net coupons.bounceexchange.com *.cdnwidget.com *.cdnbasket.net maps.googleapis.com *.clarity.ms https://services.postcodeanywhere.co.uk https://api.addressy.com *.sprinklr.com https://rum-static.pingdom.net https://rum-collector-2.pingdom.net *.teads.tv https://dem.mysingleromance.com https://euob.greencolumnart.com https://obseu.greencolumnart.com cdn.linkedin.oribi.io https://*.csftr.com *.googlesyndication.com *.rakuten.com *.linksynergy.com *.xg4ken.com *.nxtck.com *.leadsrx.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-us.adyen.com https://live.adyen.com *.frontastic.rocks *.frontastic.live *.frontastic.io *.linkedin.com *.cloudflare.com *.adyen.com https://emea02-nonprod.cluster.observability.cloud.sap:9999 *.youtube.com *.youku.com https://emea01.cluster.observability.cloud.sap:9999 https://google.com/pay *.abtasty.com https://logx.optimizely.com https://*.optimizely.com https://*.affirm.com https://develop--b2cstore-victorinox.netlify.app https://*.friendlycaptcha.com https://victorinox--uat.sandbox.my.site.com https://victorinox--uat.sandbox.lightning.force.com/ https://victorinox--uat.sandbox.my.salesforce-scrt.com https://victorinox.my.site.com https://victorinox.my.salesforce-scrt.com events.bouncex.net coupons.bounceexchange.com *.cdnwidget.com *.cdnbasket.net https://vxb2c-dev-fp-func001.azurewebsites.net; style-src 'self' 'unsafe-inline' *.victorinox.com *.swissarmy.com *.wenger.ch *.cdn77.org *.tangiblee.com assets-static.victorinox.com *.klaviyo.com photorankstatics-a.akamaihd.net fonts.googleapis.com emersya.com cdn.emersya.com api.map.baidu.com fast.fonts.net static.getback.ch cdnjs.cloudflare.com tags.srv.stackadapt.com cdn.channelsight.com https://widget.channelsight.com tiger-cdn.zoovu.com translate.googleapis.com assets.bounceexchange.com https://services.postcodeanywhere.co.uk *.sprinklr.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-us.adyen.com https://live.adyen.com *.abtasty.com *.gstatic.com *.googleapis.com https://*.ugc.bazaarvoice.com https://victorinox--uat.sandbox.my.site.com https://victorinox--uat.sandbox.lightning.force.com/ https://victorinox--uat.sandbox.my.salesforce-scrt.com https://victorinox.my.site.com https://victorinox.my.salesforce-scrt.com assets.bounceexchange.com; report-to csp-endpoint; 2 frame-ancestors 'self' https://*.justia.com http://*.justia.com 2 default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' blob:; font-src * data:; img-src * data: 2 frame-ancestors 'self' https://reviewtrackers.app.workramp.com https://inmoment.app.workramp.com https://academy.reviewtrackers.net https://www.reviewtrackers.com https://app.getreprise.com 2 default-src * 'unsafe-eval' 'unsafe-inline'; img-src * data: unsafe-inline 2 frame-ancestors 'self' https://agent.cloudagent.ozonetel.com 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self' https://myfunds.ssga.com.au; object-src 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://app.termly.io; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://app.termly.io; font-src 'self'; connect-src 'self' https://www.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://app.termly.io https://us.consent.api.termly.io https://eu.consent.api.termly.io; frame-src 'self' https://app.termly.io; frame-ancestors 'none' 2 frame-ancestors 'self' https://*.sayweee.net 2 base-uri 'self'; form-action 'self' https://bw.knightfrank.com https://ca.knightfrank.com https://preferences.knightfrank.co.uk/ https://preferences.knightfrank.com/ https://www.facebook.com https://www.google.co.kr https://www.knightfrank.ae https://www.knightfrank.be https://www.knightfrank.bg/ https://www.knightfrank.bh/ https://www.knightfrank.co.id https://www.knightfrank.co.in https://www.knightfrank.co.ke https://www.knightfrank.co.nz https://www.knightfrank.co.th https://www.knightfrank.co.tz https://www.knightfrank.co.uk https://www.knightfrank.co.za https://www.knightfrank.co.zw https://www.knightfrank.com https://www.knightfrank.com.au https://www.knightfrank.com.cn https://www.knightfrank.com.hk https://www.knightfrank.com.kh https://www.knightfrank.com.my https://www.knightfrank.com.ng https://www.knightfrank.com.pl https://www.knightfrank.com.ro https://www.knightfrank.com.sa https://www.knightfrank.com.sg https://www.knightfrank.com.vn https://www.knightfrank.cz https://www.knightfrank.de https://www.knightfrank.eg/ https://www.knightfrank.es https://www.knightfrank.fr https://www.knightfrank.gr https://www.knightfrank.hu https://www.knightfrank.ie https://www.knightfrank.it https://www.knightfrank.je/ https://www.knightfrank.jp https://www.knightfrank.kr https://www.knightfrank.mw https://www.knightfrank.qa https://www.knightfrank.rs https://www.knightfrank.rw https://www.knightfrank.ug https://www.repro.knightfrank.com.tw https://www.santos.knightfrank.ph https://zm.knightfrank.com; frame-ancestors 'self' https://*.tagcommander.com; report-to stott-security-endpoint; 2 default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://forms.hsforms.com https://*.hubspot.com https://*.typeform.com; block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.gstatic.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://*.hotjar.io https://script.crazyegg.com https://tag.clearbitscripts.com https://*.clearbit.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hubspot.com https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hsleadflows.net https://js.hsadspixel.net https://*.hsappstatic.net https://*.cookie3.co https://*.cookie3.io https://cdn.markfi.xyz https://storage.googleapis.com https://vercel.live https://googleads.g.doubleclick.net https://www.googleadservices.com https://sdk.absolutelabs.app https://embed.typeform.com https://*.typeform.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://js.hubspot.com; font-src 'self' data: https://fonts.gstatic.com https://js.hubspot.com https://script.hotjar.com https://*.hotjar.com; connect-src 'self' https://*.rootstockcollective.xyz https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://www.google.com.mx https://script.crazyegg.com https://tracking.crazyegg.com https://pagestates-tracking.crazyegg.com https://assets-tracking.crazyegg.com https://tag.clearbitscripts.com https://*.clearbit.com https://js.hs-scripts.com https://js.hs-banner.com https://api.hsforms.com https://forms.hsforms.com https://api.hubspot.com https://api.hubapi.com https://track.hubspot.com https://*.hubspot.com https://*.hsforms.com https://*.hsappstatic.net https://forms.hscollectedforms.net https://*.cookie3.co https://*.cookie3.io https://cdn.markfi.xyz https://a.markfi.xyz https://sdk.absolutelabs.app https://be.explorer.rootstock.io https://backend.stats.rsk.co https://stats.g.doubleclick.net https://content.hotjar.io https://*.hotjar.com https://*.hotjar.io wss://ws.hotjar.com wss://*.hotjar.com wss://be.explorer.rootstock.io wss://backend.stats.rsk.co https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://blockchain.info https://api.typeform.com https://*.typeform.com; img-src 'self' data: blob: https://*.google.com https://*.google.co.uk https://*.google.de https://*.google.fr https://*.google.es https://*.google.it https://*.google.pl https://*.google.pt https://*.google.nl https://*.google.be https://*.google.ca https://*.google.com.au https://*.google.com.br https://*.google.co.in https://*.google.co.jp https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://i.ytimg.com https://img.youtube.com https://*.youtube.com https://*.hotjar.com https://*.hotjar.io https://js.hs-banner.com https://track.hubspot.com https://*.hubspot.com https://forms.hsforms.com https://*.hsforms.com https://cdn.markfi.xyz https://rsk-cms.flywheelstaging.com https://rsk-cms.flywheelsites.com https://images.typeform.com https://*.typeform.com https://bunny-wp-pullzone-y5gelci48r.b-cdn.net https://*.b-cdn.net https://images.mirror-media.xyz https://*.mirror-media.xyz; media-src 'self' https://*.b-cdn.net; frame-src 'self' https://*.google.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://tagassistant.google.com https://vars.hotjar.com https://*.cloudfront.net https://forms.hsforms.com https://*.hsforms.com https://js.hsforms.net https://*.hubspot.com https://vercel.live https://td.doubleclick.net https://form.typeform.com https://*.typeform.com https://rootstock-goldensats-leaderboard.replit.app https://*.replit.app https://replit.com https://*.replit.com https://*.repl.co https://*.b-cdn.net; worker-src 'self' blob:; object-src 'none'; upgrade-insecure-requests 2 font-src 'self' data:; 2 frame-ancestors 'self'; form-action 'self' esup-pay.univ-paris1.fr *.ebsco.com *.ebscohost.com *.ebsco.zone *.pantheonsorbonne.fr; base-uri 'self'; object-src 'none'; frame-src 'self' *.archives-ouvertes.fr *.ausha.co *.calameo.com *.carto.com *.dailymotion.com *.framindmap.org *.google.com hal.science *.hal.science *.helloasso.com indymotion.fr *.libcal.com *.linkedin.com *.office.com *.openstreetmap.fr *.openstreetmap.org *.pantheonsorbonne.fr podcloud.fr sketchfab.com *.spotify.com *.twitch.tv *.univ-cotedazur.fr *.univ-paris1.fr *.vimeo.com *.youtube-nocookie.com *.youtube.com yurplan.com *.yurplan.com; report-uri /csp-report.php; report-to csp-endpoint 2 frame-ancestors 'self' https://*.particle.io http://particle.lookbookhq.com https://particle.lookbookhq.com http://particle.pathfactory.com https://particle.pathfactory.com 2 script-src blob: 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' * *.googletagmanager.com *.google.com *.google-analytics.com *.googlesyndication.com *.interempresas.net *.doubleclick.net *.youtube.com *.flowplayer.org *.gstatic.com; img-src 'self' blob: data: *.interempresas.net *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.google.com *.doubleclick.net *.youtube.com *.gstatic.com *; connect-src 'self' *.googletagmanager.com *.google.com *.google-analytics.com *.googlesyndication.com *.interempresas.net *.doubleclick.net *.youtube.com *.gstatic.com *; object-src *.interempresas.net; media-src blob: * 2 default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' *.crazyegg.com *.googletagmanager.com always 2 frame-ancestors pms.a-premium.com pms.a-premium-test.com pay.google.com dev-fe-admin-assets.s3.ap-southeast-1.amazonaws.com static.cdn.a-premium.com; 2 default-src 'self'; connect-src 'self' https://www.dmp.corebridgefinancial.com https://site2.corebridgefinancial.com https://www.corebridgefinancial.com https://safg2022ipo.q4web.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://crbg-privacy.my.onetrust.com https://dpm.demdex.net https://safgtechnologies.tt.omtrdc.net https://cdn.linkedin.oribi.io https://report.corebridge.gbqofs.io https://px.ads.linkedin.com https://assets.adobedtm.com https://safgtechnologies.demdex.net https://cdn2.gbqofs.com https://connect.facebook.net https://snap.licdn.com https://assets.corebridgefinancial.com https://live.cloud.api.corebridgefinancial.com https://uat.cloud.api.corebridgefinancial.com https://my.valic.com https://edge.api.brightcove.com https://cf-images.us-east-1.prod.boltdns.net https://metrics.brightcove.com https://manifest.prod.boltdns.net https://bcbolt446c5271-a.akamaihd.net https://safgtechnologiescbf.112.2o7.net https://cm.everesttech.net https://pdfgen.dmp.corebridgefinancial.com https://pdfgen-prod.dmp.corebridgefinancial.com https://americangenerallife.us-5.evergage.com https://fonts.googleapis.com https://fonts.gstatic.com https://corebridgefinancial.onlineprospectus.net https://reporting.mobular.net https://apis.sundaysky.com https://safgtechnologiescbfdev.112.2o7.net https://streams-edge.web.sundaysky.com https://www.facebook.com https://adobedc.demdex.net https://edge.adobedc.net https://www.google.com https://dmp.uat.connector.corebridgefinancial.com https://dmp.live.connector.corebridgefinancial.com https://viewlicense.adobe.io https://cloud.rs.corebridgefinancial.com https://cloud.life.corebridgefinancial.com https://siteintercept.qualtrics.com https://cloud.ir.corebridgefinancial.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com https://alb.reddit.com https://www.corebridgefinancial.com https://ad.doubleclick.net https://insight.adsrvr.org https://cdn.evergage.com; script-src https://www.dmp.corebridgefinancial.com https://site2.corebridgefinancial.com https://www.corebridgefinancial.com https://safg2022ipo.q4web.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://crbg-privacy.my.onetrust.com https://dpm.demdex.net https://safgtechnologies.tt.omtrdc.net https://cdn.linkedin.oribi.io https://report.corebridge.gbqofs.io https://assets.adobedtm.com https://cdn.evgnet.com https://cdn2.gbqofs.com https://px.ads.linkedin.com https://report.corebridge.gbqofs.io https://safgtechnologies.demdex.net https://connect.facebook.net https://snap.licdn.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://assets.corebridgefinancial.com https://cdn.gbqofs.com https://players.brightcove.net https://assets.map.brightcove.com https://map.brightcove.com https://platform.twitter.com https://aig.onlineprospectus.net https://corebridgefinancial.onlineprospectus.net https://valic.onlineprospectus.net https://play.sundaysky.com https://americangenerallife.us-5.evergage.com https://unpkg.com https://acrobatservices.adobe.com https://znbd5u06jodgh7tkj-crbg.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://www.redditstatic.com https://www.corebridgefinancial.com https://js.adsrvr.org https://zn6fiam0gry5fx5r0-crbg.siteintercept.qualtrics.com https://cdn.evergage.com 'unsafe-inline' 'unsafe-eval' blob:; style-src https://www.dmp.corebridgefinancial.com https://site2.corebridgefinancial.com https://www.corebridgefinancial.com https://safg2022ipo.q4web.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://crbg-privacy.my.onetrust.com https://dpm.demdex.net https://safgtechnologies.tt.omtrdc.net https://cdn.linkedin.oribi.io https://report.corebridge.gbqofs.io https://assets.adobedtm.com https://cdn.evgnet.com https://cdn2.gbqofs.com https://px.ads.linkedin.com https://report.corebridge.gbqofs.io https://safgtechnologies.demdex.net https://connect.facebook.net https://snap.licdn.com https://assets.corebridgefinancial.com https://fonts.googleapis.com https://americangenerallife.us-5.evergage.com https://www.corebridgefinancial.com 'unsafe-inline'; frame-ancestors 'self'; upgrade-insecure-requests; object-src 'none'; frame-src 'self' https://safgtechnologies.demdex.net https://www.google.com https://platform.twitter.com https://players.brightcove.net https://14505161.fls.doubleclick.net https://td.doubleclick.net https://cbf.instech-app.com https://view.ceros.com https://acrobatservices.adobe.com https://player.vimeo.com https://hackerone.com https://www.corebridgefinancial.com https://insight.adsrvr.org https://match.adsrvr.org https://www.facebook.com; img-src 'self' https://www.dmp.corebridgefinancial.com https://site2.corebridgefinancial.com https://www.corebridgefinancial.com https://cdn.cookielaw.org https://px.ads.linkedin.com https://safgtechnologiescbf.112.2o7.net https://cm.everesttech.net https://dpm.demdex.net https://safgtechnologiesdev1cbf.112.2o7.net https://www.linkedin.com https://www.facebook.com https://assets.corebridgefinancial.com https://metrics.brightcove.com https://map.brightcove.com https://cf-images.us-east-1.prod.boltdns.net https://hdr.sundaysky.com https://d21o24qxwf7uku.cloudfront.net https://play.sundaysky.com https://safgtechnologiescbfdev.112.2o7.net https://ad.doubleclick.net https://alb.reddit.com https://www.corebridgefinancial.com https://www.googletagmanager.com https://insight.adsrvr.org data:; media-src 'self' https://www.dmp.corebridgefinancial.com https://site2.corebridgefinancial.com https://www.corebridgefinancial.com https://bcbolt446c5271-a.akamaihd.net https://streams-edge.web.sundaysky.com https://www.corebridgefinancial.com blob:; font-src 'self' https://fonts.gstatic.com https://americangenerallife.us-5.evergage.com https://www.corebridgefinancial.com data:; 2 img-src 'self' data: *.cookielaw.org *.6sc.co *.google.com *.linkedin.com *.reddit.com *.hubspot.com *.facebook.com *.sanity.io *.fontawesome.com *.hsforms.com *.wistia.com *.mutinyhq.io https://*.mutinycdn.com https://*.doubleclick.net https://*.googletagmanager.com https://c.clarity.ms https://*.bing.com https://*.greencolumnhealth.com https://*.getdbt.com https://impartner.blob.core.windows.net *.githubusercontent.com https://*.optimizely.com https://*.quora.com; style-src 'self' 'unsafe-inline' https://*.typekit.net https://cdn.jsdelivr.net https://*.googleapis.com https://packages.prmcdn.io https://*.optimizely.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.hs-scripts.com js.hsforms.net *.6sc.co blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com https://cloud.getdbt.com https://*.cloud.getdbt.com https://*.dbt.com https://www.facebook.com; frame-ancestors 'self' https://*.youtube.com https://*.wistia.com *.getdbt.com *.vercel.app http://localhost:3000 http://localhost:3333; 2 sandbox allow-scripts allow-forms allow-same-origin allow-downloads allow-popups allow-popups-to-escape-sandbox;base-uri 'self';style-src 'self';connect-src 'self' *.itzbund.de; script-src 'self' piwik.itzbund.de *.itzbund.de *.bund.de; object-src 'self' multimedia.gsb.bund.de; default-src 'self'; media-src 'self' multimedia.gsb.bund.de medien04.gsb.bund.de www.youtube.com piwik.itzbund.de; img-src 'self' piwik.itzbund.de blob: data:; form-action 'self'; font-src 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 2 default-src 'self' wss: http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https: http:; report-uri https://secure.hotelmix.fr/?page=stat&t=csp 2 default-src 'unsafe-eval' 'unsafe-inline' blob: *;frame-src about: *;img-src data: about: blob: *;font-src data: *;frame-ancestors self my.readymag.com readymag.website readymag.com 2 default-src 'self' data:; connect-src 'self' piwik.itzbund.de cldf-wzw-od.r53.cdn.tv1.eu; worker-src blob: 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' piwik.itzbund.de *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.youtu.be *.ytimg.com *.vimeo.com *.twitter.com; object-src 'self' multimedia.gsb.bund.de; media-src blob: 'self' multimedia.gsb.bund.de *.youtube.com youtube.com *.youtu.be youtu.be *.vimeo.com *.aktion-mensch.de *.materna.de *.cdninstagram.com *.youtube-nocookie.com *.readspeaker.com *.tremonia-dxp.de; frame-src *.google.com *.gstatic.com *.youtube.com *.youtu.be *.vimeo.com vimeo.com *.twitter.com *.instagram.com *.cdninstagram.com *.youtube-nocookie.com *.3qsdn.com *.readspeaker.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.youtu.be *.twitter.com *.cdninstagram.com *.youtube-nocookie.com *.ytimg.com *.openstreetmap.org; frame-ancestors 'self'; upgrade-insecure-requests; 2 default-src 'self' https://okdesk.ru https://*.okdesk.ru https://testokdesk.ru https://*.testokdesk.ru; base-uri 'self'; object-src 'none'; form-action 'self' https://okdesk.ru https://*.okdesk.ru https://testokdesk.ru https://*.testokdesk.ru; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://okdesk.ru https://*.okdesk.ru https://testokdesk.ru https://*.testokdesk.ru https://unpkg.com https://*.sendsay.ru https://*.yandexcloud.net https://popup.bz https://*.touch-me.pro https://rutube.ru https://*.rutube.ru https://*.vigo.tech https://yastatic.net https://*.aidata.io https://*.mail.ru https://*.yandex.ru https://*.yandex.com https://*.yandex.net https://*.googletagmanager.com https://*.google-analytics.com https://*.roistat.com https://*.carrotquest.app https://*.carrotquest.io https://*.callibri.ru https://*.gudok.tel; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://okdesk.ru https://*.okdesk.ru https://testokdesk.ru https://*.testokdesk.ru https://rutube.ru https://*.rutube.ru https://*.vigo.tech https://*.rtbcdn.ru https://sendsay.ru https://*.touch-me.pro https://*.mail.ru https://*.yandexcloud.net https://*.yandex.ru https://*.yandex.com wss://*.yandex.ru wss://*.yandex.com https://*.google-analytics.com https://bitrix.info https://*.carrotquest.app https://*.carrotquest.io https://*.carrottrack.app wss://*.carrotquest.app wss://*.carrotquest.io https://*.callibri.ru; frame-src 'self' https://rutube.ru https://*.yandex.ru https://*.yandex.com https://*.yandexcloud.net; media-src 'self' blob: https://okdesk.ru https://*.okdesk.ru https://testokdesk.ru https://*.testokdesk.ru https://rutube.ru https://*.rutube.ru https://*.vigo.tech https://*.carrotquest.app https://*.carrotquest.io; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'none'; 2 block-all-mixed-content; frame-ancestors 'self' *.tpa.com *.umr.com *.uhis.com *.uhc.com *.optum.com *.mygeha.com *.werally.com *.liveperson.net *.lpsnmedia.net 2 frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com https://nexoio.my.site.com 2 default-src 'none'; script-src 'self' piwik.bildung-rp.de https://static.b-ite.com https://cs-assets.b-ite.com https://karriere.pl.bildung-rp.de/ https://player.vimeo.com/api/player.js 'unsafe-inline' https://maps.rlp.de; connect-src 'self' https://maps.rlp.de https://piwik.bildung-rp.de https://jobs.b-ite.com; img-src 'self' data: https://sgx.geodatenzentrum.de; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'self' http://*.bildung.rlp.de/ https://secure2.bildung-rp.de/; frame-src 'self' https://www.youtube-nocookie.com/ https://w.soundcloud.com https://rp.db-schulkinowochen.de/ https://player.vimeo.com/video/ https://vimeo.com/event/ https://video.rlp-media.de/videos/; font-src 'self'; manifest-src 'self' 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: android-webview-video-poster: oppostore: webcompt: *; frame-ancestors 'self' *.oppo.com store.oppoer.me *.opposhop.cn *.wanyol.com; report-uri https://ti.oppo.com/csp/DataReport; report-to https://ti.oppo.com/csp/DataReport; 2 default-src 'self' 'unsafe-inline' https://arvatosystems.matomo.cloud https://salesviewer.org https://salesviewer.com https://*.salesviewer.com https://*.analytics.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.youtube.com https://cdn.linkedin.oribi.io https://googleads.g.doubleclick.net https://*.azureedge.net https://*.svc.dynamics.com https://public-eur.mkt.dynamics.com https://youtube-nocookie.com https://www.youtube-nocookie.com https://socialcloud.bertelsmann.com https://podcasters.spotify.com https://*.spotify.com https://outlook.office365.com https://outlook.office.com https://login.microsoftonline.com https://app.sli.do https://connect.facebook.net https://px.ads.linkedin.com https://td.doubleclick.net https://ib.adnxs.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com https://analytics.tiktok.com/ https://dmndfrcstng.com https://www.googletagmanager.com https://data.arvato-systems-energy-portfolio.de https://data.arvato-systems.de https://data.arvato-systems.com https://assets-eur.mkt.dynamics.com https://web.cmp.usercentrics.eu https://v1.api.service.cmp.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://region1.google-analytics.com https://pagead2.googlesyndication.com https://www.facebook.com https://mobile.events.data.microsoft.com https://bookings.cloud.microsoft/ https://formui-usa1.mkt.dynamics.com/; font-src 'self' 'unsafe-inline' data:; frame-ancestors 'self' https://*.arvato-systems-media.net/; img-src 'self' https://ib.adnxs.com https://px.ads.linkedin.com https://www.youtube.com https://www.vimeo.com https://www.google.de/ data: https:; object-src 'self' https://*.arvato-systems-media.net/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.analytics.google.com https://acdn.adnxs.com https://arvatosystems.matomo.cloud https://salesviewer.org https://salesviewer.com https://localhost:35729/livereload.js https://*.salesviewer.com https://snap.licdn.com https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube.com https://www.vimeo.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://*.azureedge.net https://*.svc.dynamics.com https://public-eur.mkt.dynamics.com https://youtube-nocookie.com https://www.youtube-nocookie.com https://socialcloud.bertelsmann.com https://podcasters.spotify.com https://*.spotify.com https://outlook.office365.com https://outlook.office.com https://login.microsoftonline.com https://app.sli.do https://connect.facebook.net https://www.redditstatic.com https://analytics.tiktok.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://jobpilotchatbot.blob.core.windows.net https://dmndfrcstng.com https://data.arvato-systems-energy-portfolio.de https://data.arvato-systems.de https://data.arvato-systems.com https://web.cmp.usercentrics.eu https://v1.api.service.cmp.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://*.arvato-systems-media.net https://formui-usa1.mkt.dynamics.com/; style-src 'self' 'unsafe-inline' https://jobpilotchatbot.blob.core.windows.net; 2 report-to slardar-endpoint; upgrade-insecure-requests ; 2 frame-ancestors 'self' https://sites.ncleg.gov 2 img-src 'self' *.prysmian.com www.google.com www.google.it *.google-analytics.com www.facebook.com *.linkedin.com maps.gstatic.com *.googleapis.com *.ggpht.com *.doubleclick.net img.youtube.com curator-assets.b-cdn.net www.googletagmanager.com media.corporate-ir.net px.ads.linkedin.cn beincontact.becloudsolutions.com i.vimeocdn.com imgsct.cookiebot.com megaphone.imgix.net *.sharethis.com www.prysmiangroupcatalogue.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.prysmian.com www.prysmiangroupcatalogue.com pi.pardot.net rum-static.pingdom.net *.cookiebot.com *.hotjar.com static.doubleclick.net googleads.g.doubleclick.net *.adform.net maps.googleapis.com www.googleapis.com jnn-pa.googleapis.com maps.gstatic.com www.gstatic.com www.google.com ssl.google-analytics.com www.google-analytics.com www.googletagmanager.com www.youtube.com www.facebook.com connect.facebook.net static.xx.fbcdn.net px.ads.linkedin.com *.teleborsa.it snap.licdn.com static.cloudflareinsights.com cdnjs.cloudflare.com cdn.curator.io cdn.jsdelivr.net platform.twitter.com platform.linkedin.com s3.amazonaws.com pi.pardot.com cdn.livechatinc.com d335luupugsy2.cloudfront.net beincontact.becloudsolutions.com viewer.diagrams.net app.diagrams.net *.cloudfront.net www.scribd.com *.cloudflare.com cdn.babylonjs.com code.jquery.com eu.acsbapp.com secure.adnxs.com *.sharethis.com www2.nl.prysmiangroup.com *.clarity.ms www.prysmiangroupcatalogue.com *.tiktok.com blob:; object-src 'self' www.youtube.com; frame-src 'self' *.prysmian.com *.prysmiangroup.com *.cookiebot.com *.teleborsa.it www.google.com www.youtube.com www.youtube-nocookie.com *.sharethis.com www.prysmiangroupcatalogue.com www.cprdop.org youtube.com; frame-ancestors 'self'; 2 frame-ancestors 'self' *.connectmeinforma.com dev.totem-app.com www.fanexpohq.events 2 default-src 'self' cdn.sanity.io cdn.equinor.com; style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.eds.equinor.com https://platform.twitter.com https://*.twimg.com; script-src 'report-sample' 'unsafe-eval' 'self' 'unsafe-inline' blob: https://*.googletagmanager.com https://siteimproveanalytics.com https://*.cookiebot.com https://consentcdn.cookiebot.com https://platform.twitter.com https://cdn.syndication.twimg.com/ https://www.youtube.com ; img-src 'self' data: https://cdn.eds.equinor.com https://cdn.sanity.io https://cdn.equinor.com https://*.siteimproveanalytics.io https://*.googletagmanager.com https://platform.twitter.com https://syndication.twitter.com https://*.twimg.com https://i.ytimg.com https://*.cookiebot.com ; connect-src 'self' cdn.sanity.io cdn.equinor.com https://bcdn.screen9.com https://qcdn.screen9.com https://h61q9gi9.api.sanity.io https://h61q9gi9.apicdn.sanity.io/ https://tools.eurolandir.com https://inferred.litix.io/ https://*.algolia.net https://*.algolianet.com https://*.cookiebot.com https://*.ingest.de.sentry.io ; child-src blob:; frame-src 'self' https://consentcdn.cookiebot.com https://lt.morningstar.com https://www.youtube.com https://vimeo.com https://player.vimeo.com https://sds-maintenance.com https://tools.eurolandir.com https://platform.twitter.com https://syndication.twitter.com https://vds.issgovernance.com https://*.plaii.no https://livestream.com https://*.castr.com https://pixel.as https://www.youtube-nocookie.com https://h61q9gi9.api.sanity.io http://localhost:3333 https://eu.frcapi.com/ https://edge.media-server.com/mmc/p/i2qawkz9; frame-ancestors https://studio-global-equinor-web-sites-dev.c2.radix.equinor.com https://studio-global-equinor-web-sites-preprod.c2.radix.equinor.com https://studio-global-equinor-web-sites-prod.c2.radix.equinor.com https://studio-global-upgrade-equinor-web-sites-preprodv2.c2.radix.equinor.com http://localhost:3333 https://equinor.sanity.studio; font-src 'self' https://cdn.eds.equinor.com data:; media-src 'self' blob: https://bcdn.screen9.com https://qcdn.screen9.com https://cdn.sanity.io/ https://cdn.equinor.com/; 2 script-src 'self' https://*.googletagmanager.com https://*.gstatic.com https://*.google.com https://*.google.pl https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://*.ggpht.com https://*.googleusercontent.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.snrcdn.net https://chat.pekao.com.pl https://public.tableau.com https://bat.bing.com https://platform.twitter.com 'unsafe-inline' 'unsafe-eval' blob:; frame-ancestors 'self'; object-src 'none'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 2 default-src 'self';connect-src 'self' https: http: blob:;style-src 'self' 'unsafe-inline' https: http: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://snippet.univtec.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://snippet.univtec.com blob:;img-src 'self' data: https: http: blob:;font-src 'self' https: http: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com;frame-src 'self' https: http: blob:;media-src 'self' https: http: blob: data:;object-src 'none';child-src 'self' https: http: blob:;worker-src 'self' blob:;frame-ancestors 'self';base-uri 'self';form-action 'self';script-src-attr 'none' 2 frame-ancestors 'self' https://energy-explorer-test.azurewebsites.net https://energy-explorer.azurewebsites.net https://explorer.hitachienergy.com https://hitachilandscapes.com https://www.hitachienergy.com https://dev.cms.cloud.hitachienergy.cn https://stage.cms.cloud.hitachienergy.cn https://www.hitachienergy.cn https://landscapes.hitachienergy.com https://privacyportal.cookiepro.com 2 frame-ancestors 'self' http://coder.lookbookhq.com https://coder.lookbookhq.com http://coder.pathfactory.com https://coder.pathfactory.com http://resources.coder.com https://resources.coder.com https://help.coder.com https://coder.zendesk.com 2 default-src 'self' *; img-src * 'self' data: https: blob:; worker-src 'self' blob:; child-src blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflareinsights.com *.google.com *.youtube.com *.vimeo.com *.gstatic.com *.googletagmanager.com *.onetrust.com *.cookiebot.com *.cookielaw.org *.clarity.ms *.visitorqueue.com *.detailsdata7.com *.intelligence-7syndicate.com *.euroland.com *.eurolandir.com *.userway.org *.yano.digital; style-src 'self' 'unsafe-inline' *; font-src 'self' * data:; frame-src *; 2 default-src 'self' *.bioeg.de *.bzga.de *.ddev.site; script-src 'self' *.bioeg.de *.bzga.de *.ddev.site 'sha256-rAf7Gj+fDbDpOIfl2NReetn227olVzmASFPJCzQ9yg0='; style-src 'self' *.bioeg.de *.bzga.de *.ddev.site; frame-src 'self' https://www.bioeg.de/ https://piwik.bzga.de/ *.frcapi.com/ https://www.youtube-nocookie.com/; frame-ancestors 'self'; img-src 'self' data: *.ytimg.com *.bioeg.de *.bzga.de 2 frame-ancestors 'self' login.microsoftonline.com teams.microsoft.com *.teams.microsoft.com *.cloud.microsoft 2 default-src 'self' https: data:; script-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 2 script-src *.website-solution.net *.googletagmanager.com *.facebook.net *.google.com *.gstatic.com www.recaptcha.net *.doubleclick.net 'unsafe-inline' 'unsafe-eval' 2 script-src 'self' 'unsafe-inline' https://www.gstatic.com/ https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/; script-src-elem 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://static.hotjar.com/ https://script.hotjar.com/ https://www.clarity.ms/ https://*.sa-east-1.token.awswaf.com/ https://*.edge.sdk.awswaf.com/ 2 default-src 'self'; img-src 'self' data: *.importgenius.cn importgenius.cn *.importgenius.co.kr importgenius.co.kr *.importgenius.com importgenius.com *.website-files.com sb.scorecardresearch.com *.youtube.com ssl.google-analytics.com *.google-analytics.com *.cloudfront.net cdn.ampproject.org *.facebook.com maps.googleapis.com maps.gstatic.com *.doubleclick.net *.google.com.ph *.google.com.pk *.google.bg i.ytimg.com *.bing.com bing.com *.clarity.ms *.calendly.com googletagmanager.com www.googletagmanager.com *.albacross.com albacross.com *.zohopublic.com zohopublic.com *.zohocdn.com zohocdn.com *.zoho.com *.lfeeder.com lfeeder.com *.customer.io customer.io zohopagesense.nimbuspop.com *.ads.linkedin.com *.linkedin.com googleadservices.com *.googleadservices.com bat.bing.net *.bat.bing.net *.cloudflare.com alb.reddit.com cdn.embedly.com *.paypal.com clearout.io *.google.com google.com *.google.ca google.ca *.google.com.mx google.com.mx *.google.co.uk google.co.uk *.google.com.tr google.com.tr *.google.co.in google.co.in *.google.com.br google.com.br *.google.com.au google.com.au *.google.ae google.ae *.google.co.kr google.co.kr; media-src 'self' *.importgenius.com *.importgenius.cn *.importgenius.co.kr *.google.com *.google-analytics.com cdn.prod.website-files.com ; frame-src 'self' *.zohopublic.com zohopublic.com static.zohocdn.com *.importgenius.com *.importgenius.cn *.importgenius.co.kr *.google.com *.googleapis.com www.youtube.com player.vimeo.com *.sharethis.com *.facebook.com *.firebaseio.com *.doubleclick.net www.googletagmanager.com *.calendly.com calendly.com *.recaptcha.net recaptcha.net *.recurly.com recurly.com *.schedulehero.io webflow.com *.webflow.com app.intellimize.com cdn.embedly.com *.paypal.com *.cloudflare.com *.google.com google.com *.google.ca google.ca *.google.com.mx google.com.mx *.google.co.uk google.co.uk *.google.com.tr google.com.tr *.google.co.in google.co.in *.google.com.br google.com.br *.google.com.au google.com.au *.google.ae google.ae *.google.co.kr google.co.kr; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: us-assets.i.posthog.com *.g2.com cdn.jsdelivr.net *.website-files.com *.clarity.ms snap.licdn.com www.recaptcha.net edge.fullstory.com *.googletagmanager.com *.doubleclick.net polyfill-fastly.io *.gstatic.com cdn.ranksci.com *.importgenius.com *.importgenius.cn *.importgenius.co.kr *.google.com ssl.google-analytics.com *.cloudfront.net *.googleapis.com *.google-analytics.com www.gstatic.com *.googleadservices.com *.youtube.com s.ytimg.com cdn.ampproject.org connect.facebook.net recaptcha.net *.datadoghq-browser-agent.com *.bing.com *.zoho.com *.calendly.com *.albacross.com *.zohocdn.com zohocdn.com *.zohopublic.com zohopublic.com *.customer.io customer.io *.recurly.com recurly.com code.jquery.com cdn.pagesense.io cdnjs.cloudflare.com cdn.logr-ingest.com *.claydar.com assets.revenuehero.io ipinfo.io *.redditstatic.com clearout.io js.usebasin.com unpkg.com app.optibase.io *.paypal.com *.cloudflare.com *.google.com google.com *.google.ca google.ca *.google.com.mx google.com.mx *.google.co.uk google.co.uk *.google.com.tr google.com.tr *.google.co.in google.co.in *.google.com.br google.com.br *.google.com.au google.com.au *.google.ae google.ae *.google.co.kr google.co.kr; worker-src 'self' blob:; connect-src 'self' c.ba.contentsquare.net app.optibase.io videsigns-staging.co.uk raw.githubusercontent.com geocoder.api.here.com *.google-analytics.com *.ads.linkedin.com *.importgenius.com *.importgenius.cn *.importgenius.co.kr wss://*.firebaseio.com *.googleapis.com l.sharethis.com *.ucarecdn.com ucarecdn.com *.sentry.io *.fullstory.com fullstory.com *.googletagmanager.com *.datadoghq.com analytics.google.com www.google.com google.com *.posthog.com *.clarity.ms clarity.ms salesiq.zohopublic.com wss://vts.zohopublic.com *.zohopublic.com *.albacross.com *.doubleclick.net doubleclick.net *.recurly.com recurly.com api.omappapi.com omappapi.com *.facebook.com facebook.com wss://*.hotjar.com *.hotjar.com *.hotjar.io pagesense-collect.zoho.com get.geojs.io webflow.com api.ipify.org r.logr-ingest.com googleadservices.com *.googleadservices.com *.analytics.google.com cdn.jsdelivr.net *.claydar.com bat.bing.net app.revenuehero.io pixel-config.reddit.com clearout.io *.clearout.io *.reddit.com d1ae0zx28z2bae.cloudfront.net app.optibase.io *.bat.bing.net *.google.com google.com *.google.ca google.ca *.google.com.mx google.com.mx *.google.co.uk google.co.uk *.google.com.tr google.com.tr *.google.co.in google.co.in *.google.com.br google.com.br *.google.com.au google.com.au *.google.ae google.ae *.google.co.kr google.co.kr; font-src 'self' *.importgenius.com *.importgenius.cn *.importgenius.co.kr data: cdn.prod.website-files.com *.webflow.com *.cloudfront.net fonts.gstatic.com *.googleapis.com css.zohocdn.com cdn2.importgenius.com webfonts.zoho.com static.zohocdn.com cdn.jsdelivr.net *.zohocdn.com ; style-src 'self' 'unsafe-inline' *.importgenius.com *.importgenius.cn *.importgenius.co.kr *.website-files.com *.swaychat.com *.googleapis.com ws.sharethis.com *.google.com assets.calendly.com css.zohocdn.com *.zohocdn.com js.zohostatic.com *.zohostatic.com api.omappapi.com a.omappapi.com omappapi.com webfonts.zoho.com *.cloudflare.com cdn.jsdelivr.net ; manifest-src 'self' *.importgenius.com *.importgenius.cn *.importgenius.co.kr ; frame-ancestors 'self' *.importgenius.com *.importgenius.cn *.importgenius.co.kr ; object-src 'none'; 2 default-src 'self' chat.searchengines.guru d.searchengines.guru; script-src 'self' search.searchengines.guru d.searchengines.guru pagead2.googlesyndication.com 'unsafe-inline' ep1.adtrafficquality.google ep2.adtrafficquality.google; style-src d.searchengines.guru 'unsafe-inline'; img-src 'self' chat.searchengines.guru d.searchengines.guru blob: data: pagead2.googlesyndication.com ep1.adtrafficquality.google ep2.adtrafficquality.google; media-src 'self' chat.searchengines.guru; font-src 'self' d.searchengines.guru; connect-src 'self' https://chat.searchengines.guru wss://chat.searchengines.guru pagead2.googlesyndication.com ep1.adtrafficquality.google ep2.adtrafficquality.google; frame-src 'self' d.searchengines.guru www.youtube.com googleads.g.doubleclick.net ep1.adtrafficquality.google ep2.adtrafficquality.google www.google.com pagead2.googlesyndication.com; frame-ancestors 'self'; object-src 'self' blob:; 2 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; form-action 'self' https://hostingdunyam.com.tr https://www.hostingdunyam.com.tr https:; 2 frame-ancestors 'self' *.translate.goog translate.google.com; 2 font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net *.twilio.com *.contentsquare.net *.heapanalytics.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.sdiapi.com *.sdiapi.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.aurusepay.com *.auruspay.com h.online-metrix.net td.doubleclick.net *.sdiapi.com *.sdiapi.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google-analytics.com *.analytics.google.com https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org tracking.deepsearch.adlucent.com *.twilio.com *.zumiez.com blob: h.online-metrix.net *.clarity.ms *.bing.com *.contentsquare.net *.heapanalytics.com *.crowdtwist.com *.online-metrix.net scene7.zumiez.com scene7.zumiez.ca *.google.com *.googletagmanager.com *.doubleclick.net *.cookielaw.org s7d1.scene7.com *.rfksrv.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.avada.io https://cdn.ownid.com https://cdn.uat.ownid.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com tracking.deepsearch.adlucent.com *.twilio.com h.online-metrix.net *.clarity.ms *.contentsquare.net *.contentsquare.com *.hotjar.com cdn.us.heap-api.com *.heapanalytics.com *.scarabresearch.com www.clarity.ms *.cookielaw.org *.googleapis.com *.rfk.zumiez.com *.rfk.zumiez.ca *.sc.zumiez.com *.sc.zumiez.ca *.cloudfront.net *.rfksrv.com *.sdiapi.com *.sdiapi.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.typekit.net *.aurusepay.com *.auruspay.com *.heapanalytics.com 'self' 'unsafe-inline'; object-src *.twilio.com *.zumiez.com blob: 'self' 'unsafe-inline'; media-src *.adobe.com *.twilio.com *.zumiez.com scene7.zumiez.com scene7.zumiez.ca 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io https://cdn.ownid.com/ https://*.server.ownid.com/ https://*.server.uat.ownid.com/ https://*.uat.ownid.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com ws: *.google-analytics.com *.analytics.google.com *.twilio.com *.zumiez.com h.online-metrix.net *.clarity.ms *.contentsquare.net *.heapanalytics.com c.us.heap-api.com *.aurusepay.com *.auruspay.com *.scarabresearch.com stats.g.doubleclick.net w.clarity.ms bam.nr-data.net *.cookielaw.org *.onetrust.com *.googleapis.com *.rfk.zumiez.com *.rfk.zumiez.ca *.sc.zumiez.com *.sc.zumiez.ca *.sdiapi.com *.sdiapi.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blob: *.sdiapi.com *.sdiapi.net http: https: blob: 'self' 'unsafe-inline'; default-src *.zumiez.com blob: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 form-action 'self' *.facebook.com; frame-ancestors 'self' app.contentful.com; frame-src 'self' *.workhuman.com *.workhumanpreprod.com vercel.app *.googletagmanager.com *.doubleclick.net *.cdn.optimizely.com pixel.mathtag.com cdn.useproof.com *.cookiebot.com *.ceros.com *.facebook.com 862-jiq-698.mktoweb.com cookie.havasedge.com fast.wistia.net youtube.com www.youtube.com *.twitter.com bat.bing.com *.lightning.force.com *.salesforce.com vercel.live *.qualified.com; base-uri 'none'; object-src 'self'; child-src 'self' *.fls.doubleclick.net; upgrade-insecure-requests; report-uri https://68cebcfc7e2f58b08b59066f1.report-uri.com/r/d/csp/enforce 2 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https: blob:; 2 base-uri 'self'; default-src 'none'; child-src; connect-src 'self' https://rec.smartlook.com https://*.cookiebot.com https://bam.nr-data.net https://api.brightfunnel.com https://*.qualtrics.com https://*.google-analytics.com https://c.ltmsphrcl.net https://data.stbuttons.click https://dev.visualwebsiteoptimizer.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.mw https://www.google.pt https://www.google.tn https://*.analytics.google.com https://analytics.google.com https://www.convertcalculator.com https://get663.com https://bat.bing.com https://overbridgenet.com https://adtonus.com https://code.jquery.com https://rbtds.net https://www.googletagmanager.com https://translate-pa.googleapis.com https://*.googleapis.com https://sentry.io https://*.clarity.ms https://*.company-target.com https://*.zapier.com https://*.demandbase.com https://aplo-evnt.com https://queue.simpleanalyticscdn.com; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://pouch-global-font-assets.s3.eu-central-1.amazonaws.com https://at.alicdn.com https://static.hsappstatic.net data:; form-action 'self' https://*.twitter.com; frame-ancestors 'self'; frame-src 'self' https://*.youtube.com https://*.twitter.com https://*.doubleclick.net https://*.cookiebot.com https://www.googletagmanager.com https://gateway.zscloud.net https://*.spotify.com https://player.vimeo.com https://*.bilibili.com https://gateway.zscaler.net https://gateway.zscalerthree.net https://w.soundcloud.com https://indd.adobe.com https://*.zapier.com https://*.zapier.app https://*.company-target.com https://pixel-sync.sitescout.com; img-src 'self' https://* * blob: data:; media-src 'self' https://youtube.com https://player.vimeo.com https://download-video-ak.vimeocdn.com; object-src 'none'; manifest-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.googleapis.com https://*.doubleclick.net https://*.cookiebot.com https://*.newrelic.com https://*.getsmartcontent.com https://img.en25.com https://bam.nr-data.net https://snap.licdn.com https://up.pixel.ad https://tag.demandbase.com https://*.convertcalculator.co https://www.youtube.com https://cdnjs.cloudflare.com https://connect.facebook.net https://dev.visualwebsiteoptimizer.com https://www.convertcalculator.com https://pagead2.googlesyndication.com https://get663.com https://sc-static.net https://3001.scriptcdn.net https://s.pinimg.com https://static.ads-twitter.com https://*.clarity.ms https://infird.com https://apis.google.com https://app.convertcalculator.co https://scripts.convertcalculator.com https://*.zapier.com https://*.company-target.com https://assets.apollo.io https://tracker.iife.js https://scripts.simpleanalyticscdn.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.typekit.net https://*.googleapis.com https://www.gstatic.com https://cdn.scite.ai 'unsafe-inline'; worker-src blob:; upgrade-insecure-requests 2 default-src 'self' www.firestorm.ch *.firestorm.ch *.firestorm.de fonts.googleapis.com *.server2sms.com *.googleapis.com use.fontawesome.com *.gstatic.com *.googletagmanager.com *.google-analytics.com cdnjs.cloudflare.com *.firestorm.ch www.google.com *.google.ch *.google.com *.w3.org *.clickcease.com *.youtube.com *.doubleclick.net 2d453998.rocketcdn.me 'unsafe-inline' 'unsafe-eval' data:; object-src 'self' data: 'unsafe-eval'; frame-src www.firestorm.ch www.firestorm.de *.firestorm.ch chat.firestorm.ch *.youtube.com *.google.com 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.bestlawyers.com *.blrankings.com *.azure.com *.azurewebsites.net *.googleadservices.com *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com *.google-analytics.com *.visualstudio.com *.issuu.com *.doubleclick.net *.facebook.com *.facebook.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.azureedge.net *.vimeo.com *.vimeocdn.com *.youtube.com youtube.com *.ytimg.com *.braintree-api.com *.braintreegateway.com static.cloudflateinsights.com *.paypal.com *.paypalobjects.com *.sitedataprocessing.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.hsforms.com *.hs-sites.com hubspot-forms-static-embed.s3.amazonaws.com static.hsappstatic.net *.hubspot.com *.hsadspixel.net *.hubapi.com vimeo.com *.clarity.ms https://c.bing.com *.convertexperiments.com https://*.byspotify.com *.spotify.com *.quantserve.com *.quantcount.com *.navattic.com *.lfeeder.com; frame-ancestors 'self' https://*.bestlawyers.com *.azurewebsites.net; 2 frame-ancestors 'self' https://airmail.news https://*.airmail.news https://*.airmailmedia.com https://puzzlist.com https://*.puzzlist.com https://waffleclub.com https://*.waffleclub.com https://waffle.dev http://localhost:5173; 2 object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vtm-test.cutm.nfrance.com vtm-test.cutm.nfrance.com https://vtm-preprod.cutm.nfrance.com vtm-preprod.cutm.nfrance.com https://metropole.toulouse.fr metropole.toulouse.fr https://public.message-business.com public.message-business.com https://tmcsi.widgets.secutix.com tmcsi.widgets.secutix.com https://tmcsi.pp-widgets.secutix.com tmcsi.pp-widgets.secutix.com https://tmcsi-dasc.pp-shop.secutix.com tmcsi-dasc.pp-shop.secutix.com https://tmcsi-dasc.shop.secutix.com tmcsi-dasc.shop.secutix.com https://matomo.toulouse-metropole.fr https://optanon.blob.core.windows.net https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com ajax.googleapis.com https://www.google.com www.google.com https://svc.webspellchecker.net svc.webspellchecker.net https://forms.sbc35.com forms.sbc35.com https://tarteaucitron.io tarteaucitron.io https://vtm-test.cutm.nfrance.com/libraries/jstree/dist/jstree.min.js https://tmcsi.widgets.secutix.com/stx-widgets/Newsletter/v1/Newsletter.js https://tmcsi.pp-widgets.secutix.com/stx-widgets/Newsletter/v1/Newsletter.js https://www.google.com/recaptcha/api.js https://public.message-business.com/Javascript/form/MB_Form_JsApp.js https://stx-gravity-p1-widgets.quantum.secutix.com https://stx-gravity-p1-widgets.quantum.secutix.com/stx-widgets/v2/Widgets.js https://player.ausha.co/ausha-player.js https://cdntag.tarteaucitron.io https://logs.tarteaucitron.io https://cdn.tarteaucitron.io https://fonts.googleapis.com cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.recaptcha.net unpkg.com www.gstatic.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://vtm-test.cutm.nfrance.com vtm-test.cutm.nfrance.com https://vtm-preprod.cutm.nfrance.com vtm-preprod.cutm.nfrance.com https://metropole.toulouse.fr metropole.toulouse.fr https://public.message-business.com public.message-business.com https://tmcsi.widgets.secutix.com tmcsi.widgets.secutix.com https://tmcsi.pp-widgets.secutix.com tmcsi.pp-widgets.secutix.com https://tmcsi-dasc.pp-shop.secutix.com tmcsi-dasc.pp-shop.secutix.com https://tmcsi-dasc.shop.secutix.com tmcsi-dasc.shop.secutix.com https://matomo.toulouse-metropole.fr https://optanon.blob.core.windows.net https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com ajax.googleapis.com https://www.google.com www.google.com https://svc.webspellchecker.net svc.webspellchecker.net https://forms.sbc35.com forms.sbc35.com https://tarteaucitron.io tarteaucitron.io https://cdn.tarteaucitron.io cdn.tarteaucitron.io https://matomo-pp.cutm.nfrance.net matomo-pp.cutm.nfrance.net connect.facebook.net cdn.onesignal.com platform.twitter.com www.youtube.com www.recaptcha.net www.gstatic.com onesignal.com https://stx-gravity-p1-widgets.quantum.secutix.com https://player.ausha.co player.ausha.co https://cdntag.tarteaucitron.io https://logs.tarteaucitron.io https://fonts.googleapis.com cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.recaptcha.net unpkg.com; style-src 'self' 'unsafe-hashes' 'unsafe-inline' https://vtm-test.cutm.nfrance.com vtm-test.cutm.nfrance.com https://vtm-preprod.cutm.nfrance.com vtm-preprod.cutm.nfrance.com https://metropole.toulouse.fr metropole.toulouse.fr https://public.message-business.com public.message-business.com https://tmcsi.widgets.secutix.com tmcsi.widgets.secutix.com https://tmcsi.pp-widgets.secutix.com tmcsi.pp-widgets.secutix.com https://tmcsi-dasc.pp-shop.secutix.com tmcsi-dasc.pp-shop.secutix.com https://tmcsi-dasc.shop.secutix.com tmcsi-dasc.shop.secutix.com https://matomo.toulouse-metropole.fr https://optanon.blob.core.windows.net https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com ajax.googleapis.com https://www.google.com www.google.com https://svc.webspellchecker.net svc.webspellchecker.net https://stx-gravity-p1-widgets.quantum.secutix.com https://cdn.tarteaucitron.io https://fonts.googleapis.com cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem * 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' https://vtm-test.cutm.nfrance.com vtm-test.cutm.nfrance.com https://vtm-preprod.cutm.nfrance.com vtm-preprod.cutm.nfrance.com https://metropole.toulouse.fr metropole.toulouse.fr https://public.message-business.com public.message-business.com https://tmcsi.widgets.secutix.com tmcsi.widgets.secutix.com https://tmcsi.pp-widgets.secutix.com tmcsi.pp-widgets.secutix.com https://tmcsi-dasc.pp-shop.secutix.com tmcsi-dasc.pp-shop.secutix.com https://tmcsi-dasc.shop.secutix.com tmcsi-dasc.shop.secutix.com https://matomo.toulouse-metropole.fr https://optanon.blob.core.windows.net https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com ajax.googleapis.com https://www.google.com www.google.com https://svc.webspellchecker.net svc.webspellchecker.net https://cdn.jsdelivr.net cdn.jsdelivr.net https://stx-gravity-p1-widgets.quantum.secutix.com https://cdn.tarteaucitron.io https://fonts.googleapis.com; report-to default 2 base-uri 'self'; style-src 'self' 'unsafe-inline' https: https://fast.wistia.com blob:; default-src 'self' data: https: https://*.wistia.com https://*.wistia.net https://c.bing.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.clarity.ms https://serve.albacross.com https://www.redditstatic.com https://cdn.jsdelivr.net https://*.pardot.com https://*.wpmucdn.com https://tracking-api.g2.com https://www.youtube.com https://s.youtube.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://px.ads.linkedin.com https://dc.ads.linkedin.com https://snap.licdn.com https://platform.twitter.com https://analytics.twitter.com https://t.co https://cdn.cookielaw.org https://utt.impactcdn.com https://www.redditstatic.com https://vyond.widget.insent.ai https://think.vyond.com https://js.partnerstack.com https://cdn.amplitude.com https://bat.bing.com https://*.vyond.com https://*.g2.com https://*.6sc.co https://j.6sc.co https://www.y.ms https://*.wistia.net https://*.wistia.com https://src.litix.io https://*.sentry-cdn.com https://*.clarity.ms https://c.bing.com; connect-src 'self' wss: https: https://alb.reddit.com https://*.litix.io https://*.wistia.com https://*.wistia.net https://*.algolia.net https://*.clarity.ms https://c.bing.com https://*.g2.com; font-src 'self' data: https: https://*.wistia.com; frame-src 'self' https: https://fast.wistia.net https://fast.wistia.com https://www.youtube.com https://youtube.com https://www.facebook.com https://platform.twitter.com https://vars.hotjar.com https://script.hotjar.com https://consent.trustarc.com https://bat.bing.com https://www.clarity.ms; img-src http: https: data: https://alb.reddit.com https://www.reddit.com https://*.wistia.com https://*.wistia.net https://*.clarity.ms https://c.bing.com https://*.g2.com; manifest-src 'self'; media-src 'self' data: blob: https: https://*.wistia.com https://*.wistia.net https://www.youtube.com *; worker-src 'self' blob: https://*.wistia.com https://*.wistia.net; child-src 'self' blob:; object-src 'self' https://*.wistia.com https://*.wistia.net; 2 frame-ancestors https://app.netlify.com https://create.netlify.com https://create.netlifystg.com https://www.sanity.io https://*.sanity.studio https://hex-studio.sanity.studio 'self' 2 default-src 'self' blob: data: 'unsafe-inline' *.readspeaker.com *.gstatic.com embedr.flickr.com widgets.flickr.com; img-src 'self' blob: data: 'unsafe-inline' placehold.it *.readspeaker.com *.iscte-iul.pt iscte-iul.pt *.googleapis.com *.gstatic.com *.google-analytics.com www.google.com www.google.pt www.linkedin.com stats.g.doubleclick.net ciencia.iscte-iul.pt px.ads.linkedin.com www.facebook.com live.staticflickr.com *.clarity.ms https://www.youtube-nocookie.com https://i.ytimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.readspeaker.com *.google.com *.clarity.ms *.googleapis.com *.google-analytics.com https://www.youtube.com/iframe_api www.gstatic.com https://connect.facebook.net https://snap.licdn.com https://px.ads.linkedin.com www.facebook.com embedr.flickr.com widgets.flickr.com https://hcaptcha.com https://*.hcaptcha.com *.unibuddy.co https://www.youtube.com https://www.youtube-nocookie.com https://www.youtube.com/iframe_api https://i.ytimg.com; object-src 'self'; connect-src 'self' https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true https://maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo *.readspeaker.com *.google-analytics.com *.clarity.ms embedr.flickr.com *.hcaptcha.com https://noembed.com; frame-src 'self' *.readspeaker.com *.google.com *.soundcloud.com https://www.youtube.com www.youtube.com youtu.be https://www.youtube.com/iframe_api https://sketchfab.com player.vimeo.com https://www.strava.com https://hcaptcha.com https://*.hcaptcha.com forms.office.com *.unibuddy.co unibuddy.co https://www.youtube-nocookie.com https://www.youtube.com/iframe_api https://i.ytimg.com; style-src 'self' 'unsafe-inline' *.readspeaker.com https://hcaptcha.com https://*.hcaptcha.com *.gstatic.com 2 default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://*.crazyegg.com http://*.typeform.com https://*.adcell.com https://*.adform.net https://*.bing.com https://*.clarity.ms https://*.facebook.net https://*.fleet.zone https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.licdn.com https://*.noknok.ee https://*.tallink.com https://*.useinsider.com https://vercel.live; style-src 'self' 'unsafe-inline' https://*.fleet.zone https://*.googleapis.com https://*.googletagmanager.com https://*.linkedin.com https://*.tallink.com https://*.typeform.com https://*.useinsider.com; img-src 'self' blob: data: https://*.bing.com https://*.chatlayer.ai https://*.cision.com https://*.clarity.ms https://*.cloudinary.com https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.ee https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.linkedin.com https://*.noknok.ee https://*.seadform.net https://*.tallink.com https://*.useinsider.com https://*.windows.net https://*.ytimg.com; font-src 'self' https://*.fleet.zone https://*.gstatic.com https://*.tallink.com https://*.useinsider.com; connect-src 'self' blob: data: https://*.ably-realtime.com https://*.ably.io https://*.adcell.com https://*.algolia.net https://*.bing.com https://*.bing.net https://*.chatlayer.ai https://*.clarity.ms https://*.cloudinary.com https://*.crazyegg.com https://*.demdex.net https://*.facebook.com https://*.fleet.zone https://*.fleet.zone:8443 https://*.google.com https://*.google.ee https://*.googleapis.com https://*.googletagmanager.com https://*.linkedin.com https://*.noknok.ee https://*.prh.fi https://*.reachmee.com https://*.rik.ee https://*.sentry.io https://*.tallink.com https://*.typeform.com https://*.useinsider.com wss://*.ably-realtime.com wss://*.ably.io wss://*.useinsider.com; manifest-src 'self'; frame-src 'self' https://*.adform.net https://*.demdex.net https://*.facebook.com https://*.fleet.zone https://*.google.com https://*.noknok.ee https://*.tallink.com https://*.typeform.com https://*.useinsider.com https://*.youtube.com https://infogram.com https://nasdaqbaltic.com https://vercel.live; frame-ancestors 'self' https://*.typeform.com; worker-src 'self' blob: https://*.useinsider.com; object-src 'self' data: https://*.useinsider.com; media-src 'self' blob: https://*.cloudinary.com https://*.googleapis.com; 2 default-src *; style-src 'unsafe-inline' *; font-src 'self' data: blob: *; img-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; connect-src * data: blob:; media-src 'self' blob: * data: *; frame-src * webcompt: heybox: maxjia: 2 img-src 'self' secure.gravatar.com img-hub.ru ps.w.org img.freepik.com www.acint.net data:; 2 frame-ancestors 'self' *.digital-watchdog.com support.digital-watchdog.com dw.beyondtrustcloud.com dwspectrum.com; 2 frame-ancestors 'self' https://aligned.com https://*.teamaligned.com 2 frame-ancestors 'self' https://one.hu https://digi.hu https://salesweb.digi.hu; object-src 'self'; 2 frame-ancestors 'self' *.pellawi.com pellawi.com *.pellaomaha.com rest-preview.contentstack.com app.contentstack.com app.unbounce.com unbouncepages.com 2 frame-ancestors 'self' ai.nb.no tools.nb.no produksjon.nb.no dev.produksjon.nb.no; 2 default-src 'self' assets-next.mattersprotocol.io; script-src 'self' 'wasm-unsafe-eval' assets-next.mattersprotocol.io 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com challenges.cloudflare.com *.google-analytics.com *.analytics.google.com js.stripe.com *.cloudflareinsights.com pagead2.googlesyndication.com *.adtrafficquality.google *.doubleclick.net tpc.googlesyndication.com adservice.google.com; style-src 'self' 'unsafe-inline' assets-next.mattersprotocol.io fonts.googleapis.com; img-src 'self' data: blob: assets.matters.news imagedelivery.net assets-next.mattersprotocol.io *.matters.town nft-cdn.alchemy.com matters-server-production.s3-ap-southeast-1.amazonaws.com *.google-analytics.com *.walletconnect.com *.walletconnect.org matters-billboard-ad.s3.ap-southeast-1.amazonaws.com/ pagead2.googlesyndication.com googleads.g.doubleclick.net *.adtrafficquality.google; font-src 'self' fonts.gstatic.com; media-src 'self' data: blob: assets.matters.news imagedelivery.net assets-next.mattersprotocol.io *.matters.town nft-cdn.alchemy.com matters-server-production.s3-ap-southeast-1.amazonaws.com *.google-analytics.com *.walletconnect.com *.walletconnect.org matters-billboard-ad.s3.ap-southeast-1.amazonaws.com/ pagead2.googlesyndication.com googleads.g.doubleclick.net *.adtrafficquality.google; connect-src 'self' ws: wss: assets-next.mattersprotocol.io https://server.matters.town/graphql https://server.matters.news/graphql upload.imagedelivery.net *.google-analytics.com firebase.googleapis.com firebaseinstallations.googleapis.com fcmregistrations.googleapis.com api.stripe.com *.walletconnect.org *.walletconnect.com *.web3modal.org *.alchemyapi.io *.alchemy.com cloudflare-ipfs.com/ipfs/ ipfs.io/ipfs/ ipfs-gateway.matters.town/ipfs/ ipfs.w3s.link *.ingest.us.sentry.io pagead2.googlesyndication.com *.adtrafficquality.google adservice.google.com *.doubleclick.net; frame-src 'self' button.like.co www.youtube.com player.vimeo.com player.bilibili.com www.bilibili.com www.instagram.com jsfiddle.net codepen.io challenges.cloudflare.com js.stripe.com hooks.stripe.com *.walletconnect.com *.walletconnect.org pagead2.googlesyndication.com googleads.g.doubleclick.net tpc.googlesyndication.com *.adtrafficquality.google www.google.com; prefetch-src 'self' assets-next.mattersprotocol.io; worker-src 'self' blob:; report-uri https://o4507972688478208.ingest.us.sentry.io/api/4510956671467520/security/?sentry_key=6ba18c87f395dd836e1c479f2c9004f2; report-to csp-endpoint 2 worker-src blob: https://*.georgeson.com https://www.googletagmanager.com;script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://content-assets.computershare.com https://ui.customsearch.ai https://s508159127.t.eloqua.com https://ssl.google-analytics.com https://www.google-analytics.com https://*.evidon.com https://img03.en25.com https://js.adsrvr.org https://snap.licdn.com https://view.ceros.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://secure.quantserve.com https://*.pub.sfmc-content.com https://rules.quantcount.com https://*.adsrvr.org https://snap.licdn.com https://widget.trustpilot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.crazyegg.com https://bat.bing.com https://gateway.zscloud.net https://*.nr-data.net https://*.newrelic.com https://*.usw2.pure.cloud https://*.cshare.net https://apps.mypurecloud.com 'unsafe-eval' https://*.google.com https://partner.googleadservices.com https://*.google https://pagead2.googlesyndication.com https://apps.mypurecloud.com.au;connect-src https://www.googletagmanager.com https://www.google-analytics.com https://s508159127.t.eloqua.com https://*.evidon.com https://cdn.linkedin.oribi.io https://siteintercept.qualtrics.com https://rules.quantcount.com https://pixel.quantcount.com https://stats.g.doubleclick.net https://*.crazyegg.com https://px.ads.linkedin.com https://content-images.computershare.com https://*.nr-data.net https://shyrka-prod-usw2.s3.us-west-2.amazonaws.com https://*.newrelic.com https://*.usw2.pure.cloud wss://*.usw2.pure.cloud https://www.google.com https://*.mypurecloud.com wss://*.mypurecloud.com https://*.google https://pagead2.googlesyndication.com https://*.euw2.pure.cloud wss://*.euw2.pure.cloud; img-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://content-images.computershare.com data: https://content-images.computershare.com https://*.evidon.com https://px.ads.linkedin.com https://insight.adsrvr.org https://siteintercept.qualtrics.com https://pixel.quantcount.com https://pixel.quantserve.com https://pixel.rubiconproject.com https://*.crazyegg.com https://secure.adnxs.com https://bat.bing.com https://bs.serving-sys.com https://gateway.zscloud.net https://*.usw2.pure.cloud https://*.google.com https://*.gstatic.com https://pagead2.googlesyndication.com https://*.google https://*.euw2.pure.cloud;frame-src https://bc-unclaimedassets.computershare.co.uk https://view.ceros.com https://player.vimeo.com https://landing.computershare.com https://www.youtube.com https://www.military.com https://sls.co1.qualtrics.com https://*.pub.sfmc-content.com https://*.adsrvr.org https://widget.trustpilot.com https://*.pub.s6.sfmc-content.com https://www.canva.com https://*.crazyegg.com https://www.youtube-nocookie.com https://gateway.zscloud.net https://*.computershare.com https://*.usw2.pure.cloud https://www.googletagmanager.com https://*.doubleclick.net https://syndicatedsearch.goog https://apps.mypurecloud.com https://apps.mypurecloud.com.au https://*.euw2.pure.cloud;style-src 'self' 'unsafe-inline' https://*.computershare.com https://www.google.com;default-src 'self' https://*.computershare.com; media-src 'self' https://*.computershare.com; font-src 'self' data: https://*.computershare.com; 2 connect-src * ; default-src 'self' *.gs.com:* *.cft.gs:* data: blob: ; frame-ancestors 'self' *.gs.com:* *.cft.gs:* ; img-src 'self' *.gs.com:* *.cft.gs:* https://images.ctfassets.net 'unsafe-inline' https://consent.trustarc.com https://b.6sc.co data: blob: ; font-src https://consent.trustarc.com 'self' *.gs.com:* *.cft.gs:* data: ; script-src 'self' 'unsafe-eval' *.gs.com:* *.cft.gs:* ; worker-src 'self' *.gs.com:* *.cft.gs:* blob: data: ; style-src 'self' 'unsafe-inline' *.gs.com:* *.cft.gs:* ; media-src 'self' *.gs.com:* *.cft.gs:* data: blob: https://media-gsam.akamaized.net/ ; frame-src 'self' *.gs.com:* *.cft.gs:* *.gsam.com:* https://consent-pref.trustarc.com/ https://na-ab44.marketo.com/ https://mirror.gsmessenger.com/ https://*.jiji.com https://tools.euroland.com https://tools.eurolandir.com ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://consent.trustarc.com https://na-ab44.marketo.com https://mirror.gsmessenger.com https://unpkg.com https://gateway.zscalerthree.net https://ds-aksb-a.akamaihd.net https://s.go-mpulse.net https://j.6sc.co ; style-src-elem 'self' 'unsafe-inline' https://na-ab44.marketo.com https://mirror.gsmessenger.com https://unpkg.com https://login.idfs.gs.com https://cdn.gs.com 2 upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://fuse.fusenext.io https://fuse.fusesearch.app 2 default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googleoptimize.com www.google-analytics.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com cdnjs.cloudflare.com mimo84.github.io bpaid.unfyd.com bpost2.unfyd.com www.google.com www.gstatic.com cdn.rawgit.com *.googletagmanager.com optanon.blob.core.windows.net cdn.cookielaw.org code.jquery.com ajax.googleapis.com w.usabilla.com www.bpost2.be http://bpost2.be maps.googleapis.com connect.facebook.net s.pinimg.com img.en25.com api.usabilla.com d6tizftlrpuof.cloudfront.net bpost.wikafi.be bat.bing.com geolocation.onetrust.com static.addtoany.com *.licdn.com *.linkedin.com hello.bpost.be static.zdassets.com unpkg.com mktdplp102cdn.azureedge.net oc-cdn-public-eur.azureedge.net msft-lcw-trial.azureedge.net *.urlgeni.us *.clarity.ms *.google.com cxppeur1rdrect01sa02cdn.blob.core.windows.net 2uqtsoukg0.kameleoon.io *.kameleoon.io *.kameleoon.eu *.kameleoon.com www.recaptcha.net https://googleads.g.doubleclick.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/eur/FormCapture/FormCapture.bundle.js https://gateway.zscalerthree.net/ *.dante-ai.com; object-src 'self' bpaid.unfyd.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net maxcdn.bootstrapcdn.com cdnjs.cloudflare.com mimo84.github.io fonts.googleapis.com bpaid.unfyd.com bpost2.unfyd.com bpost2.unfyd.com www.google.com optanon.blob.core.windows.net www.bpost2.be bpost2.be cdn.cookielaw.org d6tizftlrpuof.cloudfront.net bpost.wikafi.be bat.bing.com static.addtoany.com oc-cdn-public-eur.azureedge.net msft-lcw-trial.azureedge.net 'self' 'unsafe-inline' *.googletagmanager.com https://unpkg.com; img-src 'self' www.google-analytics.com cdnjs.cloudflare.com *.googletagmanager.com www.w3.org bpaid.unfyd.com bpost2.unfyd.com www.bpost.be faq.bpost.cloud www.google.com cdn.rawgit.com raw.githubusercontent.com ssl.gstatic.com www.gstatic.com lh3.googleusercontent.com www.bpost2.be bpost2.be fonts.gstatic.com d6tizftlrpuof.cloudfront.net ct.pinterest.com www.facebook.com www.google.be cdn.cookielaw.org w.usabilla.com hello.bpost.be www.w3.org cdn.cookielaw.org maps.gstatic.com maps.googleapis.com data: d6tizftlrpuof.cloudfront.net www.facebook.com hello.bpost.be bpost.wikafi.be bat.bing.com *.linkedin.com static.addtoany.com bgt.bpost.be 538835779d824008aefa55a061aa72cc.svc.dynamics.com svc.dynamics.com dynamics.com dynamics.com/t/v/ 538835779d824008aefa55a061aa72cc.svc.dynamics.com/t/v/ oc-cdn-public-eur.azureedge.net msft-lcw-trial.azureedge.net *.clarity.ms *.google.com *.gstatic.com https://c.bing.com https://www.google.co.in *.kameleoon.io; frame-src 'self' bpaid.unfyd.com www.google.com www.bpost2.be pass.bpost.be preprints.taxipost.net maf.taxipost.net www.youtube.com youtube.com www.bpost.be campaigns.bpost2.be www.facebook.com bpost2.be d6tizftlrpuof.cloudfront.net http://www.bpost.be www.facebook.com bpost.wikafi.be d30o8tpw3q5jvi.cloudfront.net dmc.bpost.cloud news.bpost.be player.vimeo.com static.addtoany.com 11319605.fls.doubleclick.net oc-cdn-public-eur.azureedge.net msft-lcw-trial.azureedge.net *.dynamics.com *.surveysparrow.com youtu.be *.usabilla.com *.googletagmanager.com syndicatedsearch.goog bpostresearch.chkmkt.com www.recaptcha.net https://gateway.zscalerthree.net/ *.dante-ai.com; frame-ancestors 'self' http://oas-pr.netpost; child-src 'self' blob:; font-src 'self' fonts.gstatic.com cdn.jsdelivr.net fonts.googleapis.com cdnjs.cloudflare.com bpaid.unfyd.com bpost2.unfyd.com maxcdn.bootstrapcdn.com www.bpost2.be bpost2.be bpost.wikafi.be; connect-src 'self' www.google-analytics.com s1833705806.t.eloqua.com chatbot.bpost.be bpaid.unfyd.com bpost2.unfyd.com cdn.cookielaw.org ct.pinterest.com stats.g.doubleclick.net api.usabilla.com cdn.cookielaw.org stats.g.doubleclick.net bpost.wikafi.be privacyportal-de.onetrust.com ekr.zdassets.com elkezaakonline.zendesk.com static.addtoany.com stats.addtoany.com geolocation.onetrust.com *.google-analytics.com api.gcm-pr.bpost.cloud maps.googleapis.com www.google-analytics.com region1.analytics.google.com analytics.google.com *.dynamics.com *.screeb.app *.surveysparrow.com https://prod-162.westeurope.logic.azure.com https://urlgeni.us https://mdy.api.bpost.be youtube.com www.google.com *.clarity.ms nominatim.openstreetmap.org mobile.events.data.microsoft.com eu-data.kameleoon.io *.kameleoon.io *.kameleoon.eu *.kameleoon.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://unpkg.com https://googleads.g.doubleclick.net www.recaptcha.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/eur/FormCapture/FormCapture.bundle.js.map https://eu-mobile.events.data.microsoft.com px.ads.linkedin.com cdn.jsdelivr.net ad.doubleclick.net; report-uri /report-csp-violation; upgrade-insecure-requests 2 connect-src https://*.adtrafficquality.google https://www.adtrafficquality.google https://*.googlesyndication.com https://googlesyndication.com https://*.hotjar.io 'self' webpack: https://*.google.com https://region1.google-analytics.com https://www.google-analytics.com https://*.hotjar.com wss://*.hotjar.com https://*.clarity.ms https://*.cookiebot.com https://*.linkedin.com https://*.doubleclick.net https://*.facebook.com https://*.riba.org;frame-src https://*.adtrafficquality.google https://www.googleadservices.com/ https://*.doubleclick.net/ https://*.googlesyndication.com https://*.adtrafficquality.google/ https://www.ribacpd.com/ https://vevox.app 'self' https://www.googletagmanager.com https://www.youtube.com https://consentcdn.cookiebot.com https://*.vimeo.com https://*.powerbi.com https://*.soundcloud.com https://*.canva.com https://*.wufoo.eu https://*.wufoo.com https://*.google.co.uk https://*.google.com https://*.office.com https://*.riba.org https://*.castr.com https://*.heyzine.com https://heyzine.com;img-src https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://*.google.com https://*.adtrafficquality.google 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://*.cookiebot.com https://*.ytimg.com https://*.linkedin.com https://*.facebook.com https://*.clarity.ms https://*.bing.com https://connect.facebook.net https://www.google.md https://www.google.co.uk https://darkroom.ribaj.com https://*.t.co https://*.twitter.com https://t.co;media-src https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://*.google.com https://*.adtrafficquality.google 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://*.cookiebot.com https://*.ytimg.com https://*.linkedin.com https://*.facebook.com https://*.clarity.ms https://*.bing.com https://connect.facebook.net https://www.google.md https://www.google.co.uk https://darkroom.ribaj.com https://*.t.co https://*.twitter.com https://t.co;script-src https://*.googlesyndication.com https://www.googlesyndication.com https://*.adtrafficquality.google https://securepubads.g.doubleclick.net/tag/js/gpt.js https://*.doubleclick.net https://*.vimeo.com https://*.getsitecontrol.com 'self' 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com https://www.googletagmanager.com https://*.cookiebot.com https://*.clarity.ms https://www.youtube.com https://www.google-analytics.com https://static.ads-twitter.com https://snap.licdn.com https://connect.facebook.net https://*.adform.net https://*.oastify.com;default-src 'self';font-src 'self' data: https://fonts.gstatic.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com 2 frame-ancestors 'self' *.katalon.com;; upgrade-insecure-requests 2 default-src 'unsafe-inline' 'unsafe-eval' data: https://*; connect-src 'self' https://*; media-src https://* http://download.milestonesys.com/; 2 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://static.cloudflareinsights.com https://ssl.google-analytics.com https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://www.googletagmanager.com https://ajax.googleapis.com code.jquery.com https://challenges.cloudflare.com; script-src-elem 'self' 'unsafe-inline' https://js.stripe.com https://static.cloudflareinsights.com https://ssl.google-analytics.com https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://www.googletagmanager.com https://ajax.googleapis.com code.jquery.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: https://q.stripe.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.stripe.com https://r.stripe.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://www.google-analytics.com https://ssl.google-analytics.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com 2 base-uri *; font-src * data:; form-action *; frame-ancestors *; img-src * data: blob:; object-src *; script-src-attr 'none'; style-src * https: 'unsafe-inline'; upgrade-insecure-requests; 2 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval';img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src * data:; worker-src * blob:; 2 child-src 'self' https://widgets.outbrain.com/ https://platform.twitter.com/ https://ams.creativecdn.com/ https://gum.criteo.com/ https://fledge.eu.criteo.com/ https://fledge.criteo.com/ https://static.criteo.net/ https://td.doubleclick.net/ https://3689183.fls.doubleclick.net/ https://10089018.fls.doubleclick.net/ https://c1.adform.net/ umap.openstreetmap.fr https://quefairedemesdechets.ademe.fr https://player.ausha.co https://carte-jnr.fr https://826367cf.sibforms.com https://umap.openstreetmap.fr https://remonterletemps.ign.fr https://www.google.com https://www.geoportail.gouv.fr https://my.sendinblue.com https://www.observatoire-des-territoires.gouv.fr https://ssm-ecologie.shinyapps.io umap.incubateur.anct.gouv.fr https://les-mobilites-innov.vercel.app https://my.brevo.com https://www.dailymotion.com https://widget.make.org https://embed.acast.com https://tr.snapchat.com https://insight.adsrvr.org https://fledge.teads.tv https://match.adsrvr.org https://fa4dd5c3.sibforms.com https://geo.dailymotion.com https://macarte.ign.fr https://arcg.is https://experience.arcgis.com https://www.youtube-nocookie.com; frame-src 'self' https://widgets.outbrain.com/ https://platform.twitter.com/ https://ams.creativecdn.com/ https://gum.criteo.com/ https://fledge.eu.criteo.com/ https://fledge.criteo.com/ https://static.criteo.net/ https://td.doubleclick.net/ https://3689183.fls.doubleclick.net/ https://10089018.fls.doubleclick.net/ https://c1.adform.net/ umap.openstreetmap.fr https://quefairedemesdechets.ademe.fr https://player.ausha.co https://carte-jnr.fr https://826367cf.sibforms.com https://umap.openstreetmap.fr https://remonterletemps.ign.fr https://www.google.com https://www.geoportail.gouv.fr https://my.sendinblue.com https://www.observatoire-des-territoires.gouv.fr https://ssm-ecologie.shinyapps.io umap.incubateur.anct.gouv.fr https://les-mobilites-innov.vercel.app https://my.brevo.com https://www.dailymotion.com https://widget.make.org https://embed.acast.com https://tr.snapchat.com https://insight.adsrvr.org https://fledge.teads.tv https://match.adsrvr.org https://fa4dd5c3.sibforms.com https://geo.dailymotion.com https://mission-transition-ecologique.beta.gouv.fr https://macarte.ign.fr https://arcg.is https://experience.arcgis.com https://www.youtube-nocookie.com; script-src 'self' 'unsafe-eval' 'sha256-GEmTd95eAGvrxhP3QnFTr7+Lax78pl1ndxJzchCgn6Y=' 'sha256-4zxVVkPpC89VtojcGa1G5VPzngVkztn2u8JaUsiqZ3w=' 'sha256-d9Nhfu86ZpPLzR1ZFc1Woo6Jv6CtPqCA14mSN/bnDYk=' 'sha256-7m63w4in/vG4uUHtq4LhidCqFYMBnTJtUVGry+V0fMU=' 'sha256-qPWPDs41iWORF0XEtF5fQcKIlJ/yy0M51JKvIw21xkk=' 'sha256-foOqxbTlRYgCsgb2CYnAJnGqKZK3sxeXQydeQSC9pR4=' 'sha256-P4sW2WuBXBFbSe27NM8oQ2M+g7o2IbLqe4V3rux/8eA=' 'sha256-ODp/8+TYjInEiOZmtQ9mvIGHuJOOoSgSr3dYmJiy6Fw=' 'sha256-tUt4X8C2FtEKzcsd6yMq4mgdKCCmx6IFWZqPT4r8mJ8=' 'sha256-1P+17kjHUif7i9SVcb/0INVKhw0vu0L+QErV/nCj6UY=' 'sha256-MdWCW0PX/uFUXD1j3cJocYI+IE9vhIbmmF7msKTK90I=' 'sha256-S4m5DuhyjI+zOUYV2mO/7xUsfgQV0scBzvWlrbJqdko=' 'sha256-uegkKALbOITEttCL5aXtLhQ8+iU8+ms8IPWxae9cX1E=' 'strict-dynamic' 'nonce-BMaJnwp5ZN3UilIM6k0AEQ'; script-src-elem 'self' 'sha256-GEmTd95eAGvrxhP3QnFTr7+Lax78pl1ndxJzchCgn6Y=' 'sha256-4zxVVkPpC89VtojcGa1G5VPzngVkztn2u8JaUsiqZ3w=' 'sha256-d9Nhfu86ZpPLzR1ZFc1Woo6Jv6CtPqCA14mSN/bnDYk=' 'sha256-7m63w4in/vG4uUHtq4LhidCqFYMBnTJtUVGry+V0fMU=' 'sha256-qPWPDs41iWORF0XEtF5fQcKIlJ/yy0M51JKvIw21xkk=' 'sha256-foOqxbTlRYgCsgb2CYnAJnGqKZK3sxeXQydeQSC9pR4=' 'sha256-P4sW2WuBXBFbSe27NM8oQ2M+g7o2IbLqe4V3rux/8eA=' 'sha256-ODp/8+TYjInEiOZmtQ9mvIGHuJOOoSgSr3dYmJiy6Fw=' 'sha256-tUt4X8C2FtEKzcsd6yMq4mgdKCCmx6IFWZqPT4r8mJ8=' 'sha256-1P+17kjHUif7i9SVcb/0INVKhw0vu0L+QErV/nCj6UY=' 'sha256-MdWCW0PX/uFUXD1j3cJocYI+IE9vhIbmmF7msKTK90I=' 'sha256-S4m5DuhyjI+zOUYV2mO/7xUsfgQV0scBzvWlrbJqdko=' 'sha256-uegkKALbOITEttCL5aXtLhQ8+iU8+ms8IPWxae9cX1E=' 'strict-dynamic' 'nonce-BMaJnwp5ZN3UilIM6k0AEQ'; upgrade-insecure-requests 2 default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; form-action 'self' https://*.hsforms.com; upgrade-insecure-requests; block-all-mixed-content; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https://*.together.ai https://api.together.xyz https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://www.googleadservices.com https://*.amplitude.com https://px.ads.linkedin.com https://*.reddit.com https://analytics.twitter.com https://t.co https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hs-banner.com https://*.termly.io https://*.intellimize.co https://*.intellimizeio.com https://*.unifyintent.com https://*.lfeeder.com https://*.salesforce-scrt.com https://boards-api.greenhouse.io https://*.bizzabo.com https://challenges.cloudflare.com https://maps.googleapis.com https://*.b-cdn.net; frame-src 'self' https://*.together.ai https://www.googletagmanager.com https://*.my.site.com https://*.bizzabo.com https://challenges.cloudflare.com https://*.hsforms.com https://www.youtube-nocookie.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' https: 2 default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; media-src 'self' https://www.youtube.com https://*.vimeo.com; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'none'; font-src 'self' https://identity.mandai.com; object-src 'none'; 2 frame-ancestors 'self' https://solar.justpark.com https://business.justpark.com https://pay-26l.pages.dev/ https://o2landingpage.kinsta.cloud/ https://pay.justpark.com/ https://*.justpark.workers.dev/ https://app.storyblok.com/ 2 default-src 'self'; font-src 'self' fonts.bunny.net data:; img-src 'self' matomo.sib.swiss fonts.googleapis.com fonts.gstatic.com data: blob: ui-avatars.com; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' matomo.sib.swiss https://unpkg.com; style-src 'self' fonts.bunny.net 'unsafe-inline' https://unpkg.com; connect-src 'self' matomo.sib.swiss https://chat.expasy.org https://eutils.ncbi.nlm.nih.gov; 2 frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ts1.numeroblu.it https://widget.spreaker.com https://assets.sitescdn.net https://platform.twitter.com https://platform.linkedin.com https://*.iubenda.com https://*.liveperson.net https://www.googletagmanager.com https://cdn.eye-able.com https://answers.trenord.com.pagescdn.com https://trenord.mailmnsa.com https://bat.bing.com https://connect.facebook.net https://siteimproveanalytics.com https://googleads.g.doubleclick.net https://www.clarity.ms https://snap.licdn.com https://maps.googleapis.com https://www.geocms.it https://storage.googleapis.com https://*.lpsnmedia.net https://www.google.com https://*.paypal.com https://*.paypalobjects.com https://www.gstatic.com https://s.pinimg.com https://analytics.tiktok.com https://ct.pinterest.com https://download.pi.dynamics.com/sdk/web/msei-0.js; 2 default-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.hotjar.com *.hotjar.io code.jquery.com maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com rawgit.com *.googleapis.com tpc.googlesyndication.com www.youtube.com ad-log.dable.io pixel.mathtag.com td.doubleclick.net www.facebook.com www.google.com pagead2.googlesyndication.com 12327270.fls.doubleclick.net px.ads.linkedin.com www.google.com www.gstatic.com analytics.google.com analytics.tiktok.com www.google-analytics.com bat.bing.com www.facebook.com api.dable.io bat.bing.com cdn.jsdelivr.net cdnjs.cloudflare.com connect.facebook.net googleads.g.doubleclick.net pixel.mathtag.com s.yimg.com snap.licdn.com sp-api.dable.io static.ads-twitter.com static.dable.io track.omguk.com utt.impactcdn.com www.google.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.gstatic.com *.qualtrics.com tools.ietf.org eqms.rhbgroup.com; frame-src 'self' *.qualtrics.com eqms.rhbgroup.com www.youtube-nocookie.com tpc.googlesyndication.com omny.fm assets.bwbx.io www.youtube.com www.google.com td.doubleclick.net *.fls.doubleclick.net pixel.mathtag.com; style-src 'self' 'unsafe-inline' *; style-src-elem 'self' 'unsafe-inline' *; img-src * blob: data:; font-src 'self' * data:; connect-src 'self' wss://*.hotjar.com *.hotjar.com *.hotjar.io *.qualtrics.com tools.ietf.org eqms.rhbgroup.com transient-api-admin-lb.intranet.rhbgroup.com transientstg.rhbgroup.com www.google.com.sg fonts.googleapis.com stats.g.doubleclick.net pixel.mathtag.com td.doubleclick.net www.facebook.com www.google.com pagead2.googlesyndication.com 12327270.fls.doubleclick.net px.ads.linkedin.com www.google.com www.gstatic.com analytics.google.com analytics.tiktok.com www.google-analytics.com bat.bing.com www.facebook.com api.dable.io bat.bing.com cdn.jsdelivr.net cdnjs.cloudflare.com connect.facebook.net googleads.g.doubleclick.net pixel.mathtag.com s.yimg.com snap.licdn.com sp-api.dable.io static.ads-twitter.com static.dable.io track.omguk.com utt.impactcdn.com www.google.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.gstatic.com maps.googleapis.com www.googleapis.com www.google.com.my cdn.linkedin.oribi.io; upgrade-insecure-requests; 2 object-src https://cdn.speedcurve.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.speedcurve.com https://360learning.chilipiper.com https://munchkin.marketo.net https://www.googletagmanager.com https://fonts.googleapis.com https://cdn.amplitude.com https://pages.360learning.com https://www.instagram.com https://fast.wistia.com https://static.cdn.prismic.io https://prismic.io https://bat.bing.com https://appvizer.one https://pagead2.googlesyndication.com https://script.crazyegg.com https://redditstatic.com https://www.redditstatic.com https://snap.licdn.com https://connect.facebook.net https://tracking.g2crowd.net https://s.adroll.com https://amplify.outbrain.com https://tr.outbrain.com https://wave.outbrain.com https://googleads.g.doubleclick.net https://onsite.optimonk.com https://gs-cdn.optimonk.com https://ct.capterra.com https://browser.sentry-cdn.com https://fast.wistia.net https://tracking.g2crowd.com https://cdn-asset.optimonk.com https://d.adroll.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://ddwl4m2hdecbv.cloudfront.net/b/ https://b-code.liadm.com/lc2.js https://rp.liadm.com https://idx.liadm.com https://pro.ip-api.com https://alocdn.com/c/vn3d8u2u/a/xtarget/p.json https://*.liadm.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://a.usbrowserspeed.com https://pocustrack.com/ https://*.pocustrack.com https://cdn.cr-proxy.com https://cdn.vector.co; frame-ancestors 'self' https://*.lightning.force.com https://*.salesforce.com https://teams.microsoft.com https://*.sharepoint.com https://*.prismic.io 2 object-src 'none'; base-uri 'none'; frame-ancestors 'self' https://www.philips.co.uk https://*.philips.com https://*.usa.philips.com https://*.respirtech.com 2 frame-ancestors 'self' https://alpha.duoke.com https://alpha2.duoke.com https://alpha3.duoke.com https://web.duoke.com https://app.tongpaidang.com https://app.duoke.com 2 frame-ancestors https://*.relive.com https://*.relive.cc; form-action 'self'; object-src 'none'; upgrade-insecure-requests 2 default-src 'self' *.luno.com; script-src 'self' 'unsafe-inline' *.luno.com *.framer.com framer.com framerusercontent.com *.framerstatic.com sdk.privacy-center.org www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net cdn.amplitude.com *.google-analytics.com web-sdk-cdn.singular.net; style-src 'self' 'unsafe-inline' *.luno.com *.framer.com framerusercontent.com fonts.googleapis.com; img-src 'self' data: blob: *.luno.com *.framer.com framerusercontent.com *.lunostatic.com www.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net; font-src 'self' *.luno.com fonts.gstatic.com framerusercontent.com; connect-src 'self' *.luno.com *.framer.com *.framerstatic.com framerusercontent.com sdk-api-v1.singular.net api2.amplitude.com *.amplitude.com *.google-analytics.com www.google.com; frame-src 'self' *.luno.com *.framer.com framer.com www.googletagmanager.com; media-src 'self' *.luno.com framerusercontent.com; worker-src blob: 'self'; object-src 'none'; base-uri 'self'; form-action 'self' *.luno.com; frame-ancestors 'self' *.luno.com; report-uri /csp_report; 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.jsdelivr.net/npm/ https://sf1-eu.readspeaker.com/script/4967/ https://cdn.jsdelivr.net/gh/jackocnr/ https://prod.widgets.burgerprofiel.vlaanderen.be/api/v1/ https://cdn-eu.readspeaker.com/script/4967/webReader/webReader.js https://www.googletagmanager.com https://cdn.popupsmart.com/bundle.js https://cdn.popupsmart.com/accounts/34422/9661/5/main.js https://cdn.jsdelivr.net/gh/stadgent/ https://www.google.com/pagead/1p-conversion/ https://cdn-eu.readspeaker.com/script/4967/webReader/r/ https://www.googleadservices.com/pagead/conversion/ https://script.hotjar.com/ https://www.clarity.ms/tag/ https://www.clarity.ms/s/ https://knrpc.olark.com/nrpc/ https://static.hotjar.com/c/hotjar-1813370.js https://www.google-analytics.com/analytics.js https://cdn.jsdelivr.net/npm/@snowplow/ https://projectaanvraag-api.uitdatabank.be https://ajax.googleapis.com/ajax/libs/jquery/ https://script.crazyegg.com/pages/ https://script.crazyegg.com/scripts/ https://js.arcgis.com https://api.olark.com https://scripts.clarity.ms https://cdn.popupsmart.com/accounts/34422/ https://unpkg.com/swiper/swiper-bundle.min.js https://unpkg.com https://cdn3.devexpress.com/jslib/ https://widget.onlineafspraken.nl/consumer/booking/book/ https://static.olark.com/ https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.js https://tni.widgets.burgerprofiel.dev-vlaanderen.be/api/v1/ https://static.hotjar.com/c/ https://stadgent.github.io/ https://static.opendatasoft.com/ https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.8.2/angular.min.js https://cdnjs.cloudflare.com/ajax/libs/angular-i18n/1.8.2/angular-locale_nl.min.js https://cdnjs.cloudflare.com/ajax/libs/angular-sanitize/1.8.2/angular-sanitize.min.js https://cdn-cookieyes.com/; object-src 'self' ; style-src 'self' 'unsafe-inline' https://sf1-eu.readspeaker.com/script/4967/ReadSpeaker.Styles.css https://cdn.jsdelivr.net/npm/@duetds/ https://cdn.jsdelivr.net/gh/NigelOToole/ https://cdn.jsdelivr.net/gh/jackocnr/ https://cdn-eu.readspeaker.com/script/4967/webReader/r/ https://cdn.popupsmart.com/accounts/34422/9661/5/main.css https://cdn.jsdelivr.net/gh/stadgent/ https://projectaanvraag-api.uitdatabank.be/widgets/layout/ https://unpkg.com/swiper/swiper-bundle.min.css https://js.arcgis.com/4.30/esri/themes/light/main.css https://cdn3.devexpress.com/jslib/ https://static.olark.com/ https://widget.onlineafspraken.nl/assets/ https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.css https://cdn.popupsmart.com/accounts/34422/ https://chosen.css/ https://www.googletagmanager.com/debug/ https://fonts.googleapis.com/ https://unpkg.com/tippy.js@6.3.7/dist/tippy.css https://static.opendatasoft.com/; img-src 'self' data: blob: https://sf1-eu.readspeaker.com/script/4967/img/ https://i.ytimg.com/vi_webp/ https://geo.gent.be/geoserver/ https://cdn.popupsmart.com/assets/ https://cdn.popupsmart.com/campaign_images/ https://cdn.popupsmart.com/uploaded/ https://cdn.jsdelivr.net/gh/stadgent/ https://www.googletagmanager.com/td https://c.clarity.ms/c.gif https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://www.googletagmanager.com/a https://www.google-analytics.com/collect https://translate.google.com/gen204 https://log.olark.com/jslog/log.png https://images.uitdatabank.be https://projectaanvraag-api.uitdatabank.be/assets/images/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://www.google.com/pagead/1p-conversion/ http://geo.gent.be/geoserver/wms https://data.stad.gent https://media.uitdatabank.be https://c.bing.com/c.gif https://images-prod-uitdatabank.imgix.net https://udb2-media.imgix.net/static/ https://communicatie-digitaal.gent.be https://studieplekken.ugent.be/assets/ https://img.transistor.fm https://apidg.gent.be https://www.dov.vlaanderen.be/geoserver/ https://www.dov.vlaanderen.be/geoserver/wms https://geo.api.vlaanderen.be https://wms.ngi.be/inspire/ortho/service https://tile.openstreetmap.org https://cdn.popupsmart.com/accounts/34422/ https://cdn-cookieyes.com/ https://stad.gent/; media-src 'self' https://app-eu.readspeaker.com/enterprise/iframeproxy.php https://rstts-eu.readspeaker.com/cgi-bin/rspeak/ https://static.olark.com/jsclient/sounds/olark-chimes.ogg; frame-src 'self' https://app-eu.readspeaker.com/ https://rstts-eu.readspeaker.com/ https://www.youtube-nocookie.com/ https://www.youtube.com/ https://www.vimeo.com/ https://www.googletagmanager.com/ https://data.stad.gent https://w.soundcloud.com https://stonly.com https://www.fietsrouteplanner.org https://static.olark.com/ https://share.transistor.fm https://forms.office.com https://open.spotify.com https://gent.maps.arcgis.com https://360-tour.be https://www.360-tour.be https://app.powerbi.com https://player.vimeo.com https://enquete.stad.gent/; child-src 'self' blob:; font-src 'self' data: https://fonts.gstatic.com/s/ https://cdn.jsdelivr.net/gh/stadgent/ https://projectaanvraag-api.uitdatabank.be/assets/webfonts/ https://ui.vlaanderen.be/2.latest/fonts/ https://static.olark.com https://js.arcgis.com/4.30/esri/ https://cdn3.devexpress.com/jslib/ https://widget.onlineafspraken.nl/themes/a2sp/css/fonts/; connect-src 'self' https://openingsuren.gent.be/api/v1/ https://region1.google-analytics.com/ https://handler-api.popupsmart.com https://data.stad.gent/api/records/1.0/search/ https://prod.widgets.burgerprofiel.vlaanderen.be/api/v1/ https://app-eu.readspeaker.com/cgi-bin/rsent https://www.google-analytics.com https://cdn-eu.readspeaker.com/script/4967/webReader/r/ https://rstts-eu.readspeaker.com/cgi-bin/rspeak/ https://extragis.gent.be/restproxygl/GLRestFacade2.svc/ https://vc.hotjar.io/sessions/1813370 https://www.google.com https://*.clarity.ms/collect https://knrpc.olark.com/nrpc/ https://sneeuwploeg.uitdatabank.be/publiq/t https://www.burgerprofiel.be https://script.crazyegg.com/pages/ https://pagestates-tracking.crazyegg.com https://tracking.crazyegg.com https://geo.gent.be/geoserver/ https://assets-tracking.crazyegg.com/healthcheck https://services2.arcgis.com https://static.arcgis.com/fonts/ https://www.arcgis.com https://geo.api.vlaanderen.be https://apidg.gent.be https://metrics.hotjar.io https://data.stad.gent wss://ws.hotjar.com/api https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.googletagmanager.com/ https://unpkg.com/swiper/swiper-bundle.min.js.map https://cdn.jsdelivr.net/npm/@snowplow/ https://js.arcgis.com/4.30/esri/ https://cdn.jsdelivr.net/gh/stadgent/ https://static.olark.com/ https://code.jquery.com https://widget.onlineafspraken.nl https://content.hotjar.io wss://ws.hotjar.com/api/v2/ https://www.dov.vlaanderen.be/geoserver/ https://probe.stad.gent https://unpkg.com/@district09/ https://tni.widgets.burgerprofiel.dev-vlaanderen.be/api/ https://unpkg.com/tippy.js@6.3.7/ https://unpkg.com/@popperjs/core@2.11.6/ https://contactapi.vlaanderen.be/api/ https://staging.contactapi.cc.vlaanderen.be/api/ https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.8.2/angular.min.js.map https://cdn.popupsmart.com/ https://cdn-cookieyes.com/ https://log.cookieyes.com/; report-uri /report-csp-violation; upgrade-insecure-requests 2 upgrade-insecure-requests; default-src sentry-new.tidio.co socket.tidio.co wss://socket.tidio.co uploads.tidio.com *.tidio.co *.tidiochat.com https://*.idnet.com https://*.idnet.net 'unsafe-inline' 'unsafe-eval' https://form-assets.mailchimp.com https://chimpstatic.com https://*.licdn.com https://*.ads.linkedin.com https://www.googleadservices.com https://*.doubleclick.net https://*.google.com https://www.google.co.uk https://www.google.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://widget.trustpilot.com https://fast.fonts.net https://*.stripe.com https://*.googleapis.com https://www.youtube.com https://www.youtube-nocookie.com https://consentcdn.cookiebot.com https://consent.cookiebot.com https://cdn-cookieyes.com https://*.cookieyes.com data: ; img-src cdnjs.cloudflare.com unpkg.com tidio-images-messenger.s3.us-east-1.amazonaws.com https: data: android-webview-video-poster: ; font-src https: data: ; object-src 'self'; base-uri 'self'; form-action https://www.idnet.com https://idnet.us4.list-manage.com; report-uri https://www.idnet.com/api/csp_receiver.php; 2 frame-ancestors https://clearlyip.com https://trunking.clearlyip.com https://cloud.clearlyip.com https://w.clearlyip.com https://clusterpbx.com https://go.clearlyip.com https://trunking.clearlyip.dev https://devices.clearlyip.com https://mirroradmin.clearlyip.com https://www.sendfax.to https://crosstalk.clearlyip.com https://incrediblesip.clearlyip.com https://vitalpbx.clearlyip.com https://screenfly.org https://clearlyip.ca https://telos.clearlyip.com/ https://14ip.com/ https://portal.14ip.com https://*.14ip.com http://beta.ai.clearlyip.com/ *.preview.clearlyip.dev; 2 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; 2 frame-ancestors 'self' https://*.lancashire.ac.uk https://*.uclan.ac.uk https://virtualexperience.uclan.ac.uk https://app.storyblok.com https://eu.posthog.com; form-action 'self' https://www.lancashire.ac.uk https://secure.worldpay.com https://www.facebook.com/tr/; object-src 'none'; report-uri https://o4504649999843328.ingest.us.sentry.io/api/4509411846062080/security/?sentry_key=ff39bd3e40413a6fcc6d02f474839a13; report-to csp-endpoint 2 frame-ancestors 'self' https://mydrive.univ-st-etienne.fr https://mydrive-ng.univ-st-etienne.fr https://laboratoirehubertcurien.univ-st-etienne.fr 2 default-src 'self' data: *.azblue.com azblue.com edge.sitecorecloud.io *.edge.sitecorecloud.io *.siteimproveanalytics.io siteimproveanalytics.io google.com *.google.com *.youtube.com youtube.com *.vimeo.com vimeo.com *.ytimg.com *.vimeocdn.com gateway.id.swg.umbrella.com *.netreturns.biz netreturns.biz *.qualtrics.com *.facebook.com *.my.salesforce-sites.com *.screenmeet.com *.ceros.com ceros.com *.ceros.site ceros.site *.amazonaws.com amazonaws.com azblue.my.site.com *.azblue.my.site.com azblue.my.salesforce-scrt.com *.azblue.my.salesforce-scrt.com *.googletagmanager.com googletagmanager.com healthchoiceaz.com *.healthchoiceaz.com fonts.googleapis.com fonts.gstatic.com *.formstack.com formstack.com *.ads.linkedin.com *.basis.net basis.net *.sitescout.com sitescout.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.azblue.com azblue.com *.siteimproveanalytics.com siteimproveanalytics.com *.formstack.com formstack.com *.google-analytics.com google-analytics.com googletagmanager.com *.googletagmanager.com ajax.googleapis.com http://ajax.googleapis.com *.ajax.googleapis.com *.google.com google.com vercel.live *.vercel.live gateway.id.swg.umbrella.com tockify.com *.tockify.com client.formularynavigator.com *.client.formularynavigator.com netreturns.biz *.netreturns.biz player.vimeo.com *.qualtrics.com static.cloudflareinsights.com connect.facebook.net *.dynatrace.com *.my.salesforce-sites.com azblue.secure.force.com *.azblue.secure.force.com *.gstatic.com *.googleapis.com cdnjs.cloudflare.com *.cdnjs.cloudflare.com *.ceros.com ceros.com *.ceros.site ceros.site azblue.my.salesforce-scrt.com *.azblue.my.salesforce-scrt.com youtube.com *.youtube.com *.sandbox.my.site.com googleads.g.doubleclick.net *.googleads.g.doubleclick.net healthchoiceaz.com *.healthchoiceaz.com snap.licdn.com *.basis.net basis.net azblue.my.site.com *.azblue.my.site.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.fonts.googleapis.com *.azblue.com azblue.com *.formstack.com formstack.com *.netreturns.biz netreturns.biz *.qualtrics.com *.my.salesforce-sites.com azblue.secure.force.com *.azblue.secure.force.com *.ceros.com ceros.com *.ceros.site ceros.site azblue.my.site.com *.azblue.my.site.com azblue.my.salesforce-scrt.com *.azblue.my.salesforce-scrt.com *.sandbox.my.site.com healthchoiceaz.com *.healthchoiceaz.com; connect-src 'self' *.azblue.com azblue.com edge.sitecorecloud.io *.edge.sitecorecloud.io *.google-analytics.com google-analytics.com *.doubleclick.net doubleclick.net *.siteimproveanalytics.io siteimproveanalytics.io *.cloudflare.com cloudflare.com *.coveo.com coveo.com analytics.google.com siteintercept.qualtrics.com vitals.vercel-insights.com gateway.id.swg.umbrella.com *.dynatrace.com *.my.salesforce-sites.com azblue.secure.force.com *.azblue.secure.force.com bcbsarizona.formstack.com *.ceros.com ceros.com *.ceros.site ceros.site vimeo.com *.vimeo.com youtube.com *.youtube.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.google.com google.com px.ads.linkedin.com *.ads.linkedin.com *.basis.net basis.net azblue.my.salesforce-scrt.com *.azblue.my.salesforce-scrt.com; media-src 'self' *.azblue.com azblue.com *.youtube.com youtube.com *.vimeo.com vimeo.com *.ceros.com ceros.com *.ceros.site ceros.site http://commondatastorage.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com; frame-src 'self' *.doubleclick.net *.google.com *.googletagmanager.com *.azblue.com azblue.com tockify.com *.tockify.com client.formularynavigator.com *.client.formularynavigator.com bcbsarizona.formstack.com *.bcbsarizona.formstack.com *.youtube.com youtube.com *.vimeo.com vimeo.com azblue.netreturns.biz netreturns.biz *.qualtrics.com *.facebook.com *.ceros.com ceros.com *.ceros.site ceros.site vercel.live azblue.my.salesforce-scrt.com *.azblue.my.salesforce-scrt.com azblue.my.site.com *.azblue.my.site.com *.sandbox.my.site.com healthchoiceaz.com *.healthchoiceaz.com *.sitescout.com sitescout.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 2 frame-ancestors *.yandex.ru 2 default-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.dwin1.com https://*.trustpilot.com https://www.google-analytics.com https://*.heartinternet.uk http://*.doubleclick.net https://*.doubleclick.net https://*.twitter.com http://static.ads-twitter.com https://static.ads-twitter.com https://connect.facebook.net https://www.googletagmanager.com https://t.co https://www.facebook.com https://www.google.com http://www.google.com https://www.google.co.uk https://www.google.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.dwin1.com https://*.awin1.com https://the.sciencebehindecommerce.com https://static.cloudflareinsights.com https://googleads.g.doubleclick.net https://*.termly.io https://adac.api.yoursrs.com/static/client.js https://adac.api.yoursrs.com/ajax https://*.cloudstorage.secureserver.net https://snap.licdn.com https://*.trustpilot.com https://*.googleapis.com https://code.jquery.com http://img1.wsimg.com https://analytics.twitter.com https://*.heartinternet.uk https://img1.wsimg.com https://*.twitter.com http://static.ads-twitter.com https://static.ads-twitter.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://cdn.polyfill.io http://*.tiqcdn.com https://*.tiqcdn.com https://*.cloudflare.com https://*.trustpilot.com https://*.bootstrapcdn.com https://*.heg-cp.com https://*.contentsquare.net https://app.contentsquare.com https://assets.calendly.com; style-src 'self' 'unsafe-inline' https://*.heartinternet.uk http://*.googleapis.com https://*.googleapis.com https://*.bootstrapcdn.com https://*.jsdelivr.net https://assets.calendly.com; font-src 'self' 'unsafe-inline' https://*.heartinternet.uk https://releases.flowplayer.org https://*.bootstrapcdn.com; img-src 'self' data: https://*.awin1.com https://www.googletagmanager.com https://*.ads.linkedin.com https://www.google.co.uk https://*.heartinternet.uk http://googleads.g.doubleclick.net http://t.co https://t.co http://www.google.com https://www.google.co.uk https://www.google.de https://www.facebook.com https://www.google.com https://*.doubleclick.net https://www.google-analytics.com https://*.akstat.io https://*.akamaihd.net https://analytics.twitter.com https://*.contentsquare.net https://assets.calendly.com; frame-src 'self' https://*.awin1.com https://*.trustpilot.com https://www.google-analytics.com https://*.heartinternet.uk http://*.doubleclick.net https://*.doubleclick.net https://*.twitter.com http://static.ads-twitter.com https://static.ads-twitter.com https://connect.facebook.net https://www.googletagmanager.com https://t.co https://www.facebook.com https://www.google.com http://www.google.com https://www.google.co.uk https://www.google.de https://calendly.com; connect-src 'self' https://*.awin1.com https://www.wepowerconnections.com https://www.zenaps.com https://the.sciencebehindecommerce.com https://www.google.com https://customer.heartinternet.uk/cp/public/v1.0/prices/domains https://customer.heartinternet.uk/cp/public/v1.0/subscriptions https://wwws.heartinternet.uk https://*.termly.io https://customer.heartinternet.uk/manage/basket.cgi https://customer.heartinternet.uk/manage/domain-search-data.cgi https://adac.api.yoursrs.com/ajax wss://adac.api.yoursrs.com/ws https://*.akstat.io https://*.go-mpulse.net https://cdn.linkedin.oribi.io https://*.akamaihd.net https://region1.google-analytics.com https://stats.g.doubleclick.net https://region1.analytics.google.com https://*.contentsquare.net https://*.contentsquare.com; worker-src blob:; child-src blob:; 2 default-src 'none'; img-src 'self'; style-src 'self'; form-action 'none'; frame-ancestors 'none'; base-uri 'none'; sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox; connect-src 'self'; script-src 'self' 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-src *; img-src * data: blob:; object-src 'self'; form-action *; frame-ancestors 'self' https://captcha.gecirtnotification.com 2 frame-ancestors 'self' https://app.contentful.com http://15.156.122.252 https://timescale.ghost.io https://assets.tigerdata.com https://assets.timescale.com https://timescale.com https://www.timescale.com https://studio.plasmic.app https://clarity.microsoft.com https://*.clarity.ms; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://cdn.segment.com https://cdn.cr-proxy.com https://*.googletagmanager.com https://www.googletagmanager.com http://js.hs-scripts.com https://*.hs-scripts.com https://js.hubspot.com https://js.hsforms.net https://static.hsappstatic.net https://*.hubspotusercontent-na1.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://connect.facebook.net https://j.6sc.co https://*.leandata.com https://tag.clearbitscripts.com https://x.clearbitjs.com https://static.ads-twitter.com https://analytics.twitter.com https://cdn.pendo.io https://app.pendo.io https://pendo-io-static.storage.googleapis.com https://cdn.qualified.com https://js.qualified.com https://unpkg.com https://cdn.plasmic.app https://cmp.osano.com https://cdn.vector.co https://d-code.liadm.com https://vercel.live https://www.redditstatic.com https://tag.unifyintent.com https://www.clarity.ms https://scripts.clarity.ms https://jobs.ashbyhq.com https://snap.licdn.com https://studio.plasmic.app https://a.plasmic.app https://js.stripe.com https://widget.intercom.io https://js.userpilot.io https://beehiiv-adnetwork-production.s3.amazonaws.com https://v.onfire.ai https://code.trygravity.ai https://fe.sitedataprocessing.com https://*.usbrowserspeed.com https://cdn.intellimize.co https://*.i.posthog.com https://*.posthog.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://accounts.google.com https://fonts.googleapis.com https://tagmanager.google.com https://www.googletagmanager.com https://studio.plasmic.app https://fe.sitedataprocessing.com; frame-src 'self' https://*.tigerdata.com https://accounts.google.com https://www.youtube.com https://player.vimeo.com https://vercel.live https://vercel.com https://app.contentful.com https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.google.com https://js.qualified.com https://app.qualified.com https://*.liadm.com https://forms.hsforms.com https://*.leandata.com https://jobs.ashbyhq.com https://js.stripe.com https://api.vector.co https://*.intellimizeio.com; connect-src 'self' https://*.tigerdata.com https://accounts.google.com https://www.google.com https://api.segment.io https://cdn.segment.com https://api.cr-proxy.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://*.sentry.io https://o417395.ingest.us.sentry.io http://ib.adnxs.com https://secure.adnxs.com http://c.6sc.co https://j.6sc.co https://ipv6.6sc.co https://api.clearbit.com https://reveal.clearbit.com https://cdn.heapanalytics.com https://heapanalytics.com https://pixel.ad.samsungads.com https://px.ads.linkedin.com https://analytics.twitter.com https://cdn.pendo.io https://app.pendo.io https://data.pendo.io https://pendo-io-static.storage.googleapis.com https://*.qualified.com https://wss.qualified.com wss://*.qualified.com https://api.github.com https://api.vector.co https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://*.liadm.com https://*.leandata.com https://pixel-config.reddit.com https://api.unifyintent.com https://*.clarity.ms https://jobs.ashbyhq.com https://*.algolianet.com https://*.algolia.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://responses.timescale.com https://dev-responses.timescale.com https://studio.plasmic.app https://studio.dev.plasmic.app https://a.plasmic.app https://api2.amplitude.com https://*.userpilot.io wss://*.userpilot.io https://ingestion.prod.apiarydata.net https://*.onfire.ai https://*.trygravity.ai https://api.intellimize.co https://log.intellimize.co https://*.intellimizeio.com https://*.i.posthog.com https://*.posthog.com; img-src 'self' data: blob: https: http:; media-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com https://assets.tigerdata.com https://*.leandata.com; default-src 'self' 2 frame-ancestors 'self' https://admin.wsop.com; 2 default-src 'none'; media-src 'self' data:; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self'; connect-src 'self'; 2 frame-src *.pff.com https://consentcdn.cookiebot.com www.facebook.com www.youtube.com 2 default-src data: blob: 'self' https://* 'unsafe-eval' 'unsafe-inline';object-src 'none'; upgrade-insecure-requests; 2 `default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://*.googleadservices.com https://tagmanager.google.com https://*.hubspot.com https://*.hubspot.net https://*.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://*.hscollectedforms.net https://*.hsadspixel.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hscta.net https://*.hsappstatic.net https://*.usemessages.com https://cdn.weglot.com https://*.cookieyes.com https://cdn-cookieyes.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.com https://*.hotjar.com https://*.hotjar.io https://snap.licdn.com https://*.linkedin.com; style-src 'self' 'unsafe-inline' https://cdn.weglot.com https://*.hotjar.com https://use.fontawesome.com; img-src 'self' data: https:; font-src 'self' data: https://*.hotjar.com https://use.fontawesome.com; connect-src 'self' https: wss:; frame-src 'self' blob: https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://fast.wistia.net https://embed.ted.com https://*.hubspot.com https://*.hubspot.net https://*.hsforms.net https://*.hsforms.com https://*.hs-sites.com https://*.hs-sites-eu1.com; frame-ancestors 'self'; form-action 'self' https://*.hubspot.com https://*.hsforms.com; object-src 'none'; base-uri 'self'; media-src 'self' https:` 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline'; img-src 'self' https://cdn.jsdelivr.net https://avatars.githubusercontent.com https://www.gravatar.com https://www.gstatic.com/recaptcha/ data: blob:; font-src 'self' data:; connect-src 'self' https://www.google.com; frame-ancestors 'none'; frame-src 'self' https://bigin.zoho.eu https://www.google.com/recaptcha/; base-uri 'self'; form-action 'self' https://bigin.zoho.eu 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://policy.app.cookieinformation.com https://vercel.live https://*.google.com https://googleads.g.doubleclick.net https://s2.adform.net https://track.adform.net https://connect.facebook.net https://*.gstatic.com https://*.googletagmanager.com https://*.piwik.pro https://core.sanity-cdn.com api.vercel.com cdn.pardot.com https://pi.pardot.com https://tracking.stoe.no ; connect-src 'self' ws: *.api.sanity.io https://feed.jobylon.com policy.app.cookieinformation.com https://consent.app.cookieinformation.com https://vercel.live https://sanity-cdn.com https://*.piwik.pro api.vercel.com https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://www.facebook.com https://www.googletagmanager.com https://ad.doubleclick.net cdn.pardot.com https://pi.pardot.com https://tracking.stoe.no ; style-src 'self' 'unsafe-inline' policy.app.cookieinformation.com https://*.piwik.pro ; img-src 'self' blob: data: cdn.sanity.io policy.app.cookieinformation.com i.ytimg.com img.youtube.com avatars.githubusercontent.com www.gstatic.com https://www.google.com https://www.google.no https://www.facebook.com www.googletagmanager.com https://*.piwik.pro https://googleads.g.doubleclick.net https://*.googlesyndication.com ; font-src 'self' https://*.piwik.pro ; object-src 'none'; frame-src 'self' *; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://www.sanity.io https://*.bankid.no https://*.klarna.com https://*.nordea.com https://*.folio.no; upgrade-insecure-requests; 2 default-src 'self'; script-src 'self' https://altruja.de/ https://em.altruja.de/ https://t353f773b.emailsys1a.net/ https://statistik.dkfz.de/ https://*.datatrans.com/ https://*.raisenow.com/ https://*.raisenow.io/ https://*.jsdelivr.net/ https://*.stripe.com/; style-src-attr 'unsafe-inline'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://statistik.dkfz.de https://em.altruja.de/ https://*.datatrans.com/ https://*.raisenow.com/ https://*.raisenow.io/ https://*.jsdelivr.net/ https://*.stripe.com/; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://statistik.dkfz.de https://em.altruja.de/ https://*.emailsys1a.net/ https://*.datatrans.com/ https://*.raisenow.com/ https://*.raisenow.io/ https://*.stripe.com/; frame-ancestors 'self' https://statistik.dkfz.de; connect-src 'self' https://i.ytimg.com/ https://mediathek.dkfz.de/ https://jobs.dkfz.de/ https://em.altruja.de/ https://statistik.dkfz.de/ https://*.datatrans.com/ https://*.raisenow.com/ https://*.raisenow.io/ https://*.stripe.com/; style-src 'self' https://statistik.dkfz.de https://*.jsdelivr.net/ https://*.raisenow.com/ https://*.raisenow.io/ https://*.stripe.com/; style-src-elem 'self' 'unsafe-inline' https://statistik.dkfz.de https://*.jsdelivr.net/ https://*.datatrans.com/ https://*.raisenow.com/ https://*.raisenow.io/ https://*.stripe.com/; media-src 'self' https://mediathek.dkfz.de/; font-src 'self' https://*.raisenow.io/ https://*.stripe.com/ 2 frame-ancestors 'self' https://www.sciencenews.org https://www.societyforscience.org https://centennial.societyforscience.org 2 frame-ancestors 'self' https://*.aliyun.com https://dev.aliyun.com:8000; 2 default-src 'self';script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.stripe.com https://*.bokecc.com https://*.doubleclick.net https://*.googlesyndication.com https://*.cloudfront.net https://*.adtrafficquality.google https://*.ft.com https://*.ftacademy.cn https://*.ftmailbox.cn https://*.ftchinese.com https://*.flourish.studio https://*.prnewswire.com https://*.csslcloud.net wss://*.csslcloud.net http://*.csslcloud.net https://*.brandmetrics.com;style-src 'self' 'unsafe-inline' https://*.bokecc.com https://*.cloudfront.net https://*.flourish.studio https://*.csslcloud.net wss://*.csslcloud.net http://*.csslcloud.net;img-src http: https: data:;media-src 'self' blob: https://*.ftcn.net.cn https://*.ftmailbox.cn https://*.bokecc.com https://*.cloudfront.net https://*.ft.com https://*.ftacademy.cn https://*.ftchinese.com https://*.flourish.studio https://*.acast.com https://*.amazonaws.com https://*.prnewswire.com https://*.csslcloud.net wss://*.csslcloud.net http://*.csslcloud.net;frame-src 'self' https://*.ftchinese.com https://*.chineseft.net https://*.ftacademy.cn https://*.stripe.com https://*.doubleclick.net https://*.bokecc.com https://*.googleadservices.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.google.com https://*.flourish.studio https://*.uri.sh/ https://*.brandmetrics.com https://*.prnewswire.com https://*.csslcloud.net wss://*.csslcloud.net http://*.csslcloud.net;connect-src 'self' https://*.google-analytics.com https://*.doubleclick.net https://*.bokecc.com https://*.play.bokecc.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.cloudfront.net https://*.ft.com https://*.ftacademy.cn https://*.ftmailbox.cn https://*.ftchinese.com https://*.flourish.studio https://*.googletagmanager.com https://*.prnewswire.com https://*.acast.com https://*.amazonaws.com https://*.csslcloud.net wss://*.csslcloud.net http://*.csslcloud.net https://*.brandmetrics.com;script-src-attr 'unsafe-inline';worker-src 'self' blob:;upgrade-insecure-requests 2 default-src https:; script-src 'unsafe-inline' 'unsafe-eval' blob: https:; style-src 'unsafe-inline' https:; font-src https: data:; media-src http: https:; img-src http: https: data: 2 default-src 'none';object-src 'none';manifest-src 'self';base-uri 'none';style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/ https://cdn.jsdelivr.net/ https://fonts.googleapis.com/ https://cdn.screen9.com https://cdnjs.cloudflare.com/ajax/libs/chosen/;img-src * data:;media-src 'self' blob: https://qcdn.screen9.com/;font-src 'self' data: https://*.cloudfront.net/ https://fonts.gstatic.com/;form-action 'self' https://login.microsoftonline.com/;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://maxcdn.bootstrapcdn.com/ https://cdn.jsdelivr.net/ https://mktdplp102cdn.azureedge.net/ https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/ https://unpkg.com/@frontify/ https://*.dynamics.com/ https://tietoevry-ext.boost.ai/ https://tietoevry.piwik.pro/ https://cdn.cookielaw.org/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.google.com/recaptcha/api.js https://www.google.com/pagead/ https://www.googleadservices.com/ https://snap.licdn.com/ https://static.ads-twitter.com/ https://sc.lfeeder.com/ https://connect.facebook.net/ https://acdn.adnxs.com/ https://cdn.mookie1.com/ https://az416426.vo.msecnd.net/ https://alb.reddit.com/ https://www.redditstatic.com/ https://bat.bing.com/ https://bat.bing.net https://js.monitor.azure.com/ https://*.clarity.ms https://c.bing.com https://googleads.g.doubleclick.net/ https://plugin.sopro.io/ https://cdn.screen9.com/ https://api.screen9.com/ https://tools.euroland.com/ https://unpkg.com/micromodal/dist/;frame-ancestors 'self';frame-src 'self' https://dashboard.find.episerver.net/ https://www.googletagmanager.com/ https://maps.google.com/ https://www.google.com/ https://*.svc.dynamics.com/ https://td.doubleclick.net/ https://brand.tieto.com https://qcnl.tv/ https://gamma.euroland.com/ https://tools.eurolandir.com/ https://tools.euroland.com/;connect-src 'self' https://*.svc.dynamics.com/ https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/ https://assets-eur.mkt.dynamics.com/ https://public-eur.mkt.dynamics.com/ https://*.applicationinsights.azure.com https://dc.services.visualstudio.com/ https://brand.tieto.com https://cdn.cookielaw.org/ https://*.onetrust.com/ https://tietoevry.piwik.pro/ https://tietoevry-ext.boost.ai/ https://cs.lf-discover.com/ https://www.google.com/ https://ib.adnxs.com/ https://pixel-config.reddit.com/ https://www.redditstatic.com/ https://conversions-config.reddit.com/ https://px.ads.linkedin.com/ https://www.facebook.com/ https://bat.bing.com/ https://bat.bing.net https://*.clarity.ms https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://i3-search.service.tieto.com/ https://api.screen9.com/ https://statsapi.screen9.com/ https://qcdn.screen9.com https://publish.ne.cision.com/; 2 frame-ancestors 'self' https://layout-cms.fox7austin.com; 2 base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; child-src blob:; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; style-src 'self' https: 'unsafe-inline' *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; img-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; font-src 'self' data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; connect-src 'self' *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; frame-src 'self' data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; frame-ancestors 'self' *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; object-src data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; media-src 'self' data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184; worker-src 'self' data: blob: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com cdnjs.cloudflare.com/ajax/libs/three.js/* *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.cstmapp.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.euskaltel.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com tally.so *.tally.so *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.womtp.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.0.184 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval'; font-src 'self'; connect-src 'self'; media-src 'self'; frame-src 'self' www.effektenbank.de irpages2.equitystory.com www.tradegate.ag; base-uri 'self'; object-src 'self'; 2 frame-ancestors https://*.lifeextension.com http://localhost:4201/; 2 default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ncua-gov.mautic.net touchpoints.app.cloud.gov *.clarity.ms dap.digitalgov.gov *.google-analytics.com *.typekit.net *.ncua.gov ncua.gov *.mycreditunion.gov mycreditunion.gov *.googletagmanager.com; img-src 'self' blob: fonts.gstatic.com *.googletagmanager.com data: touchpoints.app.cloud.gov *.clarity.ms *.bing.com *.ncua.gov ncua.gov *.mycreditunion.gov mycreditunion.gov *.google-analytics.com *.typekit.net img.youtube.com; font-src 'self' 'unsafe-inline' data: *.typekit.net fonts.gstatic.com; media-src 'self'; style-src 'self' 'unsafe-inline' *.ncua.gov *.googletagmanager.com *.googleapis.com; connect-src 'self' touchpoints.app.cloud.gov *.clarity.ms performance.typekit.net *.google-analytics.com *.googletagmanager.com *.ncua.gov ncua.gov *.mycreditunion.gov mycreditunion.gov; frame-src 'self' *.ncua.gov app.powerbigov.us *.youtube.com www.googletagmanager.com 2 default-src https: 'unsafe-inline'; object-src 'none'; media-src https: data: blob:; font-src https: data:; img-src https: data:; 2 frame-ancestors 'self' https://*.autoalert.com https://service.force.com https://whatfix.com https://cdn.whatfix.com https://addons.whatfix.com https://events.whatfix.com https://videos.whatfix.com 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.ipeye.com.tr ipeye.com.tr ipglaz.kz https://www.ipglaz.kz https://www.ipeye.by ipeye.by https://smartcaptcha.yandexcloud.net https://www.google.com https://www.gstatic.com www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net mc.yandex.ru mc.yandex.com api-maps.yandex.ru core-renderer-tiles.maps.yandex.net yastatic.net *.roistat.com tech.rtb.mts.ru qoopler.ru use.fontawesome.com app.diagrams.net viewer.diagrams.net; font-src 'self' https://www.ipeye.com.tr ipeye.com.tr ipglaz.kz https://www.ipglaz.kz https://www.ipeye.by ipeye.by https://www.ipeye.ru yastatic.net; frame-src 'self' https://www.ipeye.com.tr ipeye.com.tr ipglaz.kz https://www.ipglaz.kz https://www.ipeye.by ipeye.by ipeye.ru docs.google.com https://www.youtube.com https://www.youtube-nocookie.com/ mc.yandex.ru mc.yandex.com https://www.google.com https://smartcaptcha.yandexcloud.net; img-src 'self' data: i.ytimg.com api-maps.yandex.ru core-renderer-tiles.maps.yandex.net yastatic.net yandex.ru mc.yandex.ru mc.yandex.com https://www.ipeye.com.tr ipeye.com.tr ipglaz.kz https://www.ipglaz.kz https://www.ipeye.by ipeye.by; 2 upgrade-insecure-requests; object-src https://www.datocms-assets.com; block-all-mixed-content; frame-ancestors 'self' https://plugins-cdn.datocms.com; 2 frame-ancestors 'self' https://my.bigl.ua 2 frame-ancestors 'self' https://explore.manh.com/; object-src 'none'; 2 default-src 'self' *.nts.live *.ntslive.co.uk; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.cloudfunctions.net https://*.europe-west1.firebasedatabase.app https://*.soundcloud.com *.mixcloud.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://*.google.com https://www.youtube.com *.ytimg.com *.list-manage.com https://unpkg.com *.gstatic.com *.doubleclick.net https://connect.facebook.net https://analytics.tiktok.com https://js.stripe.com https://www.paypal.com https://www.paypalobjects.com https://*.onetrust.com https://*.hotjar.com https://www.redditstatic.com;connect-src *; img-src 'self' data: https:; media-src 'self' blob: https://*.ntslive.net http://*.ntslive.net https://*.ntslive.co.uk https://*.sndcdn.com https://*.radiomast.io; style-src 'unsafe-inline' 'self' hello.myfonts.net https://optimize.google.com https://fonts.googleapis.com https://*.typekit.net; child-src 'self' blob: *.mixcloud.com https://*.vimeo.com https://*.soundcloud.com https://bandcamp.com https://*.youtube.com; font-src 'self' data: fonts.gstatic.com https://*.typekit.net https://*.nts.live; frame-src *.mixcloud.com https://*.vimeo.com https://*.soundcloud.com https://bandcamp.com https://*.youtube.com https://*.google.com *.doubleclick.net *.firebaseapp.com https://js.stripe.com *.paypal.com https://www.paypalobjects.com https://www.googletagmanager.com; 2 default-src 'self' https:; img-src * data:; media-src 'self' https: blob: data:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: data:; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.mega.cl *.megatiempo.cl *.meganoticias.cl *.mdstrm.com *.tomorrow.io *.etc.cl servicios-mega.cdn.mdstrm.com data:; style-src 'self' 'unsafe-inline' https: blob: data:; connect-src 'self' https:; form-action 'self'; base-uri 'self'; worker-src 'self' blob: *.megamedia.cl *.etc.cl *.megatiempo.cl *.meganoticias.cl *.mega.cl; frame-src 'self' https:; child-src 'self' blob: *.megamedia.cl *.firebaseapp.com *.mdstrm.com; frame-ancestors *.meganoticias.cl *.mega.cl *.etc.cl *.megamedia.cl *.megatiempo.cl *.google.com elfestival.tv; 2 default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://privacy-proxy.usercentrics.eu/ https://web.cmp.usercentrics.eu/ https://*.vgrblogg.se/ https://*.boost.ai/ https://*.entryscape.com https://*.stratsys.com/ https://piwik-ext.vgregion.se/ https://piwik-ext.vgregion.se/piwik.js https://*.vgregion.se https://*.vimeocdn.com https://player.vimeo.com/ https://www.youtube.com https://cdn.siteimprove.net/ https://vgrintern.boost.ai https://vgregion.esmaker.net/ https://ssl.webserviceaward.com/; style-src 'unsafe-inline' 'self' https://*.vgrblogg.se/ https://*.vimeocdn.com https://ssl.webserviceaward.com/wsc/client/wscSelVisit.css https://*.stratsys.com/ https://*.vgregion.se https://cdn.jsdelivr.net/npm/vuetify@2.x/dist/vuetify.min.css; object-src 'none'; base-uri 'self'; connect-src 'self' https://privacy-proxy.usercentrics.eu/ https://consent-api.service.consent.usercentrics.eu/ https://v1.api.service.cmp.usercentrics.eu/ https://*.vgrblogg.se/ https://*.boost.ai/ https://ssl.webserviceaward.com/wsc/client/wscSelVisit.css https://*.vimeocdn.com https://piwik-ext.vgregion.se/ https://nominatim.openstreetmap.org https://*.vgregion.se https://id.siteimprove.com https://my2.siteimprove.com/ https://vgrintern.boost.ai https://td.azure-api.net/ *.t-d.se; font-src 'self' data: https://static.entryscape.com/ https://static2.sharepointonline.com/ https://players.cupix.com/*; frame-src 'self' https://*.siteimprove.com/ https://*.vgrblogg.se/ https://sketchfab.com/ https://play.gu.se/ https://forms.office.com/ https://*.microsoftstream.com/ https://nominatim.openstreetmap.org https://www.google.com https://maps.google.se https://e.infogram.com https://vimeo.com https://player.vimeo.com https://www.youtube.com https://*.vgregion.se *.vastarvet.se *.angeredsnarsjukhus.se *.fhsk.se *.lodosemuseum.se *.nusjukvarden.se *.vgrfolkhogskolor.se *.narhalsan.se *.forsviksbruk.se *.vanersborgsmuseum.se *.vitlyckemuseum.se *.sahlgrenska.se *.naturbruk.nu *.slojdochbyggnadsvard.se *.mun-h-center.se *.maritimaklustret.se *.botaniska.se *.gnm.se *.esmaker.net *.samverkandesjukvard.se *.vastfastigheter.se *.fyrbodalshalsoakademi.se *.valdinararelationer.se *.utvag.se *.vardsamverkan.se *.nationellpvkonferens19.se *.utvag.com *.biobankvast.se *.halsoakademinvast.se *.t-d.se *.stratsys.se *.stratsys.com https://players.cupix.com/; img-src 'self' data: https://app.usercentrics.eu/ https://uct.service.usercentrics.eu/ https://*.vgrblogg.se/ https://maps.lantmateriet.se https://ssl.webserviceaward.com/wsc/ https://i.vimeocdn.com/ https://i.ytimg.com/ https://a.basemaps.cartocdn.com https://b.basemaps.cartocdn.com https://c.basemaps.cartocdn.com https://*.amazonaws.com/ https://sahlgrenskaliv.se/ https://*.vgregion.se *.vastarvet.se *.angeredsnarsjukhus.se *.fhsk.se *.lodosemuseum.se *.naturbruk.nu *.nusjukvarden.se *.vgrfolkhogskolor.se *.narhalsan.se *.forsviksbruk.se *.vanersborgsmuseum.se *.vitlyckemuseum.se *.sahlgrenska.se *.slojdochbyggnadsvard.se *.mun-h-center.se *.maritimaklustret.se *.botaniska.se *.gnm.se *.esmaker.net *.samverkandesjukvard.se *.vastfastigheter.se *.fyrbodalshalsoakademi.se *.valdinararelationer.se *.utvag.se *.vardsamverkan.se *.nationellpvkonferens19.se *.utvag.com *.biobankvast.se *.halsoakademinvast.se *.t-d.se *.stratsys.se *.stratsys.com blob:; manifest-src 'self'; media-src 'self'; worker-src 'none'; frame-ancestors 'self' *.vgrblogg.se *.vgregion.se *.vastarvet.se *.angeredsnarsjukhus.se *.fhsk.se *.lodosemuseum.se *.naturbruk.nu *.nusjukvarden.se *.vgrfolkhogskolor.se *.narhalsan.se *.forsviksbruk.se *.vanersborgsmuseum.se *.vitlyckemuseum.se *.sahlgrenska.se *.slojdochbyggnadsvard.se *.mun-h-center.se *.maritimaklustret.se *.botaniska.se *.gnm.se *.esmaker.net *.samverkandesjukvard.se *.vastfastigheter.se *.fyrbodalshalsoakademi.se *.valdinararelationer.se *.utvag.se *.vardsamverkan.se *.nationellpvkonferens19.se *.utvag.com *.biobankvast.se *.halsoakademinvast.se *.t-d.se *.stratsys.se *.stratsys.com ; 2 frame-ancestors 'self' http://*.vde.com; 2 child-src 'self';frame-ancestors 'self' *.biltrewards.com bilt.com www.bilt.com checkout.bilt.com *.activebuilding.com *.avalonaccess.com *.ct-prod.avalonbay.com *.henrihome.com avalonaccess.com www.hqo.co www.hqo.com www.hqoapp.com www.mrcooper.com *.loftliving.com mycommunity.americancampus.com americancampus.my.site.com portal.tkclients.com resident.eliseai.com *.venn.city *.res.venn.city global-api.afterpay.com api.us.afterpay.com api.cash.app;frame-src 'self' https://*.bilt.com https://*.biltrewards.com https://biltpaid.framer.website https://www.datocms-assets.com/43819/ https://cdn.plaid.com https://dyscanweb.dyneti.com https://js.verygoodvault.com https://js3.verygoodvault.com https://*.servisbot.com https://cardswitcher.knotapi.com https://alloysdk.alloy.co https://*.onefootprint.com https://plugin.argyle.com https://connect2.finicity.com https://cdn.userway.org https://sync-transcend-cdn.com https://*.jamsadr.com https://*.soul-cycle.com mailto: https://assets.duffel.com https://*.spline.design https://esignature.bluemoonforms.com https://esignpdf.s3.amazonaws.com https://esignpdf.s3.us-west-2.amazonaws.com https://www.facebook.com https://bid.g.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://i.liadm.com https://ct.pinterest.com https://tr.snapchat.com https://www.youtube.com https://youtu.be https://checkoutshopper-live-us.adyen.com https://pay.google.com/ https://applepay.cdn-apple.com/ https://payments.toasttab.com https://web.squarecdn.com https://checkout.getflex.com https://checkout.int.getflex.com https://app.getflex.com https://app.int.getflex.com https://onboarding-embed.int.getflex.com https://onboarding-embed.getflex.com https://v2.widget.pms.production.nowlvble.com https://v2.experience.pms.production.nowlvble.com https://global-api.afterpay.com https://api.us.afterpay.com https://api.cash.app https://*.braintreegateway.com https://*.braintree-api.com https://*.paypal.com https://api.sardine.ai https://*.mastercard.com https://*.rsa3dsauth.com https://embedded.cardless.com; 2 base-uri 'none'; default-src 'self' https://uberspace.de https://dashboard.uberspace.de https://*.uberspace.is https://analytics.uberspace.de *.staging.uberspace.de; frame-ancestors 'none'; 2 frame-ancestors 'self' guides.tvunetworks.com; 2 frame-ancestors 'self' https://*.nwea.org; 2 default-src 'self' sergas.es sergas.gal *.sergas.gal *.sergas.es *.sergas.local *.gstatic.com *.googleapis.com *.googletagmanager.com *.readspeaker.com *.google.com *.google-analytics.com https://datawrapper.dwcdn.net 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.gstatic.com *.googleapis.com *.googletagmanager.com; font-src 'self' data: *.gstatic.com *.googleapis.com *.googletagmanager.com 2 frame-ancestors 'self' https://jobcloud.ch https://*.jobcloud.ch https://jobs.ch https://*.jobs.ch https://jobup.ch https://*.jobup.ch https://ingjobs.ch https://ictcareer.ch https://jobs4sales.ch https://financejobs.ch https://medtalents.ch https://jobwinner.ch https://alpha.ch https://topjobs.ch https://*.jobscout24.ch https://impieghi.ch https://*.impieghi.ch https://*.stellenmarkt.ch https://*.enboarder.com 2 frame-ancestors 'self' https://zeroheight.com https://akira.ninjavan.dev https://*.myshopify.com https://app.zeplin.io https://ninjavansg.zendesk.com https://*.ninjavan.cn https://*.ninjavan.co; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://js-eu1.hs-scripts.com https://snippets.freshchat.com https://wchat.freshchat.com https://www.clarity.ms https://chat.1grid.co.za https://bat.bing.com; frame-src 'self' https://chat.1grid.co.za https://googleads.g.doubleclick.net; child-src 'self' https://chat.1grid.co.za https://googleads.g.doubleclick.net; 2 default-src 'self' 'unsafe-inline' *.tuxis.nl tools.tuxis.cloud tuxis.my3cx.nl object-src data: 'unsafe-eval' frame-ancestors: 'self' connect-src * ws: wss:; 2 default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js cdnjs.cloudflare.com https://heatmaps.monsido.com/ https://cdn.insight.sitefinity.com *.monsido.com/ https://dec.azureedge.net/ munchkin.marketo.net unpkg.com/@frontify/ *.cloudinary.com www.googletagmanager.com https://manage.hawksearch.com https://app-script.monsido.com https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://stats.g.doubleclick.net/ https://cdn.usefathom.com https://player.video.wowza.com/ https://s3.amazonaws.com/ https://prod-railsapp.s3.amazonaws.com/ https://latencytimer.azurewebsites.net/ https://indd.adobe.com https://public.tableau.com *.userway.org *.ssa.gov/accessibility/andi/andi.js *.citibot.net *.ctctcdn.com *.google.com *.constantcontact.com 'self' cdn.ampproject.org js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net *.eloqua.com *.en25.com web-chat.nativechat.com 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https://cdn.cuyahogacounty.us/ https://cdn.insight.sitefinity.com https://dec.azureedge.net https://cdnjs.cloudflare.com/ https://manage.hawksearch.com https://player.video.wowza.com/ https://s3.amazonaws.com/ https://prod-railsapp.s3.amazonaws.com/ https://latencytimer.azurewebsites.net/ https://www.ssa.gov/accessibility/andi/andi.js *.userway.org *.citibot.net *.ctctcdn.com *.google.com *.constantcontact.com 'self' web-chat.nativechat.com 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.google-analytics.com https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.frontify.com *.cloudinary.com www.googletagmanager.com http://cuyahogacounty.us https://cdn.cuyahogacounty.us/ http://tracking.monsido.com https://cuyahogacms.blob.core.windows.net https://cdn.usefathom.com https://player.video.wowza.com/ https://s3.amazonaws.com/ https://prod-railsapp.s3.amazonaws.com/ https://latencytimer.azurewebsites.net/ *.userway.org *.citibot.net *.amazonaws.com *.ssa.gov/accessibility/andi/andi.js *.google.com *.gov 'self' track.hubspot.com js.hsleadflows.net forms.hsforms.com *.eloqua.com web-chat.nativechat.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: http://tracking.monsido.com https://cdnjs.cloudflare.com https://manage.hawksearch.com https://www.googletagmanager.com/ https://cuyahogacms.blob.core.windows.net https://cdn.userway.org https://api.userway.org https://www.ssa.gov/accessibility/andi/andi.js *.google.com; frame-src 'self' https://www.youtube.com/ https://embed.podcasts.apple.com/ https://player.vimeo.com https://www.google.com/ *.youtube.com/ *.matrixpublicrecords.com/ https://indd.adobe.com https://public.tableau.com *.userway.org *.ssa.gov/accessibility/andi/andi.js *.citibot.net *.google.com *.wowza.com https://embed.wowza.com/ forms.hsforms.com web-chat.nativechat.com; connect-src data: accounts.google.com *.google-analytics.com *.gstatic.com https://heatmaps.monsido.com/ https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com *.frontify.com *.cloudinary.com http://tracking.monsido.com https://stats.g.doubleclick.net *.usefathom.com *.monsido.com *.userway.org *.ssa.gov/accessibility/andi/andi.js *.citibot.net *.ctctcdn.com *.google.com *.constantcontact.com 'self' forms.hubspot.com *.hsforms.com; media-src 'self' data: blob: *.frontify.com *.cloudinary.com https://cuyahogacms.blob.core.windows.net https://cdn.cuyahogacounty.us/ https://player.video.wowza.com/ https://s3.amazonaws.com/ https://prod-railsapp.s3.amazonaws.com/ https://latencytimer.azurewebsites.net/ https://cdn.userway.org https://api.userway.org https://www.ssa.gov/accessibility/andi/andi.js https://embed.wowza.com/; child-src https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.frontify.com *.cloudinary.com *.userway.org *.ssa.gov/accessibility/andi/andi.js *.citibot.net *.google.com *.constantcontact.com 'self' web-chat.nativechat.com 2 child-src 'self' blob: https://api.sumsub.com https://payment.direct.ingenico.com; frame-ancestors 'self' https://*.drouot.com; frame-src 'self' blob: https://challenges.cloudflare.com https://api.sumsub.com https://payment.direct.ingenico.com https://intercom-sheets.com https://www.youtube.com https://*.drouot.com https://vimeo.com 2 default-src 'none'; object-src 'self'; script-src https: 'unsafe-inline' 'unsafe-eval' 'self' *.trustedshops.com; style-src https: 'unsafe-inline' 'self' *.trustedshops.com; img-src https: 'self' *.trustedshops.com data:; font-src 'self' data: *.trustedshops.com https://manage.chilly.domains https://swiss.chilly.domains https://fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' www.youtube-nocookie.com https://stats.ledl.net/; form-action *; connect-src 'self' *.trustedshops.com stats.ledl.net; worker-src 'self' blob: 2 default-src 'none'; manifest-src https://tkcdnd.azureedge.net https://tkcdnt.azureedge.net https://tkcdn.azureedge.net; connect-src 'self' https://data.stat.fi https://stat.matomo.cloud https://tkcdnd.azureedge.net https://tkcdnt.azureedge.net https://tkcdn.azureedge.net https://cdn.reactandshare.com https://data.reactandshare.com https://api.stat.fi/content/search https://stat.fi https://api.stat.fi https://stat.fi; script-src 'self'; script-src-elem 'self' 'unsafe-inline' https://cdn.matomo.cloud https://cdn.reactandshare.com https://data.reactandshare.com https://stat.matomo.cloud https://public.flourish.studio; style-src 'self' 'unsafe-inline' https://tkcdnd.azureedge.net https://tkcdnt.azureedge.net https://tkcdn.azureedge.net https://cdn.reactandshare.com; style-src-elem 'self' 'unsafe-inline' https://tkcdnd.azureedge.net https://tkcdnt.azureedge.net https://tkcdn.azureedge.net https://cdn.reactandshare.com; img-src 'self' https://media.stat.fi https://media.graphcms.com https://tkcdnd.azureedge.net https://tkcdnt.azureedge.net https://tkcdn.azureedge.net https://media.graphassets.com https://eu-central-1-statfi.graphassets.com https://cdn.reactandshare.com https://data.reactandshare.com https://i.ytimg.com data: blob:; font-src 'self' https://tkcdnd.azureedge.net https://tkcdnt.azureedge.net https://tkcdn.azureedge.net https://cdn.reactandshare.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com https://w.soundcloud.com https://flo.uri.sh https://kartta.paikkatietoikkuna.fi; upgrade-insecure-requests; 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; worker-src 'self' https: blob:; child-src 'self' https: blob: webcompt: weixin:; frame-src 'self' https: blob: webcompt: weixin:; frame-ancestors 'self' https://*.fantuan.ca https://*.fantuanorder.com https://*.speedupcourier.com; report-uri /csp-report; 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.ace.magsdirect-staging-eks-euw1.futureplc.engineering https://*.ace.magsdirect-prod-eks-euw1.futureplc.engineering; 2 default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: blob:; img-src * data:; font-src https: data:; frame-ancestors 'self' *.carnival.com https://*.goccl.com https://*.goccl.co.uk https://*.uatcarnival.com https://*.carnivalcloud.net https://www.kayak.com http://*.carnivalmeetings.wuata.com https://*.carnivalmeetings.wuata.com https://*.carnivalmeetings.com http://carnivalmeetings.wuata.com https://carnivalmeetings.wuata.com https://carnivalmeetings.com https://*.goccl.com.au http://carnivalmeetings.com.s227501.gridserver.com https://carnivalmeetings.com.s227501.gridserver.com/ https://carnivalmeetings.prod.carnivalcloud.net; worker-src blob: 2 frame-ancestors *; default-src 'self'; frame-src 'self' unicaja.webfg.com unicaja-uat.webfg.com www.liberbank.es www.tarjetaplaystation.com univia.unicaja.es univiapru.unicaja.es hola.unicajabanco.es *.doubleclick.net 8020496.fls.doubleclick.net 8499384.fls.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net pagead2.googlesyndication.com region1.analytics.google.com adservice.google.com www.google.es www.youtube.com www.google.com asp.quefondos.com unicajabanco-backend.flumotion.com player.vimeo.com www.facebook.com connect.facebook.net *.teads.tv track.adform.net vars.hotjar.com optimize.google.com *.weborama.fr *.qualtrics.com data.unicajabanco.es *.tiktok.com analytics-ipv6.tiktokw.us *.afi.es *.outbrain.com *.tradedoubler.com a.imgstatics.com *.taboola.com *.clarity.ms *.criteo.com *.adtraction.com adtraction.com *.audire.fm *.spoteffects.net *.adt328.com *.veritonic.com sc-devel.s3.eu-central-1.amazonaws.com ads-engagement.presage.io ads.go2perseo.com c.amazon-adsystem.com; media-src *; img-src 'self' *.contentsquare.net *.qualtrics.com data: *; script-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.gstatic.com www.gstatic.com *.doubleclick.net 8020496.fls.doubleclick.net 8499384.fls.doubleclick.net www.unicajabanco.es www.youtube.com www.google.com www.google-analytics.com maps.googleapis.com www.facebook.com connect.facebook.net *.teads.tv googleads.g.doubleclick.net stats.g.doubleclick.net pagead2.googlesyndication.com region1.analytics.google.com adservice.google.com www.google.es www.googleadservices.com www.unicajabanco.com unicaja-prod.adobecqms.net chat.kommunicate.io *.adform.net *.googletagmanager.com cdnjs.cloudflare.com widget.kommunicate.io www.unicajabanco.es.seg.js www.unicajabanco.com.seg.js cdn.kommunicate.io cdn.applozic.com cdn.cookielaw.org uimarketpro.com asp.quefondos.com storage.googleapis.com static.hotjar.com script.hotjar.com www.googleoptimize.com optimize.google.com tagmanager.google.com hercial-thurch.com t.contentsquare.net app.contentsquare.com *.weborama.fr *.visualwebsiteoptimizer.com *.qualtrics.com data.unicajabanco.es *.tiktok.com analytics-ipv6.tiktokw.us *.afi.es *.outbrain.com *.tradedoubler.com a.imgstatics.com *.taboola.com *.clarity.ms *.criteo.com *.adtraction.com adtraction.com *.audire.fm *.spoteffects.net *.adt328.com *.veritonic.com sc-devel.s3.eu-central-1.amazonaws.com ads-engagement.presage.io ads.go2perseo.com c.amazon-adsystem.com; child-src blob:; worker-src blob:; style-src * 'unsafe-inline'; font-src *; connect-src 'self' *.contentsquare.net *.qualtrics.com blob: data: * 2 default-src https: blob:; connect-src https: wss: blob:; font-src https: data:; frame-src https:;; img-src https: blob: data:; media-src https: blob:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'unsafe-inline' https:; 2 frame-ancestors 'self' https://live.nkd.com https://www2.nkd.com 2 frame-ancestors 'self' https://*.hotjar.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com *.doubleclick.net api.mapbox.com consentcdn.cookiebot.com consent.cookiebot.com 'self'; object-src 'none'; worker-src blob: ; child-src www.google.com consentcdn.cookiebot.com assist.zoho.eu blob: 'self' ; img-src imgsct.cookiebot.com data: blob: 'self' www.google.ch www.google.com www.google-analytics.com; connect-src 'self' *.tiles.mapbox.com consentcdn.cookiebot.com api.mapbox.com events.mapbox.com www.google-analytics.com stats.g.doubleclick.net region1.analytics.google.com; frame-ancestors 'self' 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' app.pendo.io bankauswahl.giropay.de bat.bing.com cdn-ukwest.onetrust.com cdn.appdynamics.com cdn.cquotient.com cdn.curalate.com https://cdn-assets-prod.s3.amazonaws.com connect.facebook.net *.sub2tech.com e.cquotient.com ecommerce-scripts.adscale.com edge.curalate.com embed.typeform.com geolocation.onetrust.com *.doubleclick.net/pagead/viewthroughconversion/ www.google.com/pagead/ www.google.bg/pagead/ *.online-metrix.net intljs.rmtag.com liber11128.pcapredict.com mpsnare.iesnare.com p.cquotient.com s3-eu-west-1.amazonaws.com/appointedd-portal-assets/ services.postcodeanywhere.co.uk snap.licdn.com static-demo.mention-me.com static.mention-me.com static.zdassets.com storage-pu.adscale.com tag-demo.mention-me.com tag.mention-me.com tags.rd.linksynergy.com ut.ra.linksynergy.com unpkg.com *.global-e.com webservices.global-e.com *.google-analytics.com www.google.com/recaptcha/ *.googleadservices.com *.googletagmanager.com www.gstatic.com/recaptcha/ *.bglobale.com *.chargebee.com https://ut.rd.linksynergy.com/jsp *.rewardstyle.com *.fullstory.com *.micpn.com *.libertylondon.com login-ds.dotomi.com *.clarity.ms/ https://www.paypalobjects.com/api/ https://www.paypal.com/tagmanager/ https://cdn.jsdelivr.net/npm/ https://polyfill.io/v3/ https://polyfill.io/ *.contentsquare.net *.contentsquare.com *.analytics.google.com *.klarnaservices.com analytics.tiktok.com www.libertylondon.com *.gocertify.me *.studentbeans.com cdn.linkedin.oribi.io *.klarnacdn.net *.klarna.com maps.googleapis.com *.storage.googleapis.com https://storage.googleapis.com/adscale/static/ecom_js/libertylondon.com/ https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: *.payments-amazon.com *.global-e.com *.securev2.global-e.com *.profitmetrics.io www.facebook.com *.pinimg.com *.pinterest.com *.bazaarvoice.com api.typeform.com *.appointedd.com *.yimg.com *.yahoo.com *.adsrvr.org *.forter.com https://dlthst9q2beh8.cloudfront.net https://d2nww8zpyj5pk0.cloudfront.net https://d2w2nqfk3z9hdt.cloudfront.net *.rakuten.com *.tryzens-analytics.com https://pzapi-ij.com/ https://static.srcspot.com/ https://server-side-tagging-25tpkba47a-uc.a.run.app *.dynamicyield.com *.dynamicyield.eu https://cdnjs.cloudflare.com/ajax/libs/Swiper/4.4.6/* https://cdnjs.cloudflare.com/ajax/libs/clipboard.js/* metrics.libertylondon.com *.googlesyndication.com songbirdstag.cardinalcommerce.com *.cardinalcommerce.com cas.client.cardinaltrusted.com client.cardinaltrusted.com *.cardinaltrusted.com static.cloudflareinsights.com https://bat.bing.net/actionp/ https://cdn.jsdelivr.net/sm/ *.g.doubleclick.net; style-src 'self' 'unsafe-inline' bankauswahl.giropay.de cdn.pendo.io https://embed.typeform.com services.postcodeanywhere.co.uk https://use.typekit.net/ https://p.typekit.net/ *.googletagmanager.com *.chargebee.com http://d2jxbtsa1l6d79.cloudfront.net/static/app-static-assets/hp/hp-7.3.0/ https://cdn.jsdelivr.net/npm/ *.contentsquare.net *.contentsquare.com *.klarnacdn.net *.gocertify.me *.studentbeans.com fonts.googleapis.com *.storage.googleapis.com https://fonts.googleapis.com *.bazaarvoice.com api.typeform.com *.yimg.com *.yahoo.com *.adsrvr.org *.sub2tech.com *.dynamicyield.com *.dynamicyield.eu https://cdnjs.cloudflare.com/ajax/libs/Swiper/4.4.6/*; object-src 'self' *.online-metrix.net; base-uri 'self'; connect-src 'self' app.pendo.io bat.bing.com wss://tsock.us1.twilio.com *.twilio.com cdn-assets-prod.s3.amazonaws.com cdn-ukwest.onetrust.com col.eum-appdynamics.com connect.facebook.net edge.curalate.com ekr.zdassets.com *.facebook.com *.online-metrix.net libertylondon.zendesk.com libertylondon1588339266.zendesk.com privacyportal-uk.onetrust.com services.postcodeanywhere.co.uk *.doubleclick.net tag-demo.mention-me.com tag.mention-me.com *.google-analytics.com *.tryzens-analytics.com *.tryzens-analytics.com:12280 wss://widget-mediator.zopim.com *.chargebee.com *.fullstory.com *.clarity.ms *.paypal.com *.algolianet.com *.algolia.net https://insights.algolia.io/ *.contentsquare.net *.contentsquare.com *.analytics.google.com adservice.google.com/pagead/ www.google.com/pagead/ *.klarnaservices.com analytics.tiktok.com www.libertylondon.com *.gocertify.me *.studentbeans.com cdn.linkedin.oribi.io geolocation.onetrust.com *.cdnwidget.com *.cdnbasket.net *.klarnaevt.com *.klarnacdn.net *.klarna.com https://maps.googleapis.com/ https://*.googleapis.com *.google.com https://*.gstatic.com data: blob: *.bglobale.com *.global-e.com *.securev2.global-e.com *.pinimg.com *.pinterest.com *.profitmetrics.io *.bazaarvoice.com api.typeform.com *.appointedd.com *.yimg.com *.yahoo.com *.adsrvr.org https://*.forter.com wss://cdn0.forter.com https://d2o5idwacg3gyw.cloudfront.net https://dz8rit8v72mig.cloudfront.net https://db7q4jg5rkhk8.cloudfront.net https://1.1.1.1 https://d94qwxh6czci4.cloudfront.net https://dr6vcclmzwk74.cloudfront.net https://d6rak4b14t5gp.cloudfront.net https://d3k4bt74u9esq1.cloudfront.net https://d1ezzflfzltk6e.cloudfront.net https://d3nocrch4qti4v.cloudfront.net https://duuytoqss3gu4.cloudfront.net https://df45ay5pw60dy.cloudfront.net https://d3lqotgbn3npr.cloudfront.net *.rakuten.com *.sub2tech.com unpkg.com https://server-side-tagging-25tpkba47a-uc.a.run.app https://ecommerce-events.adscale.com/EcommerceProxy *.dynamicyield.com *.dynamicyield.eu https://*.dy-api.com https://*.dy-api.eu *.libertylondon.com metrics.libertylondon.com *.googlesyndication.com centinelapistag.cardinalcommerce.com writer.cardinalcommerce.com *.cardinalcommerce.com cas.client.cardinaltrusted.com client.cardinaltrusted.com *.cardinaltrusted.com *.googleadservices.com *.googletagmanager.com static.cloudflareinsights.com https://bat.bing.net/actionp/ https://cdn.jsdelivr.net/sm/ *.g.doubleclick.net *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; font-src 'self' data: *.global-e.com https://use.typekit.net/ *.klarnacdn.net *.studentbeans.com fonts.gstatic.com https://fonts.gstatic.com https://fonts.googleapis.com *.dynamicyield.com *.dynamicyield.eu; frame-src 'self' *.doubleclick.net *.appointedd.com core.conversant.mgr.consensu.org form.typeform.com *.online-metrix.net libertylondon.typeform.com login.dotomi.com login-ds.dotomi.com demo.mention-me.com static.mention-me.com mention-me.com tags.rd.linksynergy.com webservices.global-e.com www.facebook.com https://www.facebook.com/tr/ *.googleadservices.com *.bglobale.com *.chargebee.com *.rewardstyle.com *.paypal.com/smart/ *.contentsquare.net *.contentsquare.com https://cdn.smooch.io/ bytedance: sslocal: www.libertylondon.com *.gocertify.me *.studentbeans.com *.youtube.com *.klarna.com *.google.com *.global-e.com *.securev2.global-e.com *.bazaarvoice.com *.pinimg.com *.pinterest.com api.typeform.com *.yimg.com *.yahoo.com *.adsrvr.org *.klarnaservices.com *.sub2tech.com *.googletagmanager.com https://www.youtube.com/ https://player.vimeo.com/ *.libertylondon.com metrics.libertylondon.com geostag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com cas.client.cardinaltrusted.com client.cardinaltrusted.com *.cardinaltrusted.com static.cloudflareinsights.com https://bat.bing.net/actionp/ https://cdn.jsdelivr.net/sm/ *.g.doubleclick.net; img-src 'self' data: app.pendo.io bat.bing.com consent.linksynergy.com connect.facebook.net ecommerce-scripts.adscale.com cx.atdmt.com edge.curalate.com globale-prod.s3-eu-west-1.amazonaws.com *.doubleclick.net i1.adis.ws i8.amplience.net cdn.media.amplience.net idsync.rlcdn.com liberty.a.bigcontent.io *.linkedin.com nypi.dc-storm.com s3.global-e.com services.postcodeanywhere.co.uk static-demo.mention-me.com tags.rd.linksynergy.com track.linksynergy.com ut.ra.linksynergy.com utils.global-e.com www.facebook.com *.google-analytics.com www.google.co.uk www.google.com *.googletagmanager.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://p.adsymptotic.com/ *.libertylondon.com *.micpn.com login-ds.dotomi.com *.clarity.ms *.bing.com *.paypal.com/ *.contentsquare.net *.contentsquare.com *.analytics.google.com analytics.tiktok.com *.cdnwidget.com *.online-metrix.net *.klarna.com *.klarnacdn.net maps.googleapis.com maps.gstatic.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data: *.bazaarvoice.com *.pinimg.com *.pinterest.com *.yimg.com *.yahoo.com *.adsrvr.org https://*.forter.com wss://cdn0.forter.com https://d2o5idwacg3gyw.cloudfront.net https://dz8rit8v72mig.cloudfront.net https://db7q4jg5rkhk8.cloudfront.net https://d6rak4b14t5gp.cloudfront.net https://d3k4bt74u9esq1.cloudfront.net https://dlthst9q2beh8.cloudfront.net https://d2nww8zpyj5pk0.cloudfront.net https://duuytoqss3gu4.cloudfront.net https://d94qwxh6czci4.cloudfront.net https://dr6vcclmzwk74.cloudfront.net https://d6rak4b14t5gp.cloudfront.net https://d3k4bt74u9esq1.cloudfront.net https://d1ezzflfzltk6e.cloudfront.net https://d3nocrch4qti4v.cloudfront.net https://duuytoqss3gu4.cloudfront.net https://df45ay5pw60dy.cloudfront.net https://d3lqotgbn3npr.cloudfront.net *.bglobale.com https://prf.hn/conversion/ *.dynamicyield.com *.dynamicyield.eu metrics.libertylondon.com *.googlesyndication.com *.googleadservices.com *.googletagmanager.com static.cloudflareinsights.com https://bat.bing.net/actionp/ https://cdn.jsdelivr.net/sm/ *.g.doubleclick.net; child-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' cdn.media.amplience.net i1.adis.ws static.zdassets.com i8.amplience.net cdn.static.amplience.net *.curalate.com *.bazaarvoice.com; form-action 'self' *.facebook.com *.playground.klarna.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.klarnaevt.com *.google.com *.paypal.com *.paypalobjects.com *.bazaarvoice.com *.global-e.com *.securev2.global-e.com development-emea-libertyltd.demandware.net staging-emea-libertyltd.demandware.net dev.libertylondon.com stg.libertylondon.com *.libertylondon.com metrics.libertylondon.com *.cardinalcommerce.com cas.client.cardinaltrusted.com client.cardinaltrusted.com *.cardinaltrusted.com; upgrade-insecure-requests; report-uri https://lib-csp.tryzens-analytics.com; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; img-src 'self' blob: data: * 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.svenskadomaner.se *.dibspayment.eu *.cookiebot.com *.trustpilot.com *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com connect.facebook.net www.googletagmanager.com www.clarity.ms; frame-src 'self' *.svenskadomaner.se *.dibspayment.eu *.cookiebot.com *.trustpilot.com *.youtube.com *.facebook.com s-static.ak.facebook.com www.googletagmanager.com td.doubleclick.net blob:; object-src 'self'; worker-src 'self' blob:; 2 frame-ancestors 'self' *.sartorius.com service.ariba.com www.service.ariba.com s1.ariba.com www.s1.ariba.com service-2.ariba.com www.service-2.ariba.com s1-eu.stc.ariba.com *.ariba.com *.coupa.com *.govsci.com govsci.com *.sciquest.com *.coupahost.com *.coupadev.com *.compute.amazonaws.com *.netsuite.com *.shop.sartorius.com *.shop.sartorius.com.cn; 2 frame-ancestors 'self' *.microsoft.com *.sharepoint.com *.tarimorman.gov.tr *.com.tr *.gov.tr *.com 2 default-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.siteimprove.com https://*.readspeaker.com https://*.hireserve.nl https://*.acc.hireserve.nl https://*.doubleclick.net https://www.facebook.com https://api.ats-platform.com https://platform.hireserve.nl https://connect.facebook.net https://adservice.google.com https://www.nwo.nl https://maps.googleapis.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://*.hireserve.nl https://fonts.googleapis.com https://*.acc.hireserve.nl https://www.nwo.nl; frame-src 'self' https://www.google.com https://*.twitter.com https://*.youtube.com https://*.vimeo.com https://app.powerbi.com https://td.doubleclick.net https://my2.siteimprove.com https://expeditienext.weticket.io https://contentassistant.eu.siteimprove.com; img-src 'self' https://*.siteimproveanalytics.io data: https://www.gstatic.com https://*.google-analytics.com https://*.hireserve.nl https://*.acc.hireserve.nl https://*.ytimg.com https://www.facebook.com https://www.googletagmanager.com https://www.google.com https://googleads.g.doubleclick.net https://www.google.nl https://*.openstreetmap.org https://www.google-analytics.com https://www.nwo.nl https://www.nko.nl https://www.kennisrotonde.nl https://www.onderwijskennis.nl https://www.openscience.nl https://gwi.nwo.prerelease.betawerk.eu; media-src 'self' https://www.nwo.nl https://www.nko.nl https://www.kennisrotonde.nl https://www.onderwijskennis.nl https://www.openscience.nl https://gwi.nwo.prerelease.betawerk.eu; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://siteimproveanalytics.com https://connect.facebook.net https://*.twitter.com https://www.gstatic.com https://*.youtube.com https://*.vimeo.com https://connect.facebook.com cdn-eu.readspeaker.com https://cdn.jsdelivr.net https://cdn.siteimprove.net https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://siteimproveanalytics.com https://www.google-analytics.com https://connect.facebook.com https://www.youtube.com https://www.gstatic.com https://platform.twitter.com https://www.googleadservices.com https://maps.googleapis.com cdn-eu.readspeaker.com https://cdn.jsdelivr.net https://cdn.siteimprove.net https://www.google.com; style-src 'self' 'unsafe-inline' https://cdn-eu.readspeaker.com https://www.gstatic.com https://cloud.typography.com https://www.nwo.nl https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://cdn-eu.readspeaker.com https://cloud.typography.com https://www.nwo.nl https://fonts.googleapis.com; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https://www.google-analytics.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2 default-src 'self' http://nginx-ingress-internal-ingress-nginx-controller.nginx-ingress.svc.cluster.local/cas-ing https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz https://*.uradprace.cz https://*.google-analytics.com https://*.hotjar.com/ https://*.hotjar.io/ https://*.posthog.com/ https://stats.g.doubleclick.net/ https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.gov.cz https://mpsv.gov.cz:9000 https://*.mpsv.cz:9000 https://*.uradprace.cz:9000 https://nominatim.openstreetmap.org https://*.clarity.ms/collect wss://*.hotjar.com/ wss://*.mpsv.gov.cz:9001 wss://*.mpsv.cz:9001 wss://*.uradprace.cz:9001 wss://*.up.gov.cz:9001 wss://*.predu.sk https://www.google.com https://nia.identita.gov.cz https://*.acesarchit.cz; img-src 'self' data: https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz https://*.gstatic.com https://www.google-analytics.com https://c.seznam.cz/retargeting https://www.google.com/ads/ https://www.google.cz/ads/ https://www.google.com/pagead/ https://www.google.cz/pagead/ https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz:9000/ https://*.uradprace.cz:9000/ https://*.predu.sk https://*.openstreetmap.org https://*.clarity.ms/c.gif https://c.bing.com https://*.mailerlite.com; frame-src 'self' data: formapps: https://www.google.com https://www.googletagmanager.com/ https://vars.hotjar.com/ https://www.youtube.com https://player.rss.com/ https://www.youtube-nocookie.com https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz:9000 https://*.uradprace.cz:9000 https://*.predu.sk https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz https://*.mailerlite.com; child-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: http://nginx-ingress-internal-ingress-nginx-controller.nginx-ingress.svc.cluster.local/cas-ing https://*.gstatic.com https://www.googletagmanager.com/ https://www.googleadservices.com/ https://static.hotjar.com/ https://script.hotjar.com/ https://*.posthog.com/ https://c.seznam.cz/ https://googleads.g.doubleclick.net/ https://www.google.com https://www.google-analytics.com https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz:9000 https://*.uradprace.cz:9000 https://portal.gov.cz https://*.predu.sk https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz https://unpkg.com/leaflet/dist/leaflet.js https://unpkg.com/leaflet.markercluster/dist/leaflet.markercluster.js https://cdnjs.cloudflare.com/ajax/libs/proj4js/2.7.5/proj4.js https://www.clarity.ms/tag/ https://www.clarity.ms/s/ https://*.mailerlite.com https://assets.mlcdn.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://fonts.googleapis.com https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz:9000/ https://*.uradprace.cz:9000/ https://*.predu.sk https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz https://*.mailerlite.com https://assets.mlcdn.com; font-src 'self' data: https://*.mailerlite.com; frame-ancestors 'self' https://www.mpsv.gov.cz https://www.uradprace.cz https://up.gov.cz https://*.mpsv.gov.cz https://mpsv.gov.cz https://*.mpsv.cz; 2 font-src 'self' data: https://maxcdn.bootstrapcdn.com; img-src 'self' data: https://www.google.com https://www.google.co.za https://icon.widen.net *.prod.acquia-sites.com https://px.ads.linkedin.com https://cdn.cookielaw.org https://www.facebook.com https://ade.googlesyndication.com https://*.widencdn.net https://metrics.brightcove.com https://www.google-analytics.com https://*.boltdns.net https://www.googletagmanager.com https://tracking.monsido.com https://hostedseal.trustarc.com https://*.mapi-trust.org https://*.accellacare.com https://*.iconplc.com https://cdn.jsdelivr.net https://cdn.monsido.com/page-assist/v2/assets/img/uaccess.svg https://cdn.monsido.com/page-assist/v2/assets/img/default-spinner.png; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com apis.google.com js-agent.newrelic.com https://cdn.cookielaw.org gtm.js www.tagassistant.google.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://www.google.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' data: https://www.googletagmanager.com https://bat.bing.com https://pi.pardot.com js-agent.newrelic.com https://www.google-analytics.com www.google.com apis.google.com https://connect.facebook.net https://cdn.cookielaw.org https://www2.iconplc.com https://players.brightcove.net https://vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js https://s.go-mpulse.net https://app-script.monsido.com/v2/monsido-script.js https://heatmaps.monsido.com/v1/heatmaps.js https://www.gstatic.com https://snap.licdn.com cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://googleads.g.doubleclick.net https://static.searchstax.com https://cdn.monsido.com/page-assist/v2/mon-page-assist-loader.js https://cdn.monsido.com/page-assist/v2/mon-page-assist.js https://cdn.jsdelivr.net https://www.google.com; style-src 'self' cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://players.brightcove.net https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fast.fonts.net cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://players.brightcove.net https://unpkg.com; worker-src 'self' blob:; frame-ancestors 'self' https://www2.iconplc.com/ 2 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: 'unsafe-inline'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors *; 2 default-src 'self' 'unsafe-inline' blob:; object-src 'none'; base-uri 'none'; form-action 'self' *.pennymac.com *.wufoo.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com; font-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.visualwebsiteoptimizer.com *.vwo.com; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com; frame-ancestors 'self' *.pennymac.com *.adobe.com *.google.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com; frame-src 'self' *.pennymac.com *.youtube.com *.instagram.com *.vimeo.com *.youtube-nocookie.com *.googletagmanager.com *.doubleclick.net *.adsrvr.org *.google.com *.leadid.com *.cloudfront.net *.vwo.com *.visualwebsiteoptimizer.com app.vwo.com *.picflow.com; connect-src 'self' *.reddit.com *.onetrust.com *.google.com *.play.google.com *.googleapis.com *.bing.com *.nr-data.net *.cookielaw.org *.reson8.com *.visualwebsiteoptimizer.com *.pennymac.com *.tealiumapis.com *.doubleclick.net *.tealiumiq.com *.yimg.com *.linkedin.com *.adsrvr.org *.leadid.com *.googleadservices.com *.googletagmanager.com *.facebook.com *.facebook.net *.exacttarget.com *.yahoo.com *.trcknow.com *.vwo.com app.vwo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.newrelic.com capi-automation.s3.us-east-2.amazonaws.com *.redditstatic.com *.googletagmanager.com *.pennymac.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com *.googleapis.com; script-src-elem 'self' 'unsafe-inline' capi-automation.s3.us-east-2.amazonaws.com *.instagram.com *.redditstatic.com *.tailwindcss.com *.gstatic.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.newrelic.com *.lidstatic.com *.vimeo.com *.google.com *.googleapis.com *.cookielaw.org *.youtube.com *.tiqcdn.com *.facebook.com *.facebook.net *.bing.com *.licdn.com *.yimg.com *.adsrvr.org *.tealiumiq.com *.resonate.com *.doubleclick.net *.nr-data.net *.vwo.com *.exacttarget.com *.trcknow.com *.pennymac.com; img-src 'self' data: *.townsgateservicing.com *.reddit.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.visualwebsiteoptimizer.com *.vimeocdn.com *.adsvr.org *.google.com *.yahoo.com *.linkedin.com *.bing.com *.facebook.com *.facebook.net *.cloudinary.com *.cookielaw.org *.pennymac.com *.googleadservices.com *.resonate.com *.doubleclick.net *.reson8.com *.yimg.com *.leadid.com *.exacttarget.com *.trcknow.com *.vwo.com *.vwo.io app.vwo.com; worker-src 'self' blob:; 2 default-src 'self'; connect-src * webpack:; font-src * data: webpack:; frame-src * *.wellsfargo.com; img-src * data:; media-src *; object-src *; script-src * *.wellsfargo.com 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; manifest-src https://*.afw.com; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.datarobot.com *.wistia.net *.wistia.com *.google-analytics.com *.googletagmanager.com *.mktoresp.com *.mktoutil.com *.clickagy.com *.smartling.com *.hotjar.com *.amcharts.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com cdn.jsdelivr.net *.hockeystack.com cdn.evgnet.com munchkin.marketo.net cdn.cookielaw.org blob: *.zoominfo.com ws.zoominfo.com static.zoominfo.com cdn.zoominfo.com js.zi-scripts.com browser.sentry-cdn.com cdn.metadata.io https://static.claydar.com; script-src-elem 'self' 'unsafe-inline' *.adsrvr.org *.bing.com *.clearbitscripts.com *.clearbitjs.com *.clickagy.com *.cloudfront.net *.cookiebot.com *.datarobot.com *.doubleclick.net *.evgnet.com *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.intentsify.io *.jsdelivr.net *.licdn.com *.marketo.net *.sentry-cdn.com *.techtarget.com *.tfaforms.net *.visualwebsiteoptimizer.com *.wistia.com *.wistia.net *.zoominfo.com *.calendly.com *.amcharts.com *.hotjar.com *.hockeystack.com static.hotjar.com *.onetrust.com *.cookielaw.org *.usbrowserspeed.com dev.visualwebsiteoptimizer.com cdn.jsdelivr.net unpkg.com cdn.evgnet.com munchkin.marketo.net d-code.liadm.com cdn.cookielaw.org js.zi-scripts.com blob: cdn.metadata.io https://pagead2.googlesyndication.com *.googlesyndication.com https://www.googleadservices.com *.googleadservices.com *.g.doubleclick.net https://platformapi.metadata.io https://*.metadata.io https://www.youtube.com https://static.claydar.com https://cdn.claydar.com https://static.claydar.com; connect-src 'self' *.algolia.net *.algolianet.com *.bing.com *.clearbit.com *.clickagy.com *.cloudfront.net *.cookiebot.com *.cookielaw.org *.doubleclick.net *.datarobot.com *.evergage.com *.facebook.com *.facebook.net *.formassembly.com *.google-analytics.com *.googletagmanager.com *.google.com *.hockeystack.com *.linkedin.com *.mktoresp.com *.mktoutil.com *.amcharts.com *.smartling.com *.techtarget.com *.visualwebsiteoptimizer.com *.wistia.com *.wistia.net *.zoominfo.com *.geolocation.onetrust.com https://geolocation.onetrust.com *.privacyportal.onetrust.com https://privacyportal.onetrust.com ws.hotjar.com content.hotjar.io insight.adsrvr.org ws.hotjar.com *.jsdelivr.net wss://ws.hotjar.com blob: *.zoominfo.com ws.zoominfo.com js.zi-scripts.com metrics.hotjar.io browser.sentry-cdn.com *.google.de *.google.co.jp https://pagead2.googlesyndication.com *.googlesyndication.com https://stats.g.doubleclick.net *.g.doubleclick.net https://www.googleadservices.com *.googleadservices.com *.hotjar.com *.hotjar.io vc.hotjar.io https://platformapi.metadata.io https://*.metadata.io https://api.ipify.org https://api.claydar.com; style-src * 'unsafe-inline'; font-src * data:; img-src * blob: data: static.zoominfo.com cdn.zoominfo.com; media-src 'self' blob: *.wistia.com fast.wistia.net; frame-src 'self' *.adsrvr.org *.cookiebot.com *.clickagy.com *.datarobot.com *.doubleclick.net *.google.com *.googletagmanager.com *.teamwalnut.com *.wistia.com *.wistia.net *.calendly.com *.amcharts.com *.youtube.com calendly.com *.facebook.com https://www.youtube-nocookie.com; frame-ancestors 'self' *.datarobot.com *.calendly.com calendly.com;; upgrade-insecure-requests; report-to csp-endpoint 2 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss:; frame-src 'self' https:; worker-src 'self' blob:; child-src 'self' blob:; media-src 'self' https: blob: data:; upgrade-insecure-requests; block-all-mixed-content 2 default-src 'self' *.springairlines.com *.ch.com wkbrs2.tingyun.com *.growingio.com static.geetest.com;style-src 'self' 'unsafe-inline' *.springairlines.com *.fengkongcloud.cn *.fengkongcloud.com *.geetest.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ch.com *.springairlines.com *.geetest.com *.riskified.com assets.giocdn.com *.fengkongcloud.cn *.fengkongcloud.com; img-src * data:; connect-src 'self' *.springairlines.com *.ch.com wkbrs2.tingyun.com *.riskified.com *.growingio.com *.fengkongcloud.cn *.fengkongcloud.com;font-src 'self' static.geetest.com *.springairlines.com *.fengkongcloud.cn *.fengkongcloud.com;worker-src 'self' blob: *.ch.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.blockpi.io https://unpkg.com https://ai-assistant.blockpi.org https://contact-zendesk.blockpi.org https://www.googletagmanager.com https://js.stripe.com https://cdn.jsdelivr.net https://challenges.cloudflare.com https://static.cloudflareinsights.com ; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-src 'self' https://contact-zendesk.blockpi.org https://ai-assistant.blockpi.org https://js.stripe.com https://challenges.cloudflare.com; connect-src 'self' https://unpkg.com https://cdn.jsdelivr.net https://www.google-analytics.com https://hub.nimbly.blockpi.org wss://hub.nimbly.blockpi.org https://static.blockpi.io; 2 frame-ancestors 'self' https://*.etracker.com www.myosram.com qa.myosram.com seekbeak.com 2 base-uri 'none'; form-action 'self'; frame-ancestors 'none' 2 default-src 'self'; connect-src 'self' https://*.windcave.com/ https://www.google.com https://www.gstatic.com; img-src 'self' https://*.windcave.com/; font-src 'self' data:; object-src 'none'; script-src 'self' https://*.windcave.com/ https://www.google.com https://www.gstatic.com; style-src 'self' https://*.windcave.com/; frame-src 'self' https://*.windcave.com https://www.google.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; 2 default-src 'self' *.microsoft.com *.windows.net; script-src 'self' *.microsoft.com js.monitor.azure.com assets.adobedtm.com wcpstatic.microsoft.com mem.gfx.ms 'unsafe-inline' 'unsafe-eval' snap.licdn.com *.clarity.ms *.google.com *.gstatic.com 204-kzg-685.mktoweb.com bat.bing.com acdn.adnxs.com *.hsforms.net *.hsforms.com *.amazonaws.com *.azurefd.net admin.microsoft.com adsuxsiwest.blob.core.windows.net *.api.sandbox.ads.microsoft.com *.api.ads.microsoft.com directline.botframework.com petrol-int.office.microsoft.com petrol.office.microsoft.com *.omnichannelengagementhub.com browser.pipe.aria.microsoft.com us-prod.asyncgw.teams.microsoft.com edge.skype.com customervoice.microsoft.com adrecommendation.api.sandbox.ads.microsoft.com adrecommendation.api.ads.microsoft.com res.cdn.office.net *.windows.net *.hsappstatic.net *.hubspotusercontent-na1.net *.hubspotusercontent-eu1.net; style-src 'self' *.microsoft.com 'unsafe-inline' 204-kzg-685.mktoweb.com *.azurefd.net; font-src 'self' c.s-microsoft.com *.microsoft.com res-1.cdn.office.net *.azurefd.net *.gstatic.com *.hubspot.net data:; img-src 'self' data: img-prod-cms-rt-microsoft-com.akamaized.net googleads.g.doubleclick.net www.facebook.com px.ads.linkedin.com *.google.com *.google.co * dev-about.ads.microsoft.com qa-about.ads.microsoft.com about.ads.microsoft.com blob:; connect-src 'self' wss: 'unsafe-inline' *.google.com js.monitor.azure.com assets.adobedtm.com wcpstatic.microsoft.com mem.gfx.ms px.ads.linkedin.com *.hsforms.net *.hsforms.com *.amazonaws.com mscom.demdex.net browser.events.data.microsoft.com d.clarity.ms target.microsoft.com dpm.demdex.net *.clarity.ms/collect bat.bing.com dev-about.ads.microsoft.com qa-about.ads.microsoft.com about-uat.ads.microsoft.com beta-about.ads.microsoft.com about.ads.microsoft.com *.azurefd.net msftenterprise.sc.omtrdc.net westus2-2.in.applicationinsights.azure.com bat.bing.net *.microsoft.com adsuxsiwest.blob.core.windows.net *.api.sandbox.ads.microsoft.com *.api.ads.microsoft.com directline.botframework.com petrol-int.office.microsoft.com petrol.office.microsoft.com *.omnichannelengagementhub.com browser.pipe.aria.microsoft.com us-prod.asyncgw.teams.microsoft.com edge.skype.com comms.omnichannelengagementhub.com *.trouter.skype.com *.communication.azure.com us-prod.asyncgw.teams.microsoft.com adrecommendation.api.sandbox.ads.microsoft.com adrecommendation.api.ads.microsoft.com res.cdn.office.net *.azurewebsites.net; frame-src 'self' *.google.com * 204-kzg-685.mktoweb.com *.microsoft.com; media-src 'self' blob: *.eventbuilder.com dev-about.ads.microsoft.com qa-about.ads.microsoft.com about-uat.ads.microsoft.com beta-about.ads.microsoft.com about.ads.microsoft.com *.windows.net 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://*.googletagmanager.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://player.vimeo.com/api/player.js https://static.hotjar.com https://script.hotjar.com https://fpcdn.io ; style-src 'self' data: 'unsafe-inline' https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://*.googletagmanager.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com https://play.google.com https://storage.googleapis.com/mmllc-ace-terra-prod/ https://*.agego.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com wss://ws-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://storage.googleapis.com/mmllc-ace-terra-prod/ https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.agego.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://storage.googleapis.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://storage.googleapis.com/mmllc-ace-terra-prod/ ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com https://directory-live.cb.dev https://directory-v3-live.cb.dev https://*.live.mmwebc.dev https://cbxyz.com https://*.mmpayouts.com https://mmpayouts.com https://*.agego.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://saas-onboarding.incodesmile.com https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce; 2 manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content;, frame-ancestors 'self'; 2 frame-ancestors 'self' app.contentful.com 2 frame-ancestors 'self' *.bnc.ca *.nbc.ca; 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.abtasty.com https://try.abtasty.com https://ariane.abtasty.com *.ciqtracking.com *.bugcrowdusercontent.com bzrcdn.openai.com c.amazon-adsystem.com bugcrowd.com *.trustedform.com *.cfringctr.com *.cohesionapps.com *.lytics.io *.salesforce.com *.tvpixel.com *.cfdomains.com *.lytics.io *.userway.org *.cloudfront.net *.cloudflareinsights.com unpkg.com rum.hlx.page *.kampyle.com *.trustarc.com *.dynatrace.com *.cquotient.com *.clarity.ms *.salesforceliveagent.com *.affirm.com *.adt.com *.taboola.com *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.bing.com *.facebook.net *.tiktok.com *.pinterest.com *.pinimg.com *.licdn.com *.ads-twitter.com *.nextdoor.com *.adnxs.com *.adsrvr.org *.teads.tv *.kargo.com *.go-mpulse.net *.hrzn-nxt.com https://www.chasepaymentechhostedpay.com https://chasepaymentechhostedpay.com https://www.chasepaymentechhostedpay-var.com https://chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.com *.abtasty.com *.findly.com *.nagich.com *.oktacdn.com *.typekit.net *.redditstatic.com *.addtoany.com *.adobe.com *.adobe.io *.adobedtm.com *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com *.bbb.org service.force.com sierra.chat *.youtube.com *.youtube-nocookie.com bat.bing.com *.teads.tv googleads.g.doubleclick.net static.ads-twitter.com analytics.tiktok.com www.googletagmanager.com ads.nextdoor.com acdn.adnxs.com connect.facebook.net snap.licdn.com *.taboola.com s.pinimg.com *.clarity.ms www.redditstatic.com ct.pinterest.com consent.trustarc.com; style-src 'self' 'unsafe-inline' https://*.abtasty.com bugcrowd.com *.userway.org *.abtasty.com *.userway.org *.lytics.io unpkg.com *.findly.com *.oktacdn.com *.adt.com *.salesforceliveagent.com *.trustarc.com *.doubleclick.net *.bbb.org *.googleapis.com *.jsdelivr.net *.bootstrapcdn.com *.typekit.net service.force.com sierra.chat; font-src 'self' data: *.userway.org sierra.chat *.salesforceliveagent.com *.bootstrapcdn.com adt.com *.adt.com *.trustarc.com fonts.gstatic.com *.typekit.net; img-src 'self' data: storage.googleapis.com https://*.abtasty.com https://*.ytimg.com *.googlesyndication.com *.userway.org *.abtasty.com *.tvpixel.com *.lytics.io *.cloudfront.net *.abmr.net *.liadm.com *.affirm.com *.doubleclick.net *.teads.tv *.salesforce.com *.clarity.ms *.truste.com *.trustarc.com *.krxd.net *.googleapis.com *.googleadservices.com trc.taboola.com servedby.flashtalking.com insight.adsrvr.org maps.gstatic.com *.google.com adt.com *.adt.com t.co analytics.twitter.com *.day.com *.linkedin.com www.googletagmanager.com ad.doubleclick.net flask.nextdoor.com px.ads.linkedin.com *.doubleclick.net www.facebook.com *.teads.tv *.hrzn-nxt.com *.reddit.com *.rlcdn.com trkn.us arttrk.com *.gstatic.com arttrk.com ib.adnxs.com *.google-analytics.com *.bing.com *.taboola.com cdn.sanity.io bat.bing.com *.teads.tv di.rlcdn.com servedby.flashtalking.com t.co analytics.twitter.com consent.trustarc.com; connect-src 'self' https://*.openai.com c.amazon-adsystem.com aax-eu.amazon-adsystem.com ara.paa-reporting-advertising.amazon s.amazon-adsystem.com bugcrowd.com *.ciqtracking.com *.akamaihd.net *.cfringctr.com *.leadconduit.com *.cohesionapps.com adt.mymove.com *.rvapps.io *.tvpixel.com *.cloudfront.net *.userway.org *.trustedform.com *.amazonaws.com *.salesforce.com *.centerfield.com *.googletagmanager.com *.cfdomains.com *.facebook.com unpkg.com *.akstat.io *.adt.com *.pinimg.com *.pinterest.com *.abtasty.com *.affirm.com *.trustarc.com *.taboola.com *.cquotient.com *.clarity.ms *.google.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.teads.tv *.kargo.com *.go-mpulse.net *.tiktok.com *.tiktokw.us *.bing.com *.adsrvr.org *.linkedin.com *.reddit.com *.dynatrace.com *.nagich.com *.nextdoor.com *.kaptcha.com *.adnxs.com *.jsdelivr.net https://www.chasepaymentechhostedpay.com https://chasepaymentechhostedpay.com https://www.chasepaymentechhostedpay-var.com https://chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.com ipinfo.io *.ipify.org prodregistryv2.org featureassets.org service.force.com sierra.chat *.youtube.com *.youtube-nocookie.com *.api.sanity.io *.googlesyndication.com pagead2.googlesyndication.com analytics.tiktok.com; frame-src 'self' https://*.abtasty.com c.amazon-adsystem.com bugcrowd.com ciqtracking.com *.ciqtracking.com *.cohesionapps.com *.userway.org *.abtasty.com https://*.abtasty.com https://try.abtasty.com https://ariane.abtasty.com *.affirm.com *.youtube.com *.youtube-nocookie.com s.go-mpulse.net sierra.chat *.adt.com adt.com *.trustarc.com https://www.chasepaymentechhostedpay.com https://chasepaymentechhostedpay.com https://www.chasepaymentechhostedpay-var.com https://chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.com *.kaptcha.com www.facebook.com *.pinterest.com www.googletagmanager.com www.google.com maps.googleapis.com *.fls.doubleclick.net insight.adsrvr.org service.force.com *.alarm.com *.adsrvr.org; frame-ancestors 'self' bugcrowd.com *.go-mpulse.net sierra.chat *.adt.com *.trustarc.com *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.com *.salesforce.com *.force.com *.sanity.studio *.sanity.io; object-src 'none'; base-uri 'self'; worker-src 'self' blob: data:; media-src 'self' cdn.sanity.io https://cdn.sanity.io https://www.adt.com *.adt.com blob:; form-action 'self' https://*.adt.com https://www.chasepaymentechhostedpay.com https://chasepaymentechhostedpay.com https://www.chasepaymentechhostedpay-var.com https://chasepaymentechhostedpay-var.com; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.lexiacore5.com *.mylexia.com *.lexialearning.com *.lexia-dev.com *.lexiapowerup.com *.logr-ingest.com *.lr-ingest.io *.lrkt-in.com; font-src 'self' data:; connect-src 'self' preview.contentful.com *.lexiacore5.com *.mylexia.com *.lexialearning.com *.lexia-dev.com *.lexiapowerup.com *.logr-ingest.com *.lr-ingest.com *.lr-ingest.io *.lrkt-in.com; img-src 'self' data: *.lexiacore5.com *.mylexia.com *.lexialearning.com *.lexia-dev.com *.lexiapowerup.com *.lexialearningresources.com *.logr-ingest.com *.lr-ingest.io; worker-src 'self' blob:; frame-src 'self' mailto: *.lexiacore5.com *.mylexia.com *.lexialearning.com *.lexia-dev.com *.lexiapowerup.com *; 2 default-src 'self' our.umbraco.com marketplace.umbraco.com;connect-src 'self' https://our.umbraco.com https://www.google-analytics.com https://maps.googleapis.com;frame-src 'self' https://marketplace.umbraco.com https://www.youtube.com;frame-ancestors 'self';script-src-attr 'self' 'unsafe-hashes' https://www.timevaluecalculators.com 'sha256-osfNhigSJXc8OJHaquzanxdFeSrcdyQ4IMr2JCoKAHI=' 'sha256-zBUD20Zzmm8unBB+mQGvT0/RAdIiv9Yb+6wbcLGRnv4=' 'sha256-VZ4ZCysdFhjp4R5vXDX4hGpGYu39RsBnNXp+nU/CfGE=' 'sha256-I2PbBTDldUVf2iViluqgx/xdoPVGu/S1Fv61A2QNUBQ=' 'sha256-bKaUT8+mO4cMU4KETpb5/Pe5S4vY/TIbpa2JP/rH5VI=' 'sha256-zWzoVPi+JRuigrmsloBQuSUBioJxfx8awlNrQsNAwhE=' 'sha256-7GlCGMSIJcNTRBPdfUZ36EvDF3cMNRAXGc1PTBSrmmI=' 'sha256-PII22oOie2pC3XdX0wj66tpVeQ1uT/9EEW66uzJOCVU=' 'sha256-mjFD5uCJaJT0393De1U12rUIPkwqyqbb7rr6T6tOO+g=' 'sha256-3dtoFvjQNiFkfcoaUorL0mCtqQNmEtYPKJ4ZKutLxu0=' 'sha256-6EL3QENKT8ZoHz0B4SujdsG4LcXhq38zBGDmvabrs2g=' 'sha256-UVe8aL77yyrm3Oq9H0/9FxnuNh87IsWoPIynuP20g6g=' 'sha256-QiSIS7Y2mUC+F02jr53n0dSDGruNlq7aI4w5TmSBcU8=' 'sha256-LqZKJS0hH6DBfCoQ5cLkWeDAPoaJ3bxaVrMZJ5aHzxY=' 'sha256-+CMYoP1kEoXsUO/t513QxA5XS2YSsvhcqDKu5zeNIEo=' 'sha256-dojYH1VXQYX8CH460bZscv36v18K7edZplYec/fZDQw=' 'sha256-7o26PSLUVKBgl6qqHjaA91XVSSMTX27SHlwmGzgAILU=' 'sha256-X5ykrk7IufzCUzH++66v2jUJKwzMBLG3jyhIkKIhywc=' 'sha256-ReftB5JqhkOrz3MZa/67YQSWP9z2RbVlRY14ilRZZq4=' 'sha256-lmQzCPWQ2RMDe45+s2z8uWl4bnvpI//cNyy8P1zkbuY=' 'sha256-W0gtYujbazamXxOSUElCtKUs+gXmWzMtcUH4NgVSxlM=' 'sha256-Jlpin7v6urtvjOR3OvqA5RS8WkZSH6yzEUgr4xIEolM=' 'sha256-Ds/qnYtTK7k5ITKaLy86CbgwdzqipMANXbnZSedStYg=' 'sha256-kYaBD3jGcrs0f0RltU4NkSobSkkECt0tGQH5FXtms+0=' 'sha256-/H/Pa6h8fvN++H4uQC3U2qSVbFftAR7SktEQDKKSLXs=' 'sha256-JSXMuCA2KyoM3yusTIOeCgSz9NaqjxyIET3RqqWAYHs=' 'sha256-NQ7syT9URYy8vV0BlG3YzxaEAJJYz2g0jHwY9eeTjQc=' 'sha256-0ANgmO0jSY6nOobwvyjEizt7Bush+mw5WHlOU74WvWI=' 'sha256-R3ap3OX4GdDWj7jLoUL/W3O2VNKbWLcFCqPatgY/CwU=' 'nonce-FPJfAxyh6Ds' 'sha256-Fn4FTkfPl3EJA0xrNVM4lCiJeR2HC6vBqgDTluUz7+Q=' 'sha256-bCoSCrb/somI2qGDll3x6b2dS+KmI0lasJMQbmfYFcY=' 'sha256-R45I/J9kK6eXN5SioFI4Z5QzTsibQGGIoReNY+VBGRI=' 'sha256-bAKtUJ4ZolWyIpLn3HjEhWL/CwbJ1W4TdKRNRZv4n44=' 'sha256-M2voXyYS3VMmfxgEn0xjbVcYMZzFRe1/mCw1tAXZL84=' 'sha256-Jw5pvBfPBjXTOgcyDqn5AaUmFdRb8OE4P136DjD8VqY=' 'sha256-Mr/nBZxV5JRFPOH3BoNcqFDemR06LkFzkXB8o/8EKzE=' 'sha256-28JqjI93F6DpY1aQ5SFoPWO/Bufm1ssXh0JA7OmApBo=' 'sha256-4GwRLe7A7eQbjkNpnOmw5b1N3wvbfZzqCEmPzDrTOIo=' 'sha256-95RMRFeZ+7Po29ZCrafTmZd5V5uMAql1meIxGOpUQsI=' 'sha256-g177Je6F+Y4TDclaSDjKeRnfeHpK14zZY8HR+L9LfWk=' 'sha256-z73EqLq946u2YEQNVU0Z7Zh++Rk1Ut28gRsQL/nTEnI=';script-src-elem 'self' https://siteimproveanalytics.com/js/siteanalyze_49669.js https://www.timevaluecalculators.com 'nonce-vNddzXJn6QA' 'nonce-6xaBY0PGOvA' 'sha256-0CQMbDLhApnZ5liy7mFoZA6ol/5djupAVqlqY64n2U4=' 'sha256-9yG7uFdptlQxsIAmqXatU7TyRmwwD6euCstHBxh/dIM=' 'sha256-s+2qtFQQwZztj9CLKxljBhlwHe1EYvU8kwHyCCePVH8=' 'sha256-axVt0+ZNKSkwrajtzSZhyYTI4i1O/MJ8+2WT5H4Axn0=' 'sha256-VJAM6BolRI9epsZNmfLqW6VTmCwxWqYG/gYF9BHk4zI=' 'sha256-DAR16vnYelQAC8IhJtcqEka+34ZZGeM9OH5H3I7wUnw=' 'sha256-I/0O0X+xh99W43WM8++3Luo7EBb0RwzycCWBOP6YrOs=' 'sha256-Xd28rz7m/SD7XZTiPgsiMfvXducSJyncr4M0VhQAv6g=' 'sha256-BFOKkBjm2ietnTozGFPiM4Sr25H/mVlPw1XTGmcCfWU=' 'sha256-5DI7UnblXeYa0u5FQqAOAXG3gevCJ5UHcKfC7yfZULk=' 'sha256-vp7yR2HlfvabVUIe7i5qa3ukzzrzgfE0Oi+cQyCr+M0=' 'sha256-qwULASgE8t1yz4vVp0zXx9akdXEUrWpKkxIT/vHtzkI=' 'nonce-bG9jYWxpemF0aW9u' 'nonce-ZXhwYW5kYWJsZQ==' 'nonce-LNVM9IYfbXk' 'nonce-3156c3f21b' 'nonce-aW9uYWxpemF0' 'nonce-BY0P6xaGOvA' 'nonce-GOvABY0P6xa' 'nonce-vSyHSJn4AQD' 'nonce-5XBqmfdJd2' 'nonce-2fCTXz98Xy' 'nonce-2726c7f26c' 'nonce-2CutiaR1AP' 'nonce-a2JhOGW33i' 'sha256-9wDs+yaWrlE2GgGBAbi/NVDugqlFsLAEwgIJnUwKfpc=';script-src 'self' 'unsafe-hashes' siteimproveanalytics.com https://www.googletagmanager.com https://www.gstatic.com https://maps.googleapis.com https://www.timevaluecalculators.com 'sha256-0CQMbDLhApnZ5liy7mFoZA6ol/5djupAVqlqY64n2U4=' 'sha384-q6JPDONlhQjlTTFSfpA4B+b6N+bpJptDEwKBnILd6BhSBaaQ+MSKRxohUIYuy1MM' 'sha384-yp8skXLQ5MFXsUwAWZbXxAqZMDIqO1aORujwx06y0hOxsFa1EJe56nOMMGXTPkjc' 'sha256-axVt0+ZNKSkwrajtzSZhyYTI4i1O/MJ8+2WT5H4Axn0=' 'sha256-RvkC228Q8+C1uB1j+BVZoYQInwQinnIIPboMNdpkHn0=' 'sha256-VJAM6BolRI9epsZNmfLqW6VTmCwxWqYG/gYF9BHk4zI=' 'sha256-DAR16vnYelQAC8IhJtcqEka+34ZZGeM9OH5H3I7wUnw=' 'sha256-iwiRRwKnOae+e1NUEZNXz7NM+6zy2LuNBMYMsOaG4fU=' 'sha256-zgfBQEBzb4maxy+zSOS6qLNswIS/E70vyCWJqRpoBy4=' 'sha256-VJsfypG/nAx46DLkn1p79yA1QdvdbkPtu3REdS5T+wI=' 'sha256-ZhxM5QkYBQzjJNW2yDLO2DZ88BGvLqv5KTw8H71sykk=' 'sha256-/4cmRfNOEk/cC4Vz9SKiTkVXQ2/T0+q6JMbnIWwAdgU=' 'sha256-5238lGjhhKe+aJ7KyCwzfmd1LGtgcCGRmVGO5fTLRoY=' 'sha256-Sz+yNIB3qxGQSmdphwiwZsdKIOBfu109ShyISKy3UBM=' 'sha256-78+BA7QFqeOVDjQJOT1thoJcehJsQc80iPY7XpFZiDI=' 'sha256-5Bpz5PRpdfQAG158VleLtx2AaMJbMLD3uICYoL4h3e0=' 'sha256-VeaOuhKqVYFuI8L/gM8IsWJEM43i59i5BWuhqhtEPv0=' 'sha256-92msGode+PdMwJ0aRbvcmxvUw0G0eJmfZf7tRFoEwM0=' 'sha256-aaCHDlg8icoJWfJKmIifwYGkGW9giXNAxGu7uYZ9EEk=' 'sha256-gtLATYLDUGjZ3cN30hl1ZlpPtIsuHTOi2ko8dzAYIV0=' 'sha256-Xd28rz7m/SD7XZTiPgsiMfvXducSJyncr4M0VhQAv6g=' 'sha256-L2YATLbuEzycqpj4VQxd7eUfn0g30mp76YWW3NFvqrA=' 'sha256-Tl6eNf6MIDJpxS8N4Q1ls7sxDpeMBdQ1FG0EfVu8Vok=' 'sha256-vXiT7QINpKSvbUM5tORYKLDf3FoF9b2HK6sPl37bhHw=' 'sha384-YMGY63oqO65ZF2CfUEZlpuWq/JGJxY3yKnmsrV5XvI+Dhv9QmhK1Nn9p6Ao1/+3N' 'sha256-zTwj9RFB3h2X5MFms1qaCNHDpJJY7AL3O12Gai580tg=' 'sha256-I/0O0X+xh99W43WM8++3Luo7EBb0RwzycCWBOP6YrOs=' 'nonce-bG9jYWxpemF0aW9u' 'nonce-Y2hlY2tpbmc=' 'nonce-vNddzXJn6QA' 'nonce-ejxu9U89Jd' 'sha384-apfJm2DWye6itJXDari7QfgbBXzkNeRsr1xgTfEH0SCvYV+NlzqP+MkX/LHMZIPI';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.timevaluecalculators.com;img-src 'self' data: our.umbraco.com dashboard.umbraco.com *.woodforest.com https://www.gravatar.com https://www.s1.umbraco.io *.siteimproveanalytics.io https://maps.googleapis.com https://maps.gstatic.com *.prnewswire.com https://www.timevaluecalculators.com;font-src 'self' data: https://fonts.gstatic.com; 2 default-src http: https: data: 'unsafe-inline' 'unsafe-eval' 2 report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub36a3f3f0f59090f513be5ab56b48c748&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:live&service=clickbus-frontend-responsive&level=warn&release=0.226.13-live; report-to reporting-endpoint-dd; frame-ancestors 'self' https://www.clickbus.com.br https://portaldoparceiro.clickbus.com.br https://platform-b2b-stg.clickbus.com.br https://platform-b2b.clickbus.com.br; 2 default-src * 'unsafe-inline' 'unsafe-eval'; img-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * 'unsafe-inline' 'unsafe-eval' data:; frame-ancestors 'self' https://a.cms.omniupdate.com https://*.sharepoint.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.typekit.net https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://b.6sc.co https://j.6sc.co https://ajax.googleapis.com https://js.navattic.com https://cdn.cookielaw.org https://static.ads-twitter.com https://unpkg.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hubspot.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://boards.greenhouse.io https://fireblocks.chilipiper.com https://tracking.g2crowd.com https://cdnjs.cloudflare.com https://fast.wistia.com https://fast.wistia.net https://browser.sentry-cdn.com https://d3js.org https://api-ingest.pocustrack.com https://js.knock-ai.com https://cdn.cr-relay.com https://b2bjsstore.s3.us-west-2.amazonaws.com https://cdn.vector.co https://d-code.liadm.com https://fireblocks.atlassian.net; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://use.typekit.net https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://b.6sc.co https://j.6sc.co https://ajax.googleapis.com https://js.navattic.com https://cdn.cookielaw.org https://static.ads-twitter.com https://unpkg.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hubspot.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://boards.greenhouse.io https://fireblocks.chilipiper.com https://tracking.g2crowd.com https://cdnjs.cloudflare.com https://fast.wistia.com https://fast.wistia.net https://browser.sentry-cdn.com https://d3js.org https://api-ingest.pocustrack.com https://js.knock-ai.com https://cdn.cr-relay.com https://b2bjsstore.s3.us-west-2.amazonaws.com https://cdn.vector.co https://d-code.liadm.com https://fireblocks.atlassian.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://cdn.cookielaw.org https://code.jquery.com https://cdn.jsdelivr.net https://unpkg.com https://fireblocks.atlassian.net; img-src 'self' data: https: https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://fast.wistia.com https://fast.wistia.net; connect-src 'self' https://www.google-analytics.com https://b.6sc.co https://c.6sc.co https://ipv6.6sc.co https://analytics.google.com https://www.google.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://forms.hsforms.com https://api.hubapi.com https://cta-service-cms2.hubspot.com https://px.ads.linkedin.com https://tracking-api.g2.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://fireblocks.chilipiper.com https://static.hsappstatic.net https://fast.wistia.com https://fast.wistia.net https://embed-cloudfront.wistia.com https://distillery.wistia.com https://pipedream.wistia.com https://cdn.jsdelivr.net https://api-ingest.pocustrack.com https://js.knock-ai.com https://ca.knock-ai.com https://api.cr-relay.com https://api.vector.co https://secure.adnxs.com https://t.co https://analytics.twitter.com https://idx.liadm.com https://rp.liadm.com https://region1.analytics.google.com https://region1.google-analytics.com https://epsilon.6sense.com https://pagead2.googlesyndication.com wss:; worker-src 'self' blob:; frame-src 'self' blob: https://www.youtube.com https://fast.wistia.net https://forms.hsforms.com https://app.hubspot.com https://www.googletagmanager.com https://td.doubleclick.net https://fireblocks.chilipiper.com https://www.google.com https://capture.navattic.com https://job-boards.greenhouse.io https://lottie.host https://i.liadm.com https://login.start-chat.com; media-src 'self' blob: https://fireblocks.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://forms.hsforms.com; upgrade-insecure-requests; 2 frame-ancestors 'none'; default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.hs-analytics.net https://*.hsadspixel.net https://js.hscta.net https://js-eu1.hscta.net https://*.hubspot.com https://static.hsappstatic.net https://*.usemessages.com https://*.hs-banner.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://*.hscollectedforms.net https://*.hsleadflows.net https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hubspotfeedback.com https://feedback.hubapi.com https://feedback-eu1.hubapi.com https://*.hotjar.com https://cdn.cookielaw.org https://*.onetrust.com; script-src-elem 'self' 'unsafe-inline' https://boards.greenhouse.io https://job-boards.greenhouse.io https://cdn.platform.jobster.com https://*.googletagmanager.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://*.clarity.ms https://*.hsforms.net https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hubspot.com https://js.hscta.net https://js-eu1.hscta.net https://static.hsappstatic.net https://*.usemessages.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://*.hscollectedforms.net https://*.hsleadflows.net https://connect.facebook.net https://snap.licdn.com https://www.redditstatic.com https://analytics.tiktok.com https://*.tiktokw.us https://*.hotjar.com https://*.contentsquare.net https://static.ads-twitter.com https://cdn.jsdelivr.net https://*.demandbase.com https://cdn.cookielaw.org https://*.onetrust.com; style-src 'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://cdn2.hubspot.net https://*.hotjar.com https://cdn.cookielaw.org https://*.onetrust.com; object-src 'self' data:; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.onetrust.com; style-src-attr 'self' 'unsafe-inline'; img-src 'self' https://nebius.directus.app *.nebius.ai assets.nebius.com data: https://*.googletagmanager.com https://*.google-analytics.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.analytics.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://*.google.com https://*.google.co.uk https://*.google.co.in https://*.google.com.au https://*.google.com.cy https://*.google.ca https://*.google.de https://*.google.fr https://*.google.it https://*.google.es https://*.google.co.jp https://*.google.pl https://*.google.nl https://*.google.se https://*.google.no https://*.google.dk https://*.google.fi https://*.google.ch https://*.google.cz https://*.google.hu https://*.google.ge https://*.bing.com https://*.clarity.ms https://js.hscta.net https://js-eu1.hscta.net https://no-cache.hubspot.com https://*.hubspot.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://*.hsforms.net https://*.hsforms.com https://*.facebook.com https://*.ads.linkedin.com https://www.linkedin.com https://alb.reddit.com https://*.hotjar.com https://*.contentsquare.net https://*.twitter.com https://t.co https://assets.unicorn.studio https://*.demandbase.com https://*.rlcdn.com https://cdn.cookielaw.org https://*.onetrust.com https://optanon.blob.core.windows.net; media-src 'self' https://nebius.directus.app *.nebius.ai assets.nebius.com; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com https://cdn.cookielaw.org; child-src 'self' www.youtube.com https://nebius.directus.app *.nebius.ai assets.nebius.com https://*.hsforms.com blob:; frame-src 'self' www.youtube.com nebius.zoom.us https://nebius.directus.app *.nebius.ai assets.nebius.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://nebius--partial.sandbox.my.site.com https://nebius--full.sandbox.my.site.com https://*.googletagmanager.com https://td.doubleclick.net https://*.google.com https://*.hubspot.com https://*.hs-sites.com https://*.hs-sites-eu1.com https://*.hubspot.net https://play.hubspotvideo.com https://play-eu1.hubspotvideo.com https://*.hsforms.net https://*.hsforms.com https://*.facebook.com https://charts3.equitystory.com https://irpages2.eqs.com https://*.company-target.com https://*.onetrust.com https://forms.microsoft.com; frame-ancestors 'self' https://nebius.directus.app *.nebius.ai assets.nebius.com; connect-src 'self' https://nebius.directus.app *.nebius.ai assets.nebius.com https://boards-api.greenhouse.io https://googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://*.google.com https://*.google.co.uk https://*.google.co.in https://*.google.com.au https://*.google.com.cy https://*.google.ca https://*.google.de https://*.google.fr https://*.google.it https://*.google.es https://*.google.co.jp https://*.google.pl https://*.google.nl https://*.google.se https://*.google.no https://*.google.dk https://*.google.fi https://*.google.ch https://*.google.cz https://*.google.hu https://*.google.ge https://td.doubleclick.net https://*.clarity.ms https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https://*.hubapi.com https://js.hscta.net https://js-eu1.hscta.net https://*.hubspot.com https://*.hs-banner.com https://*.hscollectedforms.net https://*.hsforms.com https://static.hsappstatic.net https://*.facebook.com https://px.ads.linkedin.com https://pixel-config.reddit.com https://www.redditstatic.com https://analytics.tiktok.com https://*.tiktokw.us https://gw.stape.run https://capig.stape.host https://capig.stape.pro https://*.a.run.app https://charts3.equitystory.com https://irpages2.eqs.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.contentsquare.net https://*.twitter.com https://*.typesense.net https://assets.unicorn.studio https://*.demandbase.com https://*.company-target.com https://cdn.cookielaw.org https://*.onetrust.com https://geolocation.onetrust.com https://privacyportal.onetrust.com; worker-src 'self' blob:; 2 upgrade-insecure-requests; default-src 'self' *.openbank.com *.openbank.es; script-src *.openbank.es *.openbank.com 'unsafe-inline' 'unsafe-eval' snap.licdn.com https://js.hcaptcha.com/ https://maps.googleapis.com simuladores.afi.es https://browseranalytic.com https://www.google.com *.gstatic.com tags.tiqcdn.com *.google-analytics.com https://*.g.doubleclick.net *.youtube.com *.googleadservices.com *.facebook.net *.ytimg.com api-ob.nd.nudatasecurity.com https://cdnjs.cloudflare.com *.googletagmanager.com *.we-stats.com static.browseranalytic.com bat.bing.com blob: openbanksimuladores.afi.es unpkg.com https://c.amazon-adsystem.com; connect-src 'self' *.openbank.es *.openbank.com *.google-analytics.com *.we-stats.com *.biocatch.com lib-eu-1.brilliantcollector.com op.browseranalytic.com *.google.com *.googleapis.com *.googlesyndication.com https://*.g.doubleclick.net bat.bing.com cdn.linkedin.oribi.io https://hcaptcha.com https://*.hcaptcha.com https://dpm.demdex.net https://c.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://aax-eu.amazon-adsystem.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.openbank.com https://maxcdn.bootstrapcdn.com; img-src 'self' *.openbank.es px.ads.linkedin.com www.financeads.net data: 'unsafe-inline' *.googletagmanager.com blob: https://maps.googleapis.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.openbank.com *.google.ie *.google.com https://aax-eu.amazon-adsystem.com bat.bing.com www.linkedin.com tbl.tradedoubler.com *.googlesyndication.com www.facebook.com; media-src 'self' *.openbank.com *.youtube.com; child-src 'self' https://www.google.com *.gstatic.com *.youtube.com simuladores.afi.es blob: openbanksimuladores.afi.es https://newassets.hcaptcha.com *.doubleclick.net https://aax-eu.amazon-adsystem.com ;frame-ancestors 'self' https://openbank.campaign.adobe.com; 2 frame-ancestors self https://dol.com.br/ https://elitecs.gruporba.com.br/ https://ed.dol.com.br/ https://diariodopara.com.br/ 2 block-all-mixed-content; font-src 'self' fonts.gstatic.com www.wuv.de fonts.gstatic.com data:; img-src 'self' blob: data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' addsearch.com cdn.ampproject.org open.scdn.co connect.facebook.net *.usercentrics.eu *.g.doubleclick.net *.getsitecontrol.com *.google.de *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.instagram.com *.ioam.de *.opinary.com *.stry.tl *.twimg.com *.twitter.com *.wuv.de *.youtube.com *.ytimg.com *.tiktok.com *.tiktokcdn.com *.ibytedtos.com *.pinterest.com *.research.appinio.com *.ttwstatic.com *.adition.com *.scorecardresearch.com *.searchcdn.com *.teads.tv s0.2mdn.net *.wuv.de gdpr-tcfv2.sp-prod.net widget.perfectmarket.com *.flashtalking.com *.criteo.com *.adform.net *.vidible.tv *.doubleverify.com *.doubleclick.net bs.serving-sys.com static.aivdesk.com secure-ds.serving-sys.com ad.lkqd.net *.cloudflare.com *.adsafeprotected.com *.maximus.mobkoi.com *.celtra.com *.moatads.com sf16-scmcdn-sg.ibytedtos.com tags.crwdcntrl.net *.vimeocdn.com; style-src 'self' 'unsafe-inline' *.addsearch.com fast.fonts.net *.googleapis.com *.stry.tl *.twitter.com *.wuv.de *.tiktok.com *.tiktokcdn.com *.ttwstatic.com *.cloudfront.net tagmanager.google.com *.wuv.de s1.adform.net static.aivdesk.com; worker-src blob: *.wuv.de 2 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.google.com https://*.googletagmanager.com https://region1.google-analytics.com; media-src 'self' data: blob: https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://propertyguru.wd105.myworkdayjobs.com; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://propertyguru.wd105.myworkdayjobs.com; upgrade-insecure-requests; 2 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.wdr.io *.fortum.com *.fortum.se *.fortum.no *.fortum.pl *.fortum.fi *.fortum.in https://fa-se-all-webapp-e1-prd-wa.azurewebsites.net; base-uri 'self'; object-src 'self'; connect-src wss: https:; worker-src 'self' blob: data:; media-src 'self' https: data:; 2 frame-ancestors 'self' https://flex.twilio.com http://localhost:3000 https://aftersales.vertumotors.com https://www.vertucentral.com 2 frame-ancestors 'self' https://www.spikenow.com https://spikenow.com https://lp.spikenow.com 2 frame-ancestors 'self' *.c3.ai *.folloze.com c3.ai folloze.com 2 default-src 'self' data: wss: 'unsafe-eval' 'unsafe-inline' blob: *.afterpay.com *.algolia.net *.algolianet.com *.applicationinsights.azure.com *.azure.com *.braintree-api.com *.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.googleadservices.com *.google.com *.google.com.au *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.hoyts.co.nz *.hoyts.com.au *.in.applicationinsights.azure.com *.jsdelivr.net *.paypal.com *.paypalobjects.com *.recaptcha.net *.report-uri.com *.smooch.io *.snapchat.com *.vimeo.com *.youtube.com *.zdassets.com *.zendesk.com *.zopim.com analytics.tiktok.com analytics-ipv6.tiktokw.us apps.rokt.com az416426.vo.msecnd.net cdn.jsdelivr.net emailvalidatoruatfunc.azurewebsites.net google.com insights.algolia.io js.monitor.azure.com sc-static.net tr.snapchat.com stream.mux.com kg668dbov0.execute-api.us-east-1.amazonaws.com; object-src 'none'; frame-src *; img-src 'self' https: data:;upgrade-insecure-requests;report-uri https://hoyts.report-uri.com/r/d/csp/enforce 2 frame-ancestors 'self' https://viestimedia.blueconic.net https://viestimedia.sb.blueconic.net https://*.viestimedia.net; 2 default-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline' *.adobedc.net *.cloudflare.com *.bing.com *.firestonecompleteautocare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.firestonecompleteautocare.com *.tiktok.com *.doubleclick.net *.adobedtm.com *.adobedc.net *.google-analytics.com *.everestjs.net *.pinimg.com *.hotjar.io *.hotjar.com *.bing.com *.beamery.com *.googleadservices.com *.xg4ken.com *.facebook.net *.doubleclick.com *.googletagmanager.com *.akamaihd.net *.marchex.io *.everesttech.net *.iperceptions.com *.powerreviews.com *.iovation.com *.iesnare.com *.googleapis.com *.virtualearth.net *.recaptcha.net *.gstatic.com *.adroll.com *.sprinklr.com *.criteo.com *.criteo.net *.openai.com d2hrivdxn8ekm8.cloudfront.net telemetry.vaultdcr.com ads.nextdoor.com cdnjs.cloudflare.com ingest.promptwatch.com; img-src * data: blob:; connect-src *; frame-src *; media-src 'self' *.sprinklr.com blob:; font-src 'self' fonts.bridgestoneresources.com data:; 2 frame-ancestors 'self' *.tombolaarcade.co.uk *.tombola.com https://app.optimizely.com; 2 default-src https://domene.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domainname.shop https://xn--domn-noa.shop https://xn--domne-ura.shop https://chat.domeneshop.no/ 'unsafe-inline'; img-src https://domene.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domainname.shop https://xn--domn-noa.shop https://xn--domne-ura.shop; frame-src https://domene.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domainname.shop https://xn--domn-noa.shop https://xn--domne-ura.shop; frame-ancestors 'self' 2 default-src 'none'; base-uri 'self'; form-action 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'wasm-unsafe-eval'; style-src 'self'; font-src 'self'; frame-ancestors 'none'; frame-src blob:; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-modals allow-downloads 2 default-src 'self' https://*.hotjar.io https://media.cez.cz data:;frame-ancestors https://*.setrim.cz https://*.cez.cz *.cezdata.corp https://*.cezdistribuce.cz https://www.dev.cez.cz;style-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://setrim.cz https://ceztipy.cz/ https://*.cez.cz https://*.hotjar.com https://*.hotjar.io https://fonts.googleapis.com https://cdn.bezstavy.cz https://www.test.bezstavy.cz https://cdn-test.bezstavy.cz https://cdn.bezstavy.cz https://www.cezdistribuce.cz https://api.bezstavy.cz *.luigisbox.com *.hospitalita.cz *.visualwebsiteoptimizer.com app.vwo.com https://tagmanager.google.com https://googletagmanager.com https://fonts.googleapis.com https://cdn.luigisbox.tech https://snippet.capybara.lmc.cz https://www.googletagmanager.com;frame-src *.cookiebot.com *.cookiebot.eu https://vars.hotjar.com https://www.cez.cz/ https://www.google.com https://www.youtube.com https://www.test.bezstavy.cz https://cdn-test.bezstavy.cz https://cdn.bezstavy.cz https://dip.cezdistribuce.cz/ https://chatbot.cezdistribuce.cz/ https://wtgisweb.cezdata.corp/ https://api.bezstavy.cz *.adform.net *.seadform.net https://media.cez.cz https://geoportal.cezdistribuce.cz/ *.hospitalita.cz *.visualwebsiteoptimizer.com app.vwo.com https://www.dev.cez.cz *.googletagmanager.com widgets.refsite.info https://www.googletagmanager.com https://www.facebook.com https://data.cezesco.cz https://uspory.cezesco.cz https://data.cezdistribuce.cz https://data.futurego.cz https://data.svetenergie.cz;font-src 'self' data: https://*.cez.cz https://fonts.gstatic.com *.hospitalita.cz https://snippet.capybara.lmc.cz;connect-src 'self' https://clc.cez.cz https://clc-test.cez.cz https://*.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com *.cookiebot.com *.cookiebot.eu https://*.google.com https://*.google.cz https://*.googletagmanager.com https://*.googleservices.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://plausible.io https://*.hotjar.com https://*.hotjar.io https://www.cezdistribuce.cz https://maps.googleapis.com wss://*.hotjar.com *.adform.net *.seadform.net https://www.test.bezstavy.cz https://www.dev.cezdistribuce.cz https://www.devpublic1.cez.cz https://www.devpublic3.cez.cz https://api.bezstavy.cz https://cdn.bezstavy.cz *.luigisbox.com *.hospitalita.cz https://public4.cez.cz https://www.svetenergie.cz https://svetenergie.cz *.visualwebsiteoptimizer.com app.vwo.com https://bat.bing.com https://bat.bing.net *.seznam.cz https://www.cez.cz https://live.luigisbox.tech https://api.luigisbox.tech https://api.capybara.lmc.cz https://data.cezesco.cz https://uspory.cezesco.cz https://px.ads.linkedin.com https://px4.ads.linkedin.com https://gw.linkedin.oribi.io https://cdn.linkedin.oribi.io https://chatbot.cezdistribuce.cz https://data.cezdistribuce.cz https://data.futurego.cz https://data.svetenergie.cz;img-src 'self' https://bat.bing.com https://setrim.cz https://ceztipy.cz/ https://www.cezdistribuce.cz https://googletagmanager.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://storage.googleapis.com https://*.g.doubleclick.net https://*.google.com https://c.seznam.cz https://*.google.cz https://recaptcha.net https://*.cez.cz https://img.bankid.cz https://www.facebook.com https://cx.atdmt.com https://*.hotjar.com https://*.hotjar.io https://i.ytimg.com https://maps.googleapis.com https://maps.gstatic.com *.cookiebot.com *.cookiebot.eu https://cdn-test.bezstavy.cz https://cdn.bezstavy.cz https://api.bezstavy.cz https://tile.openstreetmap.org https://streetviewpixels-pa.googleapis.com https://lh3.ggpht.com/ *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.adform.net *.seadform.net *.hospitalita.cz *.usercentrics.eu data: https://developers.google.com/ *.bing.net https://px.ads.linkedin.com https://px4.ads.linkedin.com https://dc.ads.linkedin.com https://p.adsymptotic.com https://fonts.gstatic.com;script-src 'self' https://*.googletagmanager.com https://tagmanager.google.com https://www.google.com https://*.google-analytics.com https://storage.googleapis.com https://stats.g.doubleclick.net https://www.gstatic.com https://recaptcha.net https://c.imedia.cz *.adform.net *.seadform.net *.cez.cz https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net *.cookiebot.com *.cookiebot.eu https://connect.facebook.net https://*.persoo.cz https://*.persoo.ai https://*.hotjar.com https://*.seznam.cz https://plausible.io https://*.hotjar.com https://*.hotjar.io https://www.youtube.com https://maps.googleapis.com https://cdn.bezstavy.cz https://www.test.bezstavy.cz https://cdn-test.bezstavy.cz https://cdn.bezstavy.cz https://api.bezstavy.cz https://chatbot.cezdistribuce.cz https://unpkg.com/ https://www.cezdistribuce.cz *.visualwebsiteoptimizer.com https://bat.bing.com app.vwo.com *.vimeo.com *.luigisbox.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech *.hospitalita.cz 'unsafe-inline' 'unsafe-eval' https://snippet.capybara.lmc.cz https://snap.licdn.com https://sjs.bizographics.com;object-src 'none';base-uri 'self';form-action 'self';worker-src 'self' blob:;child-src 'self' blob: 2 base-uri 'self'; object-src 'none'; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagassistant.google.com https://pagead2.googlesyndication.com https://www.googletagservices.com https://securepubads.g.doubleclick.net https://w.soundcloud.com https://www.googletagmanager.com https://static.cloudflareinsights.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://www.googleadservices.com https://applets.ebxcdn.com https://tpc.googlesyndication.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https://atunwadigital.streamguys1.com https://amp.atunwadigital.com; frame-src 'self' blob: https://tagassistant.google.com https://amp.atunwadigital.com https://www.youtube.com https://www.youtube-nocookie.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://www.google.com https://w.soundcloud.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://safeframe.googlesyndication.com https://*.safeframe.googlesyndication.com https://cm.g.doubleclick.net https://www.googleadservices.com; connect-src 'self' https://tagassistant.google.com wss://tagassistant.google.com https://atunwadigital.streamguys1.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://region1.google-analytics.com https://pagead2.googlesyndication.com; worker-src blob:; child-src blob: https://safeframe.googlesyndication.com https://*.safeframe.googlesyndication.com 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src-elem * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline' data: blob:; style-src-elem * 'unsafe-inline' data: blob:; img-src * data: blob:; font-src * data: blob:; connect-src * data: blob:; frame-src * data: blob:; worker-src * data: blob:; manifest-src * data: blob:; media-src * data: blob:; object-src * data: blob:; base-uri *; form-action *; frame-ancestors *; 2 script-src 'self' 'unsafe-eval' 'unsafe-inline' *.fontawesome.com *.jsdelivr.net *.googleapis.com *.jquery.com *.vimeo.com *.vimeocdn.com *.cookielaw.org *.vimeocdn.com *.airbud.io unpkg.com:* *.cloudflare.com *.google.com *.montefioreeinstein.org *.montefiore.org www.montefiore.org mychart.montefiore.org npmychart.montefiore.org *.localizejs.com *.localizecdn.com *.123formbuilder.com *.ctctcdn.com *.blackbaudcdn.net *.go-mpulse.net *.ada.support *.blackbaudhosting.com *.googletagmanager.com *.blackbaud.com *.youtube.com *.gstatic.com *.perfalytics.com api.perfalytics.com perfalytics.com *.launchdarkly.com *.akstat.io *.jquery.com *.flywire.com *.bootstrapcdn.com *.ctctcdn.com s3.amazonaws.com/downloads.mailchimp.com/ *.jwpcdn.com *.youtube-nocookie.com cdn.plyr.io assets.gyant.com pds.fabrichealth.com pds.stage.fabrichealth.com mts.pds.stage.fabrichealth.com pds.qa.fabrichealth.com pds.dev.fabrichealth.com mtf.pds.stage.fabrichealth.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net cdn.vidstack.io static.experimentation.dev; upgrade-insecure-requests 2 default-src 'self' *.statistik.at *.local *.google.com *.gstatic.com *.highcharts.com *.statistik blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob:; frame-src www.youtube.com youtube.com 'self' mailto: *.statistik.at *.statistik *.local *.google.com *.gstatic.com *.openstreetmap.org 2 default-src 'self' * 'unsafe-inline' *.3qsdn.com *.payengine.de data: blob:; style-src 'self' *.googleapis.com *.eye-able.com *.gstatic.com 'unsafe-inline' *.vorteilsguru.de *.3qsdn.com; img-src * 'unsafe-inline' data:; script-src * 'unsafe-eval' 'unsafe-inline' blob:; font-src 'self' *.gstatic.com 'unsafe-inline' *.vorteilsguru.de *.3qsdn.com data: 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.zdassets.com https://*.zendesk.com https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://connect.facebook.net https://www.youtube.com https://accountscoring.com https://partners.lhv.ee; style-src 'self' 'unsafe-inline' https://fast.fonts.net https://fonts.googleapis.com https://www.googletagmanager.com https://www.gstatic.com https://fonts.gstatic.com; font-src 'self' https://fast.fonts.net https://fonts.gstatic.com data:; img-src 'self' https://www.lhv.ee https://www.gravatar.com https://www.google.ee https://www.google.com https://*.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://maps.gstatic.com https://maps.googleapis.com https://www.gstatic.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://fonts.gstatic.com https://www.facebook.com https://connect.facebook.net https://accountscoring.com data:; connect-src 'self' https://eu.i.posthog.com https://www.facebook.com https://www.google.com https://www.google.ee https://maps.googleapis.com https://www.googleadservices.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://*.zdassets.com https://*.g.doubleclick.net https://*.ingest.de.sentry.io https://accountscoring.com wss://*.zendesk.com https://*.zendesk.com https://*.lhv.ee; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.facebook.com https://forms.cloud.microsoft https://accountscoring.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 2 frame-ancestors 'self' https://gnosis-safe.io https://dev.gnosis-safe.io https://dapp-browser.apps.ledger.com https://ledger-live-platform-apps.vercel.app https://bsc.gnosis-safe.io https://polygon.gnosis-safe.io https://tmm.world https://chamberfi.com https://dh-pre-prod.vercel.app/ https://app.safe.global https://*.coinshift.xyz https://connect.trezor.io https://verify.walletconnect.com https://wallet-v2.blocto.app https://1inch.cloudflareaccess.com https://buy.moonpay.com https://*.blockscout.com https://1inch.github.io https://connect.solflare.com https://1inch.com https://staging.1inch.com; frame-src data: blob: 'self' https://challenges.cloudflare.com https://app.safe.global https://*.coinshift.xyz https://connect.trezor.io https://verify.walletconnect.com https://wallet-v2.blocto.app https://dapp-browser.apps.ledger.com https://1inch.cloudflareaccess.com https://buy.moonpay.com https://sdk.prod.innerworks.me https://verify.walletconnect.org https://connect.solflare.com https://subscribe-forms.beehiiv.com https://www.youtube.com https://chamberfi.com https://youtube.com; 2 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; worker-src blob:; font-src https: data:; connect-src https: wss://api.eu.residency.elevenlabs.io; script-src https: blob: 'unsafe-eval' 'unsafe-inline'; 2 frame-ancestors 'self' https://orovivo-tablet.vercel.app 2 frame-ancestors 'self' resources.renishaw.com static.renishaw.net www.renishaw.cz www.renishaw.de www.renishaw.com www.renishaw.es www.renishaw.fr www.renishaw.it www.renishaw.hu www.renishaw.nl www.renishaw.pl www.renishaw.com.br www.renishaw.si www.renishaw.se www.renishaw.com.tr www.renishaw.ru www.renishaw.jp www.renishaw.co.kr www.renishaw.com.cn pg.info.renishaw.net; report-uri https://renishaw.report-uri.com/r/d/csp/enforce 2 default-src 'self'; script-src 'self' https://www.googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://cdn.cookielaw.org https://recaptcha.net https://www.gstatic.com https://ajax.cloudflare.com https://static.ads-twitter.com https://snap.licdn.com https://analytics.clickdimensions.com https://static.oktopost.com https://okt.to https://unpkg.com https://www.essencemediacom.com https://*.essencemediacom.com https://*.groupm.com https://*.wppmedia.com https://public.flourish.studio https://flourish.studio https://flo.uri.sh 'unsafe-inline' https://src.litix.io https://*.vimeo.com/ https://*.spotify.com/ https://*.linkedin.com/ https://x.com/ https://*.tiktok.com/ https://*.facebook.com/ https://connect.facebook.net/ https://*.wechat.com/ https://*.instagram.com/ https://elevenlabs.io/ https://*.beyondwords.io https://*.canva.com/ ; style-src 'self' https://p.typekit.net https://use.typekit.net https://api.mapbox.com https://tagmanager.google.com https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://*.datocms-assets.com https://images.ctfassets.net https://i.ytimg.com https://cdn.cookielaw.org https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://*.g.doubleclick.net https://analytics.google.com https://px.ads.linkedin.com https://creativereview.imgix.net https://static.licdn.com https://miro.medium.com https://www.theverge.com https://www.wpp.com https://www.groupm.com https://*.groupm.com https://www.essencemediacom.com https://*.essencemediacom.com https://*.wppmedia.com https://public.flourish.studio https://flourish.studio https://flo.uri.sh data: https://image.mux.com https://*.litix.io https://*.tiktok.com/ https://*.instagram.com/ https://*.beyondwords.io https://*.canva.com/ https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://flo.uri.sh https://*.wppmedia.admin.datocms.com 'self' https://analytics.google.com https://*.essencemediacom.admin.datocms.com https://www.gstatic.com https://*.datocms-assets.com https://ssl.gstatic.com https://*.analytics.google.com https://www.wpp.com https://www.theverge.com https://www.googletagmanager.com https://i.ytimg.com https://px.ads.linkedin.com https://*.g.doubleclick.net https://flourish.studio https://creativereview.imgix.net https://miro.medium.com https://plugins-cdn.datocms.com https://public.flourish.studio https://www.essencemediacom.com https://static.licdn.com https://*.google-analytics.com https://www.wppmedia.com https://cdn.cookielaw.org https://*.essencemediacom.com https://www.groupm.com https://images.ctfassets.net https://*.wppmedia.com https://*.googletagmanager.com https://*.groupm.com data:; font-src 'self' https://use.typekit.net https://fonts.gstatic.com data:; connect-src 'self' https://www.wpp.com https://www.groupm.com https://*.groupm.com https://www.essencemediacom.com https://creativereview.imgix.net https://static.licdn.com https://miro.medium.com https://www.theverge.com https://images.ctfassets.net https://videos.ctfassets.net https://www.datocms-assets.com https://cdn.cookielaw.org https://p.typekit.net https://use.typekit.net https://*.onetrust.com https://recaptcha.net https://i.ytimg.com https://www.youtube.com https://www.youtube-nocookie.com https://www.gstatic.com https://api.mapbox.com https://events.mapbox.com https://unpkg.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://analytics.google.com https://static.oktopost.com https://okt.to https://static.ads-twitter.com https://snap.licdn.com https://analytics.clickdimensions.com https://px.ads.linkedin.com https://www.essencemediacom.com https://*.essencemediacom.com https://*.wppmedia.com https://public.flourish.studio https://flourish.studio https://flo.uri.sh https://*.mux.com https://*.litix.io https://storage.googleapis.com https://*.vimeo.com/ https://*.spotify.com/ https://*.linkedin.com/ https://x.com/ https://*.tiktok.com/ https://*.facebook.com/ https://connect.facebook.net/ https://*.wechat.com/ https://*.instagram.com/ https://elevenlabs.io/ https://*.beyondwords.io https://*.canva.com/ https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://recaptcha.net https://public.flourish.studio https://flourish.studio https://flo.uri.sh https://*.vimeo.com/ https://*.spotify.com/ https://*.linkedin.com/ https://x.com/ https://*.tiktok.com/ https://*.facebook.com/ https://connect.facebook.net/ https://*.wechat.com/ https://*.instagram.com/ https://elevenlabs.io/ https://*.beyondwords.io https://*.canva.com/; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://plugins-cdn.datocms.com http://localhost https://essencemediacom.admin.datocms.com https://wppmedia.admin.datocms.com https://*.enboarder.com; media-src 'self' blob: https://*.beyondwords.io https://*.datocms-assets.com https://*.mux.com https://*.canva.com/; object-src 'self' data:; 2 frame-ancestors 'self' https://eppendorf.e-spirit.hosting https://*.ariba.com https://*.sciquest.com https://*.oracle.com https://*.workday.com https://procure.prendio.com https://*.coupahost.com https://*.gep.com https://eprocurement.esmsolutions.com https://*.labcloudinc.com https://demo.procuredesk.com https://myprocuredesk.com https://*.umn.edu https://*.mdanderson.edu https://*.princeton.edu https://*.duke.edu https://austin.utexas.edu https://*.utmb.edu https://*.virginia.edu https://*.miami.edu https://*.moffit.org https://*.app.netsuite.com https://rcbb.psfs.lsuhsc.edu https://prd.psfs.lsuhsc.edu https://lawpe.c0xl.velocity.cloud https://lawde.c0xl.velocity.cloud https://lawdf.c0xl.velocity.cloud https://hilsapp50.qiagen.ads:8403 https://hilsapp50.qiagen.ads https://*.uni-bonn.de 2 frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests 2 base-uri 'none';form-action 'self' *.readspeaker.com;frame-ancestors 'self' 2 frame-ancestors 'self' userecho.com *.userecho.com userecho.ru *.userecho.ru; report-uri /tools/csp/ 2 default-src 'self' ; script-src 'self' https://www.googletagmanager.com https://googletagmanager.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google.com/ccm/ https://googleads.g.doubleclick.net https://connect.facebook.net https://graph.facebook.com https://*.tiktok.com 'sha256-xu9Iq5nB3QL00atr1Rq5QHgoWT+CMeSIRxYEQoXF6oc=' 'sha256-Q8ZuYJje7UlpSaSOgMMOAFtU5xSGLKxrnAbf0enZIec=' 'sha256-GZUL2cHNZEB372HDaunFlkmWRlmPjUCVh363Q/Hwkss=' 'sha256-DfG8D9nfn3FARaznOfvCwohx09pdQRZP/yU2N4GrPOM=' 'sha256-wWMpNbh9bP4s3KdaWGtZyNRc6Un5wj4cbA3BIhid/a8=' 'sha256-kGUQiECb7HTB3+cdt9SV9OGtiju37vTHScB5TlU3tzo=' 'sha256-x2uDu7SyKZeWovfbqE9tQezLXGFKp3/byogaz3s0Q+4=' 'sha256-dkRT5+x2VWz61gXVV8wSIY1O28ibthds4EvgB8FpQf8=' 'sha256-zh2ArvdLERU/vdvWWF6nF4+s19WdHU5jKji0hXdKoBM=' 'sha256-MIciPUtgYYdEQFNkxi3thzrW0ZoimcCoe1A3oGItPOQ=' 'sha256-1J83YvnahrdMjgx67elyPGrNVohjPChQmxA20wBcvp8=' 'sha256-YMVA0k3GhNMKsziaqMKy+PPR0jctZI/vEpy0uScrQiM=' 'nonce-pbscript'; img-src 'self' data: https://*.google-analytics.com https://*.facebook.com https://*.doubleclick.net https://*.google.com https://*.google.com.my https://maps.gstatic.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google.com/ccm/ https://*.g.doubleclick.net; connect-src 'self' https://*.google-analytics.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.googletagmanager.com https://*.facebook.com https://*.google.com https://*.google.com.my https://maps.googleapis.com https://*.googleadservices.com https://google.com https://*.tiktok.com https://*.tiktokw.us; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; style-src-elem 'self' https://fonts.googleapis.com 'sha256-/VVOq+Ws/EiUxf2CU6tsqsHdOWqBgHSgwBPqCTjYD3U=' 'sha256-zZp8BI/LRCsExnI71KZA79vRfTQ/33qQr5GcSWAOwto=' 'sha256-QzbuspFx3XWfDfPzTlfR0J2UlRJ1iYhfJ1wQgds/IA0=' 'sha256-j69g0Z+HAbHBMIzQNFis9uADYR6LPo2LYlSo6DI4wy0=' 'sha256-g1+M02rsvlWQa9CjaRfEaZvT//NG7UhCKe8br+KXuF8=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-vi0IHEWWjH+X+5ImyV6kj/fBMFzSTz4uPlUjRhRTuDQ=' 'sha256-cwZgAPm2CTAW2GLDlL0o2J5isI4Gr0wno+xO/MvtT3s=' 'sha256-mmA4m52ZWPKWAzDvKQbF7Qhx9VHCZ2pcEdC0f9Xn/Po=' 'sha256-cH1+lg4dJr7FMyPRntBLER2hcaREO8zDwh5wmjRu4EQ=' 'sha256-UQBytKn0DQWyDg5/YC+FaQxonSsbQk4k0ErDHqBuhfw=' 'sha256-CwE3Bg0VYQOIdNAkbB/Btdkhul49qZuwgNCMPgNY5zw=' 'sha256-MZKTI0Eg1N13tshpFaVW65co/LeICXq4hyVx6GWVlK0=' 'sha256-LpfmXS+4ZtL2uPRZgkoR29Ghbxcfime/CsD/4w5VujE=' 'sha256-YJO/M9OgDKEBRKGqp4Zd07dzlagbB+qmKgThG52u/Mk=' 'sha256-hx0up+5msNNPOIf047hgFKR59NaAvp5txflkdef6WVE=' 'sha256-RQJWtWi98UMOZIQ+P3blsXASWiX1eocP7Lzmsds8O8M=' 'sha256-vv1wd7l4bhm6Qif9i6mE2iRtRy95thdzp5hgnZ/cN2c=' 'sha256-F8cu7BKRl4BoblXMReCG+tDSra+yGY8oApi037xhk/8=' 'nonce-pbstyle'; frame-src 'self' https://www.google.com https://www.youtube.com https://maegis.pbb.safe/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://www.googletagmanager.com; object-src 'self'; base-uri 'self'; worker-src 'self' blob:; 2 default-src 'none'; connect-src 'self' https://8133842.fls.doubleclick.net https://dpm.demdex.net https://ingdirect.d1.sc.omtrdc.net https://*.au.ingdirect.intranet https://*.au.ing.net https://*.ingdirect.com.au https://*.biabau.ingdirect.intranet https://*.biab.au.ing.net https://ingdirectaustralia.tt.omtrdc.net http://www.ingdirect.com.au/ https://www.google.com/ccm/; font-src 'self' data:; frame-src 'self' 'unsafe-inline' https://8133842.fls.doubleclick.net https://www.googletagmanager.com/gtag/ https://www.youtube.com https://ad.doubleclick.net/ https://td.doubleclick.net/ https://ingbankaultd.demdex.net/ https://i.ytimg.com/ https://calculators.infochoice.com.au/ https://keyfactssheet.infochoice.com.au/ https://www.ratecity.com.au/; img-src 'self' 'unsafe-inline' https://8133842.fls.doubleclick.net https://ad.doubleclick.net/ https://td.doubleclick.net/ https://cm.everesttech.net/ https://www.facebook.com/tr/ https://www.facebook.com/tr https://www.facebook.com/privacy_sandbox/pixel/register/trigger/ https://ingdirect.d1.sc.omtrdc.net/ https://calculators.infochoice.com.au/Content/images/ https://i.ytimg.com/ https://dpm.demdex.net/ https://campaigns.ing.com.au/ data:; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com/gtag/ https://assets.adobedtm.com https://ad.doubleclick.net/ https://td.doubleclick.net/ https://dpm.demdex.net https://ingdirectaustralia.tt.omtrdc.net/m2 https://calculators.infochoice.com.au/ https://www.ratecity.com.au/ https://connect.facebook.net/ https://campaigns.ing.com.au/; style-src 'self' 'unsafe-inline'; worker-src 'self' 2 default-src 'none'; connect-src 'self' https://maps.googleapis.com https://places.googleapis.com https://*.getjerry.com https://*.jerry.ai https://growthbook-api.getjerry.app https://*.s3.us-west-2.amazonaws.com https://cdn.jsdelivr.net https://unpkg.com https://*.datadoghq.com https://browser-intake-datadoghq.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://www.googletagmanager.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://verifi.podscribe.com https://ipv4.podscribe.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://vimeo.com; font-src 'self' https://getjerry.com https://jerry.ai https://*.getjerry.com https://*.jerry.ai data: https://fonts.gstatic.com https://script.hotjar.com; frame-src 'self' https://getjerry.com https://jerry.ai https://*.getjerry.com https://*.jerry.ai https://www.googletagmanager.com https://td.doubleclick.net https://e.infogram.com https://embed.reddit.com https://www.tiktok.com bytedance: sslocal: https://player.vimeo.com https://platform.twitter.com https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' blob: data: https://images.ctfassets.net https://maps.googleapis.com https://maps.gstatic.com https://jerry-uploads-prod.s3.amazonaws.com https://getjerry.com https://jerry.ai https://*.getjerry.com https://*.jerry.ai https://tvspix.com https://secure.gravatar.com https://i2.ytimg.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com https://verifi.podscribe.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://i.vimeocdn.com https://i.ytimg.com; media-src 'self' https://jerry-uploads-prod.s3.amazonaws.com; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://maps.gstatic.com https://getjerry.com https://jerry.ai https://*.getjerry.com https://*.jerry.ai https://cdn.jsdelivr.net https://assets.tvscipixel.com https://www.datadoghq-browser-agent.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://e.infogram.com https://d34r8q7sht0t9k.cloudfront.net https://embed.reddit.com https://www.tiktok.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://player.vimeo.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://getjerry.com https://jerry.ai https://*.getjerry.com https://*.jerry.ai https://cdn.jsdelivr.net https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com; worker-src 'self' https://getjerry.com https://jerry.ai https://*.getjerry.com https://*.jerry.ai blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.acast.com *.adbutter.net *.adform.net *.adnxs.com *.adnxs-simple.com *.ads-twitter.com addtocalendar.com *.airtable.com airtable.com *.airtableusercontent.com *.apple.com *.azureedge.net *.ckeditor.com *.cloudflare.com *.didomi.io *.doubleclick.net *.dynamics.com *.elfsight.com *.elfsightcdn.com elfsightcdn.com *.facebook.com *.facebook.net *.gomovein.com *.google.com *.google.fr *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com heyzine.com *.heyzine.com *.hzstats.com *.instagram.com *.jellyfish.com *.jsdelivr.net *.licdn.com *.linkedin.com *.marches-publics.info *.marketo.com *.marketo.net *.matomo.cloud *.mews.com *.mktoresp.com *.otowui.com *.privacy-center.org *.seadform.net sc-static.net *.sharethis.com *.sibforms.com *.static.net *.tapad.com *.tiktok.com *.twitter.com *.typeform.com *.unibuddy.co unibuddy.co *.vimeo.com *.webleads-tracker.fr *.welcomekit.co *.youtube.com youtube.com *.youtube-nocookie.com youtu.be *.ytimg.com page.hec.edu *.readspeaker.com *.addtoany.com hec-prod-drupalfiles.oos.cloudgouv-eu-west-1.outscale.com; img-src 'self' data: *.acast.com *.adbutter.net *.adform.net *.adnxs.com *.adnxs-simple.com *.ads-twitter.com *.airtable.com airtable.com *.airtableusercontent.com *.apple.com *.azureedge.net *.ckeditor.com *.cloudflare.com *.didomi.io *.doubleclick.net *.dynamics.com *.elfsight.com *.elfsightcdn.com elfsightcdn.com *.facebook.com *.facebook.net *.gomovein.com *.google.com *.google.fr *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com *.heyzine.com heyzine.com *.hzstats.com *.instagram.com *.jellyfish.com *.jsdelivr.net *.licdn.com *.linkedin.com *.marches-publics.info *.marketo.com *.marketo.net *.matomo.cloud *.mews.com *.mktoresp.com *.otowui.com *.privacy-center.org *.seadform.net sc-static.net *.sharethis.com *.sibforms.com *.static.net *.tapad.com *.tiktok.com *.twitter.com *.typeform.com *.unibuddy.co *.vimeo.com *.webleads-tracker.fr *.welcomekit.co *.youtube.com youtube.com *.youtube-nocookie.com youtu.be *.ytimg.com page.hec.edu *.readspeaker.com *.addtoany.com hec-prod-drupalfiles.oos.cloudgouv-eu-west-1.outscale.com; font-src 'self' data:; report-uri /hec-report-csp-violation 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.hotjar.com https://*.jquery.com https://*.my.salesforce-scrt.com https://*.my.site.com https://*.hdiseguros.com.br https://connect.facebook.net https://*.siteintercept.qualtrics.com; style-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.adtrafficquality.google https://*.my.salesforce-scrt.com https://*.my.site.com https://*.handtalk.me https://*.ckeditor.com https://jsuites.net https://*.doubleclick.net https://*.tiktok.com https://cdn.jsdelivr.net https://*.hotjar.com https://gc.kis.v2.scr.kaspersky-labs.com https://*.goadopt.io https://*.hdiseguros.com.br https://*.hdi.com.br https://axa.saas.ca.com https://checkoutshopper-live.adyen.com https://maxcdn.bootstrapcdn.com https://tpc.googlesyndication.com https://ib.adnxs.com https://*.google.com.br https://*.google.com https://partner.googleadservices.com https://*.tradelab.fr https://maps.googleapis.com https://unpkg.com https://tracker.metricool.com https://snap.licdn.com https://pagead2.googlesyndication.com https://cdnjs.cloudflare.com https://cdn.mouseflow.com https://*.santanderauto.com.br https://*.hdiseguros.com.br https://code.jquery.com https://script.crazyegg.com https://www.google-analytics.com https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://connect.facebook.net https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com; style-src-elem 'self' 'unsafe-inline' https://*.jsdelivr.net https://*.my.salesforce-scrt.com https://*.my.site.com https://www.gstatic.com https://checkoutshopper-live.adyen.com https://*.hdiseguros.com.br https://*.hdi.com.br https://*.jquery.com https://fonts.googleapis.com https://use.fontawesome.com https://checkoutshopper-live; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com https://assets; img-src 'self' blob: https://*.handtalk.me http://*.santanderauto.com.br https://*.santanderauto.com.br https://*.adnxs.com https://*.facebook.com https://tr.audio.ad https://*.linkedin.com https://*.googleapis.com https://*.qualtrics.com https://*.adyen.com https://*.hdiseguros.com.br https://*.hdi.com.br https://maps.googleapis.com https://maps.gstatic.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.facebook.com https://px.ads.linkedin.com https://*.google.com https://*.google.com.br https://its.tradelab.fr https://secure.adnxs.com https://tracker.metricool.com https://pagead2.googlesyndication.com data:; connect-src 'self' wss: ws: https://*.handtalk.me https://*.my.salesforce-scrt.com https://*.my.site.com https://*.amazonaws.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.hotjar.io https://*.tiktok.com https://*.linkedin.com http://*.hdi.com.br https://*.google.com https://*.hotjar.com https://*.microsoftonline.com https://*.oribi.io https://*.goadopt.io https://pagead2.googlesyndication.com https://maps.googleapis.com https://stats.g.doubleclick.net/ https://*.santanderauto.com.br https://siteintercept.qualtrics.com https://www.google-analytics.com https://*.crazyegg.com https://*.hdi.com.br https://*.hdiseguros.com.br https://*.hdiglobalbrasil.com.br; worker-src 'self' blob: https://*.hdi.com.br https://*.santanderauto.com.br https://*.hdiglobalbrasil.com.br; frame-src https://*.handtalk.me https://*.doubleclick.net https://hdibrazil.az1.qualtrics.com https://checkoutshopper-live.adye https://*.powerbi.com https://*.adyen.com https://tpc.googlesyndication.com https://*.my.salesforce-scrt.com https://*.my.site.com https://www.google.com https://googleads.g.doubleclick.net https://*.hdi.com.br http://*.hdi.com.br https://*.youtube.com https://*.santanderauto.com.br https://*.hdiglobalbrasil.com.br https://*.hdiseguros.com.br http://*.hdiseguros.com.br; frame-ancestors 'self' https://hdiseguros.com.br https://*.hdiseguros.com.br https://hdi.com.br https://*.hdi.com.br 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: https://calendario-ministro.tst.jus.br https://tst.jus.br https://www.tst.jus.br https://csjt.jus.br https://www.csjt.jus.br https://portalextranet.tst.jus.br https://cdnjs.cloudflare.com https://translate.googleapis.com https://use.fontawesome.com https://vlibras.gov.br https://www.google-analytics.com https://www.gstatic.com https://www.vlibras.gov.br https://enamat.jus.br https://www.enamat.jus.br wss://ws.hotjar.com; img-src 'self' data: https: https://tst.jus.br https://www.tst.jus.br https://csjt.jus.br https://www.csjt.jus.br https://portalextranet.tst.jus.br https://cdnjs.cloudflare.com https://translate.googleapis.com https://use.fontawesome.com https://vlibras.gov.br https://www.google-analytics.com https://www.gstatic.com https://www.vlibras.gov.br https://enamat.jus.br https://www.enamat.jus.br; 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: blob: gmsg:; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https: gmsg:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 2 default-src 'self' *.usopen.com:* *.uswomensopen.com:* *.usga.org:* usopen.com:* uswomensopen.com:* usga.org:*; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.usopen.com *.uswomensopen.com *.usga.org usopen.com uswomensopen.com usga.org 2 frame-ancestors www.googletagmanager.com; 2 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: 'unsafe-inline'; 2 default-src * 'self' data: 'unsafe-inline'; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.vo.msecnd.net *.google.com *.virtualearth.net *.bing.com *.googleapis.com *.gstatic.com *.googletagmanager.com cdnjs.cloudflare.com code.jquery.com *.facebook.net *.instagram.com analytics.tiktok.com *.abtasty.com secure.quantserve.com rules.quantcount.com quantcast.mgr.consensu.org cmp.quantcast.com cmp.inmobi.com *.trustpilot.com *.googleadservices.com komito.net bat.bing.com *.clarity.ms *.contentsquare.net googleads.g.doubleclick.net *.google-analytics.com static.ads-twitter.com analytics.twitter.com *.adalyser.com use.fontawesome.com snap.licdn.com px.ads.linkedin.com *.playbuzz.com *.seez.dev *.seez.tech *.seez.dk *.seez.co *.ex.co *.infinity-tracking.net *.infinity-tracking.com p.teads.tv go.affec.tv *.permutive.com *.adnxs.com *.monitor.azure.com *.applicationinsights.io *.vo.msecnd.net *.ingest.sentry.io *.pinimg.com *.pinterest.com *.youtube.com *.ytimg.com *.liveperson.net *.lpsnmedia.net widgets-eu.reputation.com ir.tools.investis.com *.eventbrite.co.uk emac-direct.service-plan.co.uk *.jaguarlandrover.com cdn.worldpay.com *.onetrust.com *.netdirector.auto *.netdirector.co.uk s3.amazonaws.com *.list-manage.com *.contentsquare.com *.research-tree.com *.evanshalshaw.com *.stratstone.com *.carstore.com intranet.local *.pendragonplc.com *.pendragonvehiclemanagement.co.uk; frame-src * 'self' data: 'unsafe-inline' *.fls.doubleclick.net *.abtasty.com *.onetrust.com *.pinterest.com ir.tools.investis.com *.evanshalshaw.com *.stratstone.com *.carstore.com; object-src 'none'; font-src 'self' blob: data: *.abtasty.com *.seez.dk *.gstatic.com *.googleapis.com *.netdirector.auto; img-src * 'self' data: blob: pplc-p-001.sitecorecontenthub.cloud *.abtasty.com; child-src * 'self' pplc-p-001.sitecorecontenthub.cloud; connect-src * 'self' data: *.abtasty.com *.ingest.sentry.io *.pinterest.com *.mixpanel.com pplc-p-001.sitecorecontenthub.cloud; worker-src data: blob:; upgrade-insecure-requests; block-all-mixed-content; 2 default-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'; 2 frame-ancestors 'self';block-all-mixed-content;script-src 'self' 'strict-dynamic' 'nonce-W76xBtCwY6+obOZ1v5HsnA==' 'report-sample' https:; style-src 'self' 'report-sample' 'unsafe-inline' *.google.com fonts.googleapis.com;object-src *.googlesyndication.com;child-src 'self' blob: *.googlesyndication.com *.google.com *.adtrafficquality.google *.doubleclick.net;base-uri 'self';form-action 'self' *.google.com *.israelinfo.co.il;worker-src 'self' blob: www.google.com; 2 base-uri 'self';object-src 'none';frame-ancestors 'self' *.bajajallianz.com *.bajajgeneralinsurance.com *.bajajgeneral.com https://bagicare.bajajallianz.com https://bagicare.bajajgeneral.com https://bagicare.bajajgeneralinsurance.com https://bagicbizconnect--motordev.sandbox.lightning.force.com https://bagicbizconnect--motordev.sandbox.my.salesforce.com https://bagicbizconnect--motordev.sandbox.my.site.com https://bagicbizconnect--uat.sandbox.my.salesforce.com https://bagicbizconnect--uat.sandbox.lightning.force.com https://bagicbizconnect--uat.sandbox.my.site.com https://bagicbizconnect.lightning.force.com https://bagicbizconnect.my.salesforce.com https://bagicbizconnect.my.site.com ; upgrade-insecure-requests; 2 frame-ancestors 'self' www.baby.ru postila.ru www.neboleem.net www.beautyinsider.ru yandex.com.tr yandex.com yandex.net yandex.uz yandex.fr yandex.kz yandex.ru yandex.by yandex.ua *.yandex.com.tr *.yandex.com *.yandex.net *.yandex.uz *.yandex.fr *.yandex.kz *.yandex.ru *.yandex.by *.yandex.ua *.turbopages.org 2 frame-ancestors 'self' localhost:* 2 upgrade-insecure-requests; base-uri 'self'; object-src 'self'; frame-ancestors 'self'; form-action 'self' *.cint.com *.hsforms.com; 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:; 2 default-src 'self'; font-src 'self' data: https://cdn.givechariot.com https://cdn.jdrf.design https://cdn.acsbapp.com https://doublethedonation.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://use.typekit.net https://cloud.typography.com *.userway.org matchbox.hepdata.com; frame-ancestors 'self'; frame-src 'self' blob: https://*.blackbaud.com https://*.googletagmanager.com https://secure.dafpay.com https://chatbot.breakthrought1d.org *.userway.org https://*.tiktok.com https://platform.twitter.com https://ndam-landing-page.s3.amazonaws.com https://widget.thegivingblock.com https://*.doubleclick.net https://word.rodeo https://prod-useast-b.online.tableau.com https://*.breakthrought1d.org https://crosswordlabs.com https://jdrf.massrel.io https://*.jdrfoverlays.com https://jdrfoverlays.com https://tgbwidget.com https://public.tableau.com https://app.hubspot.com https://*.youtube-nocookie.com https://wp.freemius.com https://player.vimeo.com https://antidote.me https://*.youtube.com https://public.domo.com https://*.google.com https://*.facebook.com https://*.matchinggifts.com https://ww2.matchinggifts.com https://javamatch.matchinggifts.com https://x.adroll.com; img-src 'self' blob: https://img.youtube.com https://*.googleadservices.com https://*.adentifi.com https://doublethedonation.com https://*.facebook.com https://connect.facebook.net https://s.amazon-adsystem.com https://*.doubleclick.net https://public.tableau.com https://public.tableau.com data: https://*.dafdirect.org https://ipv4.d.adroll.com https://x.bidswitch.net https://*.reson8.com https://reson8.com https://idsync.rlcdn.com https://dsum-sec.casalemedia.com https://sync.srv.stackadapt.com https://tags.bluekai.com https://dpm.demdex.net https://usermatch.krxd.net https://cms.analytics.yahoo.com https://pixel.rubiconproject.com https://us-u.openx.net https://sync.taboola.com https://image2.pubmatic.com https://sync.outbrain.com https://ib.adnxs.com *.userway.org https://ups.analytics.yahoo.com https://eb2.3lift.com https://d.adroll.com https://pixel.quantserve.com https://cdn.acsbapp.com https://gravatar.com https://s3-us-west-2.amazonaws.com https://wpstorelocator.co https://khms0.googleapis.com https://khms1.googleapis.com https://s38924.pcdn.co https://gravityforms.s3.amazonaws.com https://s3.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com https://*.googletagmanager.com https://marvel-processor.bc0a.com https://updates.bnecreative.com https://s.w.org https://ps.w.org https://a1.b0e8.com https://marvel-b1-cdn.bc0a.com https://*.google.co.in https://*.doubleclick.net https://*.wpengine.com https://bat.bing.com https://nova.collect.igodigital.com https://p.typekit.net https://secure.gravatar.com https://sp.analytics.yahoo.com https://*.google-analytics.com https://*.google.com https://dx.mountain.com https://px.mountain.com https://gs.mountain.com https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 matchbox.hepdata.com *.ads.linkedin.com ajax.googleapis.com https://flagcdn.com; manifest-src 'self'; media-src 'self'; object-src 'none'; report-to csp-endpoint; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://o4511469549060096.ingest.us.sentry.io https://*.openai.com https://d3niuqph2rteir.cloudfront.net https://tags.srv.stackadapt.com https://secure.dafpay.com https://cdn.givechariot.com https://chatbot.breakthrought1d.org https://cdnjs.cloudflare.com https://*.adentifi.com https://widget.thegivingblock.com https://doublethedonation.com *.userway.org https://platform.twitter.com https://sf16-website-login.neutral.ttwstatic.com https://*.tiktok.com https://*.gstatic.com https://app.blackbaud.com https://sdk.amazonaws.com https://code.jquery.com https://*.harborcompliance.com https://online.tableau.com https://prod-useast-b.online.tableau.com https://cdnjs.cloudflare.com https://*.dafdirect.org https://public.tableau.com https://analytics.tiktok.com https://d.adroll.com https://cdnjs.cloudflare.com https://js.dev.shift4.com https://s.adroll.com https://cdn.segment.com https://js.hs-scripts.com https://ajax.aspnetcdn.com https://djtflbt20bdde.cloudfront.net https://player.vimeo.com https://antidote.me https://*.google.com https://maps.googleapis.com https://cdn.jsdelivr.net https://marvel-b2-cdn.bc0a.com https://cdn.b0e8.com https://cdn.mxpnl.com https://acsbapp.com https://*.collect.igodigital.com https://bat.bing.com https://connect.facebook.net https://*.doubleclick.net https://s.yimg.com https://s3.amazonaws.com https://*.hotjar.com https://secure.adnxs.com https://unpkg.com https://use.typekit.net https://walls.io https://*.google-analytics.com https://*.googletagmanager.com https://*.youtube.com https://*.breakthrought1d.org https://dx.mountain.com https://px.mountain.com https://gs.mountain.com https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 matchbox.hepdata.com snap.licdn.com https://ams.wpml.org; style-src 'self' 'unsafe-inline' https://tags.srv.stackadapt.com https://cdn.givechariot.com https://doublethedonation.com *.userway.org https://ams.wpml.org https://sf16-website-login.neutral.ttwstatic.com https://*.dafdirect.org https://ajax.googleapis.com https://rgsharedweb.s3.amazonaws.com https://use.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://use.typekit.net https://cdn.jsdelivr.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cloud.typography.com matchbox.hepdata.com; worker-src 'self' blob: https://*.breakthrought1d.org https://dx.mountain.com https://px.mountain.com https://gs.mountain.com https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 *.userway.org; connect-src 'self' https://o4511469549060096.ingest.us.sentry.io https://*.googletagmanager.com https://*.googleadservices.com https://*.openai.com https://api.gostellar.app https://*.facebook.com https://tags.srv.stackadapt.com https://*.givechariot.com https://*.run.app https://demo-1.conversionsapigateway.com https://unpkg.com https://*.google.com *.userway.org https://doublethedonation.com https://ndam-landing-page.s3.amazonaws.com https://bt1d-320050302261.s3-accesspoint.us-east-1.amazonaws.com https://*.harborcompliance.com https://prod-useast-b.online.tableau.com https://*.hubspot.com https://hubspot.com https://pixel.quantcount.com https://host-v618rd.api.swiftype.com https://metrics.hotjar.io https://api.segment.io https://cdn.segment.com https://*.hotjar.io https://content.hotjar.io wss://ws.hotjar.com https://in.hotjar.com https://*.breakthrought1d.org https://acsbapp.com https://my.yoast.com https://vc.hotjar.io https://my.wpengine.com https://yoast.com https://*.google-analytics.com https://*.google.co.in https://cdn.acsbapp.com https://maps.googleapis.com https://s.yimg.com https://*.doubleclick.net https://dx.mountain.com https://px.mountain.com https://gs.mountain.com https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 matchbox.hepdata.com *.ads.linkedin.com bat.bing.com https://ams.wpml.org; 2 connect-src 'self' https: ws: https://ww2-api.tigocloud.net https://analytics.google.com https://cdn.cookielaw.org https://script.hotjar.com https://stats.g.doubleclick.net; img-src 'self' data: blob: https://ww2-cdn.tigocloud.net https://ww2-api.tigocloud.net https://www.millicom.com https://www.google.com.gt https://www.google-analytics.com https://cdn.cookielaw.org https://i.ytimg.com; media-src 'self' data: blob: https://ww2-cdn.tigocloud.net; default-src 'self'; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' https: https://analytics.google.com https://cdn.cookielaw.org https://script.hotjar.com https://stats.g.doubleclick.net 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; frame-src 'self' https://www.youtube.com/; 2 upgrade-insecure-requests; default-src https: blob: wss: data:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: blob: data:;frame-src https: blob: data:; report-uri /cspreports 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com *.guardianlife.com *.aws.glic.com guardiandirect.custhelp.com guardiandirect--tst2.custhelp.com www.googletagmanager.com tagmanager.google.com/ maps.googleapis.com www.youtube.com view.ceros.com src.litix.io *.evgnet.com *.bound360.com *.evergage.com guardianlife.us-1.evergage.com *.launchdarkly.com *.aws.glic.com *.wistia.com js.sentry-cdn.com cdn.cookielaw.org cdn.evgnet.com api.ipify.org fast.wistia.net www.google-analytics.com a.tribalfusion.com s.tribalfusion.com snap.licdn.com s.dpmsrv.com a.dpmsrv.com tag.demandbase.com googleads.g.doubleclick.net ad.doubleclick.net www.googleadservices.com connect.facebook.net ib.adnxs.com cm.g.doubleclick.net cdn.appdynamics.com cdn.mouseflow.com td.doubleclick.net block.sse.cisco.com s.pinimg.com www.redditstatic.com *.smartofficecrm.com c.amazon-adsystem.com s2.adform.net ct.pinterest.com unpkg.com cdnjs.cloudflare.com browser.sentry-cdn.com cdn.oursprivacy.com; style-src 'self' 'unsafe-inline' https: *.wistia.com fonts.googleapis.com www.redditstatic.com; img-src 'self' data: *.doubleclick.net *.bing.com *.facebook.com www.googletagmanager.com/ images.ctfassets.net www.google-analytics.com www.google.com maps.googleapis.com ssl.gstatic.com/ fast.wistia.com embed.wistia.com embed-ssl.wistia.com secure.adnxs.com ib.adnxs.com/ www.google.com maps.gstatic.com bat.bing.com www.facebook.com px.ads.linkedin.com p.adsymptotic.com/ i.ytimg.com www.guardiananytime.com/ pixel.mediaiqdigital.com pixel.mathtag.com d1bvwpcbxq9v24.cloudfront.net t.co idsync.rlcdn.com *.amazonaws.com cx.atdmt.com www.linkedin.com/ *.fls.doubleclick.net cm.g.doubleclick.net id.rlcdn.com/464526.gif match.prod.bidr.io/cookie-sync/demandbase segments.company-target.com block.opendns.com images.ctfassets.net pippio.com *.aws.glic.com cdn.cookielaw.org a.dpmsrv.com a.tribalfusion.com s.tribalfusion.com fast.wistia.net cdn.appdynamics.com s3-us-west-2.amazonaws.com s3.amazonaws.com ade.googlesyndication.com dsum-sec.casalemedia.com a.usbrowserspeed.com us-u.openx.net block.sse.cisco.com *.smartofficecrm.com alb.reddit.com; media-src 'self' blob: *.aws.glic.com *.wistia.com; frame-src 'self' *.doubleclick.net *.appdynamics.com/ guardiandirect.custhelp.com guardiandirect--tst2.custhelp.com js.stripe.com hooks.stripe.com www.canva.com www.googletagmanager.com api-sandbox.donut.farm *.ipipeline.com flex.cybersource.com testflex.cybersource.com *.youtube.com script.hotjar.com vars.hotjar.com cm.g.doubleclick.net *.ceros.com *.guardiananytime.com *.cloudfront.net *.adsrvr.org my.visme.co *.ipipeline.com guardianlife.com *.guardianlife.com guardianlife.uat.aws.glic.com *.bound360.com tagmanager.google.com www.podbean.com cloud.alert.guardiandirect.com cloud.connect.guardian pixel.mathtag.com/ bid.g.doubleclick.net *.fls.doubleclick.net pi.pardot.com go.pardot.com connect.guardiangroupbenefits.com guardianabsence.webflow.io *.ebix.com *.aws.glic.com a.tribalfusion.com s.company-target.com fast.wistia.net fast.wistia.com block.sse.cisco.com s.tiled.co ct.pinterest.com; connect-src 'self' pagead2.googlesyndication.com *.guardianlife.com *.aws.glic.com fonts.gstatic.com *.doubleclick.net *.g.doubleclick.net guardiandirect.custhelp.com guardiandirect--tst2.custhelp.com www.google-analytics.com api.stripe.com cdn.contentful.com preview.contentful.com n2.mouseflow.com rules.atgsvcs.com *.ipipeline.com *.donut.farm col.eum-appdynamics.com collectorprod.glic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com ws://*.hotjar.com fast.wistia.com embed-cloudfront.wistia.com distillery.wistia.com pipedream.wistia.com *.litix.io *.podbean.com cloud.alert.guardiandirect.com cloud.connect.guardian bat.bing.com maps.googleapis.com api.company-target.com segments.company-target.com m.addThis.com geolocation.onetrust.com guardianlife-privacy.my.onetrust.com cdn.linkedin.oribi.io www.facebook.com gw.linkedin.oribi.io gw.dr1.linkedin.oribi.io analytics.tiktok.com pixel.mathtag.com guardianabsence.webflow.io *.ebix.com *.evgnet.com *.evergage.com guardianlife.us-1.evergage.com *.launchdarkly.com *.aws.glic.com cdn.segment.com api.segment.io graphql.contentful.com cdn.cookielaw.org www.google.com www.googleadservices.com fast.wistia.net px.ads.linkedin.com tag-logger.demandbase.com cdn.appdynamics.com pdx-col.eum-appdynamics.com privacyportal-na01.onetrust.com us01.rec.mouseflow.com google.com ad.doubleclick.net block.sse.cisco.com *.smartofficecrm.com ct.pinterest.com alsoaskedapi.com api.openai.com *.perplexity.ai unpkg.com cdnjs.cloudflare.com cdn.oursprivacy.com pixel-config.reddit.com ads.reddit.com www.redditstatic.com; font-src 'self' data: fonts.gstatic.com login.guardianlife.com *.aws.glic.com fast.wistia.com fast.wistia.net 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.readwhere.app *.readwhere.com *.cloudflare.com *.bootstrapcdn.com *.googletagmanager.com *.gstatic.com *.facebook.net *.twitter.com googleads.g.doubleclick.net *.doubleclick.net *.rwadx.com *.google.com *.google.co.in *.facebook.com *.epapr.in static.xx.fbcdn.net scontent.fdel72-1.fna.fbcdn.net *.google-analytics.com use.fontawesome.com *.pinterest.com *.jquery.com *.cloudfront.net *.googleapis.com data: sb.scorecardresearch.com *.googlesyndication.com 2 frame-ancestors 'self' https://marchedufilm.online 2 font-src https://www.gstatic.com *.klevu.com *.ksearchnet.com *.ionicframework.com *.giosgusercontent.com https://giosg-chat-public-eu.s3.amazonaws.com *.piwik.pro *.containers.piwik.pro https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.yliopistonapteekki.fi *.ya.fi data: 'self' 'unsafe-inline'; form-action services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi *.yliopistonapteekki.fi 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ fi1.frosmo.com *.fi1.frosmo.com https://d2oarllo6tn86.cloudfront.net *.giosg.com *.giosgcobrowse.com *.giosgusercontent.com *.piwik.pro *.containers.piwik.pro consentcdn.cookiebot.com https://www.google.com https://lcx-embed-eu.bambuser.com https://lcx-widgets-eu.bambuser.com https://lcx-player-eu.bambuser.com maps.googleapis.com *.sttinfo.fi videobot.com link.webropolsurveys.com *.yliopistonapteekki.fi 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.klevu.com *.ksearchnet.com https://images.ctfassets.net cdn2.hubspot.net resources.paytrail.com fi1.frosmo.com *.fi1.frosmo.com https://d2oarllo6tn86.cloudfront.net https://giosg-chat-public-eu.s3.amazonaws.com *.giosg.com *.giosgcobrowse.com *.giosgusercontent.com *.piwik.pro *.containers.piwik.pro imgsct.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com test-ya-b2c.fi staging-ya-b2c.fi *.ya.fi *.yliopistonapteekki.fi secure.adnxs.com siirto.siitepoly.fi *.cloudflarestream.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com *.klevu.com *.ksearchnet.com https://unpkg.com https://cdn.jsdelivr.net services.paytrail.com fi1.frosmo.com *.fi1.frosmo.com https://d2oarllo6tn86.cloudfront.net *.giosg.com *.giosgcobrowse.com *.giosgusercontent.com *.piwik.pro *.containers.piwik.pro consent.cookiebot.com consentcdn.cookiebot.com https://www.google.com https://lcx-embed-eu.bambuser.com https://lcx-widgets-eu.bambuser.com www.custobar.com https://www.googletagmanager.com https://www.google-analytics.com *.sttinfo.fi wss://websocket.staging-ya-b2c.fi wss://websocket.test-ya-b2c.fi wss://ws.yliopistonapteekki.fi *.ya.fi *.yliopistonapteekki.fi ajax.cloudflare.com videobot.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.klevu.com *.ksearchnet.com fi1.frosmo.com *.fi1.frosmo.com https://d2oarllo6tn86.cloudfront.net *.ionicframework.com *.giosg.com *.giosgcobrowse.com *.giosgusercontent.com *.piwik.pro *.containers.piwik.pro maxcdn.bootstrapcdn.com https://fonts.googleapis.com *.yliopistonapteekki.fi 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src blob: videobot.com *.cloudflarestream.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.klevu.com *.ksearchnet.com https://api.contentful.com *.paytrail.com fi1.frosmo.com *.fi1.frosmo.com https://d2oarllo6tn86.cloudfront.net *.giosg.com *.giosgcobrowse.com *.giosgusercontent.com wss://*.giosgcobrowse.com *.piwik.pro *.containers.piwik.pro consentcdn.cookiebot.com https://lcx-embed-eu.bambuser.com https://lcx-widgets-eu.bambuser.com https://svc-prod-eu.liveshopping.bambuser.com ws://127.0.0.1:9502 api.custobar.com https://www.google-analytics.com *.talentadore.com *.ya.fi wss://websocket.staging-ya-b2c.fi wss://websocket.test-ya-b2c.fi wss://ws.yliopistonapteekki.fi wss://www.yliopistonapteekki.fi *.videobot.com *.cloudflarestream.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src fi1.frosmo.com *.fi1.frosmo.com https://d2oarllo6tn86.cloudfront.net *.giosg.com *.giosgusercontent.com *.giosgcobrowse.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://yliopistonapteekki.fi; report-to report-endpoint; 2 base-uri 'self'; connect-src 'self' data: https://places.googleapis.com/ https://googleads.g.doubleclick.net/ https://eventcollector.mcf-prod.a.intuit.com/ https://form-assets.mailchimp.com/ https://insight.adsrvr.org/ https://www.googleadservices.com/ https://ohpo.maps.arcgis.com/ https://js.arcgis.com/ https://www.google.com https://google.com https://fresnel.vimeocdn.com https://www.google-analytics.com https://maps.googleapis.com https://us01.records.in.treasuredata.com; default-src 'self'; font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://use.typekit.net; frame-src 'self' data: https://arcg.is/ https://experience.arcgis.com/ https://2026naamccartofsoul.artcall.org/ https://www.googletagmanager.com/ https://ohpo.maps.arcgis.com/ https://maps.google.com https://www.google.com https://td.doubleclick.net https://e.issuu.com https://insight.adsrvr.org https://match.adsrvr.org https://player.vimeo.com https://www.youtube.com; img-src 'self' data: https://weplugins.com/wp-content/ https://a.tile.openstreetmap.org/ https://b.tile.openstreetmap.org/ https://c.tile.openstreetmap.org/ https://graph.facebook.com https://*.fbcdn.net https://i.vimeocdn.com https://maps.google.com https://maps.gstatic.com https://dpm.demdex.net https://secure.adnxs.com https://match.adsrvr.org https://maps.googleapis.com https://www.googletagmanager.com https://winstar-110-adswizz.attribution.adswizz.com/fire https://di.rlcdn.com https://googleads.g.doubleclick.net https://insight.adsrvr.org https://pixel.tapad.com https://www.facebook.com https://www.google.com https://secure.gravatar.com https://s3.amazonaws.com/gravityforms https://cdn.socialgoodsoftware.com; manifest-src 'self'; media-src 'self' https://www.youtube.com https://youtu.be; object-src 'none'; report-uri https://667c396fd528e3ceb6b0e079.endpoint.csper.io/; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/air-datepicker@3.3.5/ https://form-assets.mailchimp.com/ https://chimpstatic.com/ https://js.arcgis.com/ https://s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js https://www.youtube.com https://maps.google.com https://s7.addthis.com https://www.googletagmanager.com https://maps.googleapis.com https://tags-cdn.clarivoy.com https://connect.facebook.net https://js.adsrvr.org https://googleads.g.doubleclick.net https://in.treasuredata.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js https://cdn.datatables.net/v/bs4/dt-1.10.18/r-2.2.2/datatables.min.js https://cdn.socialgoodsoftware.com https://www.gstatic.com https://www.google.com/recaptcha/; style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/air-datepicker@3.3.5/ https://js.arcgis.com/ https://cdn.datatables.net/ https://cdn-images.mailchimp.com https://fonts.googleapis.com https://p.typekit.net https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://cdn.socialgoodsoftware.com; worker-src blob:; 2 img-src 'self' *.foodwatch.org googleads.g.doubleclick.net www.google.com www.google.de *.fundraisingbox.com *.ytimg.com *.facebook.com public.flourish.studio cdn.eye-able.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.foodwatch.org *.foodwatch.nl www.googleadservices.com googleads.g.doubleclick.net *.googletagmanager.com *.fundraisingbox.com *.eventjet.at *.klantsite.net *.doubleclick.net *.procurios.site *.youtube.com https://www.youtube.com *.podigee-cdn.net *.facebook.net *.instagram.com foodwatch.spendenwidget.com foodwatch-at.spendenwidget.com *.stripe.com *.stripe.network ipapi.co public.flourish.studio cdn.eye-able.com blob:; frame-src 'self' *.foodwatch.org *.foodwatch.nl *.google.com *.stripe.com *.fundraisingbox.com *.eventjet.at *.klantsite.net *.doubleclick.net *.procurios.site *.youtube.com https://www.youtube.com https://www.youtube-nocookie.com *.podigee-cdn.net *.instagram.com public.flourish.studio flo.uri.sh rappelconso.dev; connect-src 'self' *.foodwatch.org *.foodwatch.nl ipapi.co *.fundraisingbox.com *.eventjet.at *.klantsite.net *.doubleclick.net *.procurios.site *.podigee-cdn.net *.google.com *.google.de www.googleadservices.com googleads.g.doubleclick.net *.googletagmanager.com *.facebook.net foodwatch.spendenwidget.com foodwatch-at.spendenwidget.com data: blob:; font-src 'self' *.podigee-cdn.net foodwatch.spendenwidget.com foodwatch-at.spendenwidget.com secure.fundraisingbox.com; style-src 'self' 'unsafe-inline' *.podigee-cdn.net *.stripe.com *.stripe.network foodwatch.spendenwidget.com foodwatch-at.spendenwidget.com cdn.eye-able.com; worker-src blob:; form-action 'self'; object-src 'none'; frame-ancestors 'self' localhost *.foodwatch.org reseauactionclimat.org www.federationdesdiabetiques.org www.france-assos-sante.org www.la-csf.org cnao.fr www.unaf.fr pourdessupermarchesdurables.org; 2 default-src 'self' *.sulzer.com; img-src * data: blob: 'unsafe-inline' 'self' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://img.youtube.com http://sulzer.com *.google-analytics.com *.analytics.google.com https://*.gleap.io; font-src 'self' data: https://fonts.gstatic.com; style-src 'unsafe-inline' 'self' https://fast.fonts.net https://s93ds-prod.app-platform.tech/index.css https://s93ds-prod.app-platform.tech/web-to-lead/index.css https://s93lc-prod.app-platform.tech/index.css https://s93ln-prod.app-platform.tech/index.css; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com/recaptcha/api.js https://www.gstatic.com https://pi.pardot.com/analytics https://go.sulzer.com/analytics https://pi.pardot.com/pd.js http://cdn.pardot.com/pd.js https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://www.youtube.com https://s.ytimg.com/yts/jsbin/www-widgetapi-vflnjBBxk/www-widgetapi.js https://s.ytimg.com https://cdn.cookielaw.org *.hotjar.com *.hotjar.io *.callrail.com https://go.sulzer.com/pd.js https://s93ds-prod.app-platform.tech/contact-finder.js https://s93ds-prod.app-platform.tech/index.js https://s93ds-prod.app-platform.tech/web-to-lead.js https://s93ds-prod.app-platform.tech/web-to-lead/index.js https://s93lc-prod.app-platform.tech/locator.js https://s93lc-prod.app-platform.tech/index.js https://s93ln-prod.app-platform.tech/location.js https://s93ln-prod.app-platform.tech/index.js https://js-eu1.hs-scripts.com/145309032.js https://js-eu1.hscollectedforms.net/collectedforms.js https://js-eu1.hs-banner.com/v2/145309032/banner.js https://js-eu1.hsadspixel.net/fb.js https://js-eu1.hs-analytics.net https://js-eu1.hubspot.com/web-interactives-embed.js https://*.gleap.io; connect-src 'self' https://www.google-analytics.com https://mybusiness.googleapis.com https://stats.g.doubleclick.net https://analytics.google.com https://cdn.cookielaw.org https://maps.googleapis.com *.google-analytics.com *.analytics.google.com https://geolocation.onetrust.com https://privacyportal-ch.onetrust.com https://www.google.ch *.hotjar.io https://s93ds-prod.app-platform.tech https://api.country.is https://s93lc-prod.app-platform.tech https://s93ln-prod.app-platform.tech https://s93ln-int.app-platform.tech https://js-eu1.hs-banner.com/v2/cf-location https://js-eu1.hs-banner.com/cookie-banner-public/v2/cf-location https://js-eu1.hs-banner.com/v2/geolocation-reporting https://api-eu1.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json https://cta-eu1.hubspot.com https://*.gleap.io wss://ws.gleap.io; child-src 'self' https://www.platform-viewer.v-ex.com https://www.google.com https://sulzer.us6.list-manage.com http://www.sulzerpumpsmexico.com https://app.xtremelocator.com https://ir.tools.investis.com https://www.youtube.com http://8826991.fls.doubleclick.net/ https://sulzer-pump-types.v-ex.app/ https://app.xtremelocator.com/ *.doubleclick.net https://*.gleap.io; media-src 'self' https://youtu.be https://www.youtube.com https://*.gleap.io 2 default-src 'self' *.pmsrv.co *.dotomi.com; script-src 'self' *.typekit.net *.pmsrv.co dccdn.de/static.doccheck.com/components/login-button/@latest/main.js media.net cdnjs.cloudflare.com documentservices.adobe.com pmserv.com *.scene7.com www.gstatic.com www.recaptcha.net https://code.jquery.com https://tools.euroland.com https://privacyportal-uatde-cdn.onetrust.com https://privacyportal-eu-cdn.onetrust.com *.astellas.com 'unsafe-eval' api.fouanalytics.com *.dotomi.com tr.contextweb.com c82308.csd.dotomi.com assets.adobedtm.com td.doubleclick.net *.adobe.com/ gateway.zscalerthree.net analytics.tiktok.com www.facebook.com insight.adsrvr.org thrtle.com js.adsrvr.org js.pulseinsights.com survey.pulseinsights.com activitymap.adobe.com www.googletagmanager.com bat.bing.com ad.doubleclick.net googleads.g.doubleclick.net dpm.demdex.net www.googleadservices.com *.fls.doubleclick.net bh.contextweb.com cdn.di-capt.com connect.facebook.net astellas.demdex.net cm.everesttech.net cdn.cookielaw.org 'unsafe-inline'; object-src 'none'; connect-src *; font-src 'self' *.typekit.net * data:; frame-src 'self' login.doccheck.com *.adobe.com/ match.adsrvr.org www.recaptcha.net https://asia.tools.euroland.com gateway.zscalerthree.net astellas.demdex.net insight.adsrvr.org *.fls.doubleclick.net td.doubleclick.net tr.contextweb.com thrtle.com analytics.tiktok.com activitymap.adobe.com www.facebook.com js.adsrvr.org; style-src 'self' 'unsafe-inline' *.typekit.net *.scene7.com fonts.googleapis.com *.astellas.com https://privacyportal-uatde-cdn.onetrust.com; img-src 'self' *.pmsrv.co *.scene7.com filecache.mediaroom.com *.astellas.com *.fls.doubleclick.net di.rlcdn.com pt.ispot.tv staging-pt.ispot.tv www.facebook.com gateway.zscalerthree.net bh.contextweb.com ad.doubleclick.net dpm.demdex.net cdn.cookielaw.org bat.bing.com thrtle.com cm.everesttech.net insight.adsrvr.org www.google.com www.google.co.in googleads.g.doubleclick.net astellasusllc.data.adobedc.net tr.contextweb.com *.dotomi.com data:; worker-src 'self' blob:; media-src 'self' blob: *.scene7.com *.astellas.com *.astellas.us *.cloudfront.net; 2 default-src 'none';script-src 'self' https://static.frag-den-staat.de https://traffic.okfn.de https://js.stripe.com;style-src 'self' 'unsafe-inline' https://static.frag-den-staat.de;img-src 'self' data: blob: https://static.frag-den-staat.de https://media.frag-den-staat.de https://traffic.okfn.de *.tile.openstreetmap.org *.global.ssl.fastly.net i.ytimg.com https://cdn.pretix.cloud;media-src https://static.frag-den-staat.de https://media.frag-den-staat.de;worker-src 'self' blob: https://static.frag-den-staat.de;frame-src 'self' blob: https://static.frag-den-staat.de https://media.frag-den-staat.de https://www.youtube-nocookie.com https://media.ccc.de https://js.stripe.com https://hooks.stripe.com https://www.paypal.com https://datawrapper.dwcdn.net https://okfde.github.io;object-src 'self' https://media.frag-den-staat.de;connect-src 'self' wss://fragdenstaat.de https://static.frag-den-staat.de https://media.frag-den-staat.de https://sentry.okfn.de https://api.stripe.com https://traffic.okfn.de;child-src 'self' blob: https://static.frag-den-staat.de;base-uri 'none';font-src data: https://static.frag-den-staat.de;manifest-src https://static.frag-den-staat.de;form-action 'self' https://fragdenstaat.de https://forum.okfn.de https://www.paypal.com https://pretix.eu https://hooks.stripe.com https://stripe.com https://r.girogate.de;report-uri https://sentry.okfn.de/api/3/security/?sentry_key=f00c20a879414df69051163a90597a8c; 2 script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adoberesources.net *.ads.linkedin.com *.apolloplatform.com *.brightcove.com *.brightcove.net *.clarity.ms *.decibelinsight.com *.decibelinsight.net *.doubleclick.net *.franklintempleton.com *.fti-cloud.com *.ftsites.com *.googleads.g.doubleclick.net *.kampyle.com *.linkedin.com *.linkedin.oribi.io *.marketo.com *.marketo.net *.mktoutil.com *.mktoweb.com *.mountain.com *.qualtrics.com *.taboola.com *.twimg.com *.yimg.com ads-api.twitter.com ads-twitter.com amplify.outbrain.com analytics.twitter.com apps.mypurecloud.com assets.adoberesources.net bat.bing.com browser-update.org cdn.cookielaw.org cdn.decibelinsight.net cdn01.basis.net classify.gofurther.com collector-52407.us.tvsquared.com connect.facebook.net documentcloud.adobe.com lonrtp1-cdn.marketo.com munchkin.marketo.net p.adsymptotic.com platform.twitter.com resources.digital-cloud-west.medallia.com schema.apolloplatform.com script.mfilterit.net siteimproveanalytics.com sjs.bizographics.com snap.licdn.com ssl.google-analytics.com static.ads-twitter.com static.cloudflareinsights.com tr.outbrain.com trc.taboola.com up.pixel.ad vjs.zencdn.net wss://*.decibelinsight.com wss://*.decibelinsight.net www.clarity.ms www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com zn9nsigbnk054lp8n-frk.siteintercept.qualtrics.com ; connect-src 'self' *.adobe.io *.ads.linkedin.com *.akamaihd.net *.analytics.google.com *.apolloplatform.com *.boltdns.net *.brightcove.com *.brightcove.net *.brightcovecdn.com *.browser-intake-datadoghq.com *.clarity.ms *.cloudhub.io *.decibelinsight.com *.decibelinsight.net *.digital-cloud-west.medallia.com *.doubleclick.net *.franklintempleton.com *.frk.com *.fti-cloud.com *.ftsites.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleads.g.doubleclick.net *.googletagmanager.com *.kampyle.com *.launchdarkly.com *.linkedin.com *.linkedin.oribi.io *.marketo.com *.mktoresp.com *.mktoutil.com *.mountain.com *.onetrust.com *.onetrust.io *.qualtrics.com *.taboola.com *.widen.net *.widencdn.net *.yimg.com 100.20.58.101 18.210.229.244 3.212.39.155 34.215.155.61 35.160.46.251 35.85.84.151 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 848-iap-939.mktoresp.com ads-api.twitter.com ads-twitter.com adservice.google.com analytics-fe.digital-cloud-west.medallia.com analytics.twitter.com api.intentiq.com bat.bing.com bat.bing.net browser-intake-datadoghq.com cdn.cookielaw.org cdn.linkedin.oribi.io cdn.plyr.io classify.gofurther.com collector-52407.us.tvsquared.com dc.services.visualstudio.com fti.wsodqa.com hummingbirdwebsocket-va7.cloud.adobe.io p.adsymptotic.com pdswebapi.fti-cloud.com px.ads.linkedin.com resources.digital-cloud-west.medallia.com s.yimg.com session-replay.browser-intake-datadoghq.com siteimproveanalytics.com sjs.bizographics.com snap.licdn.com wss://*.adobe.io wss://*.decibelinsight.com wss://*.decibelinsight.net www.facebook.com www.fti.wallst.com www.google.com www.google.co.uk www.googleadservices.com www.googletagmanager.com assets.adoberesources.net ; img-src 'self' *.adsymptotic.com *.akamaihd.net *.analytics.google.com *.boltdns.net *.brightcove.com *.cookielaw.org *.doubleclick.net *.facebook.com *.franklintempleton.com *.fti-cloud.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.kampyle.com *.linkedin.com *.qualtrics.com *.siteimproveanalytics.io *.stocksnap.io *.tvsquared.com *.twimg.com *.widen.net *.widencdn.net ad.doubleclick.net analytics.twitter.com assets.adoberesources.net bat.bing.com bat.bing.net browser-update.org c.bing.com c.clarity.ms classify.gofurther.com collector-52407.us.tvsquared.com connect.facebook.net d21y75miwcfqoq.cloudfront.net data: di.rlcdn.com fa.aidemsrv.com fml-x.com franklintempletonprod.widen.net lh3.googleusercontent.com pixel.sitescout.com platform.twitter.com px.ads.linkedin.com r.turn.com resources.digital-cloud-west.medallia.com rtp-static.marketo.com sp.analytics.yahoo.com sync.intentiq.com syndication.twitter.com t.co tk-static.fml-x.com tr.outbrain.com www.dianomi.com www.facebook.com www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.cn www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.com.ar www.google.com.au www.google.com.bn www.google.com.br www.google.com.cy www.google.com.hk www.google.com.im www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ph www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hu www.google.ie www.google.it www.google.jo www.google.li www.google.lt www.google.lu www.google.lv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.ru www.google.si www.google.sk ; font-src 'self' *.franklintempleton.com *.franklintempleton.lu *.ftsites.com *.typekit.net data: fonts.googleapis.com fonts.gstatic.com templeton.com ; style-src 'self' 'unsafe-inline' *.franklintempleton.com *.ftsites.com *.googletagmanager.com *.kampyle.com *.marketo.com *.typekit.net blob: fonts.googleapis.com fonts.gstatic.com platform.twitter.com ; worker-src blob: *.decibel.net ; frame-ancestors 'none'; 2 base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' https://app.storyblok.com https://*.netlify.app; img-src 'self' data: https://a-us.storyblok.com https://cdn.jwplayer.com https://prd.jwpltx.com https://ping-meta-prd.jwpltx.com https://assets-jpcust.jwpsrv.com https://www.googletagmanager.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'sha256-RmOHt8YQwKu/Tc/yB+HMnv3GRcmNkZj9iCJKm4zbB8Y=' 'sha256-hcbdLdzNk2y9ePnPspfbpg7JT7x0nebzpcQ7oZww0V0=' 'sha256-HQC0NIYMzIqat5wPsr/vM4h9/p9QsqdBq+KfEKJRYi0=' 'sha384-dUuNrfE6DcB/KR2VFqvdo5jjIVXEGOEZayaeD9t6zzXtQsdbVXbMMgjPhqu25tZX' 'sha384-LMAwdT7KpBQo9ADka4H4bvuzPFJYfzCYEhWcdLkAtePNkAtPuDZvSnWFtasRKaxs' 'sha384-Gr+jBUhY15cH/IWDtLzCaDLGxmNxHshGjI06C2GZit0slDACRK8XKmlcoYVgCS0T' 'sha384-ny1LOXK5RDFB8FZ0tFHHkyQVd4MFVlF3+Zq1kHPJE2U0jhCjhp1yszu0EgLiFBBv' 'sha384-l3eBtzKV6q4RhElYyje+9gQO1jLv2pH2Kz78aGXqZuMKcPxxdbYUn9Ixr2ybS9xf' 'sha384-MaTNzjj9w71y546hAzAaU3DoxOQtb9LuB5JMwa+M/Rtji1Kw2nrg45dmiYHszaO3' 'sha384-nysUlN7Mr3XcYA5rsWT6z6BA7/49UNZihzqUNYvEgVw1Oe9dPdb0Y5g70aW1rZpG' 'sha384-zRIa0wD/Va4FVn69DpvzYi+ALDyAcLuRsIH3j2UIyoHsi0p/mShGnHoLERGoSiUK' 'sha384-OBn55DNsH0KrsOHxRnpgLfpbCi0c3pXgFhuGnBDp9BblfVFQjJ3V8E5aX+FflzRA' 'sha384-utcR18KXmuXnkGXvC2hV4GhXL+iV5FKjrAynwufidF7HlO40a4RGOII1qv/ooTMP' 'sha384-pwu2Tc0SQkmAwiWR2YkgSOUq7jsxXGZ1q2EDXF4rlSb1Y5rCX9lGrPy6PnlOzldh' 'sha384-e6l9/FzLc9LgNMMb09D8Sp0vpelf8WRlTMDRQqhnAPfc81FrPDFN/FK5n3KAncTb' 'sha384-0cVt/YjShwOt4ThEcSx39tTdpQQ1TK529IYHdf7i6GiNRf86jHAnhBY/I7esridb' 'sha384-Uxs/hDMVtlWez1QTgcN0OXEmFrcXJIlaR/S7WiHRbG5HdCo6uFivfNHgiLm+HKvA' 'sha384-t6MrNoZrP7y1LkkCVycBYS5ieb9J0yMp5zdrj2mZsZZMDUIg214ZXVnq1ukPufKV' 'sha384-UOBWjidyi+60sDQMI7Wa9nmpfPBctONjpNDYQ+W6Wl+TIEkfVQ59IqXk00p/gEwh' 'sha384-vuH/ofg6ymtJQE23fNp9Wg8kTbewtLN8bMwv0rkT25jQaOTGhFzxZbapUvVYdTtl' 'sha384-iA0dFjhs06Royzfhje7klZt4CCjDHIWK0WApKkmU3CMNvr6DFcgakUnao4Qz83wr' 'sha384-NthWIrgOUh6FyszhYGYgL5H45EaGeTkCmuJLUfD5PHZbWQb6SNQBIJGL1Iksbui3' 'sha384-yR0PKjbFNycGsmHmcq0yEYKqB+JoAP3niO/X8+k6yHebCC9GQxlP1ttfG5BYJ8jB' 'sha384-evKwxFpLm9pE46zRemZuEcd+crXYyVSNMsApe2+VaoRx+Vj6LNJ3pQCMKVOjmlIF' 'sha384-JaYNzModhB94ONLpDCn68s66NLL0TplIB8Nvk3fyZ49RIAvmdrFm6dLy5igrIeAF' 'sha384-+ENz/F5ylGd1JjhkOIJ4k9aB0tB+JGzskW6n/Rmll7D28GDfBOCxoGw8mEuwse6K' 'sha384-q19w2aafhCxLgzZ50S5xNKepLBbVm7iinzDPynZv6rLMXjbq+FUOulsAVSmA/K4Q' 'sha384-NCx3RjQ8daZGgk7/hkCyOxFHUUhYtrPC/nSju1l8argHl4+dkAYEjuGgfnjGOLks' 'sha384-qvJoeL0+/RiNP23C3Zb0RpBP6zUbMo/hN5bi+aGKg9A4UhkDcU7dTkFZ8Xzt1L5I' 'sha384-BnssQcn9FEQQcly1oSiE33GqxgmwMT5BPK458g/u6OVJJYCZ3UWaBLhcxhW/iaUE' 'sha384-2gtocHIJi3H8y21ECrmztbSmQb/QpOT7OZHbOC/rERDU9PZ2hCuxyU0CZPbFYRAO' 'sha384-TC3kiO4cdYDWikKd9FF0bfSeJSWM9YxpfhPK8kol6DMEhKAf4Ml3jDyJNAfcRjSm' 'sha384-tgz38Vw9UE9msGqnJH+un2Jqh4ghiG0yegyeeyGFbQgfkKb17b1b/Dch6IgtnWcs' 'sha384-oK+at2qgEJSzeQvzR9E+Ua76nsI4cQkzPdfR28hSQcRlicIF0GBMBEEOkO1CI19z' 'sha384-HD++1NWWxAyeQrC721S48rnvs7pr+mOppdt6DKlrGlQwDWsVDOT6CY4Wd5h4sSXD' 'sha384-ol0aqWHMZrBv2EyxF1AlfU5+BU9ab1ehW5DI/3w1hMCO9iJ00qazHStqPu1F/+wK' 'sha384-4ToOGVTvvBSaIJ4SzUEtIIqTTWbRV4+ekC59cxJCcC+FZCFYZdnQ/c0SwYUaK6xF' 'sha384-+YZzoMVu8qOoHO1ng2mWsTuxCbjA59gGYeiRYL4W/UuX7z8fBtn0Dtk7a4OLyMtk' 'sha384-SYaNJLZXZ0HudQ/byeD8XFkXn4LkUjKrNyDOZwiKgj+MRLQFlDMdBDZUiLn8akIW' 'sha384-ZIlzvDE4aPz5xgugU5N94qrtb7j1GR7DTuCrlqEbk94xzA4UOoW2ddnOKNJlpRf/' 'sha384-n04NCBf4SGV84jEbjnd0sOYIZzNaEO1UO7vlGLMUIe0DEFPlKd3SbRkVcDDLVaTH' 'sha384-WWv2HPrJqUYDU2xvaJVt3X/JzqEOMTLmujT4ukZF0FOxcDZvdH86gqbrjM/V6q/0' 'sha384-qhjRgkOsgYot3qtHT13PQGn3peSwJc8cQ+hivlHhjbdkx2SHlpQezPt0C5xT+K8A' 'sha256-Gi/nYCICyD4LRGFj9MsNVvca6TNBdFh0D4/fdz2euRI='; upgrade-insecure-requests; frame-src 'self' *.wufoo.com app.netlify.com; 2 object-src 'none'; base-uri 'self'; manifest-src 'self'; report-to default; 2 default-src https: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'self' blob:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self' https://*.adobe.com https://*.adobe.io https://*.adobe.net https://*.omniture.com; connect-src 'self' https: wss://*.hotjar.com; worker-src blob:; 2 default-src 'self' https: 'unsafe-eval' 'unsafe-inline'; object-src 'self' blob:; img-src 'self' data: https:; media-src 'self' data: https: blob:; font-src 'self' data: https:; frame-src 'self' https: blob: data: tel:; frame-ancestors 'self' https://loterienationalenationale.qualifioapp.com/ https://experience.adobe.com/ https://aem-nl.prd.natlot.be https://aem-fr.prd.natlot.be https://aem-de.prd.natlot.be https://lonet.lonalo.be/; worker-src 'self' 'unsafe-inline' * blob:; connect-src 'self' https: https://sdk.privacy-center.org/ https://api.privacy-center.org/ wss://*.hotjar.com wss://webmessaging.mypurecloud.de; 2 default-src * 'self' 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: blob:; font-src * 'self' data:; 2 default-src 'self' *.sentry.io *.zoominfo.com *.facebook.com *.redditstatic.com *.reddit.com *.bing.net *.ctfassets.net *.algolia.net *.contentful.com *.vercel-insights.com *.google.com *.google-analytics.com *.cookielaw.org *.intercom.io *.onetrust.io *.onetrust.com coalition.zendesk.com *.clickagy.com wss://nexus-websocket-a.intercom.io *.mktoresp.com cdn.linkedin.oribi.io *.linkedin.com qf23dtaqm7-2.algolianet.com qf23dtaqm7-3.algolianet.com qf23dtaqm7-1.algolianet.com ekr.zdassets.com coalition1659361680.zendesk.com wss://widget-mediator.zopim.com api.control.stg.binaryedge.io coalition.zendesk.com api.control.dev.binaryedge.io api.control.coalitioninc.com api.control.dev.binaryedge.io api.control.demo.binaryedge.io api.control.stg.binaryedge.io rum.browser-intake-datadoghq.com *.auryc.com *.chilipiper.com *.coalitioninc.com maps.googleapis.com *.my.salesforce.com *.my.site.com *.salesforce-scrt.com *.googlesyndication.com *.wirespeed.co blob:; style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com s3.amazonaws.com *.sentry.io fonts.googleapis.com use.fontawesome.com unpkg.com info.coalitioninc.com web.coalitioninc.com heapanalytics.com https://heapanalytics.com https://www.googletagmanager.com/debug/badge.css *.my.salesforce.com *.my.site.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.visualwebsiteoptimizer.com app.vwo.com *.sentry.io *.googleoptimize.com *.heapanalytics.com heapanalytics.com https://cdn.us.heap-api.com https://heapanalytics.com t.contentsquare.net app.contentsquare.com *.google-analytics.com *.googletagmanager.com *.cookielaw.org *.googleadservices.com *.redditstatic.com *.reddit.com *.bing.net bat.bing.com *.facebook.net *.zoominfo.com *.ads-twitter.com *.licdn.com *.intercom.io *.clickagy.com *.intercomcdn.com *.doubleclick.net *.google.com *.gstatic.com *.googlesyndication.com prism.app-us1.com munchkin.marketo.net info.coalitioninc.com web.coalitioninc.com *.mktoresp.com static.zdassets.com widget-mediator.zopim.com *.chilipiper.com maps.googleapis.com *.auryc.com *.apollo.io aplo-evnt.com *.contentsquare.net https://cdn.jsdelivr.net/npm/statsig-sidecar/dist/index.min.js js.zi-scripts.com *.oktopost.com okt.to *.coalitioninc.com *.my.salesforce.com *.my.site.com *.salesforce-scrt.com *.cloudflare.com blob:; font-src 'self' *.sentry.io fonts.gstatic.com use.fontawesome.com data: *.intercomcdn.com heapanalytics.com https://heapanalytics.com *.auryc.com *.my.salesforce.com *.my.site.com; frame-src 'self' app.vwo.com www.googletagmanager.com *.chameleon.io fast.chameleon.io *.wistia.com fast.wistia.com *.wistia.net fast.wistia.net *.visualwebsiteoptimizer.com *.youtube.com *.clickagy.com *.doubleclick.net intercom-sheets.com *.google.com info.coalitioninc.com web.coalitioninc.com videos.ctfassets.net videos.contentful.com vimeo.com player.vimeo.com *.chilipiper.com boards.greenhouse.io *.greenhouse.io *.dropbox.com *.linkedin.com *.bolt.host coalitioninc.swoogo.com *.swoogo.com *.my.salesforce.com *.my.site.com *.cloudflare.com ; connect-src 'self' https://www.google.com analytics.google.com *.visualwebsiteoptimizer.com app.vwo.com *.auryc.com heapanalytics.com https://heapanalytics.com https://c.us.heap-api.com *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net ad.doubleclick.net *.vercel.app *.algolia.net qf23dtaqm7-2.algolianet.com qf23dtaqm7-3.algolianet.com qf23dtaqm7-1.algolianet.com *.cookielaw.org ekr.zdassets.com *.zoominfo.com cdn.linkedin.oribi.io *.linkedin.com *.mktoresp.com *.onetrust.io *.onetrust.com widget-mediator.zopim.com wss://widget-mediator.zopim.com api.control.coalitioninc.com api.control.dev.binaryedge.io api.control.demo.binaryedge.io api.control.stg.binaryedge.io *.chilipiper.com *.sentry.io maps.googleapis.com *.coalitioninc.com *.trayapp.io aplo-evnt.com cdn.rive.app */@rive-app/canvas@2.18.0/rive.wasm unpkg.com/@rive-app/canvas@2.18.0/rive.wasm boards-api.greenhouse.io *.greenhouse.io *.dropbox.com *.contentsquare.net *.posthog.com api.expertise.ai api.ipify.org *.clickagy.com js.zi-scripts.com *.cloudflare.com *.oktopost.com okt.to *.coalitioninc.com *.my.salesforce.com *.my.site.com *.salesforce-scrt.com *.googlesyndication.com *.wistia.com *.wistia.net *.wirespeed.co pixel-config.reddit.com; img-src 'self' *.visualwebsiteoptimizer.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com * data: blob: https://heapanalytics.com *.contentsquare.net *.oktopost.com okt.to; media-src * data:; object-src 'none'; worker-src 'self' blob:; frame-ancestors 'self' https://app.contentful.com 2 frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.roh.org.uk roh.global.ssl.fastly.net bam.nr-data.net bat.bing.com bs.serving-sys.com canopylabstracking.s3.amazonaws.com connect.facebook.net *.cloudfront.net intljs.rmtag.com js-agent.newrelic.com nxtck.com rules.quantcount.com secure-ds.serving-sys.com secure.quantserve.com tags.rd.linksynergy.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com https://tagmanager.google.com http://*.hotjar.com https://*.hotjar.com https://optimize.google.com https://*.bookatable.com https://youtube.com https://*.youtube.com https://static.ads-twitter.com https://analytics.twitter.com https://app.charitycheckout.co.uk https://media.imi.chat/ https://analytics.tiktok.com/ https://*.ctnsnet.com consentag.eu collector-11526.tvsquared.com https://cdn-ukwest.onetrust.com/ https://geolocation.onetrust.com/ https://cdn.bitmovin.com/ https://cdn.cookielaw.org/ https://www.gstatic.com/ https://*.prospect2.com/ https://prism.app-us1.com/ https://diffuser-cdn.app-us1.com/ https://trackcmp.net/ www.clarity.ms https://translations.signapsesolutions.com/; style-src 'self' blob: 'unsafe-inline' https://cloud.typography.com https://*.googleapis.com https://static.roh.org.uk https://static.rolex.com https://optimize.google.com https://*.googleapis.com https://*.bookatable.com https://tagmanager.google.com https://youtube.com https://*.youtube.com https://media.imi.chat/ https://*.typekit.net/; object-src 'none'; worker-src blob:; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://apps.sitecore.net https://*.sitecorecloud.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.milliman.com https://*.sitecorecloud.io https://www.googletagmanager.com https://www.google-analytics.com https://www.buzzsprout.com https://bat.bing.com https://js.driftt.com https://js.adsrvr.org https://solutions.invocacdn.com https://milliman.aiproxies.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://analytics.cdn.aimediagroup.com https://pnapi.invoca.net https://googleads.g.doubleclick.net https://analytics.aimediagroup.com https://maps.googleapis.com https://snap.licdn.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://public.tableau.com https://platform.twitter.com https://cdn.syndication.twimg.com https://syndication.twitter.com https://static.hotjar.com https://script.hotjar.com https://static.cloud.coveo.com https://siteimproveanalytics.com https://www.clarity.ms https://players.brightcove.net https://vjs.zencdn.net https://tagassistant.google.com https://unpkg.com/aos@next/ https://js.zi-scripts.com https://ss-extras.millimanfunds.com https://cxppusa1rdrect01sa02cdn-endpoint.azureedge.net https://cxppusa1rdrect01sa02cdn.blob.core.windows.net https://public.flourish.studio https://rdrect-usa1.mkt.dynamics.com; img-src 'self' data: https://*.milliman.com https://assets.buzzsprout.com https://www.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://cf-images.us-east-1.prod.boltdns.net https://analytics.aimediagroup.com https://milliman.aiproxies.com https://www.google.com https://www.google.ca https://match.adsrvr.org https://maps.googleapis.com https://maps.gstatic.com *.googleapis.com *.ggpht https://px.ads.linkedin.com https://www.linkedin.com https://p.adsymptotic.com https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://www.youtube.com https://public.tableau.com https://syndication.twitter.com https://pbs.twimg.com https://platform.twitter.com https://ton.twimg.com https://*.siteimproveanalytics.io https://metrics.brightcove.com https://edge.sitecorecloud.io https://*.sitecorecloud.io https://fonts.gstatic.com https://px4.ads.linkedin.com https://dashboard.aidps.xyz; style-src 'self' 'unsafe-inline' https://*.milliman.com https://fonts.googleapis.com https://cloud.typenetwork.com https://assets.buzzsprout.com https://platform.twitter.com https://ton.twimg.com https://edge-platform.sitecorecloud.io https://www.googletagmanager.com https://unpkg.com/aos@next/ https://ss-extras.millimanfunds.com; font-src 'self' 'unsafe-inline' data: https://*.milliman.com https://fonts.gstatic.com https://cloud.typenetwork.com https://ton.twimg.com https://fastly-cloud.typenetwork.com; frame-src 'self' https://webforms-qa.milliman.com https://webforms.milliman.com https://www.arcgis.com https://*.milliman.com https://players.brightcove.net https://www.buzzsprout.com https://insight.adsrvr.org https://app.powerbi.com https://js.driftt.com https://milliman.maps.arcgis.com https://*.makeaclickablemap.com https://makeaclickablemap.com https://www.google.com https://assets.milliman.com https://milliman-milwaukee-reports.azurewebsites.net https://td.doubleclick.net/ https://twitter.com https://platform.twitter.com https://html5-player.libsyn.com https://bid.g.doubleclick.net https://www.youtube.com https://public.tableau.com https://vars.hotjar.com https://syndication.twitter.com https://milliman.aiproxies.com https://*.vimeo.com https://app.netlify.com/ https://www.googletagmanager.com https://flo.uri.sh/; child-src 'self' https://webforms-qa.milliman.com https://webforms.milliman.com https://*.milliman.com https://players.brightcove.net https://www.buzzsprout.com https://app.powerbi.com https://milliman.maps.arcgis.com https://*.makeaclickablemap.com https://makeaclickablemap.com https://www.google.com https://assets.milliman.com https://milliman-milwaukee-reports.azurewebsites.net https://twitter.com https://www.twitter.com html5-player.libsyn.com https://bid.g.doubleclick.net blob:; connect-src 'self' https://*.sitecorecloud.io https://*.milliman.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://edge-platform.sitecorecloud.io https://assets5.lottiefiles.com https://*.analytics.org.coveo.com https://*.clarity.ms https://lottie.host https://assets9.lottiefiles.com https://millimannonproduction1gm81sp5s.org.coveo.com https://millimannonproduction1gm81sp5s.analytics.org.coveo.com https://millimanproductionmo4t0l69.org.coveo.com https://millimanproductionmo4t0l69.analytics.org.coveo.com https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://pnapi.invoca.net https://bam.nr-data.net https://privacyportal.onetrust.com https://usageanalytics.coveo.com https://platform.cloud.coveo.com https://www.milliman.com https://us.milliman.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://maps.googleapis.com https://milliman.aiproxies.com https://secure.adnxs.com https://edge.api.brightcove.com https://*.boltdns.net https://*.akamaihd.net https://edge.sitecorecloud.io https://www.google.com https://*.brightcovecdn.com https://js.zi-scripts.com https://ws.zoominfo.com https://ss-extras.millimanfunds.com https://mobile.events.data.microsoft.com https://public.flourish.studio https://rdrect-usa1.mkt.dynamics.com https://mobile.events.data.microsoft.com; media-src 'self' https://*.milliman.com https://manifest.prod.boltdns.net https://bcbolt446c5271-a.akamaihd.net https://*.brightcovecdn.com blob:; frame-ancestors 'self' https://*.sitecorecloud.io https://pages.sitecorecloud.io; upgrade-insecure-requests; block-all-mixed-content; 2 frame-src 'self' https://optimize.google.com https://www.googletagmanager.com https://staging.eigendev.com https://ms1.eigendev.com https://bid.g.doubleclick.net *.lpsnmedia.net *.liveperson.net *.hotjar.com *.fls.doubleclick.net *.salecycle.com https://www.google.com https://customersso.rvs.com https://customersso-stage.rvs.com https://customer-sso-api.kong.test.site-testing.com https://acquire1.comenity.net https://acquire1uat.comenity.net *.youtube.com *.googlesyndication.com https://console.googletagservices.com https://td.doubleclick.net app.vwo.com *.visualwebsiteoptimizer.com https://bookings.spot2nite.com https://bookings.spot2nite.dev https://www.google.com https://www.facebook.com https://*.qualtrics.com https://goodsam-assistance.dev.goodsam.com https://goodsam-assistance.goodsam.com/; 2 connect-src 'self' *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.doubleclick.net https://www.redditstatic.com https://dv-c3e594c6d429469e90b54478358619c3.ecs.us-east-1.on.aws https://pixel-config.reddit.com https://*.bing.com https://t.co https://analytics.twitter.com https://*.clarity.ms https://insight.adsrvr.org www.googleadservices.com px.ads.linkedin.com *.facebook.com/ *.6sc.co capig.stape.do wss://*.hotjar.com *.hotjar.io https://*.qualtrics.com https://api.sitelytics.tech https://ce.lijit.com;frame-ancestors 'self' ww.google.com;object-src 'none' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.googleapis.com *.gstatic.com *.google.com www.googletagmanager.com cdn.jsdelivr.net *.doubleclick.net https://*.lijit.com https://www.redditpixel.com https://www.redditstatic.com https://*.clarity.ms https://*.bing.com https://js.adsrvr.org www.buzzsprout.com www.youtube.com connect.facebook.net static.ads-twitter.com snap.licdn.com *.6sc.co *.hotjar.com https://*.qualtrics.com https://cdn.delivr.ai;style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.google.com https://www.international.com; 2 frame-ancestors 'self' login.transporeon.com login.int.transporeon.com login.dev.transporeon.com login.test.transporeon.com www.transporeon.com; 2 frame-ancestors 'self';media-src 'self' js.intercomcdn.com; connect-src 'self' https://api.sail-track.com https://cdn.cookielaw.org api-iam.intercom.io nexus-websocket-a.intercom.io api-iam.intercom.io nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io geolocation.onetrust.com api.sail-personalize.com api.company-target.com www.google-analytics.com *.clarity.ms siteintercept.qualtrics.com cdn.cookielaw.org ak.sail-track.com stats.g.doubleclick.net tag-logger.demandbase.com;default-src 'self';frame-src 'self' js.driftt.com s.company-target.com intercom-sheets.com;script-src 'self' 'unsafe-inline' widget.intercom.io *.intercomcdn.com cdn.heapanalytics.com www.googletagmanager.com static.cloudflareinsights.com tag.demandbase.com www.clarity.ms ak.sail-horizon.com www.google-analytics.com siteintercept.qualtrics.com *.siteintercept.qualtrics.com cdn.cookielaw.org js.driftt.com *.clarity.ms;style-src 'self' 'unsafe-inline' www.googletagmanager.com fonts.googleapis.com;font-src 'self' fonts.googleapis.com fonts.gstatic.com fonts.intercomcdn.com;img-src 'self' *.intercomcdn.com www.google-analytics.com fonts.gstatic.com fast.fonts.net cdn.cookielaw.org heapanalytics.com c.clarity.ms id.rlcdn.com c.bing.com segments.company-target.com www.google.com www.google.com.np www.googletagmanager.com static.intercomassets.com data:;object-src 'none';base-uri 'self';form-action 'self';upgrade-insecure-requests 2 block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.jp flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.cn flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.eu flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.kr flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw flightbookings.grabaseat.co.nz govtbookings.airnewzealand.co.nz au-connect.authsignal.com auth.identity.airnewzealand.com auth.identity.qual.airnewzealand.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com; script-src 'self' p-airnz.com 'unsafe-inline' 'unsafe-eval' flightbookings.airnewzealand.com t.a3cloud.net ib.adnxs.com *.demdex.net www.everestjs.net oc-cdn-public-oce.azureedge.net https://unpkg.com/acs_webchat-chat-adapter@0.0.35-beta.20/dist/chat-adapter.js www.googleadservices.com www.google.com www.googletagmanager.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com www.google-analytics.com analytics.google.com tagmanager.google.com *.doubleclick.net static.hotjar.com script.hotjar.com https://widget.timatic.iata.org/scripts/iata-timatic-widget-live.js md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au cdn-au.onetrust.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com upgrade.plusgrade.com s.swiftypecdn.com player.vimeo.com s.wayin.com eu-s.wayin.com xd.wayin.com x.wayin.com eu-x.wayin.com s.engagesciences.com display.engagesciences.com display.wayin.com yourir.info www.youtube.com s.ytimg.com; style-src 'unsafe-inline' p-airnz.com 'self' oc-cdn-public-oce.azureedge.net fonts.googleapis.com tagmanager.google.com static.hotjar.com script.hotjar.com upgrade-cdn-prd.plusgrade.com upgrade-prod-cdn.plusgrade.com s.swiftypecdn.com yourir.info; img-src https: data: blob: ad.doubleclick.net ade.googlesyndication.com adservice.google.com www.googletagmanager.com www.google.com static.hotjar.com script.hotjar.com *.kampyle.com i.vimeocdn.com i.ytimg.com; font-src p-airnz.com 'self' *.cdn.office.net fonts.googleapis.com fonts.gstatic.com script.hotjar.com data: dhm5hy2vn8l0l.cloudfront.net; media-src 'self' p-airnz.com data: video.cdnvue.com; frame-src 'self' *.demdex.net www.everestjs.net pixel.everesttech.net au-connect.authsignal.com auth.identity.airnewzealand.com identity.airnewzealand.com airnz-cargo.chooose.today airnz-corporate.chooose.today forms.cd.airnewzealand.co.nz sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com oc-cdn-public-oce.azureedge.net blob: comms.omnichannelengagementhub.com customervoice.microsoft.com www.googletagmanager.com td.doubleclick.net *.google.com *.doubleclick.net vars.hotjar.com nebula-cdn.kampyle.com www.airnewzealand.co.nz/airpoints-account/payments/scripts/done.html www.airnewzealand.co.nz/payment/scripts/done.html *.cdn-pci.optimizely.com nz.fltmaps.com v.qq.com player.vimeo.com xd.wayin.com x.wayin.com eu-x.wayin.com display.engagesciences.com airnz.wufoo.com player.youku.com www.youtube.com; worker-src blob:; connect-src 'self' api.airnz.io api.airnz.ai p-airnz.com *.demdex.net *.tt.omtrdc.net identity.airnewzealand.com sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com unq0355446423e84eb397bc71189d78d-crm6.omnichannelengagementhub.com browser.pipe.aria.microsoft.com *.omnichannelengagementhub.com *.au.omnichannelengagementhub.com https://*.trouter.skype.com wss://*.trouter.skype.com edge.skype.com *.communication.azure.com ocsdk-prod.azureedge.net blob: pagead2.googlesyndication.com www.googleadservices.com www.google.com google.com ad.doubleclick.net *.googleapis.com *.google.com *.gstatic.com www.google-analytics.com region1.google-analytics.com region1.analytics.google.com analytics.google.com stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://widget.timatic.iata.org/api/ md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au cdn-au.onetrust.com geolocation.onetrust.com privacyportal-au.onetrust.com *.optimizely.com https://*.sentry.io s.swiftypecdn.com search-api.swiftype.com yourir.info; object-src 'none'; frame-ancestors 'self' https://payload-external.korunet.co.nz; report-uri /csp-report 2 frame-ancestors 'none'; base-uri 'none'; form-action 'self'; block-all-mixed-content 2 default-src * 'unsafe-inline' 'unsafe-eval' data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; 2 base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; child-src blob:; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; style-src 'self' https: 'unsafe-inline' *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; img-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; font-src 'self' data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; connect-src 'self' *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; frame-src 'self' data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; frame-ancestors 'self' *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; object-src data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; media-src 'self' data: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138; worker-src 'self' data: blob: *.adform.net *.ads-twitter.com *.ads.linkedin.com *.amazon-adsystem.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.capitalone.com *.clarity.ms *.cloudflare.com *.co-buying.com *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.creativecdn.com *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.inconcertcc.com *.krxd.com *.krxd.net *.licdn.com *.linkedin.oribi.io *.logalty.com *.logalty.es *.masmovil.com *.mixpanel.com *.mundo-r.com *.onetrust.com *.openstreetmap.org *.optimizely.com *.orsac.net *.outbrain.com *.pinimg.com *.pinterest.com *.pinterest.es *.quantummetric.com *.racctelplus.com *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com *.taboola.com *.teads.tv *.thunderhead.com *.tiktok.com *.tile.openstreetmap.org *.twitter.com *.useinsider.com *.yahoo.com *.yimg.com *.youtube-nocookie.com *.youtube.com *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com p.adsymptotic.com sjs.bizographics.com t.co 212.55.1.138 2 default-src 'self'; child-src blob:; connect-src 'self' data https://*.google-analytics.com https://google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://googletagmanager.com https://*.googlesyndication.com https://*.privacy-center.org https://*.googleadservices.com https://stats.g.doubleclick.net https://*.hscollectedforms.net https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.linkedin.com https://*.licdn.com https://js.zi-scripts.com https://analytics.inzynk.io https://collector4.leadinfo.net https://collector.leadinfo.net https://api.leadinfo.com https://ws.zoominfo.com https://www.google.at https://www.google.be https://www.google.bg https://www.google.hr https://www.google.cz https://www.google.dk https://www.google.fi https://www.google.fr https://www.google.de https://www.google.gr https://www.google.hu https://www.google.is https://www.google.ie https://www.google.it https://www.google.lv https://www.google.lt https://www.google.lu https://www.google.mt https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.ru https://www.google.sk https://www.google.si https://www.google.es https://www.google.se https://www.google.ch https://www.google.co.uk https://www.google.com.tr https://www.google.tn https://www.google.dz https://www.google.ma https://www.google.co.il https://www.google.ae https://www.google.com https://www.google.ca https://www.google.com.mx https://www.google.com.br https://www.google.com.ar https://www.google.com.ec https://www.google.cl https://www.google.com.pe https://www.google.co.za https://www.google.co.in https://www.google.co.jp https://www.google.cn https://www.google.com.hk https://www.google.com.tw https://www.google.co.kr https://www.google.com.sg https://www.google.co.th https://graph.facebook.com https://*.doubleclick.net https://*.googleads.g.doubleclick.net; font-src 'self' data: data fonts.gstatic.com; frame-src https://*.youtube.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://prod1.solutions.webfg.ch https://*.google.com https://td.doubleclick.net https://www.coface.fr https://pwm-image.trendmicro.com https://edge.media-server.com; img-src 'self' data: data blob https://tr.line.me https://*.lfeeder.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.privacy-center.org https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.linkedin.com https://*.licdn.com https://*.hsforms.com https://*.hubspot.com https://www.google.at https://www.google.be https://www.google.bg https://www.google.hr https://www.google.cz https://www.google.dk https://www.google.fi https://www.google.fr https://www.google.de https://www.google.gr https://www.google.hu https://www.google.is https://www.google.ie https://www.google.it https://www.google.lv https://www.google.lt https://www.google.lu https://www.google.mt https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.ru https://www.google.sk https://www.google.si https://www.google.es https://www.google.se https://www.google.ch https://www.google.co.uk https://www.google.com.tr https://www.google.tn https://www.google.dz https://www.google.ma https://www.google.co.il https://www.google.ae https://www.google.com https://www.google.ca https://www.google.com.mx https://www.google.com.br https://www.google.com.ar https://www.google.com.ec https://www.google.cl https://www.google.com.pe https://www.google.co.za https://www.google.co.in https://www.google.co.jp https://www.google.cn https://www.google.com.hk https://www.google.com.tw https://www.google.co.kr https://www.google.com.sg https://www.google.co.th https://www.facebook.com; object-src 'none'; script-src 'self' blob 'sha256-r5XNBZKG5SuRALRop397WzCpL6A7PPnVeJHjxu4dYoM=' 'sha256-PvjejqLYd3NWAQbuI5ztPkrH0+NbIyvfHcohUy/cDgY=' 'sha256-ixt9cJSW7l/TjcAHQwIkthvmNXKVhbctw0KIBmfT3vI=' 'sha256-TBFB22YzPYBT6rIyeICABgKnf6AS2XlCon7PlKpqwx0=' 'sha256-Mdr7Elzu0r9o/uLCgHaqqkGF/Cjybl8xHE3xxAJOpvE=' 'sha256-Fac3ZJh9Y/mUcXMm30RrYwSt3wFvJ7dvzNvifF3wz9o=' 'sha256-j7hX0Eb40FknxDtJlw+/vJUvnDRI62XPkRyAgR5yDPs=' 'sha256-7vg2+gdz1/ftFJq3ZBimCuYwW04BTLPk0Z8E7kVeGHY=' 'sha256-VyY8SEWR8lMYk6OETYa7fhiLcLnQwdZtN03ECJL48t0=' 'sha256-XbnphNbfccFW7zQZOKk1NECfmmjWeq0cg1FwHrMZZ3A=' 'sha256-nVZbCRzRQSuWk+9W2ls61mQODCppOVf74kz9tIVcvD8=' 'sha256-oIOkXW3jJVB3WzdBAFDW1Y+ploUa4qVp1mqHQeZ7U+Q=' 'sha256-uILB4C9XYyBWeOx5+XQDrAjrU4EsdqN9Ms3lKdPVl58=' 'sha256-fEneWIDmgpMHym15EtxErZC6ZUMtKxivpJeC0XmqQGc=' 'sha256-tAWD8lytuBP8gEXDAj+ZibUssoc3mxK0Qpx5aFn8TT4=' https://*.lfeeder.com https://tags.inzynk.io https://cdn.leadinfo.net https://plugin.sopro.io https://d.line-scdn.net https://js.zi-scripts.com https://*.google-analytics.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.privacy-center.org https://googleads.g.doubleclick.net https://*.gstatic.com https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.hscollectedforms.net https://*.hs-analytics.net https://*.hs-banner.com https://js-eu1.hs-scripts.com https://*.linkedin.com https://*.licdn.com https://*.google.com https://*.google.fr https://*.upsun-eu-5.observability-pipeline.blackfire.io https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com 'sha256-IexDL0Ce6hsKeoWgG8tjIGqt0kCAsq7wliagPeAhqtU='; style-src 'self' 'unsafe-inline'; worker-src blob: 2 frame-ancestors 'self' https://slfscreen.wsl.ch 2 img-src 'self' data:; default-src 'self' 'unsafe-inline' 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' app.koofr.net; navigate-to 'self' app.koofr.net; 2 default-src 'self' https://trillian.cachefly.net https://static.olark.com; script-src 'self' https://trillian.cachefly.net https://*.olark.com https://www.google-analytics.com https://www.googletagmanager.com https://ct.capterra.com; style-src 'self' https://trillian.cachefly.net https://static.olark.com 'unsafe-inline'; object-src 'none'; base-uri 'none'; connect-src 'self' https:; media-src 'self' https:; img-src 'self' http: https: data:; 2 default-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.facebook.net https://*.googletagmanager.com *.msecnd.net *.perfdrive.com *.torontopearson.com https://*.siteimproveanalytics.com https://*.unpkg.com unpkg.com https://*.google-analytics.com *.addthis.com https://static.cloud.coveo.com *.google.com *.gstatic.com http://xslt.alexa.com https://www.youtube.com https://ucads-cdn.ucweb.com https://sdk.joinsherpa.io https://s7.addthis.com https://platform.twitter.com https://o2.eyereturn.com https://maps.googleapis.com https://image.uc.cn https://connect.facebook.net https://cdn.perfdrive.com cdnjs.cloudflare.com code.jquery.com siteimproveanalytics.com www.googletagmanager.com cdn.torontopearson.com *.azurefd.net https://plugins.flockler.com; connect-src 'self' tags.srv.stackadapt.com px.ads.linkedin.com https://*.google.com stats.g.doubleclick.net *.azureedge.net *.azurefd.net *.googleapis.com dc.services.visualstudio.com *.google-analytics.com https://*.google.co.in *.azurewebsites.net *.perfdrive.com directline.botframework.com wss://directline.botframework.com pwiloc.gtaa.org https://*.facebook.com https://*.google.ca https://*.torontopearson.com *.software-downloading.com *.addthis.com pearsonworks.inksight.ca *.analytics.google.com *.google.tt *.google.se *.google.si https://*.google.rs *.google.ru *.google.ro *.google.pt *.google.pl *.google.no *.google.nl *.google.mn *.google.md *.google.lv *.google.lk *.google.kz *.google.it *.google.iq *.google.ie *.google.im *.google.hu *.google.hn *.google.hr *.google.gr *.google.gy *.google.gm *.google.gg *.google.ge *.google.fr *.google.fi *.google.es *.google.ee https://*.google.dm *.google.dz *.google.dk *.google.de *.google.cz *.google.co.za *.google.co.uz *.google.co.uk *.google.co.ug *.google.co.th *.google.co.nz *.google.co.ma *.google.co.kr *.google.co.ke *.google.co.il *.google.co.jp *.google.co.id *.google.com.vn *.google.co.cr *.google.com.vc *.google.com.tw *.google.com.ua *.google.com.tr *.google.com.sv *.google.com.sg *.google.com.sa *.google.com.qa *.google.com.pk *.google.com.pe *.google.com.ph *.google.com.om *.google.com.np *.google.com.ng *.google.com.ni *.google.com.my *.google.com.mt *.google.com.mx *.google.com.lb *.google.com.kw *.google.com.jm *.google.com.hk *.google.com.gh *.google.com.et *.google.com.eg *.google.com.ec *.google.com.do *.google.com.cu *.google.com.co *.google.com.bz *.google.com.br *.google.com.au *.google.com.bd *.google.com.bo *.google.com.ar *.google.com.ag *.google.cl *.google.ch *.google.bs *.google.bg *.google.be *.google.ba *.google.az *.google.at *.google.ae tl.ytlogs.ru stats.g.doubleclick.net service5.gstatic-cache.com analytics.google.com overbridgenet.com doublestat.info clientstream.launchdarkly.com cdnml.global-cache.online api.trongrid.io api.verdevisionresearch.com api.solarspireconsulting.com api.srv247app.com api.privacy-protector-adblocker.com api.smartblocker.org api.killadsapi.com api.global-data-lab.com api.fbanalytics.org api.browsekeeper.com api.adblocking247.com ad.doubleclick.net *.google.is *.google.je https://yandex.ru *.google.vu *.google.tn *.google.tm *.google.sr *.google.sn *.google.so *.google.sk *.google.rw *.google.ps *.google.mv *.google.la *.google.jo *.google.me *.google.ml *.google.mg *.google.mk *.google.mu *.google.mw *.google.li *.google.lu *.google.gl *.google.ht *.google.dj *.google.cv *.google.com.uy *.google.com.sl *.google.com.pr *.google.com.py *.google.com.pg *.google.com.pa *.google.com.na *.google.com.gt *.google.com.ly *.google.com.fj *.google.com.cy *.google.com.bn *.google.com.bh *.google.com.af *.google.co.zw *.google.co.zm *.google.co.vi *.google.co.ve *.google.co.tz *.google.co.mz *.google.co.ao *.google.cm *.google.ci *.google.cg *.google.cd *.google.by *.google.bt *.google.bi *.google.bf *.google.al https://*.google.am https://wedata.net https://www.bitguardian.de https://utp-dmp.ucweb.com https://utp.ucweb.com http://uc.gre https://track.uc.cn https://tr6.snapchat.com https://tr.snapchat.com https://rum.browser-intake-us5-datadoghq.com https://rbtds.net http://pluginx.uc.local:8080 https://plugin.ucads.ucweb.com https://o370968.ingest.sentry.io https://my.productfruits.com https://meetlookup.com https://infragrid.v.network https://hm.baidu.com https://gjtrack.ucweb.com https://get663.com https://frsbridge.ru https://fcgt742.com https://effectssdk.ai https://ecmacore.com https://cr-input.mxpnl.net https://code.jquery.com https://az416426.vo.msecnd.net https://awaybird.ru https://api.video-adblock.com https://api.tokenmint.global https://api.ultimateaderaser.com https://api.solaranalyticscorp.com https://api.rt-track7.com https://api.socialsolutionapp.com https://api.redirects-4.com https://api.range-offer.com https://api.mkmediaworks.com https://api.noadsnow.com https://api.highdataanalytics.com https://api.downloader-software.com https://api.extremesecurityadblocker.com https://api.ciuvo.com https://api.datacloudstat.com https://api.awesomeblocker.com https://api.blocksly.org https://api.amcreativemedia.com https://api.adblocknext.com https://adtonus.com https://adservice.google.com https://1752680588.rsc.cdn77.org www.facebook.com www.googleadservices.com www.torontopearson.com https://zone1-services-cdn.com https://api.flockler.app https://stats-api.flockler.app https://pagead2.googlesyndication.com properties data:;img-src 'self' px.ads.linkedin.com tags.srv.stackadapt.com www.linkedin.com syndication.twitter.com analytics.twitter.com https://*.siteimproveanalytics.io https://www.facebook.com *.facebook.com https://*.facebook.com *.googletagmanager.com *.gstatic.com *.azureedge.net https://*.google.co.in https://www.torontopearson.com maps.googleapis.com https://*.google.com https://*.google.ca https://*.google.co.il stats.g.doubleclick.net https://*.google.nl *.twitter.com *.perfdrive.com *.facebook.net *.naver.com *.honey.io *.ytimg.com https://*.google.cn yastatic.net *.google.tt *.google.sn *.google.tn *.google.so *.google.sr *.google.tg *.google.se *.google.si *.google.sk *.google.ru *.google.rw *.google.rs *.google.ro *.google.ps *.google.pt *.google.pl *.google.no *.google.mu *.google.mn *.google.ml *.google.mk *.google.me *.google.mg *.google.md *.google.lv *.google.lu *.google.lk *.google.lt *.google.li *.google.la *.google.it *.google.kz *.google.is *.google.jo *.google.im *.google.iq *.google.hu *.google.ie *.google.hn *.google.hr *.google.ht *.google.gy *.google.gr *.google.gm *.google.gg *.google.ge *.google.ga *.google.fr *.google.fi *.google.es *.google.ee *.google.dz *.google.dm *.google.dk *.google.dk *.google.de *.google.cz *.google.co.zm *.google.co.zw *.google.co.za *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.tz *.google.co.th *.google.co.ma *.google.co.nz *.google.co.kr *.google.co.ke *.google.co.jp *.google.co.id *.google.co.cr *.google.co.ck *.google.com.vn *.google.com.vc *.google.com.ua *.google.com.uv *.google.com.tw *.google.com.tr *.google.com.sv *.google.com.tj *.google.com.sg *.google.com.sa *.google.com.qa *.google.com.py *.google.com.pr *.google.com.ph *.google.com.pk *.google.com.pe *.google.com.om *.google.com.pa *.google.com.np *.google.com.ng *.google.com.ni *.google.com.my *.google.com.na *.google.com.mt *.google.com.mx *.google.com.mm *.google.com.ly *.google.com.lb *.google.com.kw *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.gt *.google.com.gh *.google.com.et *.google.com.eg *.google.com.fj *.google.com.ec *.google.com.cy *.google.com.do *.google.com.bz *.google.com.co *.google.com.cu *.google.com.bn *.google.com.bo *.google.com.br *.google.com.au *.google.com.bd *.google.com.bh *.google.com.ar *.google.com.ag *.google.com.af *.google.cm *.google.cl *.google.ci *.google.ch *.google.cd *.google.by *.google.ca *.google.bs *.google.bg *.google.bf *.google.be *.google.ba *.google.at *.google.az *.google.al *.google.am *.google.ae *.google.am https://www.google-analytics.com t.co travel.gc.ca rt.newswire.ca pos.baidu.com content.locuslabs.com cdn.css-tricks.com http://ad.doubleclick.net https://6084978.global.siteimproveanalytics.io https://www.reprintsdesk.com https://www.researchsolutions.com https://www.plazapremiumlounge.com https://www.hilton.com https://*.google.vu https://*.google.tm https://*.google.td https://*.google.st https://*.google.sm https://*.google.sc https://*.google.mv https://*.google.ne https://*.google.kg https://*.google.je https://*.google.mw https://*.google.gl https://*.google.fm https://*.google.dj https://*.google.cv https://*.google.com.uy https://*.google.com.sl https://*.google.com.pg https://*.google.com.gi https://*.google.co.vi https://*.google.co.mz https://*.google.co.ls https://*.google.co.bw https://*.google.co.ao https://uploads-ssl.webflow.com https://www.translate.googleapis.com https://t.co https://storage.googleapis.com https://static.xx.fbcdn.net https://static.cdninstagram.com https://my.productfruits.com https://mc.yandex.ru https://maps.gstatic.com https://log.pinterest.com https://lh3.google.com https://img.uflowx.com https://images.capitaloneshopping.com https://image.uc.cn https://hm.baidu.com https://hovastate.s3.amazonaws.com https://googleads.g.doubleclick.net https://flyjazz.ca https://download.jword.jp https://dakotaram.com https://content.venngo.com https://cdn.torontopearson.com *.azurefd.net https://cdn.leanlibrary.app https://cache.marriott.com https://brigstoneapp.com www.googletagmanager.com www.google.com https://avatars.nordpass.com https://analytics.twitter.com https://analyticssystems.net https://fl-1.cdn.flockler.com https://stats-api.flockler.app https://media-api.flockler.com https://pbs.twimg.com https://pagead2.googlesyndication.com blob: data:;font-src 'self' cdn.torontopearson.com *.azurefd.net *.cloudflare.com *.gstatic.com *.rabatta.app *.t.co https://account.affilitizer.com https://aceify.ai https://appdown.pstatic.net https://assets.tailwindapp.com https://at.alicdn.com https://cdn.blerp.com https://cdn.megabonus.com https://cdn.sammdot.ca https://cdn.scite.ai https://commondatastorage.googleapis.com https://connorbrez.gitlab.io https://fonts.cdnfonts.com https://fonts.gstatic.com https://github.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://ray.st https://rsms.me https://sc-static.net https://shopping.qantas.com https://storage.googleapis.com http://themes.googleusercontent.com https://unpkg.com fonts.googleapis.com https://use.fontawesome.com https://use.typekit.net https://www.slant.co chrome-extension: moz-extension: data:;script-src-elem 'self' 'unsafe-inline' googleads.g.doubleclick.net tags.srv.stackadapt.com snap.licdn.com www.instagram.com static.ads-twitter.com platform.twitter.com *.perfdrive.com *.torontopearson.com *.facebook.net siteimproveanalytics.com https://*.siteimproveanalytics.com *.googletagmanager.com https://*.google-analytics.com unpkg.com *.unpkg.com *.google.com *.gstatic.com *.googleapis.com *.azureedge.net *.msecnd.net *.coveo.com *.cloudflare.com *.jquery.com *.addthis.com *.kaspersky-labs.com pearsonworks.inksight.ca *.twitter.com *.static.ads-twitter.com *.joinsherpa.io *.addthisedge.com https://*.googleadservices.com https://z.moatads.com *.youtube.com *.pagespeed-mod.com torontopearson.us2.list-manage.com static.ads-twitter.com static.cloud.coveo.com sc-static.net iamtorontopearson.us15.list-manage.com conoret.com *.mathjax.org agadata.online assets.pinterest.com https://asset.goguardian https://awaybird.ru https://az416426.vo.msecnd.net https://brigstoneapp.com https://browsingsecurityhub.com https://cdnjs.cloudflare.com https://cdn.perfdrive.com https://cdn.toolszen.com https://cdn.torontopearson.com *.azurefd.net https://code.jquery.com https://connect.facebook.net https://c.chuyueshop.com https://fidoapi.com https://iamtorontopearson.us15.list-manage.com https://js.cobrowse.io https://lazyload.org https://maps.googleapis.com https://o2.eyereturn.com https://pearsonworks.inksight.ca https://platform.twitter.com https://sdk.joinsherpa.io https://siteimproveanalytics.com https://unpkg.com https://www.google-analytics.com https://www.googleadservices.com https://static.cloud.coveo.com https://www.googletagmanager.com https://www.google.com https://www.torontopearson.com https://www.youtube.com secure.wufoo.com static.wufoo.com https://plugins.flockler.com https://cdn.addevent.com blob: data:;style-src *.cloudflare.com *.torontopearson.com *.googleapis.com *.perfdrive.com *.static.cloud.coveo.com static.cloud.coveo.com *.cloudflare.com https://cdnjs.cloudflare.com https://cdn.torontopearson.com *.azurefd.net 'self' 'unsafe-inline' blob: data:;style-src-elem *.googleapis.com tags.srv.stackadapt.com *.cloudflare.com *.azureedge.net *.torontopearson.com *.coveo.com *.kaspersky-labs.com *.honey.io pearsonworks.inksight.ca *.static.cloud.coveo.com *.opera-mini.net *.gstatic.com *.perfdrive.com *.trendmicro.com pearsonworks.inksight.ca fonts.cdnfonts.com *.googleapis.com cdn.honey.io *.cloudflare.com https://cdnjs.cloudflare.com https://cdn.honey.io https://cdn.jsdelivr.net https://cdn.sammdot.ca https://cdn.torontopearson.com *.azurefd.net https://fonts.bunny.net https://fonts.googleapis.com https://pearsonworks.inksight.ca https://rsms.me https://static.cloud.coveo.com https://use.fontawesome.com https://www.gstatic.com https://www.torontopearson.com 'self' 'unsafe-inline' blob: data:;frame-ancestors 'self';form-action pay.realexpayments.com *.facebook.com www.facebook.com www.google.com *.torontopearson.com 'self';frame-src open.spotify.com www.instagram.com syndication.twitter.com platform.twitter.com *.torontopearson.com whitelabel.triplinx.ca td.doubleclick.net *.google.com https://*.rentalcars.com https://*.facebook.com gtaa.wufoo.com *.azurewebsites.net *.joinsherpa.io *.addthis.com *.moz.com *.hcaptcha.com *.twitter.com *.perfdrive.com *.youtube.com www.youtube-nocookie.com *.slideshare.net *.googletagmanager.com https://www.addevent.com www.facebook.com.x.bf83366e065f204c270866606a4548bbc352.9270fa5d.id.opendns.com www.facebook.com.x.28b512ee0476e042da0a2a107eda0bd30310.9270fa44.id.opendns.com static.contextall.com *.trendmicro.com noop.style *.zscalertwo.net *.mediavalet.com fssfedpitc.ge.com *.zscalertwo.net *.opendns.com http://www.youtube-nocookie.com.x.f208b4a70d4f604d470a41305fa1e567cb18.43d7547c.id.opendns.com https://www.ciuvo.com https://zswpmanager.wip.mmc.com https://adfs2.tstech.com https://authenticate.ibotta.com https://cha.chaweather.com https://filter.techloq.com https://fs.aircanada.ca https://gateway.zscalerthree.net https://gateway.zscaler.net https://gateway.zscloud.net https://hte-tun-enhanced-proxy-gnac.forces.mil.ca https://hte-prk-enhanced-proxy-gnac.forces.mil.ca https://idp.aa.com https://login.zscloud.net https://login.zscalerthree.net https://my.ubtsupport.com https://prestocard.ca https://smlogin.aa.com https://tr.snapchat.com https://utp.ucweb.com https://vip.zhanyangsh.cn www.torontopearson.com gtaa.wufoo.com https://media-api.flockler.com blob: data:;manifest-src https://*.torontopearson.com https://cdn.torontopearson.com *.azurefd.net validate.perfdrive.com www.torontopearson.com blob: data:;media-src *.torontopearson.com https://ssl.gstatic.com https://effectssdk.ai cdn.torontopearson.com *.azurefd.net www.torontopearson.com data:;object-src cdn.torontopearson.com *.azurefd.net https://media-api.flockler.com; 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' https: data: blob:; connect-src 'self' https: wss: data: blob: wss://pusher.alab.pl https://sockjs-alab.pusher.com; frame-ancestors 'self' https://*.alab.pl; frame-src 'self' https:; base-uri 'self'; form-action 'self' 2 frame-ancestors 'self' *.strumentimusicali.net; 2 frame-ancestors 'self' https://teams.microsoft.com https://teams.cloud.microsoft ; 2 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src 'none'; child-src https: data: blob:; form-action https:; frame-ancestors 'self'; 2 font-src 'self' stricted.net *.stricted.net cdnjs.cloudflare.com fonts.gstatic.com data:; object-src 'none'; script-src 'self' stricted.net *.stricted.net ajax.googleapis.com cdnjs.cloudflare.com code.jquery.com graph.facebook.com www.google.com www.gstatic.com gist.github.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' stricted.net *.stricted.net cdnjs.cloudflare.com fonts.googleapis.com assets-cdn.github.com 'unsafe-inline'; connect-src 'self' stricted.net *.stricted.net; child-src 'self' stricted.net *.stricted.net www.google.com www.youtube-nocookie.com www.youtube.com; report-uri https://report.stricted.de/ 2 script-src 'self' gameloft.com *.gameloft.com gameloft.org *.gameloft.org *.google.com *.gstatic.com *.youtube.com *.doubleclick.net *.amazonaws.com *.googletagmanager.com *.privacy-center.org *.crazyegg.com *.tiktok.com *.ads-twitter.com *.facebook.net *.singular.net *.gsght.com *.cloudflare.com 'unsafe-eval' 'unsafe-inline'; worker-src 'self' blob:; 2 default-src 'self' 'unsafe-inline' *.sernet.de *.usercentrics.eu; style-src 'self' 'unsafe-inline'; img-src 'self' *.usercentrics.eu *.prive.eu; frame-ancestors 'self' 2 default-src 'self'; style-src https: 'unsafe-inline'; style-src-elem https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: data: wss: blob:; font-src https: data:; frame-src https:; img-src https: data: blob: 'self'; worker-src blob: https:; media-src data: blob: https:; frame-ancestors 'self' https://sccbko.puig.com 2 frame-ancestors 'none'; sandbox allow-forms allow-same-origin allow-scripts allow-modals; default-src 'self'; base-uri 'none'; script-src 'self' 'unsafe-inline'; 2 upgrade-insecure-requests; default-src 'self' *.crazyegg.com blob: *.wistia.com *.wistia.net; connect-src 'self' ds.digital-science.com ds.altmetric.com ds.dimensions.ai ds.figshare.com ds.ificlaims.com pardot.metaphacts.com ds.papersapp.com ds.readcube.com ds.symplectic.co.uk ds.writefull.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleadservices.com *.google.nl *.doubleclick.net stats.g.doubleclick.net use.typekit.net cdn.cookielaw.org cdn.openwidget.com ga.jspm.io public.flourish.studio cdn.propensity.com analytics.propensity-abm.com tags.srv.stackadapt.com wisepops.net activity.wisepops.com tracking.wisepops.com app.getwisp.co snap.licdn.com *.ads.linkedin.com siteintercept.qualtrics.com *.qualtrics.com *.marker.io *.amazonaws.com *.onetrust.com *.googlesyndication.com *.crazyegg.com *.wistia.net *.wistia.com *.litix.io browser.sentry-cdn.com *.algolia.net; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' ds.digital-science.com ds.altmetric.com ds.dimensions.ai ds.figshare.com ds.ificlaims.com pardot.metaphacts.com ds.papersapp.com ds.readcube.com ds.symplectic.co.uk ds.writefull.com *.googletagmanager.com *.google-analytics.com *.google.com *.googleadservices.com *.google.nl *.doubleclick.net *.youtube.com www.youtube.com youtube.com s.ytimg.com use.typekit.net cdn.cookielaw.org cdn.openwidget.com api.openwidget.com ga.jspm.io public.flourish.studio *.crazyegg.com cdn.propensity.com tags.srv.stackadapt.com wisepops.net cdn.wisepops.com app.getwisp.co cdn.wisepops.net snap.licdn.com siteintercept.qualtrics.com *.qualtrics.com *.marker.io *.ads.linkedin.com *.heeet.io *.pardot.com qvdt3feo.com *.wistia.net *.wistia.com *.sentry-cdn.com src.litix.io platform.twitter.com; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net cdn.cookielaw.org cdn.openwidget.com tags.srv.stackadapt.com *.crazyegg.com fonts.googleapis.com blob: fast.wistia.com; img-src 'self' data: *.wpenginepowered.com *.digital-science.com *.ificlaims.com *.symplectic.co.uk cdn.cookielaw.org public.flourish.studio *.google.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.google.co.uk *.google.cn *.google.com.hk *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.pl *.google.ca *.google.com.br *.google.com.mx *.google.com.au *.google.co.jp *.google.co.in *.google.com.sg *.google.com.tw *.google.co.za *.google.ae *.doubleclick.net *.ads.linkedin.com *.ytimg.com *.wistia.net *.wistia.com *.crazyegg.com user-images.crazyeggcdn.com cdn.wisepops.com tracking.wisepops.com dx4nr741tfc02.cloudfront.net wisp-production-storage.s3.amazonaws.com cdn.wisepops.net assets.wisepops.net; font-src 'self' data: use.typekit.net *.wistia.net *.wistia.com fonts.gstatic.com; media-src 'self' blob: data: *.wistia.net *.wistia.com; frame-src 'self' ds.digital-science.com ds.altmetric.com ds.dimensions.ai ds.figshare.com ds.ificlaims.com pardot.metaphacts.com ds.papersapp.com ds.readcube.com ds.symplectic.co.uk ds.writefull.com *.youtube.com *.vimeo.com cdn.openwidget.com flo.uri.sh *.googletagmanager.com *.wistia.net *.wistia.com *.marker.io widgets.figshare.com go.demo.pardot.com platform.twitter.com *.crazyegg.com datawrapper.dwcdn.net notifications.wisepops.com wisepops.net; child-src blob:; worker-src 'self' blob:; base-uri 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://js.hsforms.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://forms-eu1.hsforms.com https://a.storyblok.com https://www.googletagmanager.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://region1.google-analytics.com https://forms-eu1.hsforms.com https://hubspot-forms-static-embed-eu1.s3.amazonaws.com; frame-src https://forms-eu1.hsforms.com https://calendly.com https://calendar.google.com 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; object-src 'none' 2 default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com http://flex.msn.com http://www.googleadservices.com https://seal.digicert.com https://seal.verisign.com https://www.google.com https://www.googleadservices.com https://app-ab16.marketo.com https://www.gstatic.com https://www.googletagmanager.com https://s.go-mpulse.net https://googleads.g.doubleclick.net; connect-src 'self' 'unsafe-inline' http://localhost:9002 https://magtek.acipayonline.com:9002 *.google-analytics.com https://stats.g.doubleclick.net; img-src 'self' 'unsafe-inline' https://stats.g.doubleclick.net https://www.officialpayments.com https://www.google.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://privacy-policy.truste.com https://seal.digicert.com *.google-analytics.com https://app-ab16.marketo.com; frame-src 'self' 'unsafe-inline' https://www.google.com https://app-ab16.marketo.com; style-src 'self' 'unsafe-inline' https://app-ab16.marketo.com; object-src 'self' *.google-analytics.com; report-uri https://acipayonline.com/CSPFailuresHandler; frame-ancestors 'self' https://sa.peralta.edu 2 default-src 'self' *; style-src 'self' 'unsafe-inline' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; img-src * data:;font-src 'self' data: * 2 default-src 'self'; script-src 'self' https://cdn.fforecast.net https://cdn.fforecast.dev; style-src 'self' 'unsafe-inline' https://cdn.fforecast.net https://cdn.fforecast.dev; img-src 'self' data: https:; font-src 'self' https://cdn.fforecast.net https://cdn.fforecast.dev; connect-src 'self' https://cdn.fforecast.net https://cdn.fforecast.dev https://api.fforecast.net https://api.fforecast.dev https://raw.githubusercontent.com; frame-src https://discord.com; frame-ancestors 'none' 2 default-src 'self' https: 'unsafe-inline' 'unsafe-eval' ;frame-ancestors 'self' https://manager.agilitycms.com ;script-src 'self' 'unsafe-inline' 'unsafe-eval' t.contentsquare.net app.contentsquare.com t.clicktale.net contentsquare.com *.contentsquare.net *.googletagmanager.com www.google-analytics.com 8157301.fls.doubleclick.net googleads.g.doubleclick.net cdnssl.clicktale.net dpm.demdex.net cdn.agilitycms.com scotiabankfiles.azureedge.net cdn.aglty.io *.winperu.pe *.googleapis.com *.scotiabank.com.pe assets.adobedtm.com dpm.demdex.net www.googleadservices.com www.google.com.pe *.google.com *.adobedtm.com www.facebook.com use.fontawesome.com ing-district.clicktale.net dc.services.visualstudio.com cx.atdmt.com connect.facebook.net c.clicktale.net t.clicktale.net clicktale.net az416426.vo.msecnd.net adservice.google.com 8157301.fls.doubleclick.net www.gstatic.com stats.g.doubleclick.net ogs.google.com *.jquery.com datatrustcatalogobucket.s3.us-east-2.amazonaws.com datatrustperu.com scotiabank.tt.omtrdc.net *.scotiabank.com snap.licdn.com px.ads.linkedin.com p.adsymptotic.com 52.18.162.157 52.17.161.123 activitymap.adobe.com www.tiktok.com/es ads.tiktok.com/i18n/login displayvideo.google.com analytics.tiktok.com bat.bing.com bing.com www.scotiabank.com.pe;worker-src blob:;img-src 'self' *.clicktale.net *.agilitycms.com *.azureedge.net cdn.aglty.io *.google.com.pe *.google.ca *.google.com *.adobedtm.com https://www.google-analytics.com *.facebook.com *.scotiabank.com *.winperu.pe *.googleapis.com datatrustcatalogobucket.s3.us-east-2.amazonaws.com datatrustperu.com snap.licdn.com px.ads.linkedin.com p.adsymptotic.com 52.18.162.157 52.17.161.123 activitymap.adobe.com googleads.g.doubleclick.net *.contentsquare.net www.tiktok.com/es ads.tiktok.com/i18n/login displayvideo.google.com analytics.tiktok.com bat.bing.com bing.com ;connect-src 'self' https: wss: 'unsafe-inline' 'unsafe-eval' *.clicktale.net contentsquare.com *.contentsquare.net www.googletagmanager.com www.google-analytics.com 8157301.fls.doubleclick.net googleads.g.doubleclick.net cdnssl.clicktale.net dpm.demdex.net cdn.agilitycms.com scotiabankfiles.azureedge.net cdn.aglty.io *.winperu.pe *.googleapis.com *.scotiabank.com.pe assets.adobedtm.com dpm.demdex.net www.googleadservices.com www.google.com.pe *.google.com *.adobedtm.com www.facebook.com use.fontawesome.com ing-district.clicktale.net dc.services.visualstudio.com cx.atdmt.com connect.facebook.net c.clicktale.net t.clicktale.net clicktale.net az416426.vo.msecnd.net adservice.google.com 8157301.fls.doubleclick.net www.gstatic.com stats.g.doubleclick.net ogs.google.com scotiabank.tt.omtrdc.net datatrustcatalogobucket.s3.us-east-2.amazonaws.com datatrustperu.com *.scotiabank.com snap.licdn.com px.ads.linkedin.com p.adsymptotic.com 52.18.162.157 52.17.161.123 activitymap.adobe.com www.tiktok.com/es ads.tiktok.com/i18n/login displayvideo.google.com analytics.tiktok.com bat.bing.com bing.com ; 2 connect-src 'self' https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://privacyportal-uk.onetrust.com fndrsp.net fndrsp-checkout.net *.fundraiseup.com *.stripe.com *.paypal.com *.paypalobjects.com api.addressy.com https://www.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://google.com https://*.google.com https://*.google.co.uk https://googleads.g.doubleclick.net https://*.googleads.g.doubleclick.net https://stats.g.doubleclick.net https://px.ads.linkedin.com https://bat.bing.com https://bat.bing.net https://*.clarity.ms https://cloudflareinsights.com https://cycling-uk-d9.cycle.travel https://cycling-uk-dev.cycle.travel https://tile.cycle.travel https://tile.geowiki.com https://geocoder.cycle.travel https://routing-uk.cycle.travel https://www.cyclestreets.net https://*.fontawesome.com https://monorail-edge.shopifysvc.com https://*.myshopify.com https://www.facebook.com https://*.svc.dynamics.com https://cyclinguk.maps.arcgis.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://public-gbr.mkt.dynamics.com https://assets-gbr.mkt.dynamics.com https://region1.google-analytics.com https://region1.analytics.google.com https://unpkg.com https://cdn.jsdelivr.net https://api.autoaddress.com https://integrations.autoaddress.com *.visualwebsiteoptimizer.com app.vwo.com https://*.mkt.dynamics.com https://ad.doubleclick.net; font-src 'self' *.fundraiseup.com *.stripe.com https://fonts.gstatic.com https://*.fontawesome.com data:; frame-src 'self' *.fundraiseup.com *.stripe.com *.paypal.com pay.google.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com e.issuu.com https://www.google.com https://*.svc.dynamics.com https://cyclinguk.maps.arcgis.com *.dynamics.com https://www.facebook.com *.visualwebsiteoptimizer.com app.vwo.com; img-src 'self' data: https://www.cyclinguk.org https://cdn-ukwest.onetrust.com *.fundraiseup.com ucarecdn.com pay.google.com *.paypalobjects.com https://*.bing.com https://*.bing.net https://*.clarity.ms https://www.googletagmanager.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.uk https://google.com https://www.gstatic.com https://www.facebook.com https://px.ads.linkedin.com https://*.ytimg.com https://raster-eu.cycle.travel https://cycling-uk-d9.cycle.travel https://cycling-uk-dev.cycle.travel https://*.amazonaws.com https://tile.openstreetmap.org https://cdn.shopify.com https://sdks.shopifycdn.com https://integrations.autoaddress.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://use.typekit.net https://www.youtube.com https://cdn.fundraiseup.com *.fundraiseup.com *.stripe.com m.stripe.network pay.google.com *.paypal.com *.paypalobjects.com https://scripts.clarity.ms https://sdks.shopifycdn.com *.azureedge.net *.dynamics.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://integrations.autoaddress.com *.visualwebsiteoptimizer.com app.vwo.com https://formui-usa1.mkt.dynamics.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cycling-uk-d9.cycle.travel https://kit.fontawesome.com https://unpkg.com https://use.fontawesome.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://use.typekit.net/lmn7yno.css https://js-agent.newrelic.com https://fonts.googleapis.com https://www.googletagmanager.com https://snap.licdn.com https://static.hotjar.com https://www.google-analytics.com https://bat.bing.com https://connect.facebook.net https://*.clarity.ms https://script.hotjar.com https://*.azureedge.net https://*.googleadservices.com https://cdn-ukwest.onetrust.com https://www.youtube.com https://sdks.shopifycdn.com https://cdn.fundraiseup.com https://static.fundraiseup.com https://static.cloudflareinsights.com https://ajax.googleapis.com https://js.stripe.com https://pay.google.com https://ajax.aspnetcdn.com *.visualwebsiteoptimizer.com app.vwo.com https://*.mkt.dynamics.com https://formui-usa1.mkt.dynamics.com https://integrations.autoaddress.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cycling-uk-d9.cycle.travel https://kit.fontawesome.com https://unpkg.com https://use.fontawesome.com; style-src 'self' 'unsafe-inline' https://use.typekit.net/lmn7yno.css https://js-agent.newrelic.com https://fonts.googleapis.com https://www.googletagmanager.com https://snap.licdn.com https://static.hotjar.com https://www.google-analytics.com https://bat.bing.com https://connect.facebook.net https://*.clarity.ms https://script.hotjar.com blob: https://cdn-ukwest.onetrust.com https://www.youtube.com https://integrations.autoaddress.com *.visualwebsiteoptimizer.com app.vwo.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cycling-uk-d9.cycle.travel https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://use.typekit.net/lmn7yno.css https://fonts.googleapis.com https://p.typekit.net https://www.youtube.com app.vwo.com https://integrations.autoaddress.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cycling-uk-d9.cycle.travel https://unpkg.com; frame-ancestors 'self' 2 default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https: https://was-nam-us-prd-bhapi.azurewebsites.net wss://ws.qualified.com wss://directline.botframework.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://bhgateway.azurewebsites.net; font-src 'self' https:; frame-ancestors 'self' https; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: frame-src blob: 2 frame-ancestors self https://*.123greetings.com http://*.123g.us https://*.123g.us; 2 frame-ancestors 'self'; object-src 'self' https://on-site.com https://*.on-site.com https://*.realpage.com; report-uri /pub/csp_reports 2 frame-ancestors 'self' *.qidian.com *.hongxiu.com *.yuewen.com *.qq.com *.qdmm.com *.readnovel.com *.xs8.cn *.xxsy.net *.tingbook.com *.lrts.me *.ywurl.cn *.qdwenxue.com *.if.qidian.com www.gameloop.com *.xxsypro.com 2 frame-ancestors 'none'; base-uri 'self'; upgrade-insecure-requests; 2 default-src 'self'; script-src 'self'; connect-src 'self'; style-src 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'none'; form-action 'self'; manifest-src 'self'; img-src 'self' blob: data: https://furrycdn.org https://ext.furrycdn.org; media-src 'self' blob: data: https://furrycdn.org https://ext.furrycdn.org 2 frame-ancestors 'self'; block-all-mixed-content; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.xpressbet.com *.xpressbetonline.com *.xb-online.com *.youtube.com *.kaltura.com *.paysafecard.com *.facebook.net *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.typekit.net *.livehelpnow.net *.xbselect.com *.redditstatic.com *.twitter.com *.polyfill.io *.paypal.com *.optimove.net *.radar.com *.plaid.com *.braintreegateway.com wss:; img-src * data:; font-src *; style-src * 'unsafe-inline'; media-src * blob:; worker-src * blob 2 frame-ancestors 'self' https://pdftron.sanity.studio https://*.saleshood.com; 2 default-src 'self' flickrembed.com *.flickrembed.com *.jquery.com *.flickr.com *.twitter.com *.gstatic.com *.weloveiconfonts.com weloveiconfonts.com *.googletagmanager.com *.google-analytics.com *.youtube.com youtube.com *.ytimg.com *.google.com *.googlevideo.com *.googleapis.com *.facebook.net *.facebook.com *.doubleclick.net *.rss2json.com *.instagram.com *.googleservices.com *.office.com *.matterport.com *.cloudflare.com *.benchmarkemail.com *.renem.es *.openstreetmap.org *.opentopomap.org *.ign.es data: 'unsafe-inline' 'unsafe-eval'; 2 frame-src 'self' https://eu-west-2-elume.s3.us-east-1.amazonaws.com/ https://widget.datablocks.se https://forms.hsforms.com/ https://app.hubspot.com https://www.googletagmanager.com https://accounts.google.com https://sdk.companywebcast.com https://ir.asp.manamind.com https://www.youtube.com https://www.youtube-nocookie.com *.metric.gstatic.com *.dynamics.com https://webcast.seria.no https://spinzam.com/ https://player.vimeo.com https://vimeo.com https://cdn.embedly.com https://www.facebook.com https://www.google.com/ https://platform.twitter.com/ https://twitter.com/ https://ir.oms.no/ https://kongsberg.easycruit.com https://tools.eurolandir.com https://asia.tools.euroland.com https://tools.euroland.com https://gamma.euroland.com https://jirango.com https://app.powerbi.com/ https://dashboard.find.episerver.net/; frame-ancestors 'self' 2 default-src 'none'; child-src 'self'; connect-src 'self' *.ads.linkedin.com *.bazaarvoice.com *.blob.core.windows.net *.boltdns.net *.brightcove.com *.brightcovecdn.com *.clarity.ms *.cloudfront.net *.commerce.insitesandbox.com *.cookielaw.org *.copeland.com *.doubleclick.net *.ecorebates.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.mapbox.com *.mavenoid.com *.mavenoidfiles.com *.omappapi.com *.onetrust.com *.optimizely.com *.pricespider.com *.pusher.com *.qualtrics.com *.secure.force.com *.segment.com *.segment.io *.sentry.io *.stackadapt.com *.tiles.mapbox.com *.userflow.com *.youku.com *.zaius.com api.mapbox.com ds360.co edge.api.brightcove.com https://wr.my.salesforce-sites.com mavenoidfiles.com maweb.copeland.com players.brightcove.net prd-commerce.copeland.com prd-commerce.sensi.copeland.com sensiapi.io wss://*.mavenoid.com wss://*.pusher.com wss://*.twilio.com wss://*.userflow.com wss://api.mavenoid.com wss://twilio.com wss://ws.hotjar.com/; font-src 'self' data: *.cloudfront.net *.ecorebates.com *.gstatic.com *.mavenoid.com *.typekit.net https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/; frame-src 'self' *.amazon-adsystem.com *.cdn.optimizely.com *.copeland.com *.doubleclick.net *.google.com *.mavenoid.com *.qualtrics.com *.surveymonkey.com *.youku.com *.youtube.com app.cypheme.com cg.optimizely.com fastcomments.com flex.cybersource.com https://www.googletagmanager.com oversight.copeland.com players.brightcove.net service.force.com static.addtoany.com; img-src 'self' data: *.ads.linkedin.com *.akamaihd.net *.baidu.com *.bazaarvoice.com *.bing.com *.boltdns.net *.brightcove.com *.clarity.ms *.cloudflare.com *.cloudfront.net *.cookielaw.org *.copeland.com *.doubleclick.net *.facebook.com *.google.com *.google.com.hk *.google.com.ph *.google.com.sg *.googleapis.com *.googletagmanager.com *.gstatic.com *.linkedin.cn *.linkedin.com *.mavenoidfiles.com *.omappapi.com *.optimizely.com *.pricespider.com *.qualtrics.com *.rnengage.com *.s3.amazonaws.com *.smassets.net *.srv.stackadapt.com *.usea01.idio.episerver.net *.zaius.com ds360.co files.bugherd.com mavenoidfiles.com media.copeland.com players.brightcove.net www.bugherd.com; media-src 'self' blob: *.akafms.net *.akamaihd.net *.boltdns.net *.brightcovecdn.com *.cf.brightcove.com *.copeland.com *.llnw.net *.llnwd.net *.mavenoid.com *.mavenoidfiles.com *.media.brightcove.com; script-src-elem 'self' 'unsafe-inline' *.ads-twitter.com *.azalead.com *.baidu.com *.bazaarvoice.com *.brightcove.com *.brightcovecdn.com *.clarity.ms *.cloudflare.com *.cloudfront.net *.cookielaw.org *.copeland-latam.custhelp.com *.copeland.com *.dwin1.com *.ecorebates.com *.en25.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.hotjar.com *.igodigital.com *.jsdelivr.net *.licdn.com *.lightning.force.com *.mavenoid.com *.omappapi.com *.optimizely.com *.pricespider.com *.qualtrics.com *.rnengage.com *.salesforce.com *.salesforceliveagent.com *.secure.force.com *.stackadapt.com *.surveymonkey.com *.tiles.mapbox.com *.usea01.idio.episerver.net *.userflow.com *.youku.com *.youtube.com cdn.fastcomments.com copeland.custhelp.com copeland.widget.custhelp.com ds360.co flex.cybersource.com https://copeland-latam.custhelp.com https://copeland-latam.widget.custhelp.com https://wr.my.salesforce-sites.com https://www.googletagmanager.com players.brightcove.net service.force.com static.addtoany.com unpkg.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.cdn.optimizely.com *.cloudfront.net *.episerver.net *.optimizely.com *.srv.stackadapt.com *.usea01.idio.episerver.net *.youku.com cdn.fastcomments.com players.brightcove.net vjs.zencdn.net; style-src-elem 'self' 'unsafe-inline' *.bazaarvoice.com *.ecorebates.com *.googleapis.com *.jsdelivr.net *.omappapi.com *.pricespider.com *.secure.force.com *.stackadapt.com *.tiles.mapbox.com *.typekit.net *.youku.com copeland.custhelp.com copeland.widget.custhelp.com https://copeland-latam.widget.custhelp.com https://wr.my.salesforce-sites.com https://www.googletagmanager.com service.force.com; style-src 'self' 'unsafe-inline' players.brightcove.net; frame-ancestors *.copeland.com *.emerson.cn *.emerson.com *.oversight.copeland.com cope01mstrkhh65prod-slot.dxcloud.episerver.net cope01mstrkhh65prod.dxcloud.episerver.net copeland.pathfactory.com fastcomments.com oversight.copeland.com webapps.copeland.com; worker-src blob: *.copeland.com *.sensi.copeland.com; 2 default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.hubspot.com *.cookielaw.org *.cdntwrk.com *.wistia.com *.wistia.net *.q2.com *.sentry-cdn.com *.clarity.ms *.google.com *.googletagmanager.com *.googleapis.com *.googleadservices.com *.gstatic.com *.hsappstatic.com *.hsappstatic.net *.hubspot.net *.hs-banner.com *.hsadspixel.net *.hs-analytics.com *.hs-analytics.net *.licdn.com *.marketo.net *.marketo.com *.zoominfo.com *.bizible.com *.6sc.co *.qualified.com *.segment.com *.bugcrowd.com *.bugcrowdusercontent.com bugcrowd.com *.jsdeliver.net *.jsdelivr.net *.cloudflare.com *.doubleclick.net *.youtube.com *.hubspotusercontent-na1.net *.pathfactory.com *.zuddl.com 8ab0a26cb0027939bcf5-49c99c3c0c9c98b3365b710757036e1b.ssl.cf5.rackcdn.com *.crazyegg.com *.callrail.com *.linkedin.com *.facebook.net *.twitter.com; style-src 'self' *.q2.com 'report-sample' 'unsafe-inline' *.cdntwrk.com *.googleapis.com *.hsappstatic.net *.hubspot.net *.jsdeliver.net *.jsdelivr.net *.marketo.com 7044196.fs1.hubspotusercontent-na1.net 7044196.fs2.hubspotusercontent-na1.net *.hubspotusercontent-na1.net *.pathfactory.com *.googletagmanager.com *.zuddl.com *.qualified.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.mktoresp.com *.hubspotusercontent-na1.net *.google.com *.hubspot.com *.hs-banner.com *.onetrust.com *.cookielaw.org *.wistia.com *.embed-cloudfront.wistia.com *.wistia.net *.6sc.co *.6sense.com *.qualified.com wss://*.qualified.com *.segment.com *.segment.io *.linkedin.com *.google-analytics.com *.clarity.ms *.hubapi.com *.doubleclick.com https://stats.g.doubleclick.net *.zoominfo.com *.adnxs.com *.litix.io *.marketo.com *.doubleclick.net *.youtube.com *.pathfactory.com *.zuddl.com api.prod.zuddl.com *.crazyegg.com *.gonorth.io *.callrail.com *.googleadservices.com *.sentry-cdn.com *.hsappstatic.net; font-src 'self' data: *.gstatic.com *.cdntwrk.com *.wistia.com *.wistia.net 7044196.fs1.hubspotusercontent-na1.net *.pathfactory.com *.zuddl.com *.hsappstatic.net; frame-src 'self' *.q2.com *.qualified.com *.doubleclick.net *.wistia.net *.gstatic.com *.google.com *.googletagmanager.com *.bugcrowd.com bugcrowd.com *.hubspotvideo.com *.marketo.com *.youtube.com *.pathfactory.com *.uberflip.com *.zuddl.com *.on24.com *.libsyn.com *.megaphone.fm *.twitter.com; img-src 'self' *.q2.com data: *.hubspotusercontent-na1.net *.hsappstatic.net *.6sc.co *.cdntwrk.com *.cookielaw.org *.wistia.com *.hsforms.com *.linkedin.com *.hubspot.com *.hubspot.net *.bizible.com *.cloudinary.com *.clarity.ms *.bing.com *.googletagmanager.com *.placeholder.com *.marketo.com googleads.g.doubleclick.net *.doubleclick.net *.google.com *.youtube.com *.hubspotusercontent40.net *.pathfactory.com *.bizibly.com *.gstatic.com *.zuddl.com *.imgix.net *.wistia.net *.qualified.com; manifest-src 'self'; media-src 'self' *.q2.com 7044196.fs1.hubspotusercontent-na1.net 7044196.fs2.hubspotusercontent-na1.net 7044196.fs1.hubspotusercontent-eu1.net 7044196.fs2.hubspotusercontent-eu1.net *.marketo.com blob: *.doubleclick.net *.youtube.com *.pathfactory.com; form-action 'self' *.marketo.com *.mktoweb.com *.zuddl.com *.callrail.com *.googleadservices.com *.qualified.com; frame-ancestors 'self' *.q2.com *.pathfactory.com *.lookbookhq.com; report-to https://343747560e392f7a31ae9a0247c09302.report-uri.com/r/d/csp/reportOnly; upgrade-insecure-requests 2 script-src 'self' 'unsafe-inline' https://telegram.org https://oauth.telegram.org; object-src 'none'; base-uri 'self' 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://www.hirkereso.hu http://img.hirkereso.hu http://gahu.hit.gemius.pl/ http://ls.hit.gemius.pl http://www.idokep.hu https://adservice.google.com https://cse.google.com https://pagead2.googlesyndication.com https://partner.googleadservices.com https://tpc.googlesyndication.com https://www.google-analytics.com https:;report-uri /csp-violation-report-endpoint.php?v=1;report-to csp-endpoint 2 default-src 'self' https: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io cdn.pushcrew.com; script-src 'self' data: blob: * 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com https://www.youtube.com https://youtube.com https://googleads.g.doubleclick.net https://ajax.googleapis.com https://code.jquery.com https://cdn.cookielaw.org https://www.google.com/recaptcha https://maps.googleapis.com https://www.gstatic.com/recaptcha https://static.doubleclick.net https://www.gstatic.com https://www.googletagmanager.com https://js.adsrvr.org https://cdnjs.cloudflare.com https://nexus.ensighten.com https://*.tidio.co https://*.jivosite.com https://browser.sentry-cdn.com https://*.cloudfront.net; style-src 'self' * 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com https://www.youtube.com https://youtube.com https://*.fontawesome.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.jivosite.com https://*.tidio.co; img-src 'self' data: * app.vwo.com useruploads.vwo.io https://media.wp.d.fogo-testing.g43labs.net https://*.jivosite.com https://*.tidio.co https://cdn.cookielaw.org https://fogodechao.com https://*.wixstatic.com; font-src 'self' data: * https://www.gstatic.com https://fonts.gstatic.com https://*.fontawesome.com https://fonts.googleapis.com; connect-src 'self' * *.visualwebsiteoptimizer.com app.vwo.com https://media.wp.d.fogo-testing.g43labs.net https://www.youtube.com https://youtube.com https://*.tidio.co https://*.jivosite.com https://firebaseremoteconfig.googleapis.com https://www.google.com/recaptcha https://maps.googleapis.com https://www.gstatic.com/recaptcha https://ajax.googleapis.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://insight.adsrvr.org/ https://cdn.cookielaw.org https://match.adsrvr.org https://geolocation.onetrust.com; frame-src 'self' *.visualwebsiteoptimizer.com app.vwo.com * https://*.tidio.co https://*.jivosite.com https://www.youtube.com https://www.google.com https://recaptcha.google.com https://insight.adsrvr.org https://match.adsrvr.org https://www.gstatic.com/recaptcha https://www.google.com/recaptcha https://app.calconic.com https://*.issuu.com https://www.donationx.org; media-src 'self' data: blob: * 'unsafe-inline' 'unsafe-hashes'; worker-src 'self' blob:; child-src *.visualwebsiteoptimizer.com app.vwo.com; 2 default-src https:; script-src 'unsafe-inline' blob: https: 'unsafe-eval' https://crossway.my.salesforce.com; style-src 'unsafe-inline' https:; font-src https: data:; media-src http: https:; img-src http: https: data: 2 default-src 'none'; style-src 'self' 'unsafe-inline' *.gstatic.com fonts.googleapis.com maps.googleapis.com https://static.experimentation.dev wchat.eu.freshchat.com https://static.kameleoon.com https://static.products.kameleoon.com https://graphical-editor.kameleoon.com https://simulation.kameleoon.com *.hotjar.com bat.bing.com bat.bing.net; font-src data: 'self' fonts.gstatic.com fonts.googleapis.com *.hotjar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' apis.google.com www.google.com pagead2.googlesyndication.com googleadservices.com www.googleadservices.com googleads.g.doubleclick.net *.gstatic.com www.google-analytics.com *.googletagmanager.com maps.googleapis.com https://static.experimentation.dev app.aiden.cx api.eu1.exponea.com wchat.eu.freshchat.com *.kameleoon.eu *.kameleoon.com js.mollie.com browser.sentry-cdn.com js.sentry-cdn.com *.hotjar.com connect.facebook.net platform.twitter.com bat.bing.com bat.bing.net flex.msn.com www.youtube.com ct.beslist.nl tgtag.io; img-src 'self' data: *.google.com google.com www.google.nl *.gstatic.com pagead2.googlesyndication.com *.g.doubleclick.net googleadservices.com *.googleadservices.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com https://123led.nl https://www.bugherd.com https://static.experimentation.dev *.kameleoon.io *.kameleoon.eu *.kameleoon.com *.products.kameleoon.com *.hotjar.com checkoutshopper-live.adyen.com www.facebook.com connect.facebook.net syndication.twitter.com bat.bing.com bat.bing.net i.ytimg.com *.tgtag.io; frame-src 'self' www.google.com doubleclick.net td.doubleclick.net www.googletagmanager.com https://app.aiden.cx https://www.kiyoh.com app.aiden.cx wchat.eu.freshchat.com https://graphical-editor.kameleoon.com js.mollie.com checkoutshopper-live.adyen.com acs-live-eu.adyen.com staticxx.facebook.com www.facebook.com platform.twitter.com syndication.twitter.com bat.bing.com bat.bing.net flex.msn.com youtube.com *.youtube.com *.youtube-nocookie.com; object-src 'self'; connect-src 'self' www.googlesyndication.com www.google.com google.com www.google.nl adservice.google.com pagead2.googlesyndication.com www.googleadservices.com *.analytics.google.com google-analytics.com *.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com maps.googleapis.com https://analytics.google.com https://googleads.g.doubleclick.net https://places.googleapis.com https://browser.sentry-cdn.com https://static.experimentation.dev https://ad.doubleclick.net app.aiden.cx api.eu1.exponea.com app.eu1.exponea.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.products.kameleoon.com *.sentry.io *.hotjar.com *.hotjar.io wss://*.hotjar.com checkoutshopper-live.adyen.com www.facebook.com bat.bing.com bat.bing.net ct.beslist.nl *.trafficguard.ai; manifest-src 'self'; report-uri https://123inkt.report-uri.com/r/t/csp/reportOnly; 2 default-src 'self'; script-src 'self' https://stats.cyfronet.pl; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.fontshare.com https://unpkg.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://*.fontshare.com https://cdnjs.cloudflare.com;img-src 'self' data: https://*.gravatar.com https://*.cyfronet.pl;connect-src 'self' https://stats.cyfronet.pl;frame-src https://www.google.com;object-src 'none'; frame-ancestors 'self'; 2 default-src 'self' *.readspeaker.com data: https://zer-poc.bzst.de https://formularbot-viola.bzst.de wss://formularbot-viola.bzst.de https://bzst.lucom.com https://idnr-formular.bzst.bot-itzbund.de https://viola-bzst.azr.juacvoe.net https://viola-bzst-fms.azr.juacvoe.net https://formularbot-fms.bzst.de; base-uri 'self'; connect-src 'self' *.pstmn.io https://zer-poc.bzst.de *.readspeaker.com *.itzbund.de https://formularbot-viola.bzst.de wss://formularbot-viola.bzst.de https://viola-bzst.azr.juacvoe.net wss://viola-bzst.azr.juacvoe.net https://viola-bzst-fms.azr.juacvoe.net wss://viola-bzst-fms.azr.juacvoe.net https://formularbot-fms.bzst.de wss://formularbot-fms.bzst.de https://api.evatr.vies.bzst.de; style-src 'self' 'unsafe-inline' https://zer-poc.bzst.de *.readspeaker.com https://idnr-formular.bzst.bot-itzbund.de https://formularbot-viola.bzst.de https://viola-bzst.azr.juacvoe.net https://viola-bzst-fms.azr.juacvoe.net https://formularbot-fms.bzst.de; script-src 'self' 'unsafe-eval' https://zer-poc.bzst.de *.google.com piwik.itzbund.de *.readspeaker.com https://formularbot-viola.bzst.de https://bzst.lucom.com https://idnr-formular.bzst.bot-itzbund.de https://formularbot-fms.bzst.de https://formularbot-viola.bzst.de https://viola-bzst-fms.azr.juacvoe.net https://viola-bzst.azr.juacvoe.net https://viola.bundesbots.de 'sha256-fvt1zDnRVAuASIt4MdBmzTSLXs4mdTCa5fg9wNopnC0=' 'sha256-B9AMHvfU16Nc6sndzogCV/VH/SXmKESowGb6dBud/RA=';object-src 'self' multimedia.gsb.bund.de piwik.itzbund.de; media-src 'self' *.bzst.de multimedia.gsb.bund.de *.youtube.com www.quirksmode.org; child-src *.itzbund.de *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com; frame-src *.readspeaker.com https://formularbot-viola.bzst.de https://idnr-formular.bzst.bot-itzbund.de https://viola-bzst.azr.juacvoe.net https://viola-bzst-fms.azr.juacvoe.net https://formularbot-fms.bzst.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com piwik.itzbund.de https://bzst.lucom.com https://formularbot-viola.bzst.de https://viola-bzst.azr.juacvoe.net https://idnr-formular.bzst.bot-itzbund.de https://viola-bzst-fms.azr.juacvoe.net https://formularbot-fms.bzst.de; upgrade-insecure-requests; frame-ancestors 'self' *.preview.bzst.intranet.bund.de; 2 require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/corplogin 2 default-src 'none'; connect-src 'self' https://cdn.linkedin.oribi.io https://forms.hsforms.com https://px.ads.linkedin.com https://nagra.matomo.cloud/; font-src 'self'; frame-src 'self' https://www.google.com/ https://www.youtube.com/ https://forms.hsforms.com/; img-src 'self' data: https://px.ads.linkedin.com https://px4.ads.linkedin.com https://i.ytimg.com https://img.youtube.com https://forms.hsforms.com https://forms-na1.hsforms.com; manifest-src 'self'; media-src 'self'; script-src 'self' https://snap.licdn.com https://js.hsforms.net https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com https://nagra.matomo.cloud https://static.cloudflareinsights.com cdnjs.cloudflare.com https://cdn.jsdelivr.net 'unsafe-inline' https://nagra.matomo.cloud/; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://snap.licdn.com https://js.hsforms.net https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com https://nagra.matomo.cloud https://static.cloudflareinsights.com cdnjs.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; worker-src 'self'; base-uri 'self'; frame-ancestors 'self' 2 default-src 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://*.plausible.io https://plausible.io https://*.cookieyes.com https://cdn-cookieyes.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://www.youtube.com https://*.vimeo.com; block-all-mixed-content; upgrade-insecure-requests; connect-src 'self' https://*.appwrite.io https://*.appwrite.org https://*.appwrite.network https://status.appwrite.online https://*.sentry.io https://*.plausible.io https://plausible.io https://*.cookieyes.com https://cdn-cookieyes.com https://api.statsig.com https://*.statsig.com https://featuregates.org https://statsigapi.net https://*.statsigapi.net https://events.statsigapi.net https://api.statsigcdn.com https://*.statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cloudflare-dns.com https://beyondwickedmapping.org; frame-src 'self' https://www.youtube.com https://status.appwrite.online https://www.youtube-nocookie.com https://player.vimeo.com https://cdn-cookieyes.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' *.cloudflare.com *.facebook.net *.googletagmanager.com js.arcgis.com *.jsdelivr.net maps.googleapis.com *.newrelic.com *.recollect.net *.siteimprove.net siteimproveanalytics.com ui.customsearch.ai unpkg.com *.wisconsin.gov; style-src 'self' 'unsafe-inline' *.cloudflare.com fonts.googleapis.com js.arcgis.com *.jsdelivr.net recollect.a.ssl.fastly.net recollect-us.global.ssl.fastly.net unpkg.com *.windows.net; img-src 'self' blob: data: *.arcgis.com *.google-analytics.com *.googletagmanager.com maps.googleapis.com maps.gstatic.com recollect.a.ssl.fastly.net recollect-images.global.ssl.fastly.net recollect-us.global.ssl.fastly.net *.recollect.net *.siteimproveanalytics.io *.windows.net; frame-src 'self' app.powerbigov.us bi.wisconsin.gov cityofmadison.maps.arcgis.com *.cityofmadison.com *.facebook.com google.com *.google.com *.googletagmanager.com *.publichealthmdc.com *.recollect.net storymaps.arcgis.com *.youtube.com *.siteimprove.com; frame-ancestors 'self' login.microsoftonline.com; child-src 'self' blob: app.powerbigov.us bi.wisconsin.gov cityofmadison.maps.arcgis.com *.cityofmadison.com *.facebook.com *.google.com *.publichealthmdc.com *.recollect.net storymaps.arcgis.com *.youtube.com; font-src 'self' fonts.gstatic.com recollect.a.ssl.fastly.net; connect-src 'self' *.arcgis.com *.arcgisonline.com *.google-analytics.com *.googletagmanager.com dotmaps.wi.gov js.arcgis.com maps.cityofmadison.com maps.googleapis.com *.nr-data.net *.siteimprove.com *.siteimproveanalytics.com ui.customsearch.ai; report-uri /report-csp-violation; upgrade-insecure-requests 2 frame-ancestors 'self' https://timestation.uservoice.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://sms-a.ru https://*.yandex.ru https://*.yandex.net https://yastatic.net; style-src 'self' 'unsafe-inline' https://*.yandex.ru https://*.yandex.net https://yastatic.net; img-src 'self' data: https://*.yandex.ru https://*.yandex.net; connect-src 'self' https://mc.yandex.ru wss://mc.yandex.ru; frame-src 'self' https://yandex.ru https://sms-a.ru https://youtube.com https://rutube.ru https://vkvideo.ru; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 2 frame-ancestors 'self'; report-uri /csp-log.php 2 img-src https: 2 object-src 'self'; frame-ancestors 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://editor-static-bucket.elementor.com/ai-integration.js https://aulionco25.sirv.com/Spins/Hyoketsu/360%20Vertical/001.jpg https://aulionco25.sirv.com/Spins/Hyoketsu/360%20Vertical/360%20Vertical.spin https://aulionco25.sirv.com/Spins/Hyoketsu/360_VIDEO/360_VIDEO.spin https://aulionco25.sirv.com/Spins/Hyoketsu/360_VIDEO/ https://scripts.sirv.com/sirvjs/v3/sirv.js https://maps.googleapis.com/maps/api/js/ https://maps.google.com/maps/ https://maps.google.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/api/mapsjs/ https://fareharbor.com/embeds/api/v1/ https://maps.google.com/maps/api/ https://forms.contacta.io/assets/intlTelInput.min.css https://forms.contacta.io/assets/contacta-jquery-ui.min.css https://forms.contacta.io/assets/ https://www.google.com/ccm/collect https://forms.contacta.io/ https://load.sumome.com/ https://static.cloudflareinsights.com https://cdnjs.cloudflare.com https://www.youtube.com https://tags.tiqcdn.com https://www.googletagmanager.com https://connect.facebook.net https://my.tealiumiq.com https://deploytealium.com https://www.bugherd.com https://sidebar.bugherd.com https://js.adsrvr.org https://widgets.designmynight.com/ https://lionptyltd.wpengine.com https://api.tonicticketing.com https://s.yimg.com https://tickets.designmynight.com https://www.opentable.com.au; style-src 'self' 'unsafe-inline' https://scripts.sirv.com/sirvjs/v3/viewer.css https://www.kirinhyoketsu.com.au/wp-admin/admin.php https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css https://forms.contacta.io/assets/intlTelInput.min.css https://forms.contacta.io/assets/contacta-jquery-ui.min.cs https://forms.contacta.io/assets/ https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net https://web02.jamessquire.com.au https://onsass.designmynight.com/ https://lionptyltd.wpengine.com https://widgets.designmynight.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://www.facebook.com/privacy_sandbox/topics/registration/ https://aulionco25.sirv.com/Spins/Hyoketsu/360%20Vertical/001.jpg https://aulionco25.sirv.com/Spins/Hyoketsu/360%20Vertical/360%20Vertical.spin https://aulionco25.sirv.com/Spins/Hyoketsu/360_VIDEO/001.jpg https://o10963.ingest.sentry.io https://aulionco25.sirv.com/ https://stats.sirv.com/ https://aulionco25.sirv.com/Spins/Hyoketsu/360_VIDEO/360_VIDEO.spin https://tx.contacta.io/forms/678f066255e8a6c052977be5/submissions https://tx.contacta.io/forms/678ef8aa4ca838e9319be1a6/submissions https://tx.contacta.io/forms https://tx.contacta.io/forms/67469d32fbf19c0942c3894a/submissions https://wpgmaps.us-3.evennode.com/api/v1/ https://nominatim.openstreetmap.org/search https://maps.googleapis.com https://maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo https://maps.googleapis.com/maps/api/mapsjs/ https://nominatim.openstreetmap.org https://www.google.com/ccm/ https://media.sumome.com/ https://sumome.com/api/site/e4c76e40953e9f21d5870948332b04e77c2651359a4a37aaab8d5a9b1c21ea5b/features https://sumome.com/api/load/ https://sumome.com/services https://collect-ap-southeast-2.tealiumiq.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://sessions.bugsnag.com/ wss://ws-mt1.pusher.com/ https://sockjs.pusher.com https://bookings.designmynight.com/ https://api-soda.designmynight.com https://api.tonicticketing.com https://tickets.designmynight.com/api/v4/ticket-widget-events/ https://tickets.designmynight.com/api/v4/carts/new/items https://s.yimg.com; font-src 'self' data: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2 https://fonts.gstatic.com https://use.typekit.net https://web02.jamessquire.com.au https://lionptyltd.wpengine.com; frame-src 'self' https://challenges.cloudflare.com https://zen-forms.zenglobal.au/ https://myguestlist.com.au/ https://cdn-2.matterport.com/ https://aulionco25.sirv.com/ https://ticketing.designmynight.com/ https://td.doubleclick.net/ https://fareharbor.com/ https://www.googletagmanager.com/ https://maps.google.com/ https://www.youtube.com https://www.google.com/ https://www.facebook.com/ https://sidebar.bugherd.com https://insight.adsrvr.org/ https://www.thefork.com.au/ https://module.lafourchette.com/ https://widget.thefork.com/ https://ugc-map-affinity.vercel.app/ https://www.sevenrooms.com/ https://my.matterport.com/ https://app.zenglobal.au https://tickets.designmynight.com https://xxxx-soo-2024.vercel.app/ https://checkout-soda.designmynight.com/ https://tickets.designmynight.com https://www.opentable.com.au; img-src 'self' data: blob: https://aulionco25.sirv.com/Spins/Hyoketsu/360%20Vertical/ https://www.kirinhyoketsu.com.au/wp-admin/admin.php https://aulionco25.sirv.com/Spins/Hyoketsu/360_VIDEO/ https://lionptyltd.sirv.com https://sirv.sirv.com/GIFs/sirv-loader.gif https://a.tile.openstreetmap.org/ https://b.tile.openstreetmap.org/ https://c.tile.openstreetmap.org/ https://d.tile.openstreetmap.org/ https://forms.contacta.io/assets/images/ https://maps.gstatic.com/mapfiles/api-3/images/ https://secure.gravatar.com https://www.google.com.au/ads/ga-audiences https://www.facebook.com https://collect.tealiumiq.com https://scontent-syd2-1.cdninstagram.com https://ps.w.org https://d2iiunr5ws5ch1.cloudfront.net https://widgets.designmynight.com/ https://static.designmynight.com https://lionptyltdstg.wpengine.com https://sp.analytics.yahoo.com https://www.googletagmanager.com https://media.sumome.com/ https://sumome.com/api/event/; manifest-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; 2 default-src 'self' 'unsafe-inline' www.nosis.com ssl.google-analytics.com pagead2.googlesyndication.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com snap.licdn.com assets.pcrl.co partner.googleadservices.com adservice.google.com.ar widget.intercom.io tpc.googlesyndication.com adservice.google.com connect.facebook.net googleads.g.doubleclick.net system.picreel.com js.intercomcdn.com www.youtube.com app.picreel.com *.googleapis.com *.facebook.com *.google.com *.google.com.ar stats.g.doubleclick.net *.hotjar.com *.linkedin.com *.gstatic.com *.jquery.com fonts.gstatic.com p.adsymptotic.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io bid.g.doubleclick.net static.intercomassets.com https://*.intercomcdn.com *.fontawesome.com i.ytimg.com vc.hotjar.io https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; child-src 'self' https://vars.hotjar.com/ https://newsletter-link.nosis.com https://googleads.g.doubleclick.net https://www.facebook.com https://bid.g.doubleclick.net http://app.picreel.com https://tpc.googlesyndication.com https://www.google.com https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://px.ads.linkedin.com; 2 default-src https: 'self' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;style-src * 'self' data: 'unsafe-inline';script-src 'self' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com; object-src 'none' 2 upgrade-insecure-requests; frame-ancestors https: 'self' *.uprinting.com *.digitalroom.com *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.com; 2 frame-ancestors 'self' https://*.pressetext.com; 2 default-src https: 'unsafe-inline'; script-src 'self' *.ketchcdn.com 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' *.ketchjs.com *.ketchcdn.com 'unsafe-inline';img-src * 'self' coverscans.renlearn.com; 2 img-src * data:; default-src *; style-src * 'unsafe-inline'; worker-src 'self' blob: ; script-src * 'unsafe-inline' 'unsafe-eval' 2 frame-ancestors 'self' *.reamaze.com google.com 2 frame-ancestors 'self' https://inevent.com https://app.inevent.com; 2 frame-ancestors 'self' *.saleshood.com 2 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; media-src 'self' data: blob: *.wistia.net *.wistia.com *.amazonaws.com embedwistia-a.akamaihd.net; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src 'self' https: blob: data:; frame-ancestors 'self' https://events.bandwidth.com https://app.zuddl.com; style-src * 'unsafe-inline'; worker-src 'self' blob:; font-src 'self' data: blob: *.wistia.net *.wistia.com *.leandata.com *.gstatic.com; 2 default-src 'none'; object-src 'none'; script-src 'self' https://*.chargebee.com https://*.chargebeestatic.com https://openproject.matomo.cloud; style-src 'self' 'unsafe-inline' https://*.chargebee.com https://*.chargebeestatic.com; img-src 'self' data: https://cb-invoice-logos-prod.s3.us-east-1.amazonaws.com https://*.openproject.org https://openproject.org; media-src 'self' data: https://*.openproject.org https://openproject.org https://openproject-docs.s3.eu-central-1.amazonaws.com; frame-src 'self' https://js.chargebee.com https://www.youtube-nocookie.com https://*.chargebee.com https://*.chargebeestatic.com https://openproject.matomo.cloud https://opf.github.io; font-src 'self'; connect-src 'self' https://api.github.com/repos/opf/openproject https://*.openproject.com https://*.openproject.org https://openproject.matomo.cloud 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.google-analytics.com analytics.google.com *.clarity.ms *.googletagmanager.com *.gstatic.com challenges.cloudflare.com cdn-cookieyes.com maps.googleapis.com static.cloudflareinsights.com connect.facebook.net analytics.tiktok.com *.bing.com *.bing.net googleads.g.doubleclick.net www.googleadservices.com www.youtube.com vambeai.com *.vambeai.com vambe.ai *.vambe.ai cdn.jsdelivr.net *.qualtrics.com; img-src 'self' data: blob: *.blue.cl cdn-cookieyes.com maps.googleapis.com *.gstatic.com *.google.com *.google.cl googleads.g.doubleclick.net www.googleadservices.com www.facebook.com connect.facebook.net analytics.tiktok.com *.bing.com *.bing.net analytics.google.com *.ytimg.com *.googletagmanager.com vambeai.com *.vambeai.com c.clarity.ms *.qualtrics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com cdn.jsdelivr.net vambeai.com *.vambeai.com *.qualtrics.com; font-src 'self' data: fonts.gstatic.com; media-src 'self' *.blue.cl; connect-src 'self' data: blob: *.google-analytics.com analytics.google.com *.clarity.ms cdn-cookieyes.com mpc-prod-27-s6uit34pua-uk.a.run.app *.conversionsapigateway.com maps.googleapis.com *.google.com *.gstatic.com googleads.g.doubleclick.net stats.g.doubleclick.net ad.doubleclick.net *.googleadservices.com static.cloudflareinsights.com connect.facebook.net analytics.tiktok.com analytics-ipv6.tiktokw.us *.bing.com *.bing.net vambeai.com *.vambeai.com vambe.ai *.vambe.ai api.vambe.ai wss://*.vambe.ai *.cloud.google.com places.googleapis.com *.qualtrics.com; frame-src 'self' www.youtube.com www.youtube-nocookie.com challenges.cloudflare.com *.blue.cl *.dev.blue.cl *.qa.blue.cl maps.googleapis.com www.facebook.com googleads.g.doubleclick.net www.googleadservices.com vambeai.com *.vambeai.com *.qualtrics.com; worker-src 'self' blob:; frame-ancestors 'none'; upgrade-insecure-requests; 2 frame-ancestors https://*.ntrs.com https://*.northerntrust.com https://*.seismic.com https://*.salesforce.com https://*.force.com https://*.visualforce.com 2 frame-ancestors 'self'; base-uri 'self'; form-action *.amazon.de *.contentsquare.com *.contentsquare.net *.experimentation.dev *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.przelewy24.pl blog.teufel.de checkout.getalma.eu checkout.sandbox.getalma.eu m.exactag.com pay.weropay.eu payments.amazon.de payments.amazon.es payments.amazon.fr payments.amazon.it retoure.teufel.de row.ups.com service.teufel.de support.teufel.de supportb2b.teufel.de test.saferpay.com testblog.teufel.de teufelsurvey.fra1.qualtrics.com www.saferpay.com www.terminland.de teufel.de zed.teufel.de login.microsoftonline.com teufelaudio.at teufel.ch teufelaudio.fr teufelaudio.nl teufelaudio.be teufelaudio.es teufelaudio.it cz.teufelaudio.com dk.teufelaudio.com ee.teufelaudio.com fi.teufelaudio.com gb.teufelaudio.com gr.teufelaudio.com hr.teufelaudio.com hu.teufelaudio.com ie.teufelaudio.com li.teufelaudio.com lt.teufelaudio.com lu.teufelaudio.com lv.teufelaudio.com no.teufelaudio.com pt.teufelaudio.com se.teufelaudio.com si.teufelaudio.com sk.teufelaudio.com teufelaudio.pl us.teufelaudio.com 'self' 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.globaltrust.eu https://test02.globaltrust.eu; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.globaltrust.eu https://test02.globaltrust.eu; img-src 'self' data: https://www.globaltrust.eu https://test02.globaltrust.eu https://globaltrust.eu; font-src 'self' data: https://fonts.gstatic.com https://www.globaltrust.eu https://test02.globaltrust.eu; object-src 'none'; frame-src 'self'; frame-ancestors 'self'; 2 font-src 'self' https://*.googleapis.com/ *.bootstrapcdn.com *.gstatic.com *.fontawesome.com *.jsdelivr.net ; 2 default-src 'self' https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir; frame-ancestors 'self' https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir; frame-src 'self' https://app.gapify.ai/ https://goftino.com/ https://*.goftino.com/ https://*.webengage.co https://aparat.com https://*.aparat.com https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir https://ramzinex.net https://*.ramzinex.net https://bitycle.com https://*.bitycle.com https://tradingview-widget.com https://*.tradingview-widget.com https://tradingview.com https://*.tradingview.com https://*.livechatinc.com https://*.yektanet.com https://yektanet.com; connect-src 'self' wss://*.goftino.com https://app.gapify.ai https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir https://ramzinex.net https://*.ramzinex.net https://script.google.com wss://ramzinex.com wss://*.ramzinex.com wss://ramzinex.ir wss://*.ramzinex.ir https://bitycle.com https://*.bitycle.com https://careerapi.hrcando.ir https://*.googleapis.com https://googleapis.com https://sheetdb.io https://*.sheetdb.io https://metrix.ir https://*.metrix.ir https://sentry.hamravesh.com https://*.google-analytics.com https://api.country.is https://livechatinc.com https://*.livechatinc.com https://www.googletagmanager.com https://*.clarity.ms https://*.webengage.com https://webengage.com https://*.yektanet.com https://yektanet.com https://*.arcaptcha.ir https://*.arcaptcha.co https://*.arcaptcha.co:1325 https://arcaptcha.co; script-src 'self' 'unsafe-inline' https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir https://www.googletagmanager.com https://*.webengage.com https://ssl.widgets.webengage.com https://*.livechatinc.com https://www.clarity.ms https://*.yektanet.com https://yektanet.com; script-src-elem 'self' 'unsafe-inline' https://app.gapify.ai https://goftino.com https://*.goftino.com https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir https://*.tradingview.com https://www.googletagmanager.com https://widget.arcaptcha.ir https://*.widget.arcaptcha.ir https://bitycle.com https://*.bitycle.com https://webengage.co https://*.webengage.co https://*.webengage.com https://ssl.widgets.webengage.com https://*.livechatinc.com https://www.clarity.ms https://*.clarity.ms https://*.yektanet.com https://yektanet.com https://*.arcaptcha.co; style-src 'self' 'unsafe-inline' https://*.goftino.com https://goftino.com https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir https://widget.arcaptcha.ir; img-src 'self' data: blob: https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir https://*.sotoon.ir https://*.webengage.com https://ramzinex.net https://*.ramzinex.net https://googletagmanager.com https://*.googletagmanager.com https://*.clarity.ms https://clarity.ms https://*.goftino.com https://goftino.com https://*.arcaptcha.ir https://*.arcaptcha.co; font-src 'self' data: https://ramzinex.com https://*.ramzinex.com https://ramzinex.ir https://*.ramzinex.ir https://ramzinex.net https://*.ramzinex.net https://widget.arcaptcha.ir; worker-src 'self' blob:; media-src 'self' blob: https://ramzinex.com https://*.ramzinex.com https://*.ramzinex.ir https://ramzinex.ir 2 frame-ancestors https://cruiser.cloud.capitalone.com 2 default-src 'self' *.hs-mittweida.de blob: *.hs-mittweida.de tv.me.hs-mittweida.de hs.mw *.hs.mw; frame-src 'self' *.hs-mittweida.de *.hs-mittweida.de tv.me.hs-mittweida.de hs.mw *.hs.mw; img-src 'self' *.hs-mittweida.de data: *.hs-mittweida.de tv.me.hs-mittweida.de hs.mw *.hs.mw; style-src 'self' *.hs-mittweida.de 'unsafe-inline' *.hs-mittweida.de tv.me.hs-mittweida.de hs.mw *.hs.mw; script-src 'self' *.hs-mittweida.de 'unsafe-inline' 'unsafe-eval' blob: *.hs-mittweida.de tv.me.hs-mittweida.de hs.mw *.hs.mw; 2 block-all-mixed-content; frame-ancestors 'self' *.securityscorecard.com *.securityscorecard.camp *.cookiebot.com https://job-boards.greenhouse.io; default-src 'self'; object-src 'none'; img-src 'self' *.crazyegg.com blob: data: https:; media-src 'self' mediastream: blob: *.qualified.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.heapanalytics.com *.crazyegg.com *.cookiebot.com *.datadoghq-browser-agent.com https://job-boards.greenhouse.io blob: data: https:; style-src 'self' 'unsafe-inline' *.qualified.com https:; font-src 'self' *.securityscorecard.com *.securityscorecard.camp *.auryc.com data: https:; frame-src 'self' blob: *.qualified.com www.googletagmanager.com https: https://job-boards.greenhouse.io; connect-src 'self' *.securityscorecard.com *.securityscorecard.camp *.crazyegg.com *.cookiebot.com *.qualified.com wss://*.qualified.com *.auryc.com *.browser-intake-datadoghq.com https: https://job-boards.greenhouse.io; base-uri 'self'; form-action 'self' https:; worker-src 'self' blob:; child-src *.qualified.com https://job-boards.greenhouse.io; 2 frame-ancestors 'self' https://*.cashconverters.es https://production-eu01-cashconverters.demandware.net https://www.pccomponentes.com https://*.cashconverters.pt https://*.s10.marketingcloudapps.com https://*.s10.exacttarget.com; 2 frame-ancestors 'self' https://admin.akjournals.com 2 frame-ancestors 'self' https://webidprovera-p.yettel.rs https://idprovera-p.yettel.rs https://webidprovera-t.yettel.rs https://idprovera-t.yettel.rs 2 default-src 'self' https://gleen.ai https://*.gleen.ai https://alhena.ai https://*.alhena.ai https://*.helix.im https://*.clearbitjs.com https://*.clearbit.com data:*; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gleen.ai https://*.gleen.ai https://*.amazonaws.com https://*.cloudflareinsights.com https://*.cloudflare.com https://alhena.ai https://*.alhena.ai https://*.helix.im https://*.apollo.io https://*.clearbitscripts.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://*.clearbitjs.com https://*.clearbit.com https://*.facebook.net https://cdn-cookieyes.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hubspot.com https://*.g2.com https://snap.licdn.com https://b-code.liadm.com https://opps-widget.getwarmly.com https://*.adroll.com https://*.redditstatic.com https://*.unifyintent.com; style-src 'self' 'unsafe-inline' https://alhena.ai https://*.alhena.ai https://*.helix.im https://fonts.cdnfonts.com https://fonts.googleapis.com https://*.clearbitjs.com https://*.clearbit.com https://www.googletagmanager.com; img-src 'self' data: *; font-src 'self' https://gleen.ai https://*.gleen.ai https://alhena.ai https://*.alhena.ai https://*.helix.im https://fonts.cdnfonts.com https://fonts.gstatic.com https://*.clearbitjs.com https://*.clearbit.com; connect-src *; frame-src 'self' https://gleen.ai https://*.gleen.ai https://alhena.ai https://*.alhena.ai https://*.helix.im https://td.doubleclick.net https://www.google.com https://*.cloudflare.com https://*.clearbitjs.com https://*.clearbit.com https://www.googletagmanager.com https://www.youtube.com https://x.adroll.com https://calendly.com https://*.calendly.com; frame-ancestors 'self'; base-uri 'none'; form-action 'none'; object-src 'self' data:; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.odphp.health.gov odphp.health.gov health.gov https://cdn.jsdelivr.net https://d1il786i4vdqy4.cloudfront.net https://dap.digitalgov.gov https://platform.twitter.com https://www.google.com https://syndication.twitter.com https://abs.twimg.com https://pbs.twimg.com https://cdn.syndication.twimg.com https://ton.twimg.com https://fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://themes.googleusercontent.com https://analytics.google.com *.analytics.google.com *.google-analytics.com https://*.gstatic.com https://stats.g.doubleclick.net https://td.doubleclick.net *.youtube.com *.youtube-nocookie.com survey.alchemer.com *.ytimg.com, frame-ancestors 'self' 2 frame-ancestors 'self' https://admin.daredictionary.com 2 upgrade-insecure-requests; frame-ancestors 'self' https://chatbotsence.policomp.com; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wistia.com *.hotjar.com *.linkedin.com *.cloudfront.net www.googleadservices.com www.googletagmanager.com www.google-analytics.com cdn.callrail.com *.helpscout.net *.atlassian.net *.marketo.net *.aciworldwide.com *.vimeo.com vimeo.com *.vimeocdn.com cdn.cookielaw.org geolocation.onetrust.com connect.facebook.net static.ads-twitter.com analytics.twitter.com bat.bing.com static.oktopost.com snap.licdn.com siteimproveanalytics.com *.6sc.co script.crazyegg.com *.doubleclick.net okt.to cdn.siteimprove.net *.omappapi.com platform.twitter.com *.twimg.com *.hs-scripts.com *.hscollectedforms.net *.hs-banner.com *.hs-analytics.net secure.harm6stop.com js.callrail.com *.zoominfo.com unpkg.com *.unpkg.com *.crazyegg.com *.userback.io tag.demandbase.com js.hsadspixel.net js.hubspot.com www.clarity.ms cdn.jsdelivr.net *.hsforms.net *.hubspotuserContent-na1.net static.hsappstatic.net app.hubspot.com *.hubspotusercontent-na1.net scripts.clarity.ms;style-src 'self' 'unsafe-inline' *.myfonts.net *.atlassian.net *.marketo.net fonts.googleapis.com *.aciworldwide.com platform.twitter.com www.googletagmanager.com *.omappapi.com *.crazyegg.com *.typekit.net *.userback.io cdn.jsdelivr.net;img-src 'self' data: blob: *.gravatar.com embedwistia-a.akamaihd.net *.wistia.com wp-rocket.me www.google-analytics.com www.googletagmanager.com *.doubleclick.net www.googleadservices.com www.google.com analytics.google.com *.wpengine.com *.w.org *.aciworldwide.com *.awscloud.com *.vimeo.com *.vimeocdn.com t.co *.linkedin.com *.6sc.co *.siteimproveanalytics.io *.bing.com www.facebook.com *.adsymptotic.com *.omappapi.com *.twimg.com platform.twitter.com syndication.twitter.com *.truste.com track.hubspot.com okt.to qr-code.ithemes.com *.twitter.com cdn.cookielaw.org *.crazyegg.com id.rlcdn.com *.company-target.com c.clarity.ms *.hsforms.com *.hsforms.net hostedseal.trustarc.com placekitten.com;frame-src *.spotify.com www.googletagmanager.com *.flipsnack.com *.crazyegg.com *.aciworldwide.com aciworldwide.local *.wpengine.com player.vimeo.com *.libsyn.com *.cloudfront.net *.company-target.com *.doubleclick.net app.hubspot.com *.hsforms.com *.hsforms.net *.hs-sites.com blob:;worker-src 'self' blob:;object-src 'none'; 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.force.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; object-src 'self'; frame-src 'self'; frame-ancestors 'self'; 2 script-src 'unsafe-eval' 'unsafe-inline' 'self' widget.trustpilot.com code.jquery.com maxcdn.bootstrapcdn.com js.createsend1.com ajax.googleapis.com maps.googleapis.com www.googleapis.com www.gstatic.com www.google.com analytics.google.com www.googletagmanager.com use.typekit.net www.google-analytics.com cse.google.com support.micron21.com www-2019.micron21.com www.micron21.com staging-2019.micron21.com www-2019.micron21.com staging.micron21.com support-staging.micron21.com cdnjs.cloudflare.com https://*.clarity.ms https://c.bing.com assets.calendly.com; style-src 'unsafe-inline' 'self' micron21.com www-2019.micron21.com www.micron21.com staging-2019.micron21.com staging.micron21.com maxcdn.bootstrapcdn.com cse.google.com support.micron21.com fonts.googleapis.com www.google.com cdnjs.cloudflare.com; img-src 'self' 'unsafe-inline' data: www.googletagmanager.com *; font-src 'self' data: maxcdn.bootstrapcdn.com support.micron21.com fonts.gstatic.com use.typekit.net; default-src 'self' widget.trustpilot.com www.youtube.com www.google.com support.micron21.com support-staging.micron21.com eform.pandadoc.com calendly.com https://*.clarity.ms https://c.bing.com; object-src 'none'; connect-src 'self' https://*.clarity.ms https://c.bing.com createsend.com support.micron21.com support-staging.micron21.com performance.typekit.net analytics.google.com www.google-analytics.com https://*.doubleclick.net https://*.google.com; worker-src 'self' widget.trustpilot.com maxcdn.bootstrapcdn.com www.google.com cse.google.com *.micron21.com; frame-src 'self' *.micron21.com widget.trustpilot.com www.google.com calendly.com *.youtube.com *.googletagmanager.com; frame-ancestors 'self' *.micron21.com 2 default-src 'self' data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob:; 2 default-src 'self' 'unsafe-inline' blob: https://documentcloud.adobe.com https://*.brand-portal.adobe.com https://viewlicense.adobe.io https://lionbridge.data.adobedc.net https://lionbridge-stage.adobemsbasic.com https://px.ads.linkedin.com https://*.clarity.ms https://region1.google-analytics.com https://fonts.gstatic.com/; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.lionbridge.com https://assets.adobedtm.com https://cdn.cookielaw.org https://play.vidyard.com https://code.jquery.com https://assets.sitescdn.net https://*.fourtimessmelly.com https://assets.trendemon.com https://js/forms2/js/forms2.js https://www.googletagmanager.com https://static.ads-twitter.com https://cdn.jsdelivr.net https://munchkin.marketo.net https://snap.licdn.com https://web-analytics.engagio.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://trackingapi.trendemon.com https://dn1f1hmdujj40.cloudfront.net https://app-sjn.marketo.com https://cdnjs.cloudflare.com https://analytics.twitter.com https://j.6sc.co/6si.min.js https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://www.gstatic.com https://pi.pardot.com https://activitymap.adobe.com https://info.lionbridge.com https://info1.lionbridge.com https://ws-assets.zoominfo.com https://schedule.zoominfo.com https://*.brand-portal.adobe.com https://www.clarity.ms https://*.prod.mplat-ppcprotect.com https://*.mplat-ppcprotect.com https://mplat-ppcprotect.com https://bat.bing.com https://assets.apollo.io https://*.webexperiences.com https://*.bound360.com https://*.getsmartcontent.com https://js.zi-scripts.com https://scripts.simpleanalyticscdn.com https://ajax.googleapis.com/ https://lionbridgeallstage.112.2o7.net/ https://t.co/ https://dpm.demdex.net/ https://five.fourtimessmelly.com/ https://simpleanalyticsbadges.com/ https://queue.simpleanalyticscdn.com/ https://adroll.com/ https://simpleanalyticscdn.com/ https://*.trendemon.com https://info.lionbridge.com/js/forms2/js/forms2.min.js https://ajax.googleapis.com https://www.lionbridge.com blob: https://lionbridge-stage.adobemsbasic.com https://bat.bing.com/bat.js https://assets.apollo.io/micro/website-tracker/tracker.iife.js https://bat.bing.com/p/action/343159921.js https://px.ads.linkedin.com/ https://px4.ads.linkedin.com/ https://cm.g.doubleclick.net/ https://googleads.g.doubleclick.net/ https://us-u.openx.net/ https://image2.pubmatic.com/ https://simage2.pubmatic.com/ https://eb2.3lift.com/ https://dsum-sec.casalemedia.com/ https://io.narrative.io/ https://a.adroll.com/ https://x.adroll.com/ https://d.adroll.mgr.consensu.org/ https://src.litix.io; script-src-elem 'self' data: 'unsafe-inline' blob: https://assets.adobedtm.com https://cdn.cookielaw.org https://play.vidyard.com https://code.jquery.com https://assets.sitescdn.net https://*.fourtimessmelly.com https://assets.trendemon.com https://lionbridge.data.adobedc.net https://www.googletagmanager.com https://static.ads-twitter.com https://cdn.jsdelivr.net https://munchkin.marketo.net https://snap.licdn.com https://web-analytics.engagio.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://trackingapi.trendemon.com https://dn1f1hmdujj40.cloudfront.net https://app-sjn.marketo.com https://cdnjs.cloudflare.com https://analytics.twitter.com https://j.6sc.co/6si.min.js https://geolocation.onetrust.com https://www.google.com https://www.gstatic.com https://pi.pardot.com https://activitymap.adobe.com https://info.lionbridge.com https://info1.lionbridge.com https://js.zi-scripts.com https://ws-assets.zoominfo.com https://*.brand-portal.adobe.com https://documentcloud.adobe.com https://s.go-mpulse.net https://www.clarity.ms https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.prod.mplat-ppcprotect.com https://*.mplat-ppcprotect.com https://mplat-ppcprotect.com https://bat.bing.com https://assets.apollo.io https://wec-assets.terminus.services https://chat-snippet.terminusplatform.com https://*.webexperiences.com https://*.getsmartcontent.com https://scripts.simpleanalyticscdn.com https://s.adroll.com/ https://d.adroll.com/ https://ajax.googleapis.com/ https://lionbridgeallstage.112.2o7.net/ https://t.co/ https://dpm.demdex.net/ https://five.fourtimessmelly.com/ https://simpleanalyticsbadges.com/ https://queue.simpleanalyticscdn.com/ https://five.fourtimessmelly.com/mon https://answersstatus.pagescdn.com https://liveapi-cached.yext.com https://ipv6.6sc.co https://c.6sc.co https://*.go-mpulse.net https://aplo-evnt.com/api/v1/intent_pixel/track_request https://google.com https://google.ch https://script.google.com/macros/s/AKfycbzuW1rr4er2kHmpndHBxGUVaOfm3VU1joALNCVJgWWnfg6wtuogPdW5Bvl2t43Umjxn/exec https://scripts.clarity.ms/ https://*.openai.com; script-src-attr https://*.brand-portal.adobe.com https://*.prod.mplat-ppcprotect.com https://*.mplat-ppcprotect.com https://mplat-ppcprotect.com https://assets.adobedtm.com; style-src 'self' https://*.brand-portal.adobe.com https://assets.sitescdn.net *; style-src-elem 'self' 'unsafe-inline' https://assets.sitescdn.net https://*.brand-portal.adobe.com https://fonts.googleapis.com/; style-src-attr 'self' 'unsafe-inline' https://*.brand-portal.adobe.com; img-src 'self' data: https://www.lionbridge.com https://play.vidyard.com https://cdn.cookielaw.org https://cdn.vidyard.com https://*.brand-portal.adobe.com https://www.facebook.com https://trackingapi.trendemon.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://www.google.com https://www.google.ie https://cm.everesttech.net https://lionbridge.data.adobedc.net https://*.terminus.services https://*.adsrvr.org https://*.webexperiences.com https://*.bound360.com https://*.getsmartcontent.com https://queue.simpleanalyticscdn.com https://simpleanalyticsbadges.com https://smetrics.lionbridge.com/ https://lionbridgeallstage.112.2o7.net/ https://t.co/ https://dpm.demdex.net/ https://five.fourtimessmelly.com/ https://analytics.twitter.com https://www.google-analytics.com https://*.clarity.ms https://*.bing.com https://*.linkedin.com https://www.googleadservices.com https://www.google.co.in https://*.google.com.br https://*.google.com.ch https://simpleanalyticscdn.com/ https://five.fourtimessmelly.com/mon https://answersstatus.pagescdn.com https://liveapi-cached.yext.com https://ipv6.6sc.co https://c.6sc.co https://*.go-mpulse.net https://aplo-evnt.com/api/v1/intent_pixel/track_request https://google.com https://google.ch https://script.google.com/macros/s/AKfycbzuW1rr4er2kHmpndHBxGUVaOfm3VU1joALNCVJgWWnfg6wtuogPdW5Bvl2t43Umjxn/exec https://px.ads.linkedin.com/ https://px4.ads.linkedin.com/ https://cm.g.doubleclick.net/ https://googleads.g.doubleclick.net/ https://us-u.openx.net/ https://image2.pubmatic.com/ https://simage2.pubmatic.com/ https://eb2.3lift.com/ https://dsum-sec.casalemedia.com/ https://io.narrative.io/ https://a.adroll.com/ https://x.adroll.com/ https://d.adroll.mgr.consensu.org/ https://d.adroll.com/ https://image.mux.com https://*.litix.io https://*.oaistatic.com https://*.openai.com; connect-src 'self' https://server.gametester.gg https://ws.zoominfo.com https://api.schedule.zoominfo.com https://c.go-mpulse.net https://*.lionbridge.com https://cdn.cookielaw.org https://liveapi.yext.com https://answers.yext-pixel.com https://geolocation.onetrust.com https://epsilon.6sense.com https://*.brand-portal.adobe.com https://cdn.linkedin.oribi.io https://lionbridge.tt.omtrdc.net https://viewlicense.adobe.io https://privacyportal-de.onetrust.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://secure.adnxs.com https://px.ads.linkedin.com https://www.google.ie https://*.clarity.ms https://pagead2.googlesyndication.com https://www.google.com https://*.doubleclick.net https://analytics.google.com https://*.on24.com https://*.prod.mplat-ppcprotect.com https://*.mplat-ppcprotect.com https://mplat-ppcprotect.com https://*.google-analytics.com https://*.terminus.services wss://*.amazonaws.com https://js.zi-scripts.com https://queue.simpleanalyticscdn.com https://scripts.simpleanalyticscdn.com/latest.js.map https://play.vidyard.com/ https://assets.sitescdn.net/ https://cdn.jsdelivr.net/ https://scripts.simpleanalyticscdn.com/ https://five.fourtimessmelly.com/ https://px.ads.linkedin.com/ https://px4.ads.linkedin.com/ https://cm.g.doubleclick.net/ https://googleads.g.doubleclick.net/ https://us-u.openx.net/ https://image2.pubmatic.com/ https://simage2.pubmatic.com/ https://eb2.3lift.com/ https://dsum-sec.casalemedia.com/ https://io.narrative.io/ https://a.adroll.com/ https://x.adroll.com/ https://d.adroll.mgr.consensu.org/ https://d.adroll.com/ https://stream.mux.com/ https://*.mux.com https://*.litix.io https://storage.googleapis.com https://*.openai.com; frame-src 'self' https://play.vidyard.com https://www.facebook.com https://app-sjn.marketo.com https://www.youtube.com https://www.google.com https://*.brand-portal.adobe.com https://td.doubleclick.net https://*.googletagmanager.com https://*.webexperiences.com https://*.bound360.com https://*.getsmartcontent.com https://documentcloud.adobe.com/; frame-ancestors 'self' http://lionbridge.com:8000 https://*.brand-portal.adobe.com; 2 upgrade-insecure-requests; form-action https: 2 default-src * blob:;connect-src 'self' 'unsafe-inline' https://static.hsappstatic.net https://cdn.jsdelivr.net https://assets.swrooms.com https://*.zi-scripts.com https://ws.zoominfo.com https://*.reo.dev https://aorta.clickagy.com https://hemsync.clickagy.com https://forms.hsforms.com https://js.hs-banner.com https://api.hubapi.com https://cta-service-cms2.hubspot.com https://region1.google-analytics.com https://us.consent.api.termly.io https://forms.hubspot.com https://hubspot-forms-static-embed.s2.amazonaws.com https://px.ads.linkedin.com https://*.hs-sites.com https://adservice.google.com https://dev.visualwebsiteoptimizer.com https://*.prodpad.com https://prodpad.com https://api.craftcms.com https://region1.analytics.google.com/ https://stats.g.doubleclick.net https://analytics.google.com https://*.6sc.co https://*.fullstory.com https://www.redditstatic.com/ https://signalwire.com https://www.facebook.com wss://*.signalwire.com https://*.signalwire.com https://cdn.signalwire.com https://signalwire.s3-us-west-2.amazonaws.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://app.termly.io https://client.crisp.chat https://storage.crisp.chat wss://client.relay.crisp.chat wss://stream.relay.crisp.chat https://pixel-config.reddit.com https://aplo-evnt.com https://www.googleadservices.com;frame-src 'self' https://hemsync.clickagy.com https://forms.hsforms.com https://www.facebook.com https://js.stripe.com https://www.youtube.com https://youtube.com https://*.signalwire.com https://cdn.signalwire.com https://www.google.com https://www.gstatic.com https://app.termly.io https://game.crisp.chat https://aplo-evnt.com https://www.googletagmanager.com https://td.doubleclick.net;child-src 'self' 'unsafe-inline' https://*.signalwire.com https://cdn.signalwire.com blob:;worker-src 'self' 'unsafe-inline' https://*.signalwire.com https://cdn.signalwire.com blob:;style-src 'self' 'unsafe-inline' https://github.githubassets.com https://*.fs1.hubspotusercontent-na1.net https://tagmanager.google.com https://stackpath.bootstrapcdn.com https://*.signalwire.com https://cdn.signalwire.com https://fonts.gstatic.com https://fonts.googleapis.com https://mcdn.swire.io https://client.crisp.chat;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://static.reo.dev https://js.zi-scripts.com https://ws.zoominfo.com https://tags.clickagy.com/ https://assets.swrooms.com https://js.hubspot.com https://mcdn.swire.io https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://static.hsappstatic.net https://js.hsforms.net https://www.youtube.com https://youtube.com https://js.hsadspixel.net https://dev.visualwebsiteoptimizer.com https://*.prodpad.com https://prodpad.com https://www.clickcease.com https://ajax.googleapis.com https://code.jquery.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://googleads.g.doubleclick.net https://sjs.bizographics.com https://www.googleadservices.com https://tagmanager.google.com https://www.googletagmanager.com https://*.6sc.co https://*.fullstory.com https://www.redditstatic.com/ https://signalwire.com https://code.jquery.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://js.usemessages.com https://snap.licdn.com https://gist.github.com https://js.stripe.com https://*.signalwire.com https://cdn.signalwire.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://app.termly.io https://d3js.org https://cdn.jsdelivr.net https://client.crisp.chat https://settings.crisp.chat;font-src 'self' 'unsafe-inline' https://*.signalwire.com https://cdn.signalwire.com http://mcdn.signalwire.com http://mcdn.swire.io https://mcdn.signalwire.com https://fonts.gstatic.com https://fonts.googleapis.com https://client.crisp.chat data:;img-src * data: 2 base-uri 'self'; child-src 'self'; connect-src 'self' *.a.run.app bloomreach.com https://*.abtasty.com https://*.bookmebob.co.nz https://*.bookmebob.com https://*.clarity.ms https://*.doubleclick.net https://*.googlesyndication.com https://*.infinity-tracking.com https://*.myma.ai https://*.onetrust.com https://*.optimizely.com https://*.smartagent.app https://*.uniqodo.com https://*.warnerhotels.co.uk https://*.warnerio.co.uk https://bat.bing.com https://bat.bing.net https://capig.stape.pro https://cdn.cookielaw.org https://ct.pinterest.com https://dc.services.visualstudio.com https://esp-eu.aptrinsic.com https://js.monitor.azure.com https://metacb.digitaldevs.co.uk https://pixel.quantcount.com https://pixel.quantserve.com https://prreqcroab.icu https://region1.analytics.google.com https://routes.soreto.com https://siteintercept.qualtrics.com https://uksouth-1.in.applicationinsights.azure.com https://vimeo.com https://www.facebook.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.wepowerconnections.com https://zn3imymdnfofyzkdw-warnerhotels.siteintercept.qualtrics.com wss://*.transport.connect.eu-west-2.amazonaws.com; default-src 'self'; font-src 'self' https://*.abtasty.com https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://fonts.gstatic.com; form-action 'self' https://optistaging.warnerleisurehotels.co.uk https://warnerhotels.eu.qualtrics.com https://www.facebook.com; frame-src 'self' https://*.abtasty.com https://*.bookmebob.co.nz https://*.bookmebob.com https://*.doubleclick.net https://*.myma.ai https://*.promotionx.io https://*.smartagent.app https://*.uniqodo.com https://*.uqd.io https://*.warnerhotels.co.uk https://ct.pinterest.com https://player.vimeo.com https://warnerhotels.eu.qualtrics.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com; img-src 'self' data: https://*.abtasty.com https://*.adalyser.com https://*.adnxs.com https://*.bing.com https://*.bookmebob.co.nz https://*.bookmebob.com https://*.clarity.ms https://*.doubleclick.net https://*.googlesyndication.com https://*.micpn-eu.com https://*.myma.ai https://*.optimizely.com https://*.warnerhotels.co.uk https://bat.bing.com https://cdn.cookielaw.org https://connect.facebook.net https://ct.pinterest.com https://i.vimeocdn.com https://lantern.roeye.com https://pixel.quantserve.com https://prreqcroab.icu https://siteintercept.qualtrics.com https://www.facebook.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.tripadvisor.co.uk https://www.tripadvisor.com https://www.warnerleisurehotels.co.uk; manifest-src 'self'; media-src 'self' https://*.warnerhotels.co.uk; object-src 'self'; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.abtasty.com https://*.adalyser.com https://*.bookmebob.co.nz https://*.bookmebob.com https://*.clarity.ms https://*.doubleclick.net https://*.micpn-eu.com https://*.myma.ai https://*.optimizely.com https://*.smartagent.app https://*.uniqodo.com https://*.uqd.io https://*.warnerhotels.co.uk https://*.warnerio.co.uk https://acdn.adnxs.com https://assets.soreto.com https://bat.bing.com https://cdn.cookielaw.org https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/ https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/ https://cdn.jsdelivr.net/npm/feather-icons@4.29.0/dist/ https://cdn.jsdelivr.net/npm/feather-icons/dist/ https://cdn.jsdelivr.net/npm/jquery@3.6.4/dist/ https://cdn.jsdelivr.net/npm/markdown-it@14.2.0/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/ https://code.jquery.com/jquery-3.2.1.slim.min.js https://connect.facebook.net https://ct.pinterest.com https://d1igp3oop3iho5.cloudfront.net https://ict.infinity-tracking.net https://js.monitor.azure.com https://lantern.roeyecdn.com https://rules.quantcount.com https://s.pinimg.com https://script.infinity-tracking.com https://secure.quantserve.com https://siteintercept.qualtrics.com https://uk1-api.eng.bloomreach.com https://web-sdk-eu.aptrinsic.com https://www.dwin1.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com https://www.tripadvisor.co.uk https://www.tripadvisor.com https://www.upsellit.com https://zn3imymdnfofyzkdw-warnerhotels.siteintercept.qualtrics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.bloomreach.com https://*.abtasty.com https://*.adalyser.com https://*.bookmebob.co.nz https://*.bookmebob.com https://*.clarity.ms https://*.doubleclick.net https://*.micpn-eu.com https://*.myma.ai https://*.optimizely.com https://*.smartagent.app https://*.uniqodo.com https://*.uqd.io https://*.warnerhotels.co.uk https://acdn.adnxs.com https://assets.soreto.com https://bat.bing.com https://cdn.cookielaw.org https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/ https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/ https://cdn.jsdelivr.net/npm/feather-icons@4.29.0/dist/ https://cdn.jsdelivr.net/npm/feather-icons/dist/ https://cdn.jsdelivr.net/npm/jquery@3.6.4/dist/ https://cdn.jsdelivr.net/npm/markdown-it@14.2.0/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/ https://code.jquery.com/jquery-3.2.1.slim.min.js https://connect.facebook.net https://ct.pinterest.com https://d1igp3oop3iho5.cloudfront.net https://ict.infinity-tracking.net https://js.monitor.azure.com https://lantern.roeyecdn.com https://rules.quantcount.com https://s.pinimg.com https://script.infinity-tracking.com https://secure.quantserve.com https://siteintercept.qualtrics.com https://web-sdk-eu.aptrinsic.com https://www.dwin1.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com https://www.tripadvisor.co.uk https://www.tripadvisor.com https://www.upsellit.com https://zn3imymdnfofyzkdw-warnerhotels.siteintercept.qualtrics.com; style-src-elem 'self' 'unsafe-inline' https://*.abtasty.com https://*.bookmebob.co.nz https://*.bookmebob.com https://*.smartagent.app https://*.warnerhotels.co.uk https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/ https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/ https://fonts.googleapis.com https://web-sdk-eu.aptrinsic.com; style-src 'self' 'unsafe-inline' https://*.abtasty.com https://*.bookmebob.co.nz https://*.bookmebob.com https://*.smartagent.app https://*.warnerhotels.co.uk https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/ https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/ https://fonts.googleapis.com https://web-sdk-eu.aptrinsic.com; report-to stott-security-endpoint; 2 script-src 'self' 'unsafe-inline' *.cookiebot.com *.hacon.de 2 default-src * 'unsafe-inline' 'unsafe-eval';img-src * data:; child-src * 'self' blob: http:;font-src * data: 2 frame-ancestors https://leren.han.nl/ 'self' 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tarteaucitron.io https://cdn.tarteaucitron.io https://cdntag.tarteaucitron.io https://browser.sentry-cdn.com https://js-de.sentry-cdn.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://region1.google-analytics.com https://region1.analytics.google.com https://widget.trustpilot.com https://cdnjs.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com; 2 frame-ancestors 'self' https://*.smartyops.org; 2 base-uri zonapagos.com *.zonapagos.com 2 upgrade-insecure-requests; frame-ancestors 'self' explore.redcanary.com 2 upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; manifest-src 'self'; report-uri https://vault.gostatera.com/collect/csp 2 default-src * data: blob: 'unsafe-eval' 'unsafe-inline'; worker-src blob: 2 default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.blackbaudcdn.net https://*.blackbaud.com https://maps.googleapis.com https://maps.gstatic.com https://static.addtoany.com https://stackpath.bootstrapcdn.com https://www.googletagmanager.com https://tags.tiqcdn.com https://*.fmolhs.org https://*.jotform.com https://*.jotfor.ms https://*.invocacdn.com https://*.invoca.net https://resources.static.evaliahealth.com https://www.youtube.com; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://unpkg.com https://stackpath.bootstrapcdn.com https://*.fmolhs.org https://tags.tiqcdn.com; font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com https://unpkg.com https://stackpath.bootstrapcdn.com; img-src 'self' data: https://s.gravatar.com https://*.wp.com https://maps.gstatic.com https://maps.googleapis.com https://*.youtube.com https://thesource.fmolhealth.org https://*.fmolhs.org https://fmolhs.org https://img.youtube.com https://*.blackbaudcdn.net https://*.blackbaud.com; frame-src 'self' data: https://urldefense.com https://play.libsyn.com https://fundraise.givesmart.com https://host.nxt.blackbaud.com https://www.google.com https://www.youtube.com https://static.addtoany.com https://*.fmolhs.org https://*.jotform.com https://*.jotfor.ms https://*.blackbaudcdn.net https://*.blackbaud.com https://player.vimeo.com; connect-src 'self' data: https://maps.googleapis.com https://pc-hmt-collect.tealiumiq.com https://www.google-analytics.com https://thesource.fmolhealth.org https://*.invoca.net https://*.fmolhs.org https://*.blackbaudcdn.net https://*.blackbaud.com; upgrade-insecure-requests; 2 frame-ancestors 'none'; report-uri https://prod-th-csp-service.rbictg.com/csp; report-to csp-endpoint 2 frame-ancestors https://specialty-care-pavilion-latest.jefferson.edu https://specialty-care-pavilion.jefferson.edu https://specialty-care-pavilion-dev.jefferson.edu; 2 frame-ancestors 'self' resources.levelaccess.com levelaccess.com;block-all-mixed-content;script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' blob: *.cloudfront.net *.nitrocdn.com *.vidyard.com *.wistia.com *.wistia.net *.greenhouse.io *.googlesyndication.com *.googleadservices.com *.google-analytics.com *.cookiebot.com *.addtoany.com *.formhq.net *.zoominfo.com https://*.qualified.com https://www.levelaccess.com https://resources.levelaccess.com https://a.levelaccess.com https://learn.levelaccess.com https://tracking.g2crowd.com https://nitroscripts.com https://cdn.jsdelivr.net https://code.highcharts.com https://js.intercomcdn.com https://js.hubspot.com https://js.adsrvr.org https://cdn.wmxtools.com https://widget.intercom.io https://a.usbrowserspeed.com https://www.influ2.com https://ct.capterra.com https://src.litix.io https://gdata.youtube.com https://p.midbound.net https://www.adnxs-simple.com https://www.adnxs.com https://www.googletagservices.com https://www.doubleclick.net https://www.google.com https://t.influ2.com https://ajax.googleapis.com https://bat.bing.com https://cdnjs.cloudflare.com https://cta-service-cms2.hubspot.com https://code.jquery.com https://connect.facebook.net https://cdn.bizible.com https://content.linkedin.com https://dsp-creative.demandbase.com https://d.adroll.com https://forms.hsforms.com https://graph.facebook.com https://googleads.g.doubleclick.net https://js.hscta.net https://js.facebook.com https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.usemessages.com https://js.hubspotfeedback.com https://js.hsadspixel.net https://js.hs-banner.com https://js.hsleadflows.net https://js-na1.hs-scripts.com https://js.hs-scripts.com https://j.6sc.co https://m.youtube.com https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://platform.linkedin.com https://r.bing.com https://s.adroll.com https://script.hotjar.com https://static.hotjar.com https://static-exp1.licdn.com https://snap.licdn.com https://ssl.google-analytics.com https://www.hsforms.net https://www.hsforms.com www.googletagmanager.com https://jsv3.recruitics.com https://cdn.rollbar.com https://unpkg.com https://dev.visualwebsiteoptimizer.com https://load.sgtm.levelaccess.com https://sgtm.levelaccess.com https://content.hotjar.io https://browser.sentry-cdn.com;connect-src 'self' data: wss://*.qualified.com https://*.qualified.com https://data.hockeystack.com *.nitrocdn.com *.litix.io *.hubapi.com *.wistia.com *.doubleclick.net *.bing.com *.google-analytics.com *.googlesyndication.com *.googleadservices.com *.cookiebot.com *.getnitropack.com https://content.hotjar.io https://metrics.hotjar.io https://cdn.jsdelivr.net https://www.google.co.in https://www.google.de https://nitropack.io https://browser.sentry-cdn.com https://cta-service-cms2.hubspot.com https://insight.adsrvr.org https://vc.hotjar.io https://ipapi.co https://api-iam.intercom.io https://www.googletagmanager.com https://epsilon.6sense.com https://px.ads.linkedin.com https://www.google-analytics.com https://c.6sc.co https://ipv6.6sc.co https://t.influ2.com https://stats.g.doubleclick.net wss://ws.hotjar.com https://sgtm.levelaccess.com https://tracking.g2crowd.com https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hsforms.com https://api.formhq.net https://ws.zoominfo.com https://analytics.google.com https://fast.wistia.net https://yoast.com https://www.google.com https://google.com https://regional.google-analytics.com https://dev.visualwebsiteoptimizer.com https://www.facebook.com https://tracking-api.g2.com;object-src embedwistia-a.akamaihd.net;child-src 'self' data: blob: https://*.qualified.com *.cookiebot.com https://www.google.com https://www.doubleclick.net https://www.googlesyndication.com https://www.adnxs.com https://www.facebook.com app.hubspot.com connect.facebook.net forms.hsforms.com js.usemessages.com js.hscollectedforms.net js.hsadspixel.net www.youtube.com www.ub-assets.com www.cloudfront.net www.unbounce.com www.static.addtoany.com www.googletagmanager.com;base-uri 'self' https://www.adnxs.com;form-action 'self' https://www.google.com https://www.facebook.com connect.facebook.net download.essentialaccessibility.com forms.hubspot.com forms.hsforms.com;worker-src 'self' blob: https://www.google.com;frame-src 'self' data: blob: https://*.qualified.com *.greenhouse.io *.cookiebot.com https://insight.adsrvr.org https://fast.wistia.com https://fast.wistia.net https://play.vidyard.com https://static.addtoany.com https://match.adsrvr.org https://www.googletagmanager.com https://td.doubleclick.net https://www.youtube.com https://www.cloudfront.net https://www.unbounce.com https://www.surveymonkey.com https://www.ub-assets.com https://gdata.youtube.com https://www.hubspot.com https://www.hsforms.net https://www.hsforms.com https://cdnjs.cloudflare.com https://www.facebook.com https://vars.hotjar.com forms.hsforms.com https://cdn.rollbar.com https://jsv3.recruitics.com https://code.jquery.com https://dev.visualwebsiteoptimizer.com https://sgtm.levelaccess.com;style-src 'self' 'report-sample' 'unsafe-inline' blob: https://*.qualified.com *.google.com *.licdn.com *.nitrocdn.com *.cloudfront.net *.unbounce.com *.ub-assets.com *.bing.com *.bootstrapcdn.com https://cdn.jsdelivr.net ajax.googleapis.com cdnjs.cloudflare.com code.jquery.com https://tagmanager.google.com https://fonts.googleapis.com https://js.adsrvr.org https://fast.wistia.com gdata.youtube.com https://www.levelaccess.com https://resources.levelaccess.com www.googletagmanager.com;manifest-src 'self';media-src 'self' https://*.qualified.com https://*.wistia.com https://*.wistia.net https://www.levelaccess.com https://app.qualified.com mediastream: blob: data:;img-src 'self' data: https://*.qualified.com https://*.wistia.com https://*.wistia.net https://*.googleapis.com https://*.google.com https://*.google.ca *.nitrocdn.com *.vidyard.com *.linkedin.com *.hubspot.com *.bing.com *.6sc.co *.facebook.com *.capterra.com https://fonts.gstatic.com https://www.levelaccess.com https://forms-na1.hsforms.com https://stats.g.doubleclick.net https://perf-na1.hsforms.com https://play.vidyard.com https://ps.w.org https://cdn.addevent.com https://uploads-ssl.webflow.com https://imgsct.cookiebot.com https://s.w.org https://forms.hsforms.com https://www.googletagmanager.com https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com https://sgtm.levelaccess.com https://googleads.g.doubleclick.net https://resources.levelaccess.com;font-src 'self' data: https://*.qualified.com *.wistia.com *.nitrocdn.com https://stackpath.bootstrapcdn.com https://fonts.gstatic.com https://fast.wistia.com https://fast.wistia.net https://s0.wp.com https://cdn.rollbar.com https://jsv3.recruitics.com https://cdnjs.cloudflare.com; 2 default-src: https:; frame-ancestors 'self' X-Frame-Options: SAMEORIGIN 2 frame-ancestors 'self' https://edicola.tarantobuonasera.it 2 default-src 'self' wss: wss://*.ooklaserver.net https://*.tigocloud.net https://*.zendesk.com https://static.zdassets.com https://ekr.zdassets.com https://discovery-content-uy.tigocloud.net; frame-src 'self' https://*.tigocloud.net https://*.speedtestcustom.com https://graph.facebook.com https://analytics.facebook.com https://ads.facebook.com https://business.facebook.com https://developers.facebook.com https://apps.facebook.com https://connect.facebook.com https://connect.facebook.net https://www.facebook.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.google.com https://*.googletagservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.googleapis.com https://*.googleadservices.com https://optimize.google.com https://*.google-analytics.com https://www.youtube.com https://6493920.fls.doubleclick.net blob: https://*.tigo.com.uy https://khipu.com https://*.temu.com.uy:* https://*.movistar.com.uy https://*.tigo.com.uy https://*.movistar.com https://caratgateway.fiservapp.com https://caratgatewaytest.fiservapp.com https://www.mercadopago.com.uy https://www.google.com https://www.google.com.uy; script-src 'self' blob: https://*.tigocloud.net https://*.speedtestcustom.com https://graph.facebook.com https://analytics.facebook.com https://ads.facebook.com https://business.facebook.com https://developers.facebook.com https://apps.facebook.com https://connect.facebook.com https://connect.facebook.net https://www.facebook.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.google.com https://*.googletagservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.googleapis.com https://*.googleadservices.com https://optimize.google.com https://*.google-analytics.com https://analytics.twitter.com https://static.ads-twitter.com https://www.youtube.com https://6493920.fls.doubleclick.net https://maps.googleapis.com https://www.gstatic.com/ https://sync.smartadserver.com https://s.ytimg.com https://facebook.com/signals/iwl.js https://widget-mediator.zopim.com https://*.licdn.com https://www.clarity.ms https://scripts.clarity.ms https://eum.instana.io https://*.smooch.io https://analytics.tiktok.com 'unsafe-inline' https://www-uat-uy.tigocloud.net https://*.tigo.com.uy https://khipu.com https://ofertas.movistar.com.uy https://code.jquery.com https://www.movistar.com.uy https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://delivery-ci360.movistar.com.uy https://execution-ci360.movistar.com.uy; font-src 'self' data: blob: https://fonts.gstatic.com https://*.zendesk.com https://ofertas.movistar.com.uy https://ofertas.tigo.com.uy; img-src 'self' data: blob: https://graph.facebook.com https://analytics.facebook.com https://ads.facebook.com https://business.facebook.com https://developers.facebook.com https://apps.facebook.com https://connect.facebook.com https://connect.facebook.net https://www.facebook.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.google.com https://*.googletagservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.googleapis.com https://*.googleadservices.com https://optimize.google.com https://*.google-analytics.com https://*.tigocloud.net https://www.tigo.com.gt https://static.zdassets.com https://*.googletagmanager.com https://images.ctfassets.net https://*.g.doubleclick.net https://lh3.googleusercontent.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.com https://www.google.com.ar https://www.google.com.bo https://www.google.com.co https://www.google.com.sv https://www.google.com.gt https://www.google.hn https://www.google.com.ni https://www.google.com.pa https://www.google.com.py https://t.co https://maps.gstatic.com https://www.facebook.com https://analytics.twitter.com https://static.ads-twitter.com https://*.speedtestcustom.com https://*.zendesk.com https://static.zdassets.com https://maps.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://sync.smartadserver.com https://*.zopim.io https://svr.mic.edge.com.py https://c.clarity.ms https://c.bing.com https://*.tigo.com.uy https://discovery-content-uy.tigocloud.net https://ofertas.movistar.com.uy https://www.google.com.uy https://ofertas.tigo.com.uy; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com/debug/badge.css https://fonts.googleapis.com https://*.zendesk.com https://*.tigocloud.net https://ofertas.movistar.com.uy https://ofertas.tigo.com.uy https://delivery-ci360.movistar.com.uy https://execution-ci360.movistar.com.uy; connect-src * data: https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://analytics.tiktok.com https://connect.facebook.net https://scripts.clarity.ms https://www.clarity.ms https://www.clarity.ms *.awsapprunner.com; object-src 'none'; form-action 'self' https://www.facebook.com; base-uri 'self'; frame-ancestors 'self' 2 script-src 'unsafe-inline' 'self' 'unsafe-eval' *.googleapis.com *.facebook.net *.union-investment.de *.usercentrics.eu *.doubleclick.net *.meininvest.de *.frontend.live *.googletagmanager.com *.podigee-cdn.net *.highcharts.com https://safemicronkk2022prod.z6.web.core.windows.net/ http://localhost:* https://calculator.fe.union-investment.de https://bplv.fe.union-investment.de https://internal.api.union-investment.de mktdplp102cdn.azureedge.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://apps.mypurecloud.de/genesys-bootstrap/genesys.min.js https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://apps.mypurecloud.de/genesys-bootstrap/plugins/genesysvendors.min.js; 2 child-src 'self' https://*.hotjar.com https://www.rightworks.com; connect-src 'self' *.abtasty.com 100.20.58.101 18.210.229.244 3.212.39.155 34.215.155.61 35.160.46.251 35.85.84.151 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 blob: https://*.6sc.co https://*.abtasty.com https://*.cvent.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.ba https://*.google.com https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io https://*.linkedin.com https://*.mktoresp.com https://*.mktoweb.com https://*.mypurecloud.com https://*.outbrain.com https://*.parsely.com https://*.qualified.com https://*.reddit.com https://*.redditstatic.com https://*.sitesearch360.com https://*.storylane.io https://*.typeform.com https://*.wistia.com https://*.youtube.com https://*.zoominfo.com https://a.usbrowserspeed.com https://apps.mypurecloud.com https://cdn.linkedin.oribi.io https://connect.abtasty.com https://ct.capterra.com https://designer-api.hu-manity.co https://grsm.io https://ipv6.6sc.co https://js.callrail.com https://js.zi-scripts.com https://maps.googleapis.com https://o132438.ingest.sentry.io https://partnerlinks.io https://scout.salesloft.com https://secure.adnxs.com https://tagmanager.google.com https://tracking.g2crowd.com https://transactional-api.hu-manity.co https://try.abtasty.com https://www.googletagmanager.com https://www.rightworks.com wss://*.hotjar.com wss://*.qualified.com wss://ws.hotjar.com; default-src 'self' https://rightworks.com https://www.rightworks.com; font-src 'self' *.abtasty.com blob: data: https://*.gstatic.com https://*.sfdcstatic.com https://*.wp.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.rightworks.com; frame-ancestors 'self' https://*.smartvault.com https://www.rightworks.com; frame-src 'self' *.abtasty.com blob: https://*.cookiebot.com https://*.doubleclick.net https://*.driftt.com https://*.facebook.com https://*.facebook.net https://*.google.com https://*.hotjar.com/ https://*.instagram.com https://*.marketo.com https://*.mktoweb.com https://*.rightworks.com https://*.sitescout.com https://*.smartvault.com https://*.storylane.io https://*.typeform.com https://*.vimeo.com https://*.wistia.com/ https://*.youtube.com https://app.qualified.com https://apps.mypurecloud.com https://calendly.com https://ct.capterra.com https://d1l7z5ofrj6ab8.cloudfront.net https://js.driftt.com https://mypurecloud.com https://open.spotify.com https://s-static.ak.facebook.com https://service.force.com https://tagmanager.google.com https://widget.drift.com https://widgets.wp.com https://wordpress.com/ https://www.g2.com https://www.rightworks.com; img-src 'self' *.abtasty.com blob: data: https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.ba https://*.google.com https://*.google.hr https://*.gravatar.com https://*.gstatic.com https://*.images.cvent.com https://*.instagram.com https://*.linkedin.com https://*.mktoweb.com https://*.outbrain.com https://*.parsely.com https://*.sitesearch360.com https://*.vimeocdn.com https://*.wistia.com https://*.yahoo.com https://*.youtube.com https://alb.reddit.com https://analytics.twitter.com https://attr.ml-api.io https://b.6sc.co https://bat.bing.com https://c.clarity.ms https://ct.capterra.com https://googleads.g.doubleclick.net https://img.youtube.com https://info.rightworks.com https://maps.googleapis.com https://pixel.wp.com https://s.ml-attr.com https://s.w.org https://secure.adnxs.com https://storage.pardot.com https://storylane-prod-uploads.s3.us-east-2.amazonaws.com https://t.co https://tr.outbrain.com https://www.googletagmanager.com https://www.rightworks.com; media-src 'self' blob: data: file: https://*.wistia.com/ https://js.driftt.com https://www.rightworks.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.abtasty.com blob: https://*.abtasty.com https://*.adroll.com https://*.ads-twitter.com https://*.calendly.com https://*.doubleclick.net https://*.drift.com https://*.driftt.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.hotjar.com https://*.instagram.com https://*.linkedin.com https://*.marketo.com https://*.marketo.net https://*.mktoweb.com https://*.mountain.com https://*.outbrain.com https://*.pardot.com https://*.parsely.com https://*.partnerstack.com https://*.qualified.com https://*.redditstatic.com https://*.rightworks.com https://*.salesforceliveagent.com https://*.storylane.io https://*.transactionpro.com https://*.twitter.com https://*.typeform.com https://*.vimeo.com https://*.wistia.com https://*.wp.com https://a.usbrowserspeed.com https://amplify.outbrain.com/cp/obtp.js https://apps.mypurecloud.com https://apps.mypurecloud.com/genesys-bootstrap/genesys.min.js https://bat.bing.com https://cdn.callrail.com https://cdn.hu-manity.co https://cdn.sitesearch360.com https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://ct.capterra.com https://d1l7z5ofrj6ab8.cloudfront.net https://extend.vimeocdn.com https://j.6sc.co https://js.callrail.com https://js.driftt.com https://js.zi-scripts.com https://lex.33across.com https://mypurecloud.com https://s3.amazonaws.com https://scout-cdn.salesloft.com https://service.force.com https://snap.licdn.com https://snippet.growsumo.com https://tagmanager.google.com https://tr.outbrain.com https://tracking.g2crowd.com https://transactionpro.us20.list-manage.com https://try.abtasty.com https://widget.drift.com https://wistia.com https://ws-assets.zoominfo.com https://www.clarity.ms https://www.googleadservices.com https://www.googletagmanager.com https://www.rightworks.com https://www.youtube.com wss://*.qualified.com; style-src 'self' 'unsafe-inline' *.abtasty.com blob: https://*.googleapis.com https://*.gravatar.com https://*.marketo.com https://*.mktoweb.com https://*.typeform.com https://*.wp.com https://cdnjs.cloudflare.com https://code.jquery.com https://service.force.com https://tagmanager.google.com https://www.rightworks.com; worker-src 'self' blob: data: file: filesystem: https://www.rightworks.com unsafe-eval unsafe-inline 2 frame-ancestors 'self' https://plugins-cdn.datocms.com https://idosell-9057.admin.datocms.com 2 font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://*/vnd.ms-fontobject https://*/octet-stream https://*/font-woff https://*/x-font-ttf https://*/svg+xml https://maps.googleapis.com https://mondoconvenienza--partial.sandbox.my.site.com https://mondoconvenienza.my.site.com https://sgtm.mondoconv.it https://livesystemssrl.germany-2.evergage.com/ 'self' data: https://media-staging247.mondoconv.it https://media.mondoconv.it https://js.stripe.com *.flixcar.com *.flixfacts.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com intent://arvr.google.com https://cdn.evergage.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.cloudflare.com www.mondoconv.it my.adabra.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com testeps.netswgroup.it eps.netswgroup.it *.facebook.com finanziamenti.agosweb.it secure.findomestic.it test-securepay.eupayglobe.com securepay.eupayglobe.com *.cetelem.es 'self' 'unsafe-inline'; frame-ancestors 'self' www.mondoconv.it *.force.com 'self'; frame-src bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.braintreegateway.com *.paypal.com google.com *.google.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://mondoconvenienza--partial.sandbox.my.site.com https://mondoconvenienza.my.site.com https://sgtm.mondoconv.it https://td.doubleclick.net/ https://ct.pinterest.com *.youtube-nocookie.com https://media-staging247.mondoconv.it https://media.mondoconv.it https://js.stripe.com *.flixcar.com https://media.flixfacts.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com intent://arvr.google.com https://load.sgtm.mondoconv.es https://sgtm.mondoconv.es https://main.d2l4jnxpos1qsv.amplifyapp.com https://main.d3ed6fd4kl8zzp.amplifyapp.com https://mondoconv-stg.korianda.ai https://staging.d2l4jnxpos1qsv.amplifyapp.com https://ecatview.evinapp.it https://cdn.evergage.com *.iubenda.com *.livechatinc.com *.online-metrix.net *.tracead.com tracead.com *.signifyd.com img.signifyd.com *.addthis.com *.jrs5.com pubxtag1.com amc.demdex.net *.facebook.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.hotjar.com *.adabra.com *.intervieweb.it finanziamenti.agosweb.it *.force.com *.exacttarget.com click.mondoconvenienza.eu 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.online-metrix.net https://*.mondoconv.it https://*.cookielaw.org https://maps.googleapis.com https://mondoconvenienza--partial.sandbox.my.site.com https://livesystemssrl.germany-2.evergage.com/ https://mondoconvenienza.my.site.com https://sgtm.mondoconv.it https://td.doubleclick.net https://*.valueservice.cloud https://n.clarity.ms *.clarity.ms https://image.mondoconvenienza.eu *.mondoconvenienza.eu https://media-staging247.mondoconv.it https://media.mondoconv.it https://js.stripe.com *.flixcar.com https://media.flixfacts.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com https://www.google.es https://www.google.fr https://mondoconv.it https://*.google-analytics.com https://*.doubleclick.net https://connect.facebook.net https://cdn.evergage.com media.mondoconv.it media.mondoconv.es *.mondoconv.es *.payments-amazon.com *.linksynergy.com *.nxtck.com *.mediaforge.com *.jrs5.com *.dc-storm.com *.rd.linksynergy.com *.ra.linksynergy.com *.facebook.com *.google.it *.google.com *.signifyd.com *.e.aa.online-metrix.net *.googleapis.com amcglobal.sc.omtrdc.net cm.everesttech.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.demdex.net *.bing.com *.igodigital.com 510001710.collect.igodigital.com *.googletagmanager.com *.adabra.com track.adabra.com *.flix360.com *.pinterest.com *.swogo.net https://click.exacttarget.com *.exacttarget.com click.mondoconvenienza.eu data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://*.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://*.vimeo.com www.vimeo.com *.vimeocdn.com https://*.youtube.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https://*.cloudflareinsights.com *.googletagmanager.com *.facebook.net *.hotjar.com https://*.clearsale.com.br https://*.online-metrix.net https://api.psma.com.au https://*.ewaypayments.com https://*.clearpay.co.uk https://*.afterpay.com https://*.adobedtm.com https://*.adobe.com https://*.googleadservices.com https://*.google-analytics.com https://*.doubleclick.net js-agent.newrelic.com *.eu01.nr-data.net https://*.cardinalcommerce.com https://*.ccdc02.com https://*.paypal.com https://*.paypalobjects.com https://*.ytimg.com *.googleapis.com https://*.vimeocdn.com *.gstatic.com https://*.typekit.net https://*.omtrdc.net https://*.magento-ds.com *.chimpstatic.com https://*.mailchimp.com https://*.list-manage.com https://*.braintreegateway.com https://*.googleoptimize.com https://*.polyfill.io *.iubenda.com mondoconv.it mondoconv.es https://*.evgnet.com https://*.site.com https://*.noibu.com https://*.googlesyndication.com https://*.cookielaw.org https://maps.googleapis.com https://mondoconvenienza--partial.sandbox.my.site.com https://cdn.evgnet.com https://livesystemssrl.germany-2.evergage.com/ https://dynamic.criteo.com https://ct.pinterest.com https://is-cdn.dynatrace.com *.dynatrace.com *.clarity.ms widget.pinterest.com https://*.valueservice.cloud https://media-staging247.mondoconv.it https://media.mondoconv.it https://js.stripe.com *.flixcar.com *.flixfacts.com https://*.flix360.io https://*.flix360.com *.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com https://www.google.es https://cdn.evergage.com chimpstatic.com *.cloudflare.com *.doofinder.com *.signifyd.com *.livechatinc.com *.rmtag.com *.tracead.com tracead.com *.addthis.com *.amazon.com *.amazonaws.com *.jsdelivr.net *.moatads.com *.addthisedge.com *.genteroma.com smct.co *.smct.co smct.io *.smct.io *.adabra.com widget-mediator.zopim.com *.bing.com *.igodigital.com 510001710.collect.igodigital.com *.swogo.net *.intervieweb.it pushpad.xyz *.mondoconv.it *.mondoconv.es *.force.com *.pinimg.com https://www.clarity.ms https://*.clarity.ms *.exacttarget.com click.mondoconvenienza.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://*.site.com https://*.valueservice.cloud https://media-staging247.mondoconv.it https://media.mondoconv.it https://js.stripe.com *.flixcar.com https://media.flixfacts.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com https://fonts.googleapis.com https://cdn.evergage.com *.cloudflare.com *.googleapis.com *.jsdelivr.net *.gstatic.com *.adabra.com *.force.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.mondoconv.it 'self' 'unsafe-inline'; manifest-src https://media.mondoconv.es https://media.mondoconv.it https://media-staging247.mondoconv.it https://media-staging247.mondoconv.es 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://*.cloudflareinsights.com https://cloudflareinsights.com https://api.psma.com.au *.hotjar.com https://*.salesforce-scrt.com https://*.mondoconv.it https://*.googlesyndication.com https://*.cookielaw.org https://*.onetrust.com https://maps.googleapis.com https://mondoconvenienza--partial.sandbox.my.site.com https://cdn.evgnet.com https://livesystemssrl.germany-2.evergage.com/ https://mondoconvenienza.my.site.com https://sgtm.mondoconv.it https://cdn.noibu.com https://bat.bing.net https://n.clarity.ms *.clarity.ms *.dynatrace.com https://*.valueservice.cloud https://media-staging247.mondoconv.it https://media.mondoconv.it https://js.stripe.com https://media.flixcar.com https://media.flixfacts.com https://*.flix360.io https://*.flix360.com https://media.flixsyndication.net https://content.jwplatform.com https://assets-jpcust.jwpsrv.com https://ssl.p.jwpcdn.com https://www.google.es https://www.google.it https://sgtm.mondoconv.es https://*.googleapis.com https://media.mondoconv.es https://cdn.evergage.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.iubenda.com *.doofinder.com *.g.doubleclick.net *.doubleclick.net *.signifyd.com *.signifyd.com:11103 *.signifyd.com:11103/onload https://bt.signifyd.com:11103 https://bt.signifyd.com:11103/onload bt.signifyd.com *.facebook.com *.google-analytics.com *.livechatinc.com *.addthis.com dpm.demdex.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com widget-mediator.zopim.com wss://widget-mediator.zopim.com bat.bing.com *.adabra.com pushpad.xyz *.igodigital.com http://510001710.collect.igodigital.com *.eu01.nr-data.net *.pinterest.com *.swogo.net *.exacttarget.com click.mondoconvenienza.eu ws: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 base-uri 'self'; frame-ancestors *;frame-src *;child-src 'self';block-all-mixed-content;object-src 'none'; prefetch-src 'self';worker-src 'self'; default-src https: data: ws:; script-src https: 'unsafe-inline' 'unsafe-eval';style-src https: 'unsafe-inline'; 2 frame-ancestors 'self' https://app.trengo.com/ 2 default-src 'self' https://www.bundeswahlleiter.de https://service.bundeswahlleiter.de https://www.bundeswahlleiterin.de https://service.bundeswahlleiterin.de https://www.youtube-nocookie.com https://www.ims-cms.net; script-src 'self' https://www.bundeswahlleiter.de https://service.bundeswahlleiter.de https://www.bundeswahlleiterin.de https://service.bundeswahlleiterin.de https://www.youtube-nocookie.com ; style-src 'self' https://www.bundeswahlleiter.de https://service.bundeswahlleiter.de https://www.bundeswahlleiterin.de https://service.bundeswahlleiterin.de https://www.youtube-nocookie.com 'unsafe-inline'; base-uri 'self'; frame-ancestors 'self' https://www.bundeswahlleiter.de https://service.bundeswahlleiter.de https://www.bundeswahlleiterin.de https://service.bundeswahlleiterin.de https://www.youtube-nocookie.com https://www.ims-cms.net ; upgrade-insecure-requests 2 default-src 'self' www.signiant.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.signiant.com script.crazyegg.com bat.bing.com connect.facebook.net *.marketo.com munchkin.marketo.net googleads.g.doubleclick.net consentcdn.cookiebot.com assets.adoberesources.net consent.cookiebot.com scout-cdn.salesloft.com www.google.com www.gstatic.com www.googletagmanager.com www.googleoptimize.com www.google-analytics.com *.bugherd.com cdnjs.cloudflare.com assets.revenuehero.io app.revenuehero.io play.vidyard.com info.signiant.com j.6sc.co; connect-src 'self' www.signiant.com sockjs.pusher.com ws-mt1.pusher.com tracking.crazyegg.com *.marketo.com *.mktoresp.com script.crazyegg.com bat.bing.com www.google.com consentcdn.cookiebot.com stats.g.doubleclick.net *.analytics.google.com www.facebook.com assets.adoberesources.net *.cloud.adobe.io scout.salesloft.com cdnjs.cloudflare.com *.google-analytics.com *.bugherd.com www.google-analytics.com www.googletagmanager.com assets.revenuehero.io play.vidyard.com info.signiant.com app.revenuehero.io c.6sc.co ipv6.6sc.co epsilon.6sense.com; img-src 'self' data: www.signiant.com secure.gravatar.com www.facebook.com bat.bing.com www.google.es www.google.com www.google.co.uk www.google.ro www.google.de imgsct.cookiebot.com *.gstatic.com www.googletagmanager.com www.google.com www.gstatic.com www.google-analytics.com *.bugherd.com play.vidyard.com cdn.vidyard.com cdnjs.cloudflare.com info.signiant.com b.6sc.co; style-src 'self' 'unsafe-inline' www.signiant.com rtp-static.marketo.com www.googletagmanager.com www.google.com www.gstatic.com cdnjs.cloudflare.com fonts.googleapis.com info.signiant.com; font-src 'self' data: www.signiant.com fonts.gstatic.com cdnjs.cloudflare.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self' info.signiant.com; frame-src www.facebook.com signiant.lodago.app popup.schedulehero.io consentcdn.cookiebot.com www.google.com www.googletagmanager.com play.vidyard.com info.signiant.com www.youtube.com youtube.com sjrtp8.marketo.com; object-src 'none'; 2 frame-ancestors 'self' https://*.castlery.com https://app.storyblok.com 2 default-src 'self'; connect-src *; font-src * data:; frame-src *; frame-ancestors 'self' https://resources.impartner.com; img-src * data: blob:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 2 default-src 'self'; upgrade-insecure-requests; connect-src 'self' https: wss: https://*.mktoresp.com/; script-src 'self' 'unsafe-inline' blob: https://s3.amazonaws.com/ https://js.hubspot.com https://www.google.com/ https://insights.amcor.com www.googletagmanager.com https://apis.google.com https://snap.licdn.com https://js-na1.hs-scripts.com https://script.hotjar.com/ https://www.gstatic.com/ https://netlify-rum.netlify.app/ https://share-eu1.hsforms.com/ https://cdnjs.cloudflare.com/ https://home.integrate.com https://ajax.googleapis.com/ https://static.hotjar.com/ https://googleads.g.doubleclick.net/ https://www.googleadservices.com/ https://www.google-analytics.com/analytics.js https://js-eu1.hs-scripts.com/ https://maps.googleapis.com/ https://tools.euroland.com/ https://widget.surveymonkey.com/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://www.youtube.com/ https://www.google.com/recaptcha/api.js https://app-lon08.marketo.com/ https://js.hs-scripts.com/ https://js.hs-analytics.net/ https://js.hsleadflows.net/ https://js.hsadspixel.net/ https://js.hs-banner.com/ https://js.usemessages.com/ https://munchkin.marketo.net/ https://unpkg.com/ https://js.hsforms.net/ https://tags.srv.stackadapt.com/ https://v2.ventureiq.io/; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; media-src 'self' https: data: blob: https://videos.ctfassets.net; base-uri 'self'; object-src 'none'; frame-src 'self' https: https://*.libsyn.com/ https://v2.ventureiq.io/; img-src 'self' https: data: www.googletagmanager.com https://images.ctfassets.net/ blob: https://firebasestorage.googleapis.com/ https://storage.googleapis.com/; 2 frame-ancestors 'self' https://sacsbi.z13.web.core.windows.net 2 script-src 'unsafe-eval' 'unsafe-inline' 'self' global.oktacdn.com manifest.prod.boltdns.ne api.tiles.mapbox.com static.cloud.coveo.com ajax.aspnetcdn.com maps.googleapis.com *.getsitecontrol.com *.clarity.ms *.bing.com siteintercept.qualtrics.com zn1xi1bzr9ed0u8xc-enbridgegas.siteintercept.qualtrics.com www.googletagmanager.com www.google.com kendo.cdn.telerik.com enerline.enbridgegas.com oc-cdn-public.azureedge.net p.typekit.net *.brightcove.net edge.api.brightcove.com *.usercentrics.eu graphql.usercentrics.eu apps.sitecore.net vjs.zencdn.net manifest.prod.boltdns.net www.google-analytics.com fast.fonts.net vjs.zencdn.net api.mapbox.com github.com fonts.googleapis.com op3static.oktacdn.com www.gstatic.com google.com/recaptcha cdn.jsdelivr.net use.typekit.net homerenorebateapi.parachutesoftware.com homerenovationsavings.ca enbridgegas.com app.usercentrics.eu cdnjs.cloudflare.com code.jquery.com www.w3.org ajax.googleapis.com datatables.net snap.licdn.com googleads.g.doubleclick.net connect.facebook.net seeaduzwul995.seea.local player.vimeo.com www.savewithgas.com ws1.postescanada-canadapost.ca az416426.vo.msecnd.net tcservices.uniongas.com enbridgegas.ca1.qualtrics.com web.cmp.usercentrics.eu js.monitor.azure.com; style-src 'unsafe-eval' 'unsafe-inline' 'self' global.oktacdn.com fonts.gstatic.com *.brightcove.net edge.api.brightcove.com *.usercentrics.eu manifest.prod.boltdns.ne api.tiles.mapbox.com static.cloud.coveo.com maps.googleapis.com *.getsitecontrol.com siteintercept.qualtrics.com zn1xi1bzr9ed0u8xc-enbridgegas.siteintercept.qualtrics.com www.googletagmanager.com www.google.com kendo.cdn.telerik.com github.com fonts.googleapis.com op3static.oktacdn.com www.gstatic.com seeaduzwul995.seea.local apps.sitecore.net vjs.zencdn.net manifest.prod.boltdns.net graphql.usercentrics.eu fast.fonts.net vjs.zencdn.net api.mapbox.com google.com/recaptcha app.usercentrics.eu cdnjs.cloudflare.com tcservices.uniongas.com enerline.enbridgegas.co oc-cdn-public.azureedge.net cdn.jsdelivr.net use.typekit.net homerenorebateapi.parachutesoftware.com homerenovationsavings.ca enbridgegas.com p.typekit.net ws1.postescanada-canadapost.ca www.w3.org getbootstrap.com enbridgegas.ca1.qualtrics.com; font-src 'self' 'unsafe-inline' fonts.googleapis.com vjs.zencdn.net fast.fonts.net fonts.gstatic.com data:; upgrade-insecure-requests; block-all-mixed-content; worker-src 'self' blob:; 2 default-src 'self' *.joinsmarty.com *.google.com *.googleapis.com *.googleoptimize.com *.googletagmanager.com *.google-analytics.com *.googleusercontent.com *.googlesyndication.com *.stripe.com *.facebook.net *.facebook.com *.pinimg.com *.bing.com *.pinterest.com *.stripe.network *.clarity.ms cdn.ywxi.net *.gstatic.com *.trustedsite.com *.transactiongateway.com cdn.sitesasset.com smrty.s3.us-west-1.amazonaws.com smrty.s3.us-west-2.amazonaws.com smrty-qa.s3.us-west-1.amazonaws.com smrty-qa.s3.us-west-2.amazonaws.com smrty.s3-us-west-1.amazonaws.com smrty.s3-us-west-2.amazonaws.com smrty-qa.s3-us-west-1.amazonaws.com smrty-qa.s3-us-west-2.amazonaws.com *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com *.ladesk.com *.doubleclick.net *.shareasale.com *.shopify.com assets-global.website-files.com *.impact.com *.cloudfront.net *.awin.net *.awin.com *.bravodeal.com *.bravo-savings-network.com *.jquery.com *.digitaloceanspaces.com data: blob: 'unsafe-inline' 'unsafe-eval' *.amazon.com *.barcodelookup.com *.cookiepro.com *.here.com *.hereapi.com *.google.co.in *.ssl-images-amazon.com *.onetrust.com media.pepperjamnetwork.com *.sentry.io *.shipmentsfree.com *.gravitycybertech.com www.googletagmanager.com ad.doubleclick.net www.advconversion.com *.taboola.com post.adgatemedia.com bat.bing.com conversions.clickmeter.com liquidpch.go2cloud.org s.yimg.com servetrack.go2cloud.org trends.revcontent.com e9lak.endtrk.com klaymedia.servecvr.com events.pushtrack.co www.groovast.com trk.shophermedia.net go.shetrack.com amplify.outbrain.com rtb.mfadsrvr.com tracking.lifestylejournal.com www.googleadservices.com *.playgamesnow.org www.drcvr.com *.mediago.io s.pinimg.com secco.servecvr.com tracking.propelmedia.com appfocus.go2cloud.org wsdk.rokt.com r.financebuzz.com static.ads-twitter.com pubads.g.doubleclick.net pushpros.go2cloud.org *.liadm.com www.steadyhop.com securetracking.adsprotection.com www.tp88trk.com f.cstpersl.com t1.anytrack.io imtrk.go2cloud.org ad.propellerads.com www.imcounting.com serve.popads.net www.pbterra.com www.chant3rm1.com eng.trkcnv.com *.dergoodting.com *.cvrdomain.com traktum.com cdn1.decide.dev restersu.info *.zeeto.io *.pixelitooo.com *.conversionpx.com f.fluadv.com track.adspostx.com *.findshipmentsfree.com *.findsmartyplus.com *.free-shipments.com *.freeshipments.com *.freeshpmts.com *.getshipmentsfree.com *.getsmartrx.com *.getsmartyapp.com *.getsmartyoffers.com *.getsmartyplus.com *.getsmartysavings.com *.goshipmentsfree.com *.joinbeautyclub.com *.joinfansclub.com *.joinfansvip.com *.joinfreedelivery.com *.joinpetsclub.com *.joinsmartyplus.com *.lapost.com *.myshipmentsfree.com *.nocostshipping.com *.savewithsmarty.com *.savingsforthesavvy.com *.scour.com *.shipmentfree.com *.shipmentprotection.com *.shipmentsfreeclub.com *.shipmentsfreeinfo.com *.shipmentsfreenow.com *.shipmentsfreepro.com *.shipmentsfreezone.com *.smartyaffiliates.com *.smartycashback.com *.smartycoins.com *.smartyestsavings.com *.smartymoneysavings.com *.smartyplus.net *.smartyplusinfo.com *.smartyplusnow.com *.smartypluszone.com *.smartypremium.com *.travyclub.com *.try-smarty.com *.tryshipmentsfree.com *.trysmartyplus.com cdn.joinsmarty.com 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https:; 2 frame-src https://bonuscake.ru https://api.bonuscake.ru https://mc.yandex.com https://smartcaptcha.yandexcloud.net; 2 object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' addtocalendar.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdn.rawgit.com https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://www.google.com https://www.tintup.com unpkg.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://apps.elfsight.com https://static.elfsight.com https://www.youtube.com https://storage.elfsight.com https://apis.google.com https://www.googletagmanager.com https://universe-static.elfsightcdn.com https://app.tintup.com https://elfsightcdn.com/platform.js addtocalendar.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdn.rawgit.com https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://www.google.com https://www.tintup.com unpkg.com; style-src 'self' 'unsafe-inline' https://p.typekit.net addtocalendar.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://use.typekit.net unpkg.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'; report-uri https://idrc-crdi.ca/en/report-uri/enforce 2 frame-ancestors 'self' https://iteh.ai https://*.iteh.ai https://theiteh.com https://*.theiteh.com https://iteh.in https://iteh.jp https://iteh.kr https://iteh.us https://iteh.eu https://iteh.be 2 img-src 'self' data: https: ; object-src 'none'; 2 frame-ancestors 'self' https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://portal.decibel.com 2 default-src 'self' https: data: blob:; script-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' https: data: blob: 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https: blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https: 2 connect-src 'self' * ws: blob:; 2 object-src 'none'; base-uri 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com https://*.usepylon.com https://*.hotjar.com; frame-ancestors 'self' https://*.hygraph.com; manifest-src 'self'; worker-src 'none'; report-to default; 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.dws.com https://*.dws.de https://*.deawm.com wss://push.etf.dws.com https://dws.extraetf.com https://*.rreefpropertytrust.com https://*.tealiumiq.com https://*.webtrekk.com https://*.wbtrk.net https://*.mateti.net https://fbc.wcfbc.net https://*.linkedin.com https://*.facebook.net https://*.facebook.com https://cx.atdmt.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.de https://www.google.com https://*.tiqcdn.com https://snap.licdn.com https://ad.doubleclick.net https://td.doubleclick.net https://*.brightcove.net https://*.brightcove.com https://*.brightcovecdn.com https://*.boltdns.net https://vjs.zencdn.net https://*.akamaihd.net https://*.akafms.net https://*.llnwd.net https://*.llnw.net https://vjs.zencdn.net https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://maps.gstatic.com https://*.fls.doubleclick.net https://bounce.exacttarget.com https://exacttarget.com https://*.marketingcloudapps.com https://*.prod.adesso-financial.de https://*.cdn.adesso-financial.de; font-src 'self' data: https://vjs.zencdn.net; img-src 'self' data: https://*.brightcove.net https://*.brightcove.com https://*.brightcovecdn.com https://*.boltdns.net https://vjs.zencdn.net https://*.akamaihd.net https://*.akafms.net https://*.llnwd.net https://*.llnw.net https://*.tealiumiq.com https://*.webtrekk.com https://*.wbtrk.net https://*.mateti.net https://fbc.wcfbc.net https://*.linkedin.com https://*.facebook.net https://*.facebook.com https://cx.atdmt.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.de https://www.google.com https://*.tiqcdn.com https://snap.licdn.com https://ad.doubleclick.net https://td.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://*.dws.com https://*.dws.de https://*.deawm.com wss://push.etf.dws.com https://dws.extraetf.com https://*.rreefpropertytrust.com https://*.prod.adesso-financial.de https://*.cdn.adesso-financial.de https://*.fls.doubleclick.net; media-src 'self' blob: https://*.brightcove.net https://*.brightcove.com https://*.brightcovecdn.com https://*.boltdns.net https://vjs.zencdn.net https://*.akamaihd.net https://*.akafms.net https://*.llnwd.net https://*.llnw.net; worker-src 'self' blob:; object-src 'self' blob:; child-src 'self'; frame-src 'self' https://*.everviz.com https://*.highcharts.com https://vds.issgovernance.com https://*.dws.de https://*.dws.com https://*.mateti.net https://*.equitystory.com https://*.fls.doubleclick.net https://td.doubleclick.net; frame-ancestors 'self'; form-action 'self' https://download.dws.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'unsafe-inline' 'self' https: https://cdnjs.cloudflare.com https://www.googletagmanager.com http://*.google.com https://*.google.com https://unpkg.com http://www.google-analytics.com https://*.googleapis.com https://cdn.userway.org http://*.sharethis.com https://*.sharethis.com https://cdn.jsdelivr.net https://appleid.cdn-apple.com https://momentjs.com https://code.jquery.com; style-src 'self' 'unsafe-inline' https: https://cdn.jsdelivr.net https://unpkg.com https://*.googleapis.com; img-src 'self' data: https: ; connect-src https: wss: ; font-src 'self' data: https: ; frame-src 'self' https: ; 2 frame-ancestors 'self' cdn.matrixlms.com 2 default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.google.com https://www.gstatic.com/recaptcha/ *.bing.com *.clarity.ms 'sha256-OV+W5aN+wXLQMwrLt6Me/DVM/QLZyWr6AqI2ONGntw8='; connect-src 'self' google.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.google.com *.bing.com *.clarity.ms; script-src-elem 'self' *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.google.com https://www.gstatic.com/recaptcha/ *.bing.com *.clarity.ms 'sha256-OV+W5aN+wXLQMwrLt6Me/DVM/QLZyWr6AqI2ONGntw8='; img-src 'self' google.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.google.com *.bing.com *.clarity.ms; style-src 'self' 'unsafe-hashes' *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.google.com 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'sha256-/Q4se7FLGCaPFRdiDgb/uQcgnY12w7eKaV8TA9b4SEc='; frame-ancestors 'self'; form-action 'self'; manifest-src 'self'; font-src 'self'; frame-src 'self' *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.google.com https://www.gstatic.com/recaptcha/ 2 frame-ancestors 'self' https://pay.standard.com.py https://*.standard.com.py; 2 script-src * 'report-sample' 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; font-src 'self' https://cdn.reactandshare.com https://fast.b-cdn.net https://www.dna.fi *.giosg.com *.giosgusercontent.com *.interactionbuilder.giosg.com *.mux.com data:; object-src 'none'; frame-src * 2 default-src blob: https: wss://*.hotjar.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: https:;font-src 'self' data: https:;worker-src blob: https:;frame-ancestors 'self' 2 frame-ancestors https://www.gwr.com/ https://www.railhelp.co.uk/gwr/ https://railcards.gwr.com/ https://cloud.e.gwr.com https://rewards.gwr.com; report-uri https://tap2go.report-uri.com/r/t/csp/enforce 2 frame-ancestors 'self' https://app.storyblok.com https://www.pinterest.com 2 default-src 'self' https://b2b.jako.com b2b.jako.com ws://127.0.0.1:35729 *.juicer.io *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://b2b.jako.com b2b.jako.com 'self' 'unsafe-eval' 'unsafe-inline' *.hotjar.com *.convertexperiments.com *.juicer.io *.cloudfront.net *.userlike.com *.ssl-images-amazon.com *.amazon.com *.amazon.de *.payments-amazon.com *.googleapis.com googlemaps.github.io *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.trustedshops.com *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com *.jquery.com *.googleadservices.com bat.bing.com googleads.g.doubleclick.net analytics.webgains.io w-it.m-t.io *.container.webgains.link track.webgains.com *.webgains.io *.amazonaws.com *.instagram.com api.sovendus.com cdn.jsdelivr.net *.googleoptimize.com https://c.paypal.com *.hello-charles.com https://maps.googleapis.com https://*.vbotickets.com https://98m0fp.jako.com 98m0fp.jako.com *.paqato.com *.gsitrix.com; style-src 'self' https://b2b.jako.com b2b.jako.com 'self' 'unsafe-inline' *.juicer.io *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.trustedshops.com cdn.jsdelivr.net *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com https://*.vbotickets.com *.paqato.com; img-src 'self' https://b2b.jako.com b2b.jako.com 'self' data: https://*.amazon.com https://*.amazon.de *.juicer.io *.ggpht.com *.trustedshops.com *.ssl-images-amazon.com https://*.payments-amazon.com https://*.google-analytics.com https://d23yuld0pofhhw.cloudfront.net *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de *.g.doubleclick.net *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com bat.bing.com *.amazonaws.com *.atdmt.com *.mollie.com *.myafterpay.com https://c.paypal.com https://b.stats.paypal.com userlike-cdn-operators.userlike.com m.media-amazon.com blob: *.paqato.com; font-src 'self' https://b2b.jako.com b2b.jako.com 'self' data: *.juicer.io *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.trustedshops.com *.cloudfront.net *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com *.paqato.com; object-src 'self' https://b2b.jako.com b2b.jako.com 'self'; media-src 'self' https://b2b.jako.com b2b.jako.com 'self' *.googleapis.com *.gstatic.com *.juicer.io *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com; child-src 'self' https://b2b.jako.com b2b.jako.com 'self' https://www.computop-paygate.com https://www.fussball.de/static/layout/fbde2/egm//js/widget2.js https://*.amazon.de https://*.amazon.com https://*.payments-amazon.com *.googleapis.com *.hotjar.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com *.amazonaws.com *.webgains.link https://td.doubleclick.net https://*.vbotickets.com *.sovendus.com *.sovendus-connect.com https://c.paypal.com *.instagram.com *.container.webgains.link *.dpd.cz; form-action 'self' https://b2b.jako.com b2b.jako.com payments.amazon.de https://www.facebook.com *.mollie.com https://*.ppro.com https://*.ideal.nl *.twint.ch; frame-ancestors 'self' https://b2b.jako.com b2b.jako.com 'self' *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com https://www.vbotickets.com https://mubea.staffbase.com *.dpd.cz https://jako-teamhome-staging.web.app https://jako-teamhome.web.app https://jako-teamhome-development.web.app; connect-src 'self' https://b2b.jako.com b2b.jako.com 'self' wss://ws.hotjar.com *.hotjar.io *.hotjar.com *.convertexperiments.com *.googleapis.com *.google.com *.trustedshops.com *.google-analytics.com w-it.m-t.io *.webgains.io *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com *.doubleclick.net *.amazonaws.com *.cloudfront.net *.userlike.com wss://umd.userlike.com *.bing.com https://integration-api.sovendus.com https://identification-api.sovendus.com *.mollie.com *.algolia.net *.algolianet.com *.facebook.com *.hello-charles.com *.googleadservices.com www.juicer.io https://98m0fp.jako.com 98m0fp.jako.com https://bat.bing.net connect.facebook.net https://google.com https://google.de *.paqato.com https://analytics-ipv6.tiktokw.us *.gsitrix.com; worker-src 'self' https://b2b.jako.com b2b.jako.com 'self' blob: *.bing.com *.clarity.ms *.dc-test.de *.jako.com *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.paypalobjects.com *.paypal.com *.b-cdn.net *.jfnet.de https://analytics.tiktok.com *.thinkowl.com; 2 default-src 'self' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com *.inviewuclab.com static.zdassets.com js.stripe.com *.google.com *.gstatic.com gstatic.com connect.facebook.net *.zendesk.com blob: ; script-src-elem 'self' 'unsafe-inline' https://maps.googleapis.com api.mapbox.com *.google.com *.gstatic.com static.zdassets.com js.stripe.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cdn.datatables.net ; style-src-elem 'self' 'unsafe-inline' api.mapbox.com fonts.googleapis.com cdn.datatables.net ; style-src-attr 'unsafe-inline' ; img-src 'self' https://maps.gstatic.com https://maps.googleapis.com data: blob: 127.0.0.1:18623 *.mapbox.com *.facebook.com *.google.com *.gstatic.com ; frame-src 'self' *.google.com *.google.ie js.stripe.com player.vimeo.com www.youtube.com; font-src 'self' https://fonts.gstatic.com data: gstatic.com *.gstatic.com *.alicdn.com ; connect-src 'self' https://google.com *.google.com https://maps.googleapis.com https://maps.gstatic.com ekr.zdassets.com *.zendesk.com wss://127.0.0.1:18623 https://127.0.0.1:18623 mlts.dynamsoft.com *.mapbox.com https://events.mapbox.com *.inviewuclab.com https://tiles.openfreemap.org https://export.highcharts.com ; worker-src 'self' blob: ; upgrade-insecure-requests ; report-uri https://9a1a6d99ab6aa4ac3290a60bae476ab7.report-uri.com/r/d/csp/enforce 2 default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; script-src 'self' https://*.azurewebsites.net https://latvija.gov.lv https://*.viss.gov.lv https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.doubleclick.net https://googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com https://*.azurewebsites.net https://latvija.gov.lv https://*.viss.gov.lv https://data.gov.lv 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com https://eservices.viss.gov.lv https://latvija.gov.lv data:; img-src 'self' blob: data: https://*.blob.core.windows.net https://*.cloudfront.net https://latvija.gov.lv https://*.viss.gov.lv https://*.windows.net https://*.youtube.com https://*.google-analytics.com https://*.google.lv https://*.captchas.net https://hugo3botpublicresource.blob.core.windows.net; media-src 'self' https://audio.captchas.net; connect-src 'self' https://*.google.lv https://latvija.gov.lv https://*.viss.gov.lv https://va.hugo.lv wss://directline.botframework.com https://directline.botframework.com https://*.g.doubleclick.net https://www.google-analytics.com https://*.analytics.google.com https://www.google.com; frame-src 'self' https://latvija.gov.lv https://*.viss.gov.lv https://*.youtube.com https://*.doubleclick.net https://td.doubleclick.net https://data.gov.lv https://*.googletagmanager.com; worker-src 'self' blob: https://latvija.gov.lv https://*.viss.gov.lv https://*.azurewebsites.net; manifest-src 'self'; 2 default-src 'self'; script-src 'self' *.google-analytics.com *.googleapis.com *.google.com *.googletagmanager.com blob: https://*.jioaicloud.com blob: https://*.jiocloud.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.jiocloud.com *.jioaicloud.com https://*.cdn-apple.com https://*.facebook.net https://*.cloudfront.net https://*.wzrkt.com https://*.akamaized.net 'unsafe-inline' 'unsafe-eval' https://www.pagespeed-mod.com; img-src 'self' https://*.api-setu.in https://*.digitallocker.gov.in https://www.facebook.com https://scontent.xx.fbcdn.net https://www.google.co.in https://*.jiocloud.com https://*.jioaicloud.com https://*.officeapps.live.com https://*.cdn.office.net https://res.public.onecdn.static.microsoft https://res.df.onecdn.static.microsoft https://*.googletagmanager.com https://*.ytimg.com *.google-analytics.com *.googleusercontent.com blob: https://*.jiocloud.com https://*.jioaicloud.com blob: https://*.jioaicloud.com data: ; style-src 'self' https://cdnjs.cloudflare.com https://*.jiocloud.com https://*.jioaicloud.com https://maxcdn.bootstrapcdn.com 'unsafe-inline'; connect-src 'self' blob: https://*.jiocloud.com blob: https://*.jioaicloud.com *.google-analytics.com *.googleapis.com *.google.com *.googletagmanager.com https://photosapi.jio.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://stats.g.doubleclick.net https://*.facebook.com wss://*.jiocloud.com wss://*.jioaicloud.com https://*.jiocloud.com https://*.jioaicloud.com https://www.facebook.com data:; font-src 'self' data: https://*.jiocloud.com data: https://*.jioaicloud.com ; media-src 'self' blob: https://*.jiocloud.com blob: https://*.jioaicloud.com; frame-src 'self' personal.jiocloudpc.in testhylite.accops.com *.tejdrive.com *.google.com https://*.googleapis.com https://*.jiocloud.com https://*.jioaicloud.com https://youtube.com https://*.youtube.com https://*.officeapps.live.com https://*.cdn.office.net https://res.public.onecdn.static.microsoft https://res.df.onecdn.static.microsoft; frame-ancestors 'self' personal.jiocloudpc.in testhylite.accops.com *.tejdrive.com *.google.com https://*.jiocloud.com https://*.jioaicloud.com; form-action 'self' *.google.com https://*.jiocloud.com https://*.jioaicloud.com https://*.officeapps.live.com https://*.cdn.office.net https://res.public.onecdn.static.microsoft https://res.df.onecdn.static.microsoft https://*.jio.com https://*.jiolabs.com; worker-src 'self' blob: https://*.jiocloud.com blob: https://*.jioaicloud.com; 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline' data: blob:; img-src * data: blob:; font-src * data: blob:; connect-src * wss: ws: data: blob:; frame-src * data: blob:; object-src * data: blob:; worker-src * 'unsafe-inline' 'unsafe-eval' data: blob:; base-uri *; form-action *; 2 default-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com m.lotto.de www.lotto.de lotto.de miframe.lotto.de iframe.lotto.de trck.spoteffects.net www.youtube.com localhost:; script-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com connect.facebook.net cdn.1tag.dentsu.de delivery.1tag.dentsu.de responder.wt-safetag.com tags.tiqcdn.com app.usercentrics.eu privacy-proxy.usercentrics.eu privacy-proxy-server.usercentrics.eu a1.adform.net s2.adform.net 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com www.google.com data1.bresera.com data1.open-dog.com connect.facebook.net tags.tiqcdn.com cdn.1tag.dentsu.de delivery.1tag.dentsu.de responder.wt-safetag.com tags.tiqcdn.com app.usercentrics.eu privacy-proxy.usercentrics.eu privacy-proxy-server.usercentrics.eu app.eu.usercentrics.eu a1.adform.net s2.adform.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com translate.googleapis.com cdn.1tag.dentsu.de delivery.1tag.dentsu.de 'unsafe-inline'; style-src-elem 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com www.gstatic.com 'unsafe-inline'; connect-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com m.lotto.de www.lotto.de lotto.de miframe.lotto.de iframe.lotto.de mpc-prod-21-1053047382554.us-central1.run.app 5z-2b6b7616f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws www.youtube.com trck.spoteffects.net cdn.1tag.dentsu.de delivery.1tag.dentsu.de www.facebook.com connect.facebook.net translate.googleapis.com api.usercentrics.eu ib.adnxs.com consent-api.service.consent.usercentrics.eu privacy-proxy.usercentrics.eu privacy-proxy-server.usercentrics.eu cdn.dynamicyield.com st-eu.dynamicyield.com aggregator.service.usercentrics.eu graphql.usercentrics.eu ws://localhost:12387/ data:; font-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com fonts.gstatic.com api.rabatta.app data:; img-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com s.w.org ps.w.org www.gstatic.com secure.gravatar.com cdn.1tag.dentsu.de delivery.1tag.dentsu.de eurojackpot.webtrekk.net fbc.wcfbc.net ad3.adfarm1.adition.com imagesrv.adition.com i.ytimg.com www.facebook.com connect.facebook.net fonts.gstatic.com app.usercentrics.eu uct.service.usercentrics.eu privacy-proxy-server.usercentrics.eu insight.adsrvr.org a1.adform.net insight.adsrvr.org www.googleadservices.com adservice.google.com *.googleapis.com www.google-analytics.com translate.google.com pagead2.googlesyndication.com www.google.com www.google.de www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.cr www.google.co.in www.google.co.kr www.google.com www.google.co.ma www.google.com.br www.google.com.cy www.google.com.do www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.mx www.google.com.ph www.google.com.sg www.google.com.tr www.google.com.ua www.google.co.th www.google.co.uk www.google.co.ve www.google.co.za www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.lk www.google.lu www.google.lv www.google.me www.google.mk www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk data:; child-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com www.googleapis.com cdn.1tag.dentsu.de delivery.1tag.dentsu.de blob:; frame-src 'self' prodmrm.eurojackpot.de prodmrm.eurojackpot.com eurojackpot.de www.eurojackpot.de eurojackpot.com www.eurojackpot.com m.lotto.de www.lotto.de lotto.de miframe.lotto.de iframe.lotto.de www.youtube-nocookie.com www.facebook.com app.usercentrics.eu; base-uri 'self'; report-uri https://1934a11189c9ec9d302de0ee10e4c650.report-uri.com/r/t/csp/enforce 2 frame-ancestors 'self'; object-src 'none'; upgrade-insecure-requests 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://*.newsletter2go.com https://static.newsletter2go.com; img-src 'self' data: blob: https://files.newsletter2go.com; #style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-ancestors 'self'; form-action 'self'; 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.google.com.ph https://*.google.co.in https://*.googleadservices.com https://*.gstatic.com https://*.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.decibelinsight.net https://*.zi-scripts.com https://js-agent.newrelic.com https://*.qualtrics.com https://*.rxo.com https://*.licdn.com https://*.clarity.ms https://*.ads-twitter.com https://*.facebook.net https://*.facebook.com https://*.hotjar.com https://*.demandbase.com https://*.stackadapt.com https://*.doubleclick.net https://*.zoominfo.com https://cdn.redoc.ly; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://*.hotjar.com https://*.stackadapt.com https://*.rxo.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https: data: blob:; connect-src 'self' blob: https: wss:; frame-src 'self' https://*.rxo.com https://*.googletagmanager.com https://*.qualtrics.com https://*.google.com https://*.google.com.ph https://*.google.co.in https://*.cloudflarestream.com https://*.doubleclick.net https://*.company-target.com; child-src 'self' https://*.rxo.com https://*.qualtrics.com; worker-src 'self' blob:; 2 default-src 'self' https://ps.w.org/ https://s.w.org/images/ https://createsend.com https://js.createsend1.com https://geolocation.onetrust.com https://privacyportal.onetrust.com https://plugin-updates.wpengine.com https://ams.wpml.org https://js.stripe.com https://resources.bamboohr.com https://leapeventtech.bamboohr.com https://cdn.cookielaw.org https://privacy-policy.truste.com https://stats.g.doubleclick.net https://truste.com https://*.google.com https://googleads.g.doubleclick.net https://cdn.mouseflow.com https://*.mouseflow.com https://pi.pardot.com https://leapevent.tech https://go.leapevent.tech https://static.cloudflareinsights.com https://*.licdn.com https://rdcdn.com https://*.ads.linkedin.com https://*.cloudflareinsights.com https://*.google-analytics.com https://api.marker.io https://fonts.gstatic.com https://*.gravatar.com https://browser.sentry-cdn.com https://player.vimeo.com https://ajax.cloudflare.com https://*.cloudflare.com https://assets.apollo.io https://aplo-evnt.com https://*.google.com.au https://alocdn.com https://*.liadm.com https://*.googletagmanager.com https://d-code.liadm.com https://edge.marker.io https://huemor.rocks https://*.googleapis.com https://*.jsdelivr.net https://*.trustarc.com https://*.floridapanthers.com https://*.exacttarget.com 'unsafe-inline' 'unsafe-eval' data: blob: 2 default-src 'self' *.nrw.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net; style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net; font-src data: *; img-src data: *; frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com; worker-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de; frame-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de; object-src 'self'; connect-src 'self' *.nrw.de svc.webspellchecker.net; media-src *; upgrade-insecure-requests; 2 block-all-mixed-content; child-src blob:; connect-src 'self' https://*.limelight.com https://*.google-analytics.com https://*.bing.com https://*.mktoresp.com https://*.doubleclick.net https://*.wisepops.com https://*.medallia.com https://*.kampyle.com https://*.mapbox.com https://*.googlevideo.com https://*.llnw.net https://*.facebook.com https://*.cookielaw.org https://*.clarity.ms https://*.clickagy.com https://*.onetrust.com https://*.msasafety.com https://*.zoominfo.com https://*.usetiful.com https://*.mktoutil.com https://*.hotjar.io https://cdn.linkedin.oribi.io https://*.googleapis.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.rumiview.com wss://*.hotjar.com https://*.hotjar.com https://*.csp-1.com https://csp-1.picarioxpo.com https://*.tockify.com https://tockify.com https://app.getwisp.co https://*.wisepops.net https://*.qzzr.com https://*.algolianet.com https://*.algolia.net https://*.kudoboard.com https://*.curator.io https://*.pricespider.com https://cdnjs.cloudflare.com https://*.algolia.io https://wisepops.net https://*.tiles.mapbox.com wss: https://px.ads.linkedin.com https://*.niceincontact.com https://*.uplynk.com https://pactsafe.io https://lexipol.blueconic.net https://msasafety.my.salesforce-sites.com https://*.scene7.com; default-src 'self'; font-src 'self' data: https://*.gstatic.com https://*.fontawesome.com https://*.cloudfront.net https://*.typekit.net https://*.pricespider.com https://*.niceincontact.com; frame-src 'self' https://*.msasafety.com https://*.google.com https://*.doubleclick.net https://*.marketo.com https://*.bing.com https://*.hotjar.com https://*.medallia.com https://*.zoho.com https://*.metalocator.com https://*.youtube.com https://*.sierramonitor.com https://*.123formbuilder.com https://*.clickagy.com https://*.facebook.com https://*.webdamdb.com https://*.force.com https://*.office.com https://*.csp-1.com https://msasafety.wufoo.com https://*.tockify.com https://tockify.com https://*.vimeo.com https://www.firegrantshelp.com https://*.qzzr.com https://*.riddle.com https://*.surveymonkey.com https://www.mybacharach.com https://*.kudoboard.com https://*.extforms.netsuite.com https://*.app.netsuite.com https://*.marketingautomation.services https://*.wisepops.com https://*.wisepops.net https://wisepops.net https://insight.adsrvr.org https://msa.webdamdb.com/ https://*.niceincontact.com https://*.instagram.com https://jfrog-prod-use1-shared-virginia-main.s3.amazonaws.com https://*.googletagmanager.com https://content.uplynk.com https://msasafety700.outgrow.us https://*.uplynk.com https://*.heygen.com; img-src data: 'self' https://*.googletagmanager.com https://*.pricespider.com https://*.googleadservices.com https://*.linkedin.com https://*.doubleclick.net https://*.bing.com https://*.facebook.com https://*.google-analytics.com https://*.cookielaw.org https://*.clarity.ms https://*.metalocator.com https://*.msasafety.com https://*.webdamdb.com https://*.kickfire.com https://*.kampyle.com https://*.simpli.fi https://*.rumiview.com https://*.webtraxs.com https://*.analytics.google.com https://*.adroll.com https://*.g.doubleclick.net https://*.ads.linkedin.com https://*.clickagy.com https://*.msafire.com https://*.content.video.llnw.net https://*.csp-1.com https://csp-1.picarioxpo.com https://id.rlcdn.com https://pixel-sync.sitescout.com https://blog.sierramonitor.com https://*.wisepops.net https://dx4nr741tfc02.cloudfront.net https://wisp-production-storage.s3.amazonaws.com https://*.wisepops.com https://*.mapbox.com https://safetyio.com https://*.safetyio.com blob: https://img.delvenetworks.com https://pixel-geo.prfct.co https://blog.fieldserver.com https://curator-assets.b-cdn.net https://*.curator.io https://*.niceincontact.com/ https://dummyimage.com https://*.placeholder.com https://placehold.it https://*.uplynk.com https://media.msasafety.com.cn https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://msasafety.bynder.com https://msasafety.my.salesforce-sites.com/ https://*.scene7.com; media-src 'self' blob: https://*.llnw.net https://*.webdamdb.com/ https://*.curator.io https://curator-assets.b-cdn.net/ https://*.shutterstock.com https://*.uplynk.com/ https://msasafety.bynder.com assetlibrary.msasafety.com https://*.cdninstagram.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.msasafety.com https://*.pricespider.com https://*.limelight.com https://*.marketo.com https://*.marketo.net https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.gstatic.com https://*.bing.com https://*.doubleclick.net https://*.hotjar.com https://*.facebook.net https://*.wisepops.com https://*.adobedtm.com https://*.licdn.com https://*.medallia.com https://*.kampyle.com https://*.kickfire.com https://*.simpli.fi https://*.google.com https://*.metalocator.com https://*.mapbox.com https://*.sierramonitor.com https://*.zohostatic.com https://*.usersnap.com https://*.cloudfront.net https://*.youtube.com https://*.cookielaw.org https://*.clarity.ms https://*.clickagy.com https://*.123formbuilder.com https://*.zoominfo.com https://*.usetiful.com https://*.webtraxs.com https://*.adroll.com https://*.rumiview.com https://*.la5-c2-ia4.salesforceliveagent.com https://*.jquery.com https://*.force.com https://*.g.doubleclick.net https://*.csp-1.com https://*.tockify.com https://tockify.com https://*.wisepops.net https://app.getwisp.co https://*.qzzr.com https://cdn.jsdelivr.net https://koi-3QNJ3FOY90.marketingautomation.services https://curator.io https://*.curator.io https://*.marketingautomation.services https://wisepops.net https://cdnjs.cloudflare.com https://tag.perfectaudience.com https://js.adsrvr.org https://*.tiles.mapbox.com https://pixel-geo.prfct.co https://*.niceincontact.com https://*.instagram.com https://webapps.msasafety.com https://*.uplynk.net https://*.uplynk.com https://pactsafe.io https://*.pactsafe.io https://msasafety.bynder.com https://*.blueconic.net https://msasafety.my.salesforce-sites.com https://*.scene7.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://*.mapbox.com https://*.pricespider.com https://*.tiles.mapbox.com https://*.msasafety.com https://www.usetiful.com https://*.fontawesome.com https://*.googleapis.com https://*.typekit.net https://*.curator.io/ https://*.niceincontact.com https://*.uplynk.com https://*.blueconic.net https://msasafety.my.salesforce-sites.com/ https://*.scene7.com https://tsp.wyf.mybluehost.me; upgrade-insecure-requests; worker-src 'self' blob:; report-uri /.webscale/csp-report 2 frame-ancestors 'self' https://m-redbus-id.cdn.ampproject.org https://www.google.com https://www.google.co.id https://m.redbus.id https://seocms.redbus.com; default-src 'self' https://c.riskified.com wss://*.firebaseio.com wss://rbpub.redbus.com h.online-metrix.net https://s3.rdbuz.com https://*.doubleclick.net https://graph.facebook.com https://*.redbus.in https://*.redbus.com https://*.googleapis.com https://www.google-analytics.com http://www.googletagmanager.com https://*.google.com https://*.google.co.in https://*.facebook.net http://www.googleadservices.com https://www.facebook.com https://recorder.sessionstack.com https://o2.mouseflow.com/; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.tiktok.com *.sentry-cdn.com www.lacmp.net flackr.github.io cdn.branch.io cdn.moengage.com beacon.riskified.com tags.tiqcdn.com http://cdn-akamai.mookie1.com https://*.firebaseio.com https://h.online-metrix.net https://*.twitter.com https://static.ads-twitter.com https://*.googletagservices.com https://bam.nr-data.net https://*.doubleclick.net https://maxcdn.bootstrapcdn.com https://*.google.com https://cdn.jsdelivr.net https://sslwidget.criteo.com https://static.criteo.net https://cdn.mouseflow.com https://bat.bing.com https://maps.googleapis.com http://sg-pl.vizury.com https://cdnjs.cloudflare.com http://www.redbus.in https://www.redbus.in https://adservice.google.co.in https://ssl.google-analytics.com https://connect.facebook.net http://pagead2.googlesyndication.com http://www.google-analytics.com https://cdn.sessionstack.com http://www.googletagmanager.com http://connect.facebook.net https://*.googleadservices.com https://*.rdbuz.com https://*.redbus.in https://www.gstatic.com http://*.rdbuz.com; img-src 'self' data: blob: img.youtube.com niubizqr.pagoefectivo.pe img.riskified.com moe-email-campaigns.s3.amazonaws.com image.moengage.com web-elb *.online-metrix.net *.goibibo.com barcode-latam.s3.amazonaws.com t.co www.googletagmanager.com *.doubleclick.net tpc.googlesyndication.com maps.gstatic.com maps.googleapis.com rb-plus.s3.ap-southeast-1.amazonaws.com s3-ap-southeast-1.amazonaws.com *.s3-ap-southeast-1.amazonaws.com h.online-metrix.net bat.bing.com www.google.co.in origin-st.redbus.in www.redbus.in www.redbus.in *.google.com www.google-analytics.com https://ssl.google-analytics.com https://*.facebook.com https://*.rdbuz.com https://st.redbus.in http://*.rdbuz.com http://st.redbus.in https://api.midtrans.com https://www.glassdoor.co.in; style-src blob: 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://*.google.com https://cdnjs.cloudflare.com https://www.w3schools.com http://fonts.googleapis.com https://fonts.googleapis.com https://*.rdbuz.com https://st.redbus.in http://*.rdbuz.com http://st.redbus.in; font-src 'self' data: https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.gstatic.com http://*.rdbuz.com http://st.redbus.in https://fonts.gstatic.com https://*.rdbuz.com https://st.redbus.in; frame-src 'self' *.rdbuz.com st.redbus.in payment.pagoefectivo.pe *.firebaseapp.com *.firebaseio.com www.surveymonkey.com *.google.com isb.au1.qualtrics.com www.googletagservices.com *.redbus.com h.online-metrix.net checkout.payulatam.com *.doubleclick.net in-tags.vizury.com sg-pl.vizury.com *.facebook.com www.youtube.com dis.as.criteo.com; object-src 'self'; connect-src 'self' *.apm.ap-south-1.aws.elastic-cloud.com flackr.github.io browser.sentry-cdn.com *.ingest.de.sentry.io www.lacmp.net wss://rbpub.redbus.com s3-ap-southeast-1.amazonaws.com *.moengage.com analytics.google.com o2.mouseflow.com *.redbus.com *.doubleclick.net *.riskified.com www.google-analytics.com graph.facebook.com accounts.google.com 2 frame-ancestors 'self' https://*.gothaer.de https://*.barmenia.cloud http://localhost:* https://*.barmenia24.de; 2 img-src 'self' data: https: blob:; 2 default-src 'self';base-uri 'self';connect-src 'self' www.oogarden.com www.oogarden.be www.oogarden.de www.gardented.com www.oogarden.com:8091 www.oogarden.com:8092 www.gardented.com:8091 www.gardented.com:8092 *.76310.fr api.gls-group.net cdnjs.cloudflare.com *.facebook.com *.facebook.net *.iadvize.com *.datadome.co *.captcha-delivery.com *.pinterest.com bat.bing.com bat.bing.net www.google.com www.google.fr *.doubleclick.net pagead2.googlesyndication.com tss.oogarden.com www.googleadservices.com *.adtrafficquality.google *.analytics.google.com *.google-analytics.com *.tiktok.com *.tiktokw.us *.clarity.ms *.sensefuel.live *.search.sensefuel.live analytics.clic2buy.com;font-src 'self' cdn.oogarden.net cdn.gardented.net *.iadvize.com fonts.gstatic.com *.sensefuel.live *.search.sensefuel.live;form-action 'self' sogecommerce.societegenerale.eu sherlocks-payment-webinit.secure.lcl.fr payment-webinit.mercanet.bnpparibas.net *.facebook.com *.facebook.net;frame-ancestors 'self' *.datadome.co *.captcha-delivery.com ooerpbi.oogarden.com:8124 ooerpbi.oogarden.com:8125 ooerp.oogarden.com:8124 ooerp.oogarden.com:8125 *.oogarden.com *.oogarden.be *.oogarden.de *.gardented.com cdn.oogarden.net cdn.gardented.net api.gls-group.net;frame-src 'self' media.oogarden.com cdn.oogarden.net cdn.gardented.net *.captcha-delivery.com api.gls-group.net *.facebook.com *.facebook.net *.pinterest.com *.google.com *.google.fr *.adtrafficquality.google pagead2.googlesyndication.com tss.oogarden.com www.googletagmanager.com *.youtube.com *.sensefuel.live *.search.sensefuel.live t.clic2buy.com;img-src 'self' data: media.oogarden.com cdn.oogarden.net cdn.gardented.net *.facebook.com *.facebook.net *.iadvize.com bat.bing.com bat.bing.net www.google.com www.google.fr *.analytics.google.com *.google-analytics.com www.googletagmanager.com *.adtrafficquality.google www.googleadservices.com *.doubleclick.net pagead2.googlesyndication.com *.openstreetmap.org t4.my-probance.one tss.oogarden.com i.ytimg.com *.sensefuel.live *.search.sensefuel.live *.youtube.com;media-src 'self' media.oogarden.com cdn.oogarden.net cdn.gardented.net *.sensefuel.live *.search.sensefuel.live;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' www.oogarden.com www.oogarden.be www.oogarden.de www.gardented.com media.oogarden.com cdn.oogarden.net cdn.gardented.net *.76310.fr api.gls-group.net cdnjs.cloudflare.com *.facebook.com *.facebook.net *.iadvize.com *.datadome.co *.captcha-delivery.com bat.bing.com bat.bing.net cmodul.solutenetwork.com *.adtrafficquality.google *.doubleclick.net pagead2.googlesyndication.com *.analytics.google.com *.google-analytics.com t4.my-probance.one tss.oogarden.com www.google.com www.google.fr www.googletagmanager.com www.gstatic.com www.youtube.com *.pinterest.com *.tiktok.com *.tiktokw.us s.pinimg.com *.clarity.ms *.sensefuel.live *.search.sensefuel.live rs.clic2buy.com;style-src 'self' 'unsafe-eval' 'unsafe-inline' media.oogarden.com cdn.oogarden.net cdn.gardented.net cdnjs.cloudflare.com fonts.googleapis.com *.iadvize.com www.googletagmanager.com *.sensefuel.live *.search.sensefuel.live;upgrade-insecure-requests;worker-src 'self' blob:; 2 default-src 'self'; script-src 'self' https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.google-analytics.com/ https://*.analytics.google.com https://www.googletagmanager.com https://translate.google.com https://www.paypal.com/ https://www.sandbox.paypal.com/ https://js.stripe.com/ https://*.js.stripe.com/; style-src 'unsafe-inline' 'self'; frame-src https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.paypal.com/ https://www.sandbox.paypal.com/ https://js.stripe.com/ https://*.js.stripe.com/ https://www.youtube.com/; child-src 'self'; img-src 'self' data: https://*.google-analytics.com https://*.analytics.google.com; font-src data:; connect-src blob: https://api.textures.com/ https://api-v3.textures.com/ https://www.textures.com/ https://www.paypal.com/ https://www.sandbox.paypal.com/ https://js.stripe.com/ https://stats.g.doubleclick.net https://*.google-analytics.com/ https://*.analytics.google.com; worker-src 'self'; form-action 'self'; object-src 'self'; base-uri 'self'; frame-ancestors 'self' https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.paypal.com/ https://www.sandbox.paypal.com/ https://js.stripe.com/; upgrade-insecure-requests; media-src 'self'; prefetch-src 'self'; manifest-src 'self'; 2 frame-src 'self' https://www.google.com https://www.gstatic.com; default-src 'self' https://*.typekit.net https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://cdnjs.cloudflare.com https://assets.adobedtm.com https://solutions.invocacdn.com https://www.gstatic.com https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com https://use.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://*.google.com https://www.gstatic.com https://*.hmhs.com https://pnapi.invoca.net https://edge.adobedc.net https://adobedc.demdex.net https://*.qualtrics.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; img-src 'self' https://*.qualtrics.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' 'unsafe-inline' https: data:; connect-src 'self' https:; font-src 'self' https: data:; frame-ancestors 'self' https://policy.cookiereports.com; frame-src 'self' 'unsafe-inline' https: 2 frame-ancestors https://dashboard.canvasondemand.com https://donatello.canvaspop.com https://donatello.inside.canvaspophq.com https://local.ecommerce 2 base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; form-action 'self' https://*.hsforms.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob: data:; frame-src https:; manifest-src 'self'; 2 default-src 'self'; base-uri 'self'; connect-src 'self' https://*.google.com https://px.deepintent.com https://*.clarity.ms https://*.googletagmanager.com https://*.google-analytics.com https://*.scene7.com https://eu-api.friendlycaptcha.eu https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://cdn.cookielaw.org https://github.com https://endpoint-app.cognigy.ai https://*.go-mpulse.net https://edge.adobedc.net https://*.qualtrics.com https://objects.githubusercontent.com https://*.biontech.com https://*.akstat.io https://*.akamaihd.net https://api.friendlycaptcha.com/api/v1/puzzle https://biontech-privacy.my.onetrust.com https://*.algolia.net https://*.algolianet.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://googleads.g.doubleclick.net https://www.youtube.com https://*.clarity.ms https://*.googletagmanager.com https://*.google-analytics.com https://*.scene7.com https://www.gstatic.com https://www.gstatic.com/recaptcha/releases/pPK749sccDmVW_9DSeTMVvh2/recaptcha__en.js https://github.com https://cdn.cookielaw.org https://objects.githubusercontent.com https://*.go-mpulse.net https://*.qualtrics.com https://www.google.com/recaptcha/ https://*.friendlycaptcha.eu https://dev.zopim.com assets.adobedtm.com https://*.biontech.com https://fonts.googleapis.com https://cdn.jsdelivr.net/npm/friendly-challenge/widget.module.min.js; style-src 'self' https://*.clarity.ms https://*.googletagmanager.com https://*.google-analytics.com https://p.typekit.net 'unsafe-inline' https://cdn.cookielaw.org https://*.biontech.com https://*.scene7.com; style-src-elem 'self' 'unsafe-inline' https://*.clarity.ms https://*.googletagmanager.com https://*.google-analytics.com https://assets.adobedtm.com https://p.typekit.net https://dev.zopim.com https://fonts.googleapis.com https://*.biontech.com https://cdn.jsdelivr.net/npm/friendly-challenge/ https://*.scene7.com; img-src 'self' data: https://*.google.nl https://*.google.sk https://*.google.de https://*.google.co.uk https://*.google.fr https://*.google.es https://*.google.it https://*.google.at https://*.google.com.br https://*.google.com.tr https://*.google.co.jp https://*.google.com.au https://*.google.com https://googleads.g.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://px.deepintent.com https://cdn.cookielaw.org https://*.biontech.de https://*.scene7.com https://*.qualtrics.com; font-src 'self' data: https://*.clarity.ms https://*.googletagmanager.com https://*.google-analytics.com https://use.typekit.net https://p.typekit.net https://cdn.cookielaw.org https://fonts.gstatic.com https://*.scene7.com; frame-src 'self' https://mrna.ella.builders https://investors.biontech.de https://*.googletagmanager.com https://*.google-analytics.com https://www.youtube.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/ *.frcapi.com https://*.scene7.com https://*.biontech.com; media-src 'self' data: https://*.clarity.ms https://*.googletagmanager.com https://*.google-analytics.com https://*.biontech.de https://*.scene7.com; manifest-src 'self'; worker-src 'self' blob:; object-src 'none'; form-action 'self' https://*.biontech.com; frame-ancestors 'none'; child-src blob: 2 default-src 'self' 'unsafe-inline' https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru https://mc.yandex.ru https://top-fwz1.mail.ru https://stmtag.ru https://sberbank.ru https://dmp.sbermarketing.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrika.yandex.com https://metrika.yandex.com.tr https://webvisor.com https://*.webvisor.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru https://mc.yandex.ru https://top-fwz1.mail.ru https://*.mail.ru https://stmtag.ru https://sberbank.ru https://dmp.sbermarketing.ru https://vk.com https://st.top100.ru https://ad.adriver.ru https://dmp-profiles.sbermarketing.ru https://adservings.ru https://payecom.ru https://platiecom.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrika.yandex.com https://metrika.yandex.com.tr https://webvisor.com https://*.webvisor.com; style-src 'self' 'unsafe-inline' https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrika.yandex.com https://metrika.yandex.com.tr https://webvisor.com https://*.webvisor.com; connect-src 'self' https://*.npfsb.ru https://npfsb.ru https://*.sbernpf.ru https://*.sberbank.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru wss://mc.yandex.ru https://mc.yandex.md https://mc.yandex.ru https://top-fwz1.mail.ru https://*.mail.ru https://stmtag.ru https://sberbank.ru https://dmp.sbermarketing.ru https://stmtag.ru https://sberbank.ru https://dmp.sbermarketing.ru https://vk.com https://st.top100.ru https://ad.adriver.ru https://dmp-profiles.sbermarketing.ru https://adservings.ru https://*.rambler.ru https://platiecom.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrika.yandex.com https://metrika.yandex.com.tr https://webvisor.com https://*.webvisor.com; font-src 'self' data: https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru; img-src 'self' data: https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru https://mc.yandex.ru https://top-fwz1.mail.ru https://stmtag.ru https://sberbank.ru https://dmp.sbermarketing.ru https://adservings.ru https://bs.serving-sys.ru https://vk.com https://*.vk.com; object-src 'self' https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru; base-uri 'self'; frame-src 'self' blob: https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru https://mc.yandex.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrika.yandex.com https://metrika.yandex.com.tr https://webvisor.com https://*.webvisor.com; manifest-src 'self'; media-src 'self' data: https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://sberbank.ru https://dmp.sbermarketing.ru https://dmp-profiles.sbermarketing.ru; worker-src 'self' blob:; frame-ancestors 'self' data: https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrika.yandex.com https://metrika.yandex.com.tr https://webvisor.com https://*.webvisor.com; child-src 'self' blob: https://*.npfsb.ru https://*.sbernpf.ru https://npfsberbanka.ru https://id.sber.ru https://id-ift.sber.ru https://mc.yandex.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrika.yandex.com https://metrika.yandex.com.tr https://webvisor.com https://*.webvisor.com; 2 connect-src 'self' https://analytics.freedom.press https://checkout.stripe.com https://cdn.jsdelivr.net https://pressfreedomtracker.us https://comments-api-fpf.fftf.app https://callpower-fpf.fftf.app https://api.na.teamtailor.com https://releases.wagtail.org/ https://media.freedom.press; frame-src 'self' blob: https://www.google.com/ https://checkout.stripe.com https://platform.twitter.com https://platform.x.com https://syndication.twitter.com https://www.youtube.com https://www.youtube-nocookie.com https://commerce.coinbase.com/; media-src 'self' https://media.freedom.press; img-src 'self' https://*.stripe.com https://analytics.freedom.press blob: https://platform.twitter.com https://platform.x.com https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com data: https://pressfreedomtracker.us https://i.ytimg.com https://i.vimeocdn.com https://media.freedom.press; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://checkout.stripe.com https://analytics.freedom.press https://platform.twitter.com https://platform.x.com https://cdn.syndication.twimg.com https://cdn.jsdelivr.net https://api.observablehq.com https://bundle.run https://commerce.coinbase.com/ https://scripts.teamtailor-cdn.com; form-action 'self' https://ipnpb.sandbox.paypal.com https://ipnpb.paypal.com https://checkout.stripe.com; manifest-src 'self' https://freedomofpress.cloudflareaccess.com; object-src 'self' https://media.freedom.press; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://platform.x.com https://ton.twimg.com https://commerce.coinbase.com/; base-uri 'self'; report-uri https://freedomofpress.report-uri.com/r/d/csp/enforce 2 worker-src * data: blob: 'unsafe-inline' 'unsafe-eval'; img-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 2 default-src https: data: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' 2 default-src * 'unsafe-inline' 'unsafe-eval' blob:; frame-ancestors *.zywave.com *.zywave.net; img-src * data:; font-src * data:; media-src * blob:; report-uri zywave.com 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://statuspal.io https://widget.next.statuspal.io https://www.googletagmanager.com https://consent.cookiebot.com https://connect.facebook.net https://bat.bing.com https://googleads.g.doubleclick.net https://widget.intercom.io https://static.hotjar.com https://js.intercomcdn.com https://vercel.live https://cdn.redoc.ly https://script.hotjar.com https://cdn.redocly.com https://www.clarity.ms; connect-src 'self' https://statuspal.io https://meta.statuspal.page https://www.google.com https://analytics.google.com https://googleads.g.doubleclick.net https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://metrics.hotjar.io https://vercel.live wss://ws-us3.pusher.com https://pagead2.googlesyndication.com https://www.google-analytics.com wss://ws.hotjar.com https://content.hotjar.io https://vc.hotjar.io https://stats.g.doubleclick.net https://bat.bing.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://vercel.live https://fonts.googleapis.com; img-src 'self' blob: data: https://www.gravatar.com https://bat.bing.com https://www.google.com https://www.facebook.com https://vercel.com https://www.googletagmanager.com https://cdn.redoc.ly https://static.intercomassets.com https://js.intercomcdn.com https://statuspal.io; font-src 'self' data: https://fonts.gstatic.com https://fonts.intercomcdn.com https://vercel.live; object-src 'none'; frame-src 'self' https://consentcdn.cookiebot.com https://vercel.live https://www.googletagmanager.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 2 default-src 'self'; img-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hs-banner.com https://*.hubspotusercontent.com https://*.hubspotusercontent-eu1.net https://js.hs-analytics.net https://js.hsforms.net https://api.hsforms.com https://api.hubapi.com https://*.hsleadflows.net https://*.hsadspixel.net https://*.hs-web-analytics.net https://static.hsappstatic.net https://cdn2.hubspot.net https://cdn.hubspot.com https://*.cloudfront.net https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://stats.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://www.youtube.com; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https: data:; connect-src 'self' https: wss: https://www.cadburydessertscorner.com; media-src 'self' https: data: blob:; worker-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://*.hubspot.com;; upgrade-insecure-requests 2 default-src 'self'; connect-src 'self' *.siteimprove.com https://maanteeamet.maps.arcgis.com https://arcg.is https://www.arcgis.com https://stats.g.doubleclick.net https://transpordiamet.ee www.transpordiamet.ee www.facebook.com https://www.facebook.com https://connect.facebook.net https://search.google.com/search-console https://pixabay.com/ https://www.pexels.com https://www.transpordiamet.ee/ https://stats.g.doubleclick.net/ https://region1.google-analytics.com/ https://pagead2.googlesyndication.com/ https://search.service.eu-live.vportal.ee https://www.google-analytics.com https://www.googletagmanager.com https://search.service.eu-live.vportal.ee/v1/search/transpordiamet https://search.service.eu-live.vportal.ee/v1/globalsearch/total https://form.service.eu-live.vportal.ee/v1/ https://search.service.eu-live.vportal.ee/v1/events/transpordiamet https://inaadress.maaamet.ee https://search.service.eu-live.vportal.ee/v1/sanctions/transpordiamet; font-src 'self' data: https://fonts.gstatic.com https://maanteeamet.maps.arcgis.com https://arcg.is https://www.arcgis.com https://transpordiamet.ee www.transpordiamet.ee www.facebook.com https://www.facebook.com https://connect.facebook.net https://search.google.com/search-console https://pixabay.com/ https://www.pexels.com https://www.transpordiamet.ee/; frame-src https://public.tableau.com/views/Ktused/Ktusekulukoond https://public.tableau.com/app/profile/transpordiamet/viz/Sadamateklastus/Vikelaevadegasaabunudinimesed https://public.tableau.com/app/profile/transpordiamet/viz/Sadamateklastus/Vikelaevadeklastusandmed https://interaktiivsed.transpordiamet.ee/kiirus/ 'self' https://*.rocket.chat https://www.google.com https://www.youtube.com https://*.vimeo.com https://*.siteimprove.com https://maanteeamet.maps.arcgis.com https://arcg.is https://www.arcgis.com https://www.transpordiamet.ee/ www.transpordiamet.ee https://digiajakiri.transpordiamet.ee/ www.facebook.com https://www.facebook.com https://connect.facebook.net https://search.google.com/search-console https://transpordiamet.ee https://v.postimees.ee/ https://public.tableau.com/app/profile/transpordiamet/viz/Ktused/Ktusekulukoond https://public.tableau.com/ https://gis.transpordiamet.ee/ https://droonid.transpordiamet.ee/ https://turvavoo.transpordiamet.ee/ https://kaalautos.transpordiamet.ee/ https://www.googletagmanager.com/ https://interaktiivsed.transpordiamet.ee/ https://tarktee.transpordiamet.ee/ https://xgis.maaamet.ee; img-src 'self' data: https://www.google-analytics.com *.openstreetmap.org https://i.ytimg.com https://pbs.twimg.com https://maanteeamet.maps.arcgis.com https://arcg.is https://www.arcgis.com www.fbcdn.net www.cdninstagram.com www.facebook.com https://pixabay.com/ https://www.pexels.com/ http://www.w3.org/ http://www.bohemiancoding.com/sketch/* www.transpordiamet.ee https://stats.g.doubleclick.net/* https://www.transpordiamet.ee/ https://search.google.com/search-console https://www.facebook.com/ https://connect.facebook.net https://transpordiamet.ee https://www.googletagmanager.com *.fbcdn.net *.cdninstagram.com https://inaadress.maaamet.ee https://unpkg.com *.maaamet.ee *.cloudflare.com; script-src 'self' 'unsafe-inline' https://*.rocket.chat https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.siteimprove.net/cms/overlay.js blob: https://browser-update.org www.facebook.com https://search.google.com/search-console https://www.facebook.com/ https://connect.facebook.net https://transpordiamet.ee/ www.transpordiamet.ee https://pixabay.com/ https://www.pexels.com https://www.transpordiamet.ee https://ajax.cloudflare.com https://static.cloudflareinsights.com https://*.cloudflareinsights.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com https://api.mapbox.com https://cdn.jsdelivr.net https://inaadress.maaamet.ee https://unpkg.com unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.rocket.chat https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.siteimprove.net/cms/overlay.js https://browser-update.org www.facebook.com https://search.google.com/search-console https://transpordiamet.ee www.transpordiamet.ee https://www.facebook.com https://pixabay.com/ https://www.pexels.com https://www.transpordiamet.ee/ https://*.cloudflareinsights.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://connect.facebook.net/ https://connect.facebook.net/en_US/fbevents.js https://public.tableau.com/ cdnjs.cloudflare.com https://api.mapbox.com https://cdn.jsdelivr.net https://inaadress.maaamet.ee https://unpkg.com unpkg.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://maanteeamet.maps.arcgis.com https://arcg.is https://www.arcgis.com https://static.addtoany.com/menu/svg/icons.30.svg.css https://www.transpordiamet.ee www.transpordiamet.ee www.facebook.com https://www.facebook.com https://connect.facebook.net https://search.google.com/search-console https://pixabay.com/ https://www.pexels.com https://transpordiamet.ee https://*.cloudflareinsights.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com cdnjs.cloudflare.com https://api.mapbox.com https://cdn.jsdelivr.net https://unpkg.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://maanteeamet.maps.arcgis.com https://arcg.is https://www.arcgis.com https://static.addtoany.com/menu/svg/icons.30.svg.css https://www.transpordiamet.ee www.transpordiamet.ee www.facebook.com https://www.facebook.com https://connect.facebook.net https://search.google.com/search-console https://pixabay.com/ https://www.pexels.com https://transpordiamet.ee https://*.cloudflareinsights.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com cdnjs.cloudflare.com https://api.mapbox.com https://cdn.jsdelivr.net https://unpkg.com unpkg.com https://inaadress.maaamet.ee; frame-ancestors 'self' https://public.tableau.com/ 2 frame-ancestors undefined; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 2 frame-ancestors https://admin.devby.io https://devby.io 2 frame-ancestors 'self' https://*.playojo.com https://*.skillonnet.com https://skillonnet.com https://*.netdnstrace.com https://netdnstrace.com https://*.netdnstrace1.com https://netdnstrace1.com https://*.skilldnsproc.com https://skilldnsproc.com https://*.skillprocessing.com https://skillprocessing.com https://*.safe-communication.com https://safe-communication.com https://*.image-tech-storage.com https://image-tech-storage.com https://*.kineticdigital.com; 2 frame-ancestors 'self'; object-src 'none'; base-uri 'self'; script-src 'nonce-sgwscorp' 'strict-dynamic' 'self' https://assets.southernglazers.com https://assets.adobedtm.com/ https://web.miappi.com https://open.spotifycdn.com https://open.spotify.com https://embed-cdn.spotifycdn.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://www.googleoptimize.com https://static.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com; 2 default-src https:; frame-ancestors https://*.logalty.com https://*.google.com https://*.google-analytics.com 'self'; object-src 'none'; font-src https: data:; img-src https: data: blob:; script-src http://*.gstatic.com http://*.google.com http://*.googleapis.com https://*.logalty.com https://*.googletagmanager.com https://*.licdn.com https://*.userway.org https://*.hs-scripts.com https://*.hs-analytics.net https://*.cloudflare.com https://*.facebook.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.doubleclick.net https://*.jquery.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://*.logalty.com https://*.googleapis.com https://*.userway.org; 2 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors *; 2 frame-ancestors 'self'; frame-src enovationgroup.com *.enovationgroup.com *.stuurlui.dev *.savviihq.com *.facebook.com *.google.com *.cookiebot.com *.hotjar.com *.youtube.com *.vimeo.com *.googletagmanager.com *.fontawesome.com *.ont.stuurlui.dev *.ontw.stuurlui.dev *.zaurus.io *.doubleclick.net forms.zoho.eu forms.zohopublic.eu *.cookiebot.eu *.cloudflare.com 2 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src data: https:; frame-ancestors 'self'; 2 default-src 'self' data: t.co *.t.co facebook.com *.facebook.com criteo.net *.criteo.net criteo.com *.criteo.com myamber.ae *.myamber.ae myamber1.ae *.myamber1.ae myamber.dev *.myamber.dev creativecdn.com *.creativecdn.com snapchat.com *.snapchat.com googleadservices.com *.googleadservices.com googleapis.com *.googleapis.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com facebook.net *.facebook.net google.com *.google.com ads-twitter.com *.ads-twitter.com twitter.com *.twitter.com sc-static.net *.sc-static.net atgcdn.ae *.atgcdn.ae gstatic.com *.gstatic.com quantummetric.com *.quantummetric.com salesforceliveagent.com *.salesforceliveagent.com force.com *.force.com youtube.com *.youtube.com ctfassets.net *.ctfassets.net newrelic.com *.newrelic.com nr-data.net *.nr-data.net sc-static.net *.sc-static.net apple.com *.apple.com cdn-apple.com *.cdn-apple.com livechatinc.com *.livechatinc.com mpsnare.iesnare.com *.mpsnare.iesnare.com rezync.com *.rezync.com cleverTap.com *.cleverTap.com wzrkt.com *.wzrkt.com cloudfront.net *.cloudfront.net ounass.com *.ounass.com tiktok.com *.tiktok.com enhencer.com *.enhencer.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io yandex.ru *.yandex.ru yandex.com *.yandex.com mail.ru *.mail.ru checkout.tabby.ai *.checkout.tabby.ai clevertap-prod.com *.clevertap-prod.com cdn.tamara.co *.cdn.tamara.co cdn-sandbox.tamara.co *.cdn-sandbox.tamara.co googlesyndication.com *.googlesyndication.com pangle-ads.com *.pangle-ads.com clarity.ms *.clarity.ms s.pinimg.com *.s.pinimg.com ct.pinterest.com *.ct.pinterest.com mc.yango.com *.mc.yango.com eu.asas.yango.com *.eu.asas.yango.com ounass-evt.rmp-api.moloco.com *.ounass-evt.rmp-api.moloco.com cloudflarestream.com *.cloudflarestream.com cdn.jsdelivr.net *.cdn.jsdelivr.net statsigapi.net *.statsigapi.net featureassets.org *.featureassets.org prodregistryv2.org *.prodregistryv2.org cloudflare-dns.com *.cloudflare-dns.com challenges.cloudflare.com *.challenges.cloudflare.com beacon.ounass.com *.beacon.ounass.com wss://*.hotjar.com wss://*.ounass.ae:7071 www.ounass.ae ar.ounass.ae en-saudi.ounass.com saudi.ounass.com oman.ounass.com ar-oman.ounass.com kuwait.ounass.com ar-kuwait.ounass.com bahrain.ounass.com ar-bahrain.ounass.com www.ounass.qa ar.ounass.qa;frame-src 'self' t.co *.t.co facebook.com *.facebook.com criteo.net *.criteo.net criteo.com *.criteo.com myamber.ae *.myamber.ae myamber1.ae *.myamber1.ae myamber.dev *.myamber.dev creativecdn.com *.creativecdn.com snapchat.com *.snapchat.com googleadservices.com *.googleadservices.com googleapis.com *.googleapis.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com facebook.net *.facebook.net google.com *.google.com ads-twitter.com *.ads-twitter.com twitter.com *.twitter.com sc-static.net *.sc-static.net atgcdn.ae *.atgcdn.ae gstatic.com *.gstatic.com quantummetric.com *.quantummetric.com salesforceliveagent.com *.salesforceliveagent.com force.com *.force.com youtube.com *.youtube.com ctfassets.net *.ctfassets.net newrelic.com *.newrelic.com nr-data.net *.nr-data.net sc-static.net *.sc-static.net apple.com *.apple.com cdn-apple.com *.cdn-apple.com livechatinc.com *.livechatinc.com mpsnare.iesnare.com *.mpsnare.iesnare.com rezync.com *.rezync.com cleverTap.com *.cleverTap.com wzrkt.com *.wzrkt.com cloudfront.net *.cloudfront.net ounass.com *.ounass.com tiktok.com *.tiktok.com enhencer.com *.enhencer.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io yandex.ru *.yandex.ru yandex.com *.yandex.com mail.ru *.mail.ru checkout.tabby.ai *.checkout.tabby.ai clevertap-prod.com *.clevertap-prod.com cdn.tamara.co *.cdn.tamara.co cdn-sandbox.tamara.co *.cdn-sandbox.tamara.co googlesyndication.com *.googlesyndication.com pangle-ads.com *.pangle-ads.com clarity.ms *.clarity.ms s.pinimg.com *.s.pinimg.com ct.pinterest.com *.ct.pinterest.com mc.yango.com *.mc.yango.com eu.asas.yango.com *.eu.asas.yango.com ounass-evt.rmp-api.moloco.com *.ounass-evt.rmp-api.moloco.com cloudflarestream.com *.cloudflarestream.com cdn.jsdelivr.net *.cdn.jsdelivr.net statsigapi.net *.statsigapi.net featureassets.org *.featureassets.org prodregistryv2.org *.prodregistryv2.org cloudflare-dns.com *.cloudflare-dns.com challenges.cloudflare.com *.challenges.cloudflare.com beacon.ounass.com *.beacon.ounass.com wss://*.hotjar.com wss://*.ounass.ae:7071;font-src 'self' data: t.co *.t.co facebook.com *.facebook.com criteo.net *.criteo.net criteo.com *.criteo.com myamber.ae *.myamber.ae myamber1.ae *.myamber1.ae myamber.dev *.myamber.dev creativecdn.com *.creativecdn.com snapchat.com *.snapchat.com googleadservices.com *.googleadservices.com googleapis.com *.googleapis.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com facebook.net *.facebook.net google.com *.google.com ads-twitter.com *.ads-twitter.com twitter.com *.twitter.com sc-static.net *.sc-static.net atgcdn.ae *.atgcdn.ae gstatic.com *.gstatic.com quantummetric.com *.quantummetric.com salesforceliveagent.com *.salesforceliveagent.com force.com *.force.com youtube.com *.youtube.com ctfassets.net *.ctfassets.net newrelic.com *.newrelic.com nr-data.net *.nr-data.net sc-static.net *.sc-static.net apple.com *.apple.com cdn-apple.com *.cdn-apple.com livechatinc.com *.livechatinc.com mpsnare.iesnare.com *.mpsnare.iesnare.com rezync.com *.rezync.com cleverTap.com *.cleverTap.com wzrkt.com *.wzrkt.com cloudfront.net *.cloudfront.net ounass.com *.ounass.com tiktok.com *.tiktok.com enhencer.com *.enhencer.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io yandex.ru *.yandex.ru yandex.com *.yandex.com mail.ru *.mail.ru checkout.tabby.ai *.checkout.tabby.ai clevertap-prod.com *.clevertap-prod.com cdn.tamara.co *.cdn.tamara.co cdn-sandbox.tamara.co *.cdn-sandbox.tamara.co googlesyndication.com *.googlesyndication.com pangle-ads.com *.pangle-ads.com clarity.ms *.clarity.ms s.pinimg.com *.s.pinimg.com ct.pinterest.com *.ct.pinterest.com mc.yango.com *.mc.yango.com eu.asas.yango.com *.eu.asas.yango.com ounass-evt.rmp-api.moloco.com *.ounass-evt.rmp-api.moloco.com cloudflarestream.com *.cloudflarestream.com cdn.jsdelivr.net *.cdn.jsdelivr.net statsigapi.net *.statsigapi.net featureassets.org *.featureassets.org prodregistryv2.org *.prodregistryv2.org cloudflare-dns.com *.cloudflare-dns.com challenges.cloudflare.com *.challenges.cloudflare.com beacon.ounass.com *.beacon.ounass.com wss://*.hotjar.com wss://*.ounass.ae:7071;img-src * 'self' data: t.co *.t.co facebook.com *.facebook.com criteo.net *.criteo.net criteo.com *.criteo.com myamber.ae *.myamber.ae myamber1.ae *.myamber1.ae myamber.dev *.myamber.dev creativecdn.com *.creativecdn.com snapchat.com *.snapchat.com googleadservices.com *.googleadservices.com googleapis.com *.googleapis.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com facebook.net *.facebook.net google.com *.google.com ads-twitter.com *.ads-twitter.com twitter.com *.twitter.com sc-static.net *.sc-static.net atgcdn.ae *.atgcdn.ae gstatic.com *.gstatic.com quantummetric.com *.quantummetric.com salesforceliveagent.com *.salesforceliveagent.com force.com *.force.com youtube.com *.youtube.com ctfassets.net *.ctfassets.net newrelic.com *.newrelic.com nr-data.net *.nr-data.net sc-static.net *.sc-static.net apple.com *.apple.com cdn-apple.com *.cdn-apple.com livechatinc.com *.livechatinc.com mpsnare.iesnare.com *.mpsnare.iesnare.com rezync.com *.rezync.com cleverTap.com *.cleverTap.com wzrkt.com *.wzrkt.com cloudfront.net *.cloudfront.net ounass.com *.ounass.com tiktok.com *.tiktok.com enhencer.com *.enhencer.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io yandex.ru *.yandex.ru yandex.com *.yandex.com mail.ru *.mail.ru checkout.tabby.ai *.checkout.tabby.ai clevertap-prod.com *.clevertap-prod.com cdn.tamara.co *.cdn.tamara.co cdn-sandbox.tamara.co *.cdn-sandbox.tamara.co googlesyndication.com *.googlesyndication.com pangle-ads.com *.pangle-ads.com clarity.ms *.clarity.ms s.pinimg.com *.s.pinimg.com ct.pinterest.com *.ct.pinterest.com mc.yango.com *.mc.yango.com eu.asas.yango.com *.eu.asas.yango.com ounass-evt.rmp-api.moloco.com *.ounass-evt.rmp-api.moloco.com cloudflarestream.com *.cloudflarestream.com cdn.jsdelivr.net *.cdn.jsdelivr.net statsigapi.net *.statsigapi.net featureassets.org *.featureassets.org prodregistryv2.org *.prodregistryv2.org cloudflare-dns.com *.cloudflare-dns.com challenges.cloudflare.com *.challenges.cloudflare.com beacon.ounass.com *.beacon.ounass.com wss://*.hotjar.com wss://*.ounass.ae:7071;script-src 'self' 'unsafe-inline' 'unsafe-eval' t.co *.t.co facebook.com *.facebook.com criteo.net *.criteo.net criteo.com *.criteo.com myamber.ae *.myamber.ae myamber1.ae *.myamber1.ae myamber.dev *.myamber.dev creativecdn.com *.creativecdn.com snapchat.com *.snapchat.com googleadservices.com *.googleadservices.com googleapis.com *.googleapis.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com facebook.net *.facebook.net google.com *.google.com ads-twitter.com *.ads-twitter.com twitter.com *.twitter.com sc-static.net *.sc-static.net atgcdn.ae *.atgcdn.ae gstatic.com *.gstatic.com quantummetric.com *.quantummetric.com salesforceliveagent.com *.salesforceliveagent.com force.com *.force.com youtube.com *.youtube.com ctfassets.net *.ctfassets.net newrelic.com *.newrelic.com nr-data.net *.nr-data.net sc-static.net *.sc-static.net apple.com *.apple.com cdn-apple.com *.cdn-apple.com livechatinc.com *.livechatinc.com mpsnare.iesnare.com *.mpsnare.iesnare.com rezync.com *.rezync.com cleverTap.com *.cleverTap.com wzrkt.com *.wzrkt.com cloudfront.net *.cloudfront.net ounass.com *.ounass.com tiktok.com *.tiktok.com enhencer.com *.enhencer.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io yandex.ru *.yandex.ru yandex.com *.yandex.com mail.ru *.mail.ru checkout.tabby.ai *.checkout.tabby.ai clevertap-prod.com *.clevertap-prod.com cdn.tamara.co *.cdn.tamara.co cdn-sandbox.tamara.co *.cdn-sandbox.tamara.co googlesyndication.com *.googlesyndication.com pangle-ads.com *.pangle-ads.com clarity.ms *.clarity.ms s.pinimg.com *.s.pinimg.com ct.pinterest.com *.ct.pinterest.com mc.yango.com *.mc.yango.com eu.asas.yango.com *.eu.asas.yango.com ounass-evt.rmp-api.moloco.com *.ounass-evt.rmp-api.moloco.com cloudflarestream.com *.cloudflarestream.com cdn.jsdelivr.net *.cdn.jsdelivr.net statsigapi.net *.statsigapi.net featureassets.org *.featureassets.org prodregistryv2.org *.prodregistryv2.org cloudflare-dns.com *.cloudflare-dns.com challenges.cloudflare.com *.challenges.cloudflare.com beacon.ounass.com *.beacon.ounass.com wss://*.hotjar.com wss://*.ounass.ae:7071;style-src 'self' 'unsafe-inline' t.co *.t.co facebook.com *.facebook.com criteo.net *.criteo.net criteo.com *.criteo.com myamber.ae *.myamber.ae myamber1.ae *.myamber1.ae myamber.dev *.myamber.dev creativecdn.com *.creativecdn.com snapchat.com *.snapchat.com googleadservices.com *.googleadservices.com googleapis.com *.googleapis.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com facebook.net *.facebook.net google.com *.google.com ads-twitter.com *.ads-twitter.com twitter.com *.twitter.com sc-static.net *.sc-static.net atgcdn.ae *.atgcdn.ae gstatic.com *.gstatic.com quantummetric.com *.quantummetric.com salesforceliveagent.com *.salesforceliveagent.com force.com *.force.com youtube.com *.youtube.com ctfassets.net *.ctfassets.net newrelic.com *.newrelic.com nr-data.net *.nr-data.net sc-static.net *.sc-static.net apple.com *.apple.com cdn-apple.com *.cdn-apple.com livechatinc.com *.livechatinc.com mpsnare.iesnare.com *.mpsnare.iesnare.com rezync.com *.rezync.com cleverTap.com *.cleverTap.com wzrkt.com *.wzrkt.com cloudfront.net *.cloudfront.net ounass.com *.ounass.com tiktok.com *.tiktok.com enhencer.com *.enhencer.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io yandex.ru *.yandex.ru yandex.com *.yandex.com mail.ru *.mail.ru checkout.tabby.ai *.checkout.tabby.ai clevertap-prod.com *.clevertap-prod.com cdn.tamara.co *.cdn.tamara.co cdn-sandbox.tamara.co *.cdn-sandbox.tamara.co googlesyndication.com *.googlesyndication.com pangle-ads.com *.pangle-ads.com clarity.ms *.clarity.ms s.pinimg.com *.s.pinimg.com ct.pinterest.com *.ct.pinterest.com mc.yango.com *.mc.yango.com eu.asas.yango.com *.eu.asas.yango.com ounass-evt.rmp-api.moloco.com *.ounass-evt.rmp-api.moloco.com cloudflarestream.com *.cloudflarestream.com cdn.jsdelivr.net *.cdn.jsdelivr.net statsigapi.net *.statsigapi.net featureassets.org *.featureassets.org prodregistryv2.org *.prodregistryv2.org cloudflare-dns.com *.cloudflare-dns.com challenges.cloudflare.com *.challenges.cloudflare.com beacon.ounass.com *.beacon.ounass.com wss://*.hotjar.com wss://*.ounass.ae:7071;media-src 'self' blob: data: t.co *.t.co facebook.com *.facebook.com criteo.net *.criteo.net criteo.com *.criteo.com myamber.ae *.myamber.ae myamber1.ae *.myamber1.ae myamber.dev *.myamber.dev creativecdn.com *.creativecdn.com snapchat.com *.snapchat.com googleadservices.com *.googleadservices.com googleapis.com *.googleapis.com doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com facebook.net *.facebook.net google.com *.google.com ads-twitter.com *.ads-twitter.com twitter.com *.twitter.com sc-static.net *.sc-static.net atgcdn.ae *.atgcdn.ae gstatic.com *.gstatic.com quantummetric.com *.quantummetric.com salesforceliveagent.com *.salesforceliveagent.com force.com *.force.com youtube.com *.youtube.com ctfassets.net *.ctfassets.net newrelic.com *.newrelic.com nr-data.net *.nr-data.net sc-static.net *.sc-static.net apple.com *.apple.com cdn-apple.com *.cdn-apple.com livechatinc.com *.livechatinc.com mpsnare.iesnare.com *.mpsnare.iesnare.com rezync.com *.rezync.com cleverTap.com *.cleverTap.com wzrkt.com *.wzrkt.com cloudfront.net *.cloudfront.net ounass.com *.ounass.com tiktok.com *.tiktok.com enhencer.com *.enhencer.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io yandex.ru *.yandex.ru yandex.com *.yandex.com mail.ru *.mail.ru checkout.tabby.ai *.checkout.tabby.ai clevertap-prod.com *.clevertap-prod.com cdn.tamara.co *.cdn.tamara.co cdn-sandbox.tamara.co *.cdn-sandbox.tamara.co googlesyndication.com *.googlesyndication.com pangle-ads.com *.pangle-ads.com clarity.ms *.clarity.ms s.pinimg.com *.s.pinimg.com ct.pinterest.com *.ct.pinterest.com mc.yango.com *.mc.yango.com eu.asas.yango.com *.eu.asas.yango.com ounass-evt.rmp-api.moloco.com *.ounass-evt.rmp-api.moloco.com cloudflarestream.com *.cloudflarestream.com cdn.jsdelivr.net *.cdn.jsdelivr.net statsigapi.net *.statsigapi.net featureassets.org *.featureassets.org prodregistryv2.org *.prodregistryv2.org cloudflare-dns.com *.cloudflare-dns.com challenges.cloudflare.com *.challenges.cloudflare.com beacon.ounass.com *.beacon.ounass.com wss://*.hotjar.com wss://*.ounass.ae:7071;worker-src 'self' blob: 2 frame-ancestors 'self' http://localhost:8080 https://*.birds.cornell.edu https://*.ornith.cornell.edu 2 frame-ancestors 'self' www.amway.com.au www.amway.co.nz https://pos.amway.com.au https://pos.amway.co.nz https://pos.amway.com.vn www.amway.com.vn www.amway.com.ph admin.amway.com.ph 2 default-src 'self' 'unsafe-inline' hetrixtools.com s.hetrix.io i.hetrix.io *.gstatic.com fonts.googleapis.com *.google-analytics.com *.twitter.com; img-src 'self' data: hetrixtools.com s.hetrix.io i.hetrix.io *.gstatic.com 2 base-uri 'self'; frame-ancestors 'self' https://*.life.church https://*.lifechurch.io http://*.online-dev.church:7777 https://*.online-staging.church https://*.online-review.church https://*.online.church; worker-src 'self' blob:; object-src 'self' https://*.life.church https://*.lifechurch.io; script-src 'self' https://*.life.church https://*.lifechurch.io https://js.hsadspixel.net https://js.hubspot.com https://js.usemessages.com https://js.hs-banner.com https://js.hsadpixel.net https://js.hs-analytics.net https://*.jwpcdn.com https://cdn.auth0.com https://s7.addthis.com https://content.jwplatform.com https://js.hs-scripts.com https://a.optmstr.com https://assets.ubembed.com https://*.tctm.co https://*.js.ubembed.com https://chat-assets.frontapp.com https://tags.srv.stackadapt.com https://analytics.tiktok.com https://*.clarity.ms https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://cdn.bc0a.com https://cmp.osano.com https://code.jquery.com https://connect.facebook.net https://js-agent.newrelic.com https://segment.life.church https://www.googleoptimize.com https://www.googletagmanager.com https://www.life.church https://www.youtube.com https://api.mapbox.com https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js https://cdn.bitmovin.com https://js.hsforms.net 'unsafe-inline'; script-src-elem 'unsafe-inline' https://*.life.church https://*.lifechurch.io https://js.hsadspixel.net https://js.hubspot.com https://js.usemessages.com https://js.hs-banner.com https://js.hsadpixel.net https://js.hs-analytics.net https://*.jwpcdn.com https://cdn.auth0.com https://s7.addthis.com https://content.jwplatform.com https://js.hs-scripts.com https://a.optmstr.com https://assets.ubembed.com https://*.tctm.co https://*.js.ubembed.com https://chat-assets.frontapp.com https://tags.srv.stackadapt.com https://analytics.tiktok.com https://*.clarity.ms https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://a.omappapi.com https://bam.nr-data.net https://code.jquery.com https://connect.facebook.net https://www.clarity.ms https://js-agent.newrelic.com https://js.stripe.com https://static.userback.io https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cmp.osano.com https://cdn.bc0a.com https://www.googleoptimize.com https://www.youtube.com https://api.mapbox.com https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js https://cdn.bitmovin.com https://js.hsforms.net; upgrade-insecure-requests; 2 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; upgrade-insecure-requests 2 img-src www.datocms-assets.com *.mux.com https://*.stripe.com blob: 'self' data: *.zopa.com cdn.cookielaw.org images-static.trustpilot.com *.adalyser.com www.facebook.com connect.facebook.net googleads.g.doubleclick.net www.google.com pagead2.googlesyndication.com impressions.onelink.me yt3.ggpht.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.google.com www.googletagmanager.com ad.doubleclick.net *.fls.doubleclick.net ade.googlesyndication.com ssl.gstatic.com www.gstatic.com; connect-src www.datocms-assets.com inferred.litix.io *.mux.com p11.techlab-cdn.com https://api.stripe.com 'self' *.zopa.com cdn.cookielaw.org privacyportal-eu.onetrust.com geolocation.onetrust.com zopa-privacy.my.onetrust.com api.eu1.honeycomb.io www.google.com www.googleadservices.com www.google.co.uk pagead2.googlesyndication.com googleads.g.doubleclick.net *.appsflyer.com *.amplitude.com d2zasqxhmd6ne4.cloudfront.net participant.connect.eu-west-2.amazonaws.com wss://tufsuyburufn.transport.connect.eu-west-2.amazonaws.com *.execute-api.eu-west-2.amazonaws.com www.gstatic.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com www.googletagmanager.com; media-src *.mux.com blob: 'self' data:; script-src 'unsafe-eval' https://js.stripe.com 'self' 'unsafe-inline' *.zopa.com cdn.cookielaw.org zopa-privacy.my.onetrust.com *.adalyser.com connect.facebook.net www.googleadservices.com pagead2.googlesyndication.com googleads.g.doubleclick.net www.google.com *.appsflyer.com cdn.amplitude.com d2zasqxhmd6ne4.cloudfront.net www.gstatic.com *.googletagmanager.com www.googletagmanager.com tagmanager.google.com; script-src-elem p11.techlab-cdn.com https://js.stripe.com 'self' 'unsafe-inline' *.zopa.com blob: cdn.cookielaw.org *.adalyser.com connect.facebook.net pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net www.google.com websdk.appsflyer.com onelinksmartscript.appsflyer.com cdn.amplitude.com d2zasqxhmd6ne4.cloudfront.net www.gstatic.com *.googletagmanager.com www.googletagmanager.com cdn.jsdelivr.net; frame-src https://js.stripe.com https://hooks.stripe.com youtube.com www.youtube.com 'self' blob: *.zopa.com bid.g.doubleclick.net td.doubleclick.net www.google.com recaptcha.google.com www.googletagmanager.com *.doubleclick.net www.youtube-nocookie.com; style-src 'self' data: 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com tagmanager.google.com cdn.jsdelivr.net; font-src data: *.zopa.com fonts.googleapis.com fonts.gstatic.com; default-src 'self'; manifest-src 'self' *.zopa.com; worker-src 'self' blob:; object-src 'self' blob:; frame-ancestors 'self' *.zopa.com 2 frame-ancestors 'self' https://dotcms.com/ https://auth.dotcms.dev/ https://corpsites-headless.dotcms.cloud/ https://new-dotcms-com.vercel.app/ https://staging-trunk.dotcms.cloud/ https://staging-latest.dotcms.cloud/ 2 img-src *.analytics.google.com/ *.bing.com/ *.doubleclick.net/ *.flippingbook.com *.googleadservices.com *.intercomcdn.com/ *.vimeocdn.com/ data: https://*.clarity.ms https://*.google-analytics.com/ https://d17lvj5xn8sco6.cloudfront.net https://downloads.intercomcdn.com https://i.ytimg.com/ https://logws1309.ati-host.net/ https://o.twimg.com https://pbs.twimg.com/ https://px.ads.linkedin.com https://ssl.gstatic.com https://static.intercomassets.com/ https://syndication.twitter.com https://www.buzzsprout.com/ https://www.google.co.uk https://www.google.com/ 'self' www.googletagmanager.com www.linkedin.com;connect-src *.analytics.google.com/ *.doubleclick.net/ *.flippingbook.com *.googleadservices.com *.googlesyndication.com/ apikeys.civiccomputing.com data: https://*.clarity.ms https://*.google-analytics.com/ https://*.in.applicationinsights.azure.com https://adservice.google.com/ https://api-iam.intercom.io/ https://cdn.linkedin.oribi.io https://js.zi-scripts.com/unified/v1/master/getSubscriptions https://ka-f.fontawesome.com https://nexus-websocket-a.intercom.io/ https://nexus-websocket-b.intercom.io/ https://px.ads.linkedin.com https://ws.zoominfo.com/ https://www.google.co.uk https://www.google.com/ 'self' wss://nexus-websocket-a.intercom.io/ wss://nexus-websocket-b.intercom.io/ wss://primary-realtime.intercom-messenger.com/;script-src *.doubleclick.net/ *.flippingbook.com *.googleadservices.com *.intercom.io *.vimeo.com *.youtube.com *.youtube-nocookie.com blob: cdn.jsdelivr.net cdnjs.cloudflare.com https://*.clarity.ms https://*.google-analytics.com/ https://ajax.googleapis.com https://apis.google.com https://cc.cdn.civiccomputing.com https://d33i2vgywgme2s.cloudfront.net https://js.intercomcdn.com/ https://js.monitor.azure.com https://js.zi-scripts.com/zi-tag.js https://kit.fontawesome.com https://logws1309.ati-host.net/ https://platform.twitter.com https://snap.licdn.com/li.lms-analytics/ https://syndication.twitter.com https://vimeo.com/ https://www.google.com/recaptcha/ https://www.gstatic.com https://www.nccgroup.com pi.pardot.com 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com;frame-src *.doubleclick.net/ *.flippingbook.com *.youtube-nocookie.com https://*.nccgroup.com/ https://app.livestorm.co/ https://export.highcharts.com/ https://intercom-sheets.com/ https://nccgroup.wavecast.io/ https://platform.twitter.com https://player.vimeo.com/ https://polaris.brighterir.com/ https://syndication.twitter.com https://videopress.com/ https://view.genially.com/ https://www.facebook.com/ https://www.google.com/recaptcha/ https://www.youtube.com/embed/ 'self' www.googletagmanager.com;default-src *.intercom.io *.vimeo.com *.vimeocdn.com/ *.youtube.com *.youtube-nocookie.com https://*.google-analytics.com/ https://pbs.twimg.com/ https://platform.twitter.com https://syndication.twitter.com 'self';font-src *.intercomcdn.com/ cdn.jsdelivr.net https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ https://ka-f.fontawesome.com 'self';frame-ancestors explore.tanium.com https://*.nccgroup.com/;style-src https://fonts.googleapis.com/ https://platform.twitter.com 'self' 'unsafe-inline';media-src https://js.intercomcdn.com/ https://pbs.twimg.com/ https://platform.twitter.com https://syndication.twitter.com 'self';object-src 'self' 2 upgrade-insecure-requests; script-src 'self' https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 2 script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.publiclands.com *.dickssportinggoods.com *.akamaihd.net *.scene7.com *.bazaarvoice.com *.iso.gp01.pcf.dcsg.com *.radar.com *.googleapis.com *.pub-cdn.dksfed.com pub-cdn.dksfed.com *.certona.net *.certona.com res-x.com maxcdn.bootstrapcdn.com c.go-mpulse.net akstat.io h.online-metrix.net tags.tiqcdn.com s.pinimg.com a.wishabi.com analytics.twitter.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com bat.bing.com beacon.riskified.com qognvtzku-x.global.ssl.fastly.net ciunnwhq.micpn.com connect.facebook.net ct.pinterest.com utt.impactcdn.com d2oh4tlt9mrke9.cloudfront.net dickssportinggoods.demdex.net dicks-sporting-goods.pxf.io dpm.demdex.net dsg.tt.omtrdc.net dsg2.btttag.com e.dickssportinggoods.com edge1.certona.net f.wishabi.net gateway.dcsg.com *.getmetrical.com img.riskified.com match.adsrvr.org *.kampyle.com network.bazaarvoice.com network-a.bazaarvoice.com pinterest.adsymptotic.com pixel.rubiconproject.com pixel.tapad.com r.dlx.addthis.com sc-static.net smetrics.dickssportinggoods.com snap.adsrvr.org so.rlcdn.com *.criteo.com *.criteo.net static.ads-twitter.com t.co tr.snapchat.com www.facebook.com www.googletagmanager.com www.hlserve.com www.res-x.com x.skimresources.com cdn.hlserve.com b.hlserve.com www.google.com googleads.g.doubleclick.net adservice.google.com c.riskified.com ws.sessioncam.com www.googleadservices.com cdn.brandingbrand.com dsg2m.btttag.com publiclands500z.btttag.com www.google-analytics.com cdnjs.cloudflare.com *.cloudfront.net *.iesnare.com code.jquery.com www.paymentjs.firstdata.com www.gstatic.com www.everestjs.net www.paypal.com tagtracking.vibescm.com cdn.auth0.com polyfill.io cdn.tagdelivery.com *.truefitcorp.com *.affirm.com *.hlserve.com *.anyguide.com resources.digital-cloud.medallia.com *.anyroad.com checkoutshopper-live.adyen.com *.stylitics.com prod.accdab.net *.cdn-net.com *.syndigo.com *.liveperson.net *.lpsnmedia.net *.zoovu.com assets-barracuda-runner.azureedge.net *.adobedc.net *.adoberesources.net *.attn.tv analytics.tiktok.com *.micpn.com *.collectivevoice.com accounts.google.com ln-rules.rewardstyle.com creatives.attn.tv *.monetate.net mczbf.com sjwoe.com cj.dotomi.com emjcd.com idsync.rlcdn.com *.mczbf.com *.cj.com; frame-ancestors *.publiclands.com *.dickssportinggoods.com *.techlab-cdn.com; child-src *.monetate.net acrobatservices.adobe.com documentservices.adobe.com *.attn.tv dcsg.jotform.com *.dickssportinggoods.com *.publiclands.com *.cj.com *.quantummetric.com *.adyen.com *.afterpay.com *.paypal.com *.paypalobjects.com *.cardinalcommerce.com *.liveperson.net *.lpsnmedia.net dickssportinggoods.demdex.net *.criteo.com *.criteo.net maps.google.com accounts.google.com hosted.where2getit.com mobile.where2getit.com fit.dksxchange.com www.thinglink.com dicks-cti.gvcommerce.com www.youtube.com *.truefitcorp.com *.affirm.com *.doubleclick.net *.g.doubleclick.net *.pinterest.com *.googleapis.com tr.snapchat.com resources.digital-cloud.medallia.com *.hlserve.com *.facebook.com static.ads-twitter.com *.tagdelivery.com *.fls.doubleclick.net prod.accdab.net www.cdn-net.com *.googlesyndication.com *.safeframe.googlesyndication.com www.google.com *.anyroad.com *.mycustomizer.com *.techlab-cdn.com 2 default-src 'self'; img-src 'self' data: https: https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' https://apis.google.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://tools.eurolandir.com https://cdn.cookielaw.org https://snap.licdn.com https://app.bowencraggs.com https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; font-src 'self' data: https://irs.tools.investis.com https://fonts.googleapis.com/ https://fonts.gstatic.com/; connect-src 'self' https://6609ad2bb48b4fe0a263342228bec979.europe-west3.gcp.cloud.es.io https://maps.googleapis.com https://irs.tools.investis.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://*.onetrust.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://px.ads.linkedin.com; media-src 'self' https://eu-assets.contentstack.com; frame-src 'self' https://security-uk.m.mimecastprotect.com https://url.uk.m.mimecastprotect.com https://www.youtube.com https://www.googletagmanager.com https://tools.eurolandir.com https://irs.tools.investis.com https://otp.tools.investis.com https://googleads.g.doubleclick.net 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' vercel.live *.sanity-cdn.com *.cookieyes.com cdn-cookieyes.com static.claydar.com cdn.claydar.com eu-assets.i.posthog.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.plot.ly unpkg.com www.unpkg.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.unpkg.com; font-src 'self' data: fonts.gstatic.com cdn.jsdelivr.net; img-src 'self' data: blob: cdn.sanity.io *.supabase.co *.cookieyes.com cdn-cookieyes.com accessible-coneflower-adf.notion.site img.notionusercontent.com file.notion.so; media-src 'self' data: blob: cdn.sanity.io; connect-src 'self' *.bfl.ai *.supabase.co cdn.sanity.io *.api.sanity.io sanity-cdn.com wss://2gpum2i6.api.sanity.io unpkg.com boards-api.greenhouse.io eu.i.posthog.com eu-assets.i.posthog.com eu.posthog.com *.cookieyes.com cdn-cookieyes.com api.claydar.com cdn.jsdelivr.net; frame-src 'self' *.preview.bfl.ai *.bfl.ai vercel.live *.cookieyes.com cdn-cookieyes.com www.youtube.com www.youtube-nocookie.com; frame-ancestors 'self' 2 script-src https://cdnjs.cloudflare.com https://cdn.botframework.com https://code.jquery.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval' 2 font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.omappapi.com cdnjs.cloudflare.com *.optimizely.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.bankwebinars.com *.xcelsolutions.com *.oncourselearning.com *.cuwebinars.com www.nhbankers.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://symphony.ocltraining-int.com https://symphony.ocltraining-qa.com https://symphony.ocltraining.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.certcapture.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com www.google.co.in googleads.g.doubleclick.net www.googletagmanager.com *.doubleclick.net www.facebook.com px.ads.linkedin.com px4.ads.linkedin.com www.linkedin.com alb.reddit.com *.bing.com webtracking.oncourselearning.com b.6sc.co dev-matomo.colibrilearning.xyz matomo.colibrilearning.xyz *.omappapi.com *.shop.pe track.hubspot.com *.hsforms.com webtracking.bankwebinars.com webtracking.cuwebinars.com www-goc.oclstoreadmin.com cdn.cookielaw.org dgjcoqnzn763b.cloudfront.net *.clarity.ms *.upsellit.com prf.hn sgtm.oncourselearning.com widgets.mortgagenewsdaily.com reports.mortgagenewsdaily.com a.mortgagenewsdaily.com cdn.optimizely.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com connect.facebook.net snap.licdn.com bat.bing.com www.redditstatic.com www.google.com www.gstatic.com googleads.g.doubleclick.net js.hs-scripts.com js.hsadspixel.net d1b3llzbo1rqxo.cloudfront.net j.6sc.co js.zi-scripts.com cdn.cookielaw.org *.optimizely.com img04.en25.com script.crazyegg.com dev-matomo.colibrilearning.xyz matomo.colibrilearning.xyz *.omappapi.com *.shop.pe shop.pe d2mjzob2nc713b.cloudfront.net addshoppers.s3.amazonaws.com *.upsellit.com a.optmnstr.com js.hubspot.com js.hs-analytics.net js.hs-banner.com js.hsforms.net dev-rubi.colibrilearning.com rubi.colibrilearning.com *.clarity.ms track.cbdatatracker.com d395yjvh5spyzw.cloudfront.net *.zinrelo.com code.jquery.com blob: prf.hn sgtm.oncourselearning.com widgets.mortgagenewsdaily.com mortgage-advice-online.org cdn.c360a.salesforce.com finserv.involve.me 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com assets.braintreegateway.com cdn.cookielaw.org *.typekit.net www.gstatic.com js.hs-scripts.com *.omappapi.com cdnjs.cloudflare.com *.optimizely.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com connect.facebook.net www.facebook.com px.ads.linkedin.com *.google-analytics.com api.hubspot.com cdn.cookielaw.org geolocation.onetrust.com j.6sc.co ipv6.6sc.co epsilon.6sense.com c.6sc.co js.zi-scripts.com ws.zoominfo.com s301572493.t.eloqua.com script.crazyegg.com *.crazyegg.com *.omappapi.com *.optimizely.com wss://*.optimizely.com pixel-config.reddit.com ads-api.reddit.com dev-matomo.colibrilearning.xyz matomo.colibrilearning.xyz *.shop.pe d1ae0zx28z2bae.cloudfront.net *.upsellit.com cta-service-cms2.hubspot.com mpc2-prod-23-is5qnl632q-ue.a.run.app dev-rubi.colibrilearning.com rubi.colibrilearning.com *.clarity.ms track.cbdatatracker.com https://rum.hlx.page widget.trustpilot.com manage.safeopt.com forms.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com submit.hsforms.com *.zinrelo.com prf.hn sgtm.oncourselearning.com *.c360a.salesforce.com *.betraining.com *.ocltraining.com wss://rubi.colibrilearning.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 default-src 'self'; script-src 'self' siteimproveanalytics.com *.siteimproveanalytics.io static.etracker.com www.etracker.de code.etracker.com 'unsafe-eval' 'unsafe-inline'; img-src data: 'self' *.global.siteimproveanalytics.io www.etracker.de; connect-src 'self' www.etracker.de; style-src 'self' 'unsafe-inline'; frame-ancestors 'self' *.etracker.com; worker-src 'self'; frame-src 'self' www.youtube-nocookie.com info.gesundheitsministerium.gv.at player.vimeo.com; form-action 'self'; media-src 'self' http://www.oegsbarrierefrei.at; block-all-mixed-content; upgrade-insecure-requests; 2 frame-ancestors 'self' *.uob.com.sg *.uobgroup.com *.uobgroup.com.sg http://uob.eltropy.com https://uob.eltropy.com http://findahomeloan.co https://www.edgeprop.sg https://sleek.sg 2 frame-ancestors 'none'; report-uri https://prod-fhs-rn-csp-service.rbictg.com/csp; report-to csp-endpoint 2 default-src 'self' https://dayone.me https://chocolate-prod.s3.amazonaws.com https://chocolate-prod.s3.us-east-1.amazonaws.com https://dayone-syncmedia-production-new.s3.amazonaws.com https://dayone-syncmedia-production-new.s3.us-east-1.amazonaws.com https://d1m1arvbwat4xp.cloudfront.net/ blob: https://pixel.wp.com/t.gif https://i.ytimg.com/ https://dayone.me; img-src 'self' https://dayone.me https://chocolate-prod.s3.amazonaws.com https://chocolate-prod.s3.us-east-1.amazonaws.com https://dayone-syncmedia-production-new.s3.amazonaws.com https://dayone-syncmedia-production-new.s3.us-east-1.amazonaws.com https://d1m1arvbwat4xp.cloudfront.net/ blob: https://pixel.wp.com/t.gif https://i.ytimg.com/ data: https://api.mapbox.com https://dgalywyr863hv.cloudfront.net https://b.stripecdn.com https://js.stripe.com https://q.stripe.com https://pixel.wp.com/boom.gif https://*.gravatar.com; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://accounts.google.com/gsi/client https://apis.google.com https://js.stripe.com https://b.stripecdn.com https://cdn.jsdelivr.net/npm/@huggingface/ https://cdn.jsdelivr.net/npm/onnxruntime-common/+esm https://cdn.jsdelivr.net/npm/onnxruntime-web@1.22.0-dev.20250409-89f8206ba4/+esm https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://s0.wp.com/wp-content/js/bilmur.min.js; connect-src 'self' https://dayone.me https://pbcms.dayone.me https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://apis.google.com https://accounts.google.com/gsi/ https://pixel.wp.com/t.gif https://chocolate-prod.s3.amazonaws.com https://chocolate-prod.s3.us-east-1.amazonaws.com https://dayone-syncmedia-production-new.s3.amazonaws.com https://dayone-syncmedia-production-new.s3.us-east-1.amazonaws.com https://d1m1arvbwat4xp.cloudfront.net/ https://api.stripe.com https://js.stripe.com https://r.stripe.com https://q.stripe.com https://errors.stripe.com https://b.stripecdn.com https://o248881.ingest.sentry.io/api/4503976745369600/envelope/ https://public-api.wordpress.com/geo/ https://www.googleapis.com https://api.apple-cloudkit.com/database/1/iCloud.com.dayoneapp.dayone-client-only/production/private/records/ https://api.apple-cloudkit.com/database/1/iCloud.com.dayoneapp.dayone/production/public/users/current https://publish.dayone.app/support/SupportFormConfig.json https://api.mapbox.com https://events.mapbox.com/ https://dgalywyr863hv.cloudfront.net https://api.openai.com https://zapier.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://huggingface.co/Xenova/all-MiniLM-L6-v2/ https://cas-bridge.xethub.hf.co/xet-bridge-us/ https://cdn.jsdelivr.net/npm/@huggingface/ https://cdn.jsdelivr.net/npm/onnxruntime-web@1.22.0-dev.20250409-89f8206ba4/+esm https://cdn.jsdelivr.net/npm/onnxruntime-common/+esm https://cdn.jsdelivr.net/sm/ https://pixel.wp.com/boom.gif https://dayone.me; frame-src https://accounts.google.com/gsi/ https://js.stripe.com https://b.stripecdn.com blob: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://content.googleapis.com/ https://www.youtube.com/ https://player.vimeo.com/video/ https://embed.spotify.com/ https://open.spotify.com/embed/playlist/ https://books.dayone.me; font-src 'self' data: blob:; worker-src 'self' blob:; frame-ancestors 'self' 2 default-src 'self' www.census.gc.ca www.recensement.gc.ca *.statcan.gc.ca *.2o7.net *.omtrdc.net *.tt.omtrdc.net *.statcan.ca https://www.youtube.com blob:; style-src 'self' www.census.gc.ca www.recensement.gc.ca 'unsafe-inline' oc-cdn-public.azureedge.net *.statcan.gc.ca *.statcan.ca cdn-na.readspeaker.com https://fonts.googleapis.com; script-src 'self' www.census.gc.ca www.recensement.gc.ca 'unsafe-inline' 'unsafe-eval' oc-cdn-public.azureedge.net *.statcan.gc.ca *.statcan.ca cdn-na.readspeaker.com innotts.azurewebsites.net https://aka.ms https://csspeechstorage.blob.core.windows.net *.adobedtm.com use.fontawesome.com https://www.youtube.com blob:; connect-src 'self' www.census.gc.ca www.recensement.gc.ca *.omnichannelengagementhub.com https://oc-cdn-public.azureedge.net *.statcan.gc.ca *.statcan.ca *.omtrdc.net app-eu.readspeaker.com media-na.readspeaker.com vtdnntts-na.readspeaker.com rstts-na.readspeaker.com rstts-eu.readspeaker.com vtdnntts-eu.readspeaker.com vttts-na.readspeaker.com cdn-na.readspeaker.com vttts-eu.readspeaker.com media-eu.readspeaker.com media-na.readspeaker.com app-na.readspeaker.com https://*.demdex.net https://cm.everesttech.net https://assets.adobedtm.com *.demdex.net innotts.azurewebsites.net https://aka.ms https://csspeechstorage.blob.core.windows.net wss://canadacentral.tts.speech.microsoft.com *.everesttech.net; img-src 'self' www.census.gc.ca www.recensement.gc.ca *.statcan.gc.ca *.statcan.ca https://oc-cdn-ocprod.azureedge.net https://cdn-na.readspeaker.com *.omtrdc.net *.demdex.net https://*.demdex.net https://cm.everesttech.net https://assets.adobedtm.com *.everesttech.net https://www.youtube.com data:; frame-src 'self' www.census.gc.ca www.recensement.gc.ca https://oc-cdn-public.azureedge.net/ https://web.powerva.microsoft.com https://app-na.readspeaker.com https://*.demdex.net https://www.youtube.com; font-src 'self' www.census.gc.ca www.recensement.gc.ca data: *.statcan.gc.ca *.statcan.ca https://fonts.gstatic.com https://themes.googleusercontent.com; frame-ancestors 'self' www.census.gc.ca www.recensement.gc.ca; 2 script-src * data: 'self' 'unsafe-inline' 'unsafe-eval'; worker-src blob: 'self' *.ing.com.tr; object-src 'self'; 2 default-src 'self' 'unsafe-inline' data: blob: 'unsafe-eval' *.suizoargentina.com.ar *.suizoargentina.com suizoargentina.com *.google.com *.googleapis.com fonts.googleapis.com *.gstatic.com *.farmaonline.com cdn.gtranslate.net *.mapbox.com chat-rueda.firebaseio.com *.firebaseio.com s-usc1c-nss-265.firebaseio.com *.bootstrapcdn.com caba33.suizoargentina.com.ar *.youtube.com *.log-in.com.ar *.w3.org *.vtexcommercestable.com.br *.myvtex.com *.vteximg.com.br *.vtex.com unpkg.com *.cloudflare.com cdn.jsdelivr.net chat.suizoargentina.com *.google-analytics.com *.googletagmanager.com code.jquery.com ajax.googleapis.com connect.facebook.net *.facebook.com *.g.doubleclick.net js.hubspot.com *.amazonaws.com *.gravatar.com *.suizoargentina.com/webchat chat.suizoargentina.com/webchat/ https://suizoargentina.com/ 10.5.0.33 https://10.0.29.29; img-src 'self' 'unsafe-inline' data: blob: 'unsafe-eval' *.mapbox.com http://suizoargentina.com https://suizoargentina.com https://suizoargentina.com/ caba33.suizoargentina.com.ar https://10.0.29.29 *.suizoargentina.com.ar *.suizoargentina.com *.exposuizo.com.ar *.google.com *.googleapis.com fonts.googleapis.com *.gstatic.com *.farmaonline.com cdn.gtranslate.net *.bootstrapcdn.com *.amazonaws.com js.hubspot.com *.youtube.com *.log-in.com.ar chat-rueda.firebaseio.com *.firebaseio.com *.w3.org s-usc1c-nss-265.firebaseio.com *.vtexcommercestable.com.br *.myvtex.com *.vteximg.com.br *.vtex.com unpkg.com *.cloudflare.com *.google-analytics.com *.googletagmanager.com connect.facebook.net *.facebook.com *.g.doubleclick.net secure.gravatar.com; 2 default-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; 2 default-src blob: data: https: 'self'; style-src blob: https: 'self' 'unsafe-inline'; media-src blob: data: https: 'self'; connect-src blob: data: https: 'self' 'unsafe-inline' wss://*.hotjar.com; frame-ancestors 'self'; script-src blob: 'self' 'unsafe-eval' 'unsafe-inline' https://*.adform.net/ https://*.app-us1.com/ https://*.go-mpulse.net https://*.hotjar.com https://*.outbrain.com/ https://*.rapidimages.net https://*.scene7.com https://*.volvo.com/ https://*.volvotrucks.com https://assets.adobedtm.com https://c2c.mct.co.il/ https://cdn.cookielaw.org https://connect.facebook.net https://googleads.g.doubleclick.net/ https://s3.eu-central-1.amazonaws.com/ https://snap.licdn.com/ https://documentservices.adobe.com/ https://trackcmp.net/ https://volvo-trucks.activehosted.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.instagram.com/ https://www.youtube.com https://apis.google.com/ https://widget.spreaker.com/widgets.js; report-to csp-endpoint; 2 default-src blob: data: 'self' http://*.stash.com http://browser-intake-datadoghq.com http://videos.ctfassets.net http://www.youtube.com; connect-src blob: data: 'self' http://*.doubleclick.net http://*.stash.com http://analytics.google.com http://api.segment.io http://browser-intake-datadoghq.com http://cdn.segment.com http://www.facebook.com http://region1.analytics.google.com http://rum.browser-intake-datadoghq.com http://stats.g.doubleclick.net http://www.google-analytics.com https://api.consentjs.datagrail.io https://experience.ninetailed.co https://ingest.insights.ninetailed.co https://assets.ctfassets.net https://maps.googleapis.com https://maps.gstatic.com https://widget.trustpilot.com https://mapixl.com https://app.launchdarkly.com https://clientsdk.launchdarkly.com https://clientstream.launchdarkly.com https://events.launchdarkly.com https://stream.launchdarkly.com https://hooks.slack.com https://api.sprig.com https://cdn.sprig.com https://pixel-config.reddit.com https://stashpublic.s3.amazonaws.com https://www.redditstatic.com; script-src blob: data: 'self' 'unsafe-eval' 'unsafe-inline' http://*.stash.com http://browser-intake-datadoghq.com http://cdn.segment.com http://www.googletagmanager.com https://cdn.sprig.com https://maps.googleapis.com https://maps.gstatic.com https://www.redditstatic.com; script-src-elem 'unsafe-inline' 'self' http://*.stash.com http://analytics.google.com https://connect.facebook.net http://www.googletagmanager.com http://widget.trustpilot.com https://api.consentjs.datagrail.io https://boards.greenhouse.io https://cdn.sprig.com https://job-boards.greenhouse.io/ https://maps.googleapis.com https://maps.gstatic.com https://mapixl.com https://cdn.sprig.com/shim.js https://www.redditstatic.com; style-src 'self' http://*.stash.com 'unsafe-inline' https://fonts.googleapis.com; img-src blob: data: 'self' http://*.cloudfront.net http://*.stash.com http://*.wpengine.com http://images.ctfassets.net http://s3.amazonaws.com https://stashpublic.s3.amazonaws.com http://www.facebook.com http://www.google.ca http://www.google.co.in http://www.google.co.ug http://www.google.co.uk http://www.google.de http://www.google.ie http://www.google.it http://www.google.pt http://www.google.nl http://www.googletagmanager.com https://alb.reddit.com https://maps.gstatic.com https://maps.googleapis.com; font-src 'self' data: http://*.stash.com http://fonts.gstatic.com; object-src 'self' http://*.stash.com; base-uri 'self' http://*.stash.com; form-action 'self' http://*.stash.com https://www.facebook.com; frame-src 'self' http://*.doubleclick.net http://*.stash.com http://www.youtube.com https://*.typeform.com http://widget.trustpilot.com https://boards.greenhouse.io https://job-boards.greenhouse.io/ https://www.facebook.com; frame-ancestors https://app.contentful.com; 2 default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' camo.githubusercontent.com 2 frame-ancestors 'self' https://*.dub.co 2 frame-ancestors https://deejay.de https://*.deejay.de https://vinylfuture.com https://*.vinylfuture.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' inline js.stripe.com checkout.stripe.com *.talkable.com *.typekit.net static.lensrentals.com staticw2.yotpo.com cdn-widgetsrepository.yotpo.com d2wy8f7a9ursnm.cloudfront.net dgpbytyl405yb.cloudfront.net d2jjzw81hqbuqv.cloudfront.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com cloud.typography.com cdn-widgetsrepository.yotpo.com staticw2.yotpo.com static.lensrentals.com; img-src 'self' data: about:blank about blob *.stripe.com *.googleusercontent.com *.gstatic.com i.ytimg.com static.lensrentals.com *.talkable.com cdn-yotpo-images-production.yotpo.com p.yotpo.com p.typekit.net; font-src 'self' data: fonts.gstatic.com cloud.typography.com cdn-widgetsrepository.yotpo.com cdn.shopify.com use.typekit.net; frame-src 'self' js.stripe.com checkout.stripe.com www.youtube-nocookie.com *.talkable.com share.lensrentals.com workforcenow.adp.com; connect-src 'self' checkout.stripe.com api-cdn.yotpo.com share.lensrentals.com; report-to lr 2 default-src 'self' * script-src 'self' 'unsafe-eval' style-src * 'unsafe-inline' data: 2 default-src 'self' https://www.facebook.com https://new-website-file.s3.ap-southeast-1.amazonaws.com https://static.addtoany.com https://www.sobot.com https://www.youtube.com; img-src 'self' https://i.ytimg.com https://new-website-file.s3.ap-southeast-1.amazonaws.com data: https://px.ads.linkedin.com https://www.facebook.com http://www.zkteco.com/en https://connect.facebook.net https://www.linkedin.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.sobot.com https://www.googletagmanager.com https://connect.facebook.net https://snap.licdn.com https://analytics.tiktok.com https://px.ads.linkedin.com https://static.addtoany.com; style-src 'self' 'unsafe-inline'; connect-src 'self' https://www.facebook.com/ https://analytics-ipv6.tiktokw.us wss://imws.sobot.com:9016/ws wss://imws.sobot.com:9013/ws wss://imws.sobot.com:9015/ws wss://imws.sobot.com:9014/ws wss://imws.sobot.com:9017/ws wss://imws.sobot.com:9018/ws https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://px.ads.linkedin.com https://www.facebook.com https://www.google-analytics.com https://mpc2-prod-24-is5qnl632q-uw.a.run.app; font-src 'self' data:;frame-ancestors 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://www.googletagmanager.com https://cdn.jsdelivr.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data:; font-src 'self' data: https://fonts.gstatic.com; object-src 'none'; frame-ancestors 'self'; connect-src 'self' https://exptest.dachain.tech https://cap.dachain.tech https://explorer.quadrans.io https://region1.google-analytics.com https://www.google-analytics.com https://cdn.jsdelivr.net 2 img-src 'self' https: data:; 2 frame-ancestors 'self' https://visixcreative.com; 2 frame-ancestors 'self' https://*.mncdn.com; 2 default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tag.demandbase.com https://d1f8f9xcsvx3ha.cloudfront.net https://munchkin.marketo.net https://consent.trustarc.com https://commons.ul.com https://snap.licdn.com https://futuremark.onfastspring.com https://empoweringtrust.ul.com https://benchmarks.ul.com https://benchmarks-ul-com-staging.futuremark.com https://www.ul.com https://www.3dmark.com https://ajax.googleapis.com https://www.google-analytics.com https://clients.futuremark.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://benchmarks.ul.com https://benchmarks-ul-com-staging.futuremark.com https://commons.ul.com https://empoweringtrust.ul.com/; img-src 'self' data: https://consent.trustarc.com https://d1f8f9xcsvx3ha.cloudfront.net https://benchmarks.ul.com https://id.rlcdn.com https://www.google.com https://www.googletagmanager.com https://px.ads.linkedin.com https://benchmarks-ul-com-staging.futuremark.com https://s3.amazonaws.com https://www.futuremark.com https://www.google.fi; font-src 'self' https://fonts.gstatic.com https://commons.ul.com https://consent.trustarc.com https://benchmarks-ul-com-staging.futuremark.com; frame-src 'self' http://empoweringtrust.ul.com/index.php/form/XDFrame https://futuremark.onfastspring.com https://consent.trustarc.com https://s.company-target.com https://benchmarks-ul-com-staging.futuremark.com https://www.googletagmanager.com https://empoweringtrust.ul.com https://ul-procyon-scores.web.app https://ul-quality-metrics-ai.web.app https://www.youtube.com;connect-src 'self' http://autocomplete.demandbase.com/api/v5/email.json https://futuremark.onfastspring.com https://consent.trustarc.com https://api.company-target.com https://www.google.com https://px.ads.linkedin.com https://tag-logger.demandbase.com https://commons.ul.com https://benchmarks-ul-com-staging.futuremark.com https://benchmarks.ul.com https://519-jvy-663.mktoresp.com https://tag.demandbase.com https://browser.sentry-cdn.com https://www.google-analytics.com https://www.3dmark.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://hwcenter.s3.us-east-1.amazonaws.com;form-action 'self' https://benchmarks.ul.com https://www.3dmark.com https://s3.amazonaws.com https://www.futuremark.com; 2 frame-ancestors 'self' https://www.netlifeplus.ec https://www.ventasnetlife.ec https://ventasnetlife.ec https://internetnetlife.ec https://analytics.tiktok.com https://internetnetlife.ec https://netlifehogar .com https://netlifeinternet.ec https://netlifeinternet.com.ec https://netlifeinternet.net.ec https://globalcomecuador.com https://denuncias.netlife.net.ec https://netlife.fluyapp.com https ://www.youtube-nocookie.com https://*.doubleclick.net https://www.googletagmanager.com https://www.youtube.com https://i.clarity.ms https://*.clarity.ms https://clarity.microsoft.com https: //www.youtube-nocookie.com https://*.youtube-nocookie.com https://netlife.hiringroom.com/jobs https://px.ads.linkedin.com https://netlife.ec https://*.netlife.ec https://*.opentv.com https: //*.otv-staging.com https://netlifeaccess.netlife.net.ec https://*.netlife.net.ec https://netlifeinternetec.com 2 default-src 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://*.wistia.com https://*.vantor.com https://*.sanity.io https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googlesyndication.com https://*.googleadservices.com https://www.googleadservices.com https://*.doubleclick.net https://googleads.g.doubleclick.net https://*.youtube.com https://*.ytimg.com https://*.demandbase.com https://*.company-target.com https://*.licdn.com https://*.linkedin.com https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://*.wistia.com https://*.vantor.com https://*.sanity.io https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googlesyndication.com https://*.googleadservices.com https://www.googleadservices.com https://*.doubleclick.net https://googleads.g.doubleclick.net https://*.youtube.com https://*.ytimg.com https://*.demandbase.com https://*.company-target.com https://*.licdn.com https://*.linkedin.com https://www.google.com; script-src-attr 'unsafe-inline'; worker-src 'self' blob:; frame-src 'self' https://*.wistia.net https://*.sanity.io https://*.wistia.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.googleadservices.com https://www.googleadservices.com https://*.doubleclick.net https://googleads.g.doubleclick.net https://*.youtube.com https://*.youtube-nocookie.com https://*.company-target.com https://*.linkedin.com https://www.google.com; frame-ancestors 'self' https://*.sanity.io https://vantor-cms.netlify.app https://*.vantor.com https://admin.mindtickle.com; connect-src 'self' https://*.netlify.app https://*.sanity.io https://*.sanity-cdn.com https://sanity-cdn.com https://*.vantor.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googlesyndication.com https://*.googleadservices.com https://www.googleadservices.com https://*.doubleclick.net https://googleads.g.doubleclick.net https://*.wistia.com https://fast.wistia.com https://ava0h2e5.apicdn.sanity.io https://*.demandbase.com https://*.company-target.com https://*.licdn.com https://*.linkedin.com https://px.ads.linkedin.com https://www.google.com https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' 'unsafe-hashes' https://fonts.googleapis.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com; img-src 'self' https://*.sanity.io https://*.netlify.app https://cdn.sanity.io https://*.s3.amazonaws.com https://*.googlesyndication.com https://*.googleadservices.com https://www.googleadservices.com https://*.doubleclick.net https://googleads.g.doubleclick.net https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.linkedin.com https://*.licdn.com https://www.google.com data: https:; media-src 'self' https://*.sanity.io https://*.netlify.app https://cdn.sanity.io https:; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com data: https:; 2 default-src 'self' https://*.e-i.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.monetico-services.com https://*.abtasty.com https://*.e-i.com https://*.linkedin.com https://cdn.tagcommander.com https://platform.linkedin.com https://snap.licdn.com https://tag.aticdn.net https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.abtasty.com https://*.e-i.com; img-src 'self' blob: data: https://*.abtasty.com https://*.commander1.com https://*.e-i.com https://*.linkedin.com https://i.ytimg.com https://img.youtube.com https://manager.tagcommander.com; font-src 'self' data: https://*.e-i.com https://common-fonts.abtasty.com; media-src 'self' data: https://*.e-i.com https://storage.playplay.com; base-uri 'none'; form-action 'self' *.monetico-services.com https://www.linkedin.com; frame-ancestors 'self'; child-src 'self' blob: *.monetico-services.com https://*.e-i.com https://*.harvest.fr https://api.linkedin.com https://qa-assistant.abtasty.com https://www.linkedin.com https://www.youtube-nocookie.com https://www.youtube.com; connect-src 'self' *.commander1.com https://*.abtasty.com https://*.e-i.com https://*.linkedin.com https://logs1412.xiti.com https://zkkwkzt.pa-cd.com; report-uri 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; 2 "default-src 'self' 'unsafe-inline'" 2 default-src 'self'; font-src 'self' data:; base-uri 'self'; connect-src 'self' multimedia.gsb.bund.de *.materna.de *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io vimeo.com *.sli.do *.itzbund.de lbb-hb.de; style-src 'self' 'unsafe-inline' *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io vimeo.com *.sli.do; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io piwik.itzbund.de vimeo.com *.sli.do *.jsdelivr.net; object-src 'self' multimedia.gsb.bund.de *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io vimeo.com *.sli.do *.lbb-hb.de; media-src 'self' blob: multimedia.gsb.bund.de *.tremonia-dxp.de *.youtube.com *.youtube-nocookie.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io vimeo.com *.sli.do lbb-hb.de; frame-src *.google.com *.google.de *.gstatic.com *.youtube.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io mindandvision.tv 2021.mindandvision.tv *.jwplayer.com vimeo.com *.sli.do player.vimeo.com; img-src 'self' data: *.materna.de *.google.com *.gstatic.com *.youtube.com *.twimg.com twemoji.maxcdn.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplayer.com *.strivetech.io *.sqat.eu piwik.itzbund.de vimeo.com yommaserver.synology.me:5001 *.sli.do *.cdninstagram.com *.fbcdn.net; frame-ancestors 'self'; 2 frame-ancestors https://app.ctmdev.us https://app.calltrackingmetrics.com https://app.ctm.ninja https://calltrackingmetrics.channeltivity.com 2 script-src 'self' https://2checkout.com http://* https://* 'unsafe-inline' 'report-sample' disqus.com c.disquscdn.com platform.instagram.com cdnjs.cloudflare.com z.moatads.com tpcf.feedify.net cdn.feedify.net feedify.net www.google.com/ www.gstatic.com/ call.chatra.io code.jquery.com cdn.amcharts.com code.highcharts.com kenwheeler.github.io cdn.jsdelivr.net a.disquscdn.com go.disqus.com platform.twitter.com cdn.syndication.twimg.com gist.github.com/ScottHelme/ static.cloudflareinsights.com js.stripe.com https://unpkg.com/@tryghost/; style-src 'self' 'unsafe-inline' 'report-sample' c.disquscdn.com a.disquscdn.com fonts.googleapis.com cdnjs.cloudflare.com cdn.feedify.net feedify.net kenwheeler.github.io platform.twitter.com assets-cdn.github.com github.githubassets.com; img-src 'self' data: www.gravatar.com cdn.feedify.net feedify.net links.services.disqus.com referrer.disqus.com a.disquscdn.com cdn.syndication.twimg.com pbs.twimg.com platform.twitter.com abs.twimg.com www.google-analytics.com stripe.com/ 2checkout.com/; frame-ancestors 'none'; report-uri https://cdn.feedify.net.report-uri.com/r/d/csp/enforce; report-to default 2 default-src 'self' www.nsinternational.com;connect-src 'self' data: www.nsinternational.com *.nsinternational.com mail.nsinternational.nl *.ns.nl browser-intake-datadoghq.eu www.datadoghq-browser-agent.com *.enterprisebot.co ws://*.enterprisebot.co www.google-analytics.com region1.google-analytics.com region1.analytics.google.com www.google.com www.google.nl maps.googleapis.com www.googleapis.com www.googletagmanager.com www.googleadservices.com adservice.google.com stats.g.doubleclick.net googleads.g.doubleclick.net ad.doubleclick.net *.blueconic.net *.optimizely.com edge.api.brightcove.com manifest.prod.boltdns.net *.brightcovecdn.com *.qualtrics.com *.cognigy.cloud wss://*.cognigy.cloud *.amplitude.com o71339.ingest.sentry.io www.facebook.com t.co analytics.twitter.com bat.bing.com ts.tradetracker.net api-prd.kpn.com;frame-src 'self' www.nsinternational.com www.google.com recaptcha.google.com translate.googleapis.com translate.google.com www.googletagmanager.com a7779470749.cdn.optimizely.com *.qualtrics.com ezvr.nl roundme.com;font-src 'self' data: www.nsinternational.com *.ns.nl *.enterprisebot.co fonts.gstatic.com;worker-src 'self' blob: www.nsinternational.com;img-src 'self' data: www.nsinternational.com ocptst.ns.nl static-ns-nl-data.fep-p.cla.ns.nl *.enterprisebot.co *.google-analytics.com www.google.com www.google.nl www.google.be www.google.de www.google.fr www.google.co.uk www.google.ie fonts.gstatic.com maps.gstatic.com maps.googleapis.com translate.google.com www.googletagmanager.com www.googleadservices.com adservice.google.com adservice.google.nl adservice.google.be googleads.g.doubleclick.net ad.doubleclick.net nshispeed.blueconic.net plugins.blueconic.net b339.nsinternational.com *.boltdns.net *.qualtrics.com www.facebook.com t.co analytics.twitter.com bat.bing.com ts.tradetracker.net images.ctfassets.net;media-src 'self' blob: www.nsinternational.com manifest.prod.boltdns.net *.brightcovecdn.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' www.nsinternational.com static-ns-nl-data.fep-p.cla.ns.nl www.datadoghq-browser-agent.com *.enterprisebot.co www.google-analytics.com www.google.com www.gstatic.com maps.googleapis.com translate.googleapis.com translate.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net nshispeed.blueconic.net plugins.blueconic.net cdn.blueconic.net/nshispeed.js b339.nsinternational.com cdn.optimizely.com/js/12346740180.js players.brightcove.net vjs.zencdn.net *.qualtrics.com *.amplitude.com code.jquery.com;style-src 'self' 'unsafe-inline' www.nsinternational.com static-ns-nl-data.fep-p.cla.ns.nl *.enterprisebot.co fonts.googleapis.com www.googletagmanager.com plugins.blueconic.net b339.nsinternational.com;object-src 'none';form-action 'self' ns.qualtrics.com;frame-ancestors 'self' nshispeed.blueconic.net b339.nsinternational.com app.contentful.com;upgrade-insecure-requests 2 default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests; 2 frame-ancestors 'self' https://app.grovecms.org/ https://donate.lpm.org/ 2 base-uri 'self'; default-src *; style-src 'unsafe-inline' *; script-src 'unsafe-eval' 'unsafe-inline' *; img-src *; media-src *; font-src *; connect-src *; worker-src *; frame-src *; form-action *; 2 frame-ancestors 'self' https://*.movavika.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr http://webvisor.com http://*.webvisor.com https://webvisor.com https://*.webvisor.com https://portal1.comm100.io; report-uri https://o474997.ingest.sentry.io/api/5707147/security/?sentry_key=839cab03978446cdbf603f5f5022e843&sentry_environment=production; report-to csp-endpoint 2 frame-src *; frame-ancestors *; child-src 'self' 'unsafe-inline' blob:; report-uri /report-csp-violation 2 child-src 'self' *.optimizely.com *.eu.qualtrics.com *.legalandgeneral.com *.everesttech.net *.landg.com *.lgim.com *.demdex.net *.g.doubleclick.net *.brighttalk.com *.theidoluat.com *.theidolprod.com *.landginvestments.com *.videomarketingplatform.co www.youtube-nocookie.com storagelandgv2prod.blob.core.windows.net landgmya.ctc.uk.com view.ceros.com apps.euw2.pure.cloud flo.uri.sh embeds.audioboom.com www.google.com aax-eu.amazon-adsystem.com 11594483.fls.doubleclick.net 4918313.fls.doubleclick.net 5z4kxmbpt3zylymtu.helpcenter.uwassist.com 6165515.fls.doubleclick.net 7rm60022.ibosscloud.com 9797771.fls.doubleclick.net accounts.google.com acestream.me api.nakarta.com auth.filteredinternet.co.uk auth.iws-hybrid.trendmicro.com az416426.vo.msecnd.net blipznchitzcom-a.akamaihd.net blob: bot.ebilobster.ai butoembed.twentythree.net candysodapopcom-a.akamaihd.net checkpoint.tpt.org cn-1998263966-7vnsr30171.ibosscloud.com cn-1998264190-7vnsr30028.ibosscloud.com cn-1998264264-7vnsr40033.ibosscloud.com compare.defaqto.com connect.facebook.net crushclanscom-a.akamaihd.net data: embed.buto.tv embed.wirewax.com ernie.midlothian.gov.uk:15871 filter.techloq.com gateway.zscaler.net gateway.zscalerone.net gateway.zscalerthree.net gateway.zscalertwo.net gateway.zscloud.net go.skimresources.com grpfpgw01.group.local:15871 hdapp1008-a.akamaihd.net hhwssac.healthcareath.local images-static.trustpilot.com lgim.turtl.co lifesearch.co.uk login.microsoftonline.com login.zscalertwo.net login.zscloud.net mail.google.com mh-bir-mgmt101 mozbar.moz.com notify.bluecoat.com o.yieldsquare.com oakfppr01 omny.fm pa.eshapay.net player.videosmart.com pp.ephapay.net pp.eshapay.net pwm-image.trendmicro.com reassured-ltd-dev.onelogin.com rm40954.ibosscloud.com rm40962.ibosscloud.com rm40966.ibosscloud.com rm40977.ibosscloud.com rocket.theregisschool.co.uk saml.threatpulse.net:8443 secure5.arcot.com service.securesrv12.com sophosxg.equinox.co.uk:8090 sts.global.tesco.org sts.morrisonus.com sts.royalmailgroup.net tool-bcg.bwe.io useast2-www.securly.com usercheck.themovefactory.com webui.dashlane.com widget.trustpilot.com widgets-lgim.huguenots.co.uk www.calculateyourchances.com www.facebook.com www.houzz.com www.open.edu www.podbean.com www.youtube.com yournews-legalandgeneral.com zswpmanager.wip.mmc.com www.everestjs.net lgima.filepoint.live embeds.audioboom.com player.vimeo.com; connect-src 'self' *.onetrust.com *.optimizely.com *.dynatrace.com *.lgnet.co.uk *.infinity-tracking.com *.infinity-tracking.net *.console.glassboxsaas.com *.report.gbss.io *.tealiumiq.com *.sgwidget.com *.recipelondon.co.uk *.crownpeak.net *.landg.com *.lgim.com *.demdex.net *.everesttech.net *.legalandgeneral.com *.sessioncam.com *.g.doubleclick.net *.googleapis.com *.tt.omtrdc.net genesys-proxy-lg.vercel.app edge.adobedc.net wss://webmessaging.euw2.pure.cloud pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com api.euw2.pure.cloud api.shelf-eu.com api-cdn.euw2.pure.cloud brochure-tool.huguenots.co.uk widgets-lgim.huguenots.co.uk incomestandards-api-prod.azurewebsites.net yournews-legalandgeneral.com 1637314617.rsc.cdn77.org 1986635568.rsc.cdn77.org ad.doubleclick.net ads34.adlane.info adservice.google.com am-uk.sophus3.com api.addressy.com api.ip6.org.il api.pokuponik.net api.trongrid.io api.tronstack.io b.1p1eqpotato.com backoffice.abaka.me base3-sv.tribal-enjoy.com bat.bing.com bf21791iym.bf.dynatrace.com blob: bot.ebilobster.ai catds.net cdn.aframe.io cdnjs.cloudflare.com code.jquery.com customer.iad-03.braze.com data: dc.services.visualstudio.com dpdb.webvr.rocks eu-ec.walkme.com gateway.zscloud.net hm.baidu.com ka-f.fontawesome.com legalandgeneral.report-uri.com luxins.net m65.prod2016.com mcid-0ac271e4-b1ad-4312-a8f4-776fbc9c2cd7.ep-mimecast.doubleclick.net mcid-f5ea55f2-57aa-4c38-8e4d-d04af422d7f4.ep-mimecast.doubleclick.net new229.com njs.wigoal.com s.yimg.com siteintercept.qualtrics.com surfly.com t.co t.skimresources.com widget.trustpilot.com www.bing.com www.cgtforms.com www.facebook.com www.google.com www.google-analytics.com www.googletagmanager.com you.caresourcer.com api.ebiai.app messenger.ebiai.app; default-src 'none'; style-src 'self' 'unsafe-inline'; font-src 'self'; form-action 'self' *.lgim.com *.crownpeak.com *.eu.qualtrics.com bpb.opendns.com connect.facebook.net connect.secure.wellsfargo.com data: identity.landg.com myaccount.landg.com retirements.landg.com watermelonsurveys.com www.facebook.com www10.landg.com; frame-ancestors 'self' *.legalandgeneral.com *.legalandgeneralre.com *.lgima.com *.longevitypanel.co.uk *.landg.com *.lgim.com *.optimizely.com; img-src 'self' data: https: blob:; manifest-src 'self'; media-src 'self' data: https:; object-src data: 'self' 'unsafe-inline' *.brighttalk.com yournews-legalandgeneral.com; script-src *.onetrust.com *.optimizely.com *.lgim.netlify.huguenots.co.uk *.infinity-tracking.com *.infinity-tracking.net *.brighttalk.com *.crownpeak.com *.ep-mimecast.googleadservices.com *.everesttech.net *.google-analytics.com *.googleapis.com *.gstatic.com *.legalandgeneral.com *.landg.com *.lgim.com *.qualtrics.com *.recipelondon.co.uk *.sessioncam.com *.sgwidget.com *.tt.omtrdc.net *.tealiumiq.com *.gbqofs.com *.landginvestments.com www.redditstatic.com cdn.jsdelivr.net view.ceros.com apps.euw2.pure.cloud public.flourish.studio am-uk.sophus3.com analytics.twitter.com assets.adobedtm.com az416426.vo.msecnd.net bat.bing.com bot.ebilobster.ai blob: cdnjs.cloudflare.com cgtforms.com code.jquery.com collector-5357.tvsquared.com collector-6040.tvsquared.com connect.facebook.net cookie-cdn.cookiepro.com d2oh4tlt9mrke9.cloudfront.net d32rf3z04esc6j.cloudfront.net d3c3cq33003psk.cloudfront.net data: *.episerver.net embed.caresourcer.com g.microsoft.com gateway.zscaler.net gateway.zscalerthree.net gateway.zscalertwo.net gateway.zscloud.net googleads.g.doubleclick.net googletagmanager.com js.buto.tv js-cdn.dynatrace.com login.zscloud.net mark.reevoo.com mcid-019e7840-618c-457e-a849-9a30ac859267.ep-mimecast.facebook.net mcid-121966df-4958-44b7-bdb2-eaf7495aa328.ep-mimecast.licdn.com mcid-16e9e470-bffa-4bda-ac78-44195b66767b.ep-mimecast.ads-twitter.com mcid-1976a623-6682-4713-baed-2c6f37db1ab5.ep-mimecast.omguk.com mcid-26d71e74-3d79-4f8c-8971-257a1b849987.ep-mimecast.yahoo.com mcid-28deceea-6370-4ebc-9148-13911797af60.ep-mimecast.yahoo.com mcid-29a6bb62-bc5a-498b-a38b-593223170ed2.ep-mimecast.facebook.net mcid-36c18f8a-e64f-4fc4-86db-140aceed9c8e.ep-mimecast.twitter.com mcid-553b692d-9067-4272-b990-8ea8cc32f877.ep-mimecast.facebook.net mcid-5cc076b2-622e-4661-9626-a5754ea24680.ep-mimecast.ads-twitter.com mcid-5f164421-199b-4745-9fa1-4e4e205e682d.ep-mimecast.yahoo.com mcid-6477d951-4ea1-49ca-98c3-9f252dbc1833.ep-mimecast.licdn.com mcid-679f2ff6-ecf8-4f58-bfca-1dc501b19238.ep-mimecast.omguk.com mcid-69d81405-2fd9-49ed-befb-becf1583331a.ep-mimecast.yahoo.com mcid-731b479d-c90c-4b45-8cdc-f81ed387b7c6.ep-mimecast.facebook.net mcid-7d5144a5-b5c0-477f-a08c-22e687a39e2e.ep-mimecast.twitter.com mcid-8722c1df-d8fc-4d3e-8fbf-16314344b30c.ep-mimecast.licdn.com mcid-8a5dc1e3-8fe7-44f8-85cc-223f23be4a84.ep-mimecast.yahoo.com mcid-8ea90f5e-acce-4c10-ab7e-34a2e1e1a149.ep-mimecast.yahoo.com mcid-9892198a-748e-4255-9dff-5d0c822dc6d3.ep-mimecast.ads-twitter.com mcid-99c84166-89d1-4d15-9f9b-d2d7892e25bd.ep-mimecast.licdn.com mcid-9e39af0e-6e5b-42f2-aa14-41109590b4c2.ep-mimecast.licdn.com mcid-a3a8355f-f1c9-4420-9d75-0277324af800.ep-mimecast.ads-twitter.com mcid-c5f55808-ef87-448e-b4fe-67485b672ba4.ep-mimecast.yahoo.com mcid-d5aed1ce-58dc-4759-9b4b-82850797592e.ep-mimecast.facebook.net mcid-dbae6fe0-9ce4-4603-ba5c-d48ffd6196bf.ep-mimecast.yahoo.com mcid-e435a0c4-c921-433d-9d1a-5e48e73655d8.ep-mimecast.facebook.net mcid-ed66c754-edc3-4d70-972b-b3acd565858e.ep-mimecast.licdn.com mcid-f0018d13-1521-4461-8af1-96e3dc39d741.ep-mimecast.licdn.com mcid-f59a4106-e508-4f24-925d-3d8fca127f59.ep-mimecast.twitter.com metrics.responsetap.com mobile.twitter.com pi.pardot.com player.videosmart.com s.btstatic.com s.yimg.com scripts.sophus3.com 'self' snap.licdn.com sp.analytics.yahoo.com static.ads-twitter.com static-ssl.responsetap.com tags.tiqcdn.com track.omguk.com translate.google.com twitter.com ucads-cdn.ucweb.com 'unsafe-eval' 'unsafe-inline' websites.cdn.getfeedback.com widget.trustpilot.com widgets-lgim.huguenots.co.uk www.everestjs.net www.google.co.uk www.google.com www.google.com.au www.googleadservices.com www.googletagmanager.com www.youtube.com yournews-legalandgeneral.com *.lgima.com api.ebiai.app messenger.ebiai.app d2hkbi3gan6yg6.cloudfront.net 2 frame-ancestors 'self' https://cxagent.nicecxone.com https://max.niceincontact.com https://max.nice-incontact.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.adobedtm.com *.quantummetric.com https://www.google.com/recaptcha *; object-src 'none' ; connect-src *; font-src *; frame-ancestors https://www.youtube.com/; style-src 'self' 'unsafe-inline' https://*.typekit.net https://sslwidgetmaster.investorroom.com/css *; img-src * 'self' data: blob:; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content;worker-src blob:; frame-src https://www.youtube.com/embed/ https://www.google.com/recaptcha *; child-src blob:; 2 default-src 'self' p11.techlab-cdn.com;script-src 'self' 'unsafe-inline' *.cdw.com *.cdw.ca *.richrelevance.com *.qualtrics.com *.optimizely.com *.needle.com *.appspot.com *.facebook.net *.googleadservices.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.akamaihd.net *.google.com *.justuno.com *.demdex.net *.d41.co *.cxense.com pactsafe.io *.webcollage.net *.googletagmanager.com *.googlesyndication.com *.googletagservices.com *.ytimg.com *.youtube.com *.easy2.com *.go-mpulse.net *.linkedin.com *.cloudfront.net *.bluecore.com blob: data.g2.com *.g2crowd.com *.omtrdc.net *.spexlive.net *.gstatic.com *.turnto.com *.licdn.com *.hs-scripts.com *.hsleadflows.net *.hs-banner.com *.hsforms.net *.hsadspixel.net *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com accessibilityserver.org *.userway.org *.tiqcdn.com *.tealiumiq.com *.adroll.com *.hs-analytics.net js.usemessages.com *.hscollectedforms.net *.redditstatic.com *.reddit.com *.scene7.com *.vidyard.com *.vimeo.com *.hp.com *.etilize.com *.1worldsync.com *.quantserve.com *.quantcount.com *.spexaccess.net *.launchdarkly.com *.onetrust.com *.oribi.io *.cookielaw.org *.stackadapt.com *.administrateweblink.com *.stripe.com *.pactsafe.io *.sketchfab.com *.fiservapps.com sierra.chat *.algorecs.com *.officeperceptioninstinct.com *.oktapreview.com *.okta.com *.jst.ai *.onelink-edge.com justone.ai oc-cdn-ocprod.azureedge.net *.adobedtm.com *.mktoresp.com *.mktoapi.com *.mktoweb.com *.mktoedge.com *.adobedc.net *.marketo.net *.adoberesources.net sketchfab.com *.6sc.co *.6sense.com *.bluecore.app p11.techlab-cdn.com;style-src 'self' 'unsafe-inline' *.cdw.com *.cdw.ca *.needle.com *.googleapis.com *.justuno.com *.webcollage.net *.easy2.com *.amazonaws.com *.cloudfront.net blob: *.typekit.net *.omtrdc.net *.spexlive.net *.turnto.com *.syndigo.com *.syndigo.cloud *.scene7.com *.etilize.com *.1worldsync.com *.spexaccess.net *.stackadapt.com *.administrateweblink.com *.stripe.com *.sketchfab.com sierra.chat oc-cdn-ocprod.azureedge.net *.adobedtm.com;img-src 'self' *.cdw.com *.cdw.ca *.qualtrics.com *.optimizely.com *.needle.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.akamaihd.net *.google.com *.justuno.com *.demdex.net *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.ytimg.com *.youtube.com *.easy2.com *.amazonaws.com *.linkedin.com *.facebook.com *.cloudfront.net *.adobecqms.net *.everesttech.net *.bluecore.com cdn.optimizely.com data: *.omtrdc.net *.spexlive.net *.windows.net *.turnto.com *.edgecastcdn.net *.licdn.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot.com *.userway.org *.tiqcdn.com *.tealiumiq.com *.adroll.com *.redditstatic.com *.reddit.com *.scene7.com *.vidyard.com *.vimeocdn.com *.etilize.com *.1worldsync.com *.quantserve.com *.quantcount.com *.spexaccess.net *.oribi.io *.cookielaw.org *.stackadapt.com *.pactsafe.io *.administratehq.com *.sketchfab.com sierra.chat *.officeperceptioninstinct.com *.oktapreview.com *.okta.com *.jst.ai *.hubspotusercontent-na1.net justone.ai *.adobedtm.com *.mktoedge.com *.6sc.co *.6sense.com *.bluecore.app;frame-src 'self' *.cdw.com *.cdw.ca *.qualtrics.com *.needle.com *.doubleclick.net *.google.com *.justuno.com *.demdex.net *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.youtube.com *.easy2.com *.facebook.com *.cloudfront.net *.cdwemail.com *.kingston.com *.spexlive.net *.swcontentsyndication.com *.exacttarget.com *.exct.net *.simplecast.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.userway.org *.scene7.com *.vidyard.com *.vimeo.com *.hp.com *.etilize.com *.1worldsync.com *.spexaccess.net *.onetrust.com *.administrateweblink.com *.stripe.com *.sketchfab.com *.fiservapps.com *.microsoft.com justone.ai oc-cdn-ocprod.azureedge.net *.mktoweb.com *.adobedc.net sketchfab.com *.6sc.co *.6sense.com;font-src * data:;connect-src 'self' *.cdw.com *.cdw.ca *.richrelevance.com *.qualtrics.com *.optimizely.com *.needle.com *.appspot.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.akamaihd.net *.google.com *.justuno.com *.demdex.net *.d41.co *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.go-mpulse.net *.linkedin.com *.facebook.com *.cloudfront.net *.bluecore.com *.akstat.io data.g2.com *.g2crowd.com *.omtrdc.net *.spexlive.net *.turnto.com *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com accessibilityserver.org *.userway.org *.tiqcdn.com *.tealiumiq.com *.adroll.com *.scene7.com *.addressy.com *.etilize.com *.1worldsync.com *.quantserve.com *.spexaccess.net *.launchdarkly.com *.onetrust.com *.oribi.io *.cookielaw.org *.stackadapt.com *.administrateweblink.com *.pactsafe.io *.administratehq.com *.sketchfab.com sierra.chat *.algorecs.com *.onelink-edge.com justone.ai *.adobedtm.com *.mktoresp.com *.mktoapi.com *.mktoweb.com *.mktoedge.com *.adobedc.net *.marketo.net *.6sc.co *.6sense.com *.bluecore.app p11.techlab-cdn.com;object-src 'self' *.cdw.com *.scene7.com;media-src 'self' *.cdw.com *.webcollage.net *.youtube.com blob: *.spexlive.net *.syndigo.com *.syndigo.cloud *.userway.org *.tiqcdn.com *.scene7.com *.etilize.com *.1worldsync.com *.spexaccess.net *.sketchfab.com;worker-src 'self' *.needle.com *.cloudfront.net blob:; 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.ed.gov http://*.ed.gov; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; object-src 'self' 'unsafe-eval' 'unsafe-inline' https:; script-src-elem 'unsafe-inline' blob: https:; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.paddle.com/paddle/paddle.js https://gc.zgo.at/count.js https://hcaptcha.com https://*.hcaptcha.com https://plausible.simplelogin.io/js/index.js; child-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://*.paddle.com https://www.youtube.com https://app.tryhoist.com; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://cdn.paddle.com 2 default-src 'self' *.amazonaws.com *.tarteel.ai *.tarteel.io *.mixpanel.com *.stripe.com *.sentry.io *.wasabisys.com tarteel.zendesk.com https://vercel.live/ https://vercel.com https://*.vercel.com wss://*.pusher.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com; script-src 'self' 'unsafe-eval' *.mixpanel.com *.stripe.com *.appsflyer.com https://vercel.live/ https://vercel.com https://*.vercel.com https://*.intercom.io https://*.intercomcdn.com; style-src 'self' 'unsafe-inline' *; connect-src 'self' *.amazonaws.com *.tarteel.ai *.tarteel.io *.mixpanel.com *.stripe.com *.sentry.io *.wasabisys.com tarteel.zendesk.com https://vercel.live/ https://vercel.com https://*.vercel.com wss://*.pusher.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.intercomcdn.com https://*.intercomusercontent.com; img-src 'self' tarteel.ai *.tarteel.ai *.wasabisys.com https://vercel.live/ https://vercel.com https://*.vercel.com https://sockjs-mt1.pusher.com/ https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.intercom.io https://*.intercomcdn.com https://*.intercomassets.com https://*.intercomusercontent.com data: blob: *.ytimg.com *.tiktokcdn.com *.tiktokcdn-us.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.unsplash.com unpkg.com; font-src 'self' https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.intercomcdn.com data:; object-src 'self' data:; frame-src 'self' *.cloudflare.com *.tiktok.com *.stripe.com https://vercel.live/ https://vercel.com https://*.vercel.com https://*.intercom.io https://*.intercom-messenger.com *.youtube.com *.youtube-nocookie.com *.instagram.com *.facebook.com; script-src-elem 'self' blob: 'unsafe-inline' *; worker-src 'self' blob:; frame-ancestors 'self' https://challenges.cloudflare.com; 2 base-uri 'self'; upgrade-insecure-requests; 2 connect-src 'self' www.facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com pagead2.googlesyndication.com www.google.com googleads.g.doubleclick.net analytics.google.com www.google-analytics.com www.redditstatic.com px.ads.linkedin.com js.zi-scripts.com stats.g.doubleclick.net login.microsoftonline.com forms-eu1.hscollectedforms.net forms-eu1.hsforms.com api-eu1.hubapi.com hubspot-forms-static-embed-eu1.s3.amazonaws.com https://tlkfrontprod.azureedge.net toloka.dev sandbox.toloka.dev https://events.framer.com https://framerusercontent.com https://c.bing.com https://*.clarity.ms https://mindrift.ai pixel-config.reddit.com api.framer.com https://app.framerstatic.com boards-api.greenhouse.io https://agent.tendem.ai https://shoutout.io https://app.sourceloop.ai https://ejhrxxuydfvlkdokwrid.functions.supabase.co;script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net www.google-analytics.com www.googletagmanager.com www.google.com *.googletagmanager.com tagmanager.google.com www.googleadservices.com bat.bing.com snap.licdn.com www.redditstatic.com js.zi-scripts.com googleads.g.doubleclick.net js-eu1.hs-scripts.com js-eu1.hsadspixel.net js-eu1.hs-analytics.net js-eu1.hs-banner.com js-eu1.hscollectedforms.net js-eu1.hsforms.net https://tlkfrontprod.azureedge.net https://framer.com https://framerusercontent.com https://events.framer.com/script https://c.bing.com https://*.clarity.ms https://ga.jspm.io https://app.framerstatic.com https://edit.framer.com https://challenge.framer.com https://*.framer-components.toloka-test.ai https://framer-components.toloka.cloud https://*.workable.com https://dcvxs6ggqztsa.cloudfront.net static.ads-twitter.com https://agent.tendem.ai https://shoutout.io https://app.sourceloop.ai;style-src 'self' googletagmanager.com fonts.googleapis.com tagmanager.google.com https://tlkfrontprod.azureedge.net https://app.framerstatic.com 'unsafe-inline' https://agent.tendem.ai https://shoutout.io;img-src https: 'self' data: googletagmanager.com *.google-analytics.com *.googletagmanager.com googleads.g.doubleclick.net www.google.com ssl.gstatic.com www.gstatic.com https://tlkfrontprod.azureedge.net https://agent.tendem.ai https://shoutout.io;frame-src 'self' td.doubleclick.net bid.g.doubleclick.net www.facebook.com sdx.microsoft.com www.youtube.com youtube.com forms-eu1.hsforms.com js-eu1.hsforms.net https://tlkfrontprod.azureedge.net blob: https://apply.workable.com embed.referral-factory.com www.googletagmanager.com tb.toloka.dev https://edit.framer.com https://framer.com https://job-boards.eu.greenhouse.io https://shoutout.io;manifest-src 'self' https://tlkfrontprod.azureedge.net;frame-ancestors *.toloka.ai toloka.ai *.toloka-test.ai;report-to default-group;font-src 'self' fonts.gstatic.com https://tlkfrontprod.azureedge.net https://framerusercontent.com https://app.framerstatic.com https://agent.tendem.ai;media-src 'self' https://tlkfrontprod.azureedge.net https://framerusercontent.com https://agent.tendem.ai;base-uri 'self';default-src 'none';object-src embed.referral-factory.com;child-src blob:;style-src-attr 'unsafe-inline';worker-src 'self' blob: data: 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src * data: blob:; font-src * data:; connect-src *; media-src *; frame-src *; worker-src * blob:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; 2 frame-ancestors 'self' mein.kabelplus.at mein-test.kabelplus.at newapp.etracker.com 2 upgrade-insecure-requests; frame-ancestors 'self' ; report-to csp-violation; report-uri https://cspreports.realpage.com/api/reports/save/violation; 2 worker-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net unpkg.com static.cpcache.com *.google.com *.google-analytics.com *.googlecommerce.com *.googleadservices.com *.braintreegateway.com *.googleapis.com *.cloudflare.com *.planetart.com *.newrelic.com *.twitter.com *.ads-twitter.com *.facebook.net *.adroll.com *.livechatinc.com cdn.brcdn.com www.paypalobjects.com *.brsrvr.com *.nr-data.net *.pcrl.co *.picreel.com *.bing.com *.extole.com *.yimg.com *.yahoo.com *.sharethis.com *.amazonaws.com *.rubiconproject.com *.doubleclick.net *.ups-mi.net *.pinterest.com *.paypal.com *.tellapal.com *.emjcd.com *.shareasale.com t.co *.adxcel-ec2.com *.gstatic.com *.steelhousemedia.com www.googletagmanager.com pixel.cdnwidget.com snap.licdn.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com cdn.linkedin.oribi.io gw.linkedin.oribi.io dc.ads.linkedin.com sjs.bizographics.com *.tvsquared.com unpkg.com d39517acq78dhc.cloudfront.net js.braintreegateway.com *.cardinalcommerce.com *.dca0.com d.adroll.mgr.consensu.org *.ccdc02.com *.openx.net *.rlcdn.com *.adnxs.com *.bidswitch.net *.3lift.com *.taboola.com *.pubmatic.com *.outbrain.com *.casalemedia.com *.advertising.com www.clickcease.com cdn.levelaccess.net *.mail.simplytoimpress.com *.mail.simplytoimpress.co.uk *.mail.canvasworld.com *.mail.photoaffections.com *.mail.mycustomcase.com *.mail.cafepress.com *.eml.legacylane.com *.eml.parkerandpip.com *.eml.gifts.com *.eml.stockingshop.com *.eml.ornamentstreet.com *.eml.baubles.co.uk track.cordial.io tags.tiqcdn.com use.typekit.net dpm.demdex.net www.lightboxcdn.com t.channeladvisor.com tag.bounceexchange.com s.pinimg.com assets.bounceexchange.com api.bounceexchange.com *.cj.com a.omappapi.com analytics.tiktok.com lightboxapi.azurewebsites.net cdn.attn.tv *.afterpay.com *.mountain.com *.nextdoor.com utt.impactcdn.com *.sjv.io *.clarity.ms d.impactradius-event.com tags.crwdcntrl.net *.turnto.com *.turnto.eu wac.edgecast.net s.axon.ai c.albss.com *.rokt.com cdn.cookielaw.org *.iseeme.com *.bookofus.com *.vimeo.com *.vimeocdn.com https://*.kaptcha.com *.niceincontact.com d2zm0lpns956f8.cloudfront.net websdk.appsflyer.com *.bazaarvoice.com mpsnare.iesnare.com *.appsflyer.com shop.pe mapi.gifts.com *.simplytoimpress.com *.photoaffections.com *.canvasworld.com *.mycustomcase.com *.simplytoimpress.co.uk *.parkerandpip.com *.legacylane.com *.gifts.com *.personalcreations.com *.stockingshop.com *.ornamentstreet.com *.baubles.co.uk *.cafepress.com *.cafepress.co.uk *.cafepress.ca *.cafepress.com.au cdn.gonift.com shopper.shop.pe d2mjzob2nc713b.cloudfront.net capig.gifts.com nexus.ensighten.com *.mczbf.com *.herbstarsbuilding.com res4.applovin.com cdn.mgln.ai *.stamped.io *.fontawesome.com *.trustpilot.com *.listrak.com *.listrakbi.com d2hrivdxn8ekm8.cloudfront.net *.criteo.net *.criteo.com cdn.id5-sync.com bzrcdn.openai.com d32u6scf3pzwp7.cloudfront.net;frame-ancestors 'self' https://www.gifts.com https://*.personalcreations.com https://*.iseeme.com https://*.stage.iseeme.com;object-src 'self' https://www.gifts.com;upgrade-insecure-requests 2 default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: https://www.google.com https://www.gstatic.com https://*.auglio.com https://*.virtooal.com; style-src 'self' 'unsafe-inline' https: data: https://www.gstatic.com https://*.auglio.com https://*.virtooal.com; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: data: https://www.google.com https://www.gstatic.com https://*.auglio.com https://*.virtooal.com; media-src 'self' https: blob: data:; frame-src 'self' https: blob: data: https://www.google.com https://*.auglio.com https://*.virtooal.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.paypal.com https://virtooal.us7.list-manage.com https://www.facebook.com/tr/; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; img-src * 'self' data: https:; 2 default-src 'self' https://*.google-analytics.com https://*.twitter.com https://*.windows.net https://*.googleapis.com https://www.googletagmanager.com https://serverapi.arcgisonline.com https://*.arcgis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://cdn.syndication.twimg.com https://www.jobapscloud.com https://api.uptimerobot.com https://*.nr-data.net https://*.curator.io browser-update.org https://*.reflector.workers.dev https://unpkg.com https://*.list-manage.com https://*.cot.workers.dev https://api.municode.com https://*.livestream.com https://*.ads.cot https://*.google.com https://*.monsido.com https://*.fontawesome.com https://pubsvc.tampagov.net https://stats.g.doubleclick.net https://apps.tampagov.net https://www.gstatic.com https://controlpanel.opengov.com https://www.arcgis.com/ https://kendo.cdn.telerik.com https://viewlicense.adobe.io https://cdn-images.mailchimp.com/ https://*.adobe.com https://webapp.recyclecoach.com https://us-web.apigw.recyclecoach.com https://cdn.recyclecoach.com https://vimeo.com; connect-src 'self' https://*.google-analytics.com https://*.twitter.com https://*.windows.net https://*.googleapis.com https://www.googletagmanager.com https://serverapi.arcgisonline.com https://*.arcgis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://cdn.syndication.twimg.com https://www.jobapscloud.com https://api.uptimerobot.com https://*.nr-data.net https://*.curator.io browser-update.org https://*.reflector.workers.dev https://unpkg.com https://*.list-manage.com https://*.cot.workers.dev https://api.municode.com https://*.livestream.com https://*.ads.cot https://*.google.com https://*.monsido.com https://*.fontawesome.com https://pubsvc.tampagov.net https://stats.g.doubleclick.net https://apps.tampagov.net https://www.gstatic.com https://controlpanel.opengov.com https://www.arcgis.com/ https://kendo.cdn.telerik.com https://viewlicense.adobe.io https://cdn-images.mailchimp.com/ https://*.adobe.com https://webapp.recyclecoach.com https://us-web.apigw.recyclecoach.com https://cdn.recyclecoach.com https://vimeo.com https://www.google-analytics.com; font-src 'self' data: https:; frame-src 'self' https://*.tampa.gov https://*.tampagov.net https://www.youtube-nocookie.com https://*.google.com https://twitter.com https://platform.twitter.com https://livestream.com https://syndication.twitter.com https://tampa.maps.arcgis.com https://app.powerbigov.us https://*.recollect.net https://visualping.io https://www.youtube.com https://w3.mp.lura.live https://player.vimeo.com https://*.apptoto.com https://cityeconomy.org https://cityoftampa-my.sharepoint.com https://*.arcgis.com/ https://*.opengov.com/ https://api-us.one.network https://vimeo.com https://acrobatservices.adobe.com https://tip411.com https://stream.office.com https://www.microsoft365.com https://city-data-dashboards-82c6cb91d9c1.herokuapp.com/ https://app.polimorphic.com https://www.recaptcha.net https://*.mykronos.com https://tampa.prod.simpligov.com https://www.tampaeconomicdashboard.com; img-src 'self' about: data: https: http://www.tampa.gov http://www.tampagov.net blob:; media-src 'self' https://*.livestream.com https://curator-assets.b-cdn.net https://video.twimg.com https://*.s3.amazonaws.com https://*.vimeo.com; object-src 'self' http://www.tampa.gov; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.windows.net https://maps.floridadisaster.org https://*.tampa.gov https://*.tampagov.net https://*.google-analytics.com https://*.twitter.com https://*.googleapis.com https://www.googletagmanager.com https://serverapi.arcgisonline.com https://*.arcgis.com https://js-agent.newrelic.com https://cdn.syndication.twimg.com/ https://syndication.twitter.com https://bam.nr-data.net https://*.surveymonkey.com browser-update.org https://stats.g.doubleclick.net https://bam-cell.nr-data.net https://*.list-manage.com https://*.google.com https://*.recollect.net https://pagecorrect.monsido.com https://spark.adobe.com https://cdn.apptoto.com blob: https://*.arcgis.com/ https://*.amazonaws.com/downloads.mailchimp.com/ https://kendo.cdn.telerik.com https://use.fontawesome.com/* https://*.vimeo.com https://connect.facebook.net/en_US/sdk.js https://webapp.recyclecoach.com https://www.recaptcha.net https://cdn.recyclecoach.com https://www.gstatic.com https://tampa.prod.simpligov.com acrobatservices.adobe.com cdn.jsdelivr.net https://api.mapbox.com https://app-script.monsido.com https://cdn.curator.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://controlpanel.opengov.com https://kit.fontawesome.com https://maps.googleapis.com https://polyfill-fastly.io https://translate.google.com https://unpkg.com https://use.fontawesome.com https://www.google.com maps.googleapis.com mdbootstrap.com unpkg.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.windows.net https://maps.floridadisaster.org https://*.tampa.gov https://*.tampagov.net https://*.google-analytics.com https://*.twitter.com https://*.googleapis.com https://www.googletagmanager.com https://serverapi.arcgisonline.com https://*.arcgis.com https://js-agent.newrelic.com https://cdn.syndication.twimg.com/ https://syndication.twitter.com https://bam.nr-data.net https://*.surveymonkey.com browser-update.org https://stats.g.doubleclick.net https://bam-cell.nr-data.net https://*.list-manage.com https://*.google.com https://*.recollect.net https://pagecorrect.monsido.com https://spark.adobe.com https://cdn.apptoto.com blob: https://*.arcgis.com/ https://*.amazonaws.com/downloads.mailchimp.com/ https://kendo.cdn.telerik.com https://use.fontawesome.com/* https://*.vimeo.com https://connect.facebook.net/en_US/sdk.js https://webapp.recyclecoach.com https://www.recaptcha.net https://cdn.recyclecoach.com https://www.gstatic.com https://tampa.prod.simpligov.com acrobatservices.adobe.com cdn.jsdelivr.net https://api.mapbox.com https://app-script.monsido.com https://cdn.curator.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://controlpanel.opengov.com https://kit.fontawesome.com https://maps.googleapis.com https://polyfill-fastly.io https://translate.google.com https://unpkg.com https://use.fontawesome.com https://www.google.com maps.googleapis.com mdbootstrap.com unpkg.com; style-src 'self' 'unsafe-inline' https://cdn.curator.io https://translate.googleapis.com https://*.mailchimp.com https://recollect.a.ssl.fastly.net https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://apps.tampagov.net https://kendo.cdn.telerik.com https://vuetampaservices2.z13.web.core.windows.net cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://api.mapbox.com https://cdnjs.cloudflare.com https://static2.sharepointonline.com https://unpkg.com mdbootstrap.com unpkg.com use.fontawesome.com; frame-ancestors 'self' https://*.opengov.com https://*.mykronos.com; upgrade-insecure-requests 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://data.intenthq.com https://vercel.live https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.google.com https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.ae https://www.google.co.in https://www.googleadservices.com https://*.googlesyndication.com https://snap.licdn.com https://assets.calendly.com https://connect.facebook.net https://sc.lfeeder.com https://static.ads-twitter.com https://js.hs-scripts.com http://js.hs-scripts.com https://js.hs-banner.com https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hsadspixel.net https://js.usemessages.com https://*.hubspot.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hsforms.net https://*.hs-analytics.net https://*.hsadspixel.net https://*.usemessages.com https://*.hsappstatic.net https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com; style-src 'self' 'unsafe-inline' https://assets.calendly.com; img-src 'self' data: blob: https://intenthq.com https://intent.one https://cdn.sanity.io https://data.intenthq.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://*.google.com https://*.googleusercontent.com https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com https://*.google.ae https://*.google.co.uk https://*.google.co.in https://*.google.de https://*.google.fr https://*.google.es https://px.ads.linkedin.com https://*.linkedin.com https://*.hubspot.com https://*.hsforms.com https://*.hs-scripts.com https://track.hubspot.com https://forms.hubspot.com https://calendly.com https://app.dealfront.com https://*.facebook.com https://www.facebook.com https://*.ads-twitter.com https://t.co https://analytics.twitter.com https://tr.lfeeder.com https://*.leadfeeder.com https://*.hotjar.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' https://cdn.sanity.io https://*.hubspotusercontent-na1.net blob:; connect-src 'self' https://data.intenthq.com https://intenthq.com https://intent.one https://*.intent.one https://*.sanity.io https://api.anthropic.com https://api.intenthq.stack.ai https://vercel.live https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://www.google.com https://*.google.com https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.ae https://www.google.co.in https://*.doubleclick.net https://www.googleadservices.com https://*.googlesyndication.com https://*.googleadservices.com https://px.ads.linkedin.com https://*.linkedin.com https://api.hsforms.com https://*.hubspot.com https://*.hubapi.com https://*.hsappstatic.net https://forms.hscollectedforms.net https://*.hscollectedforms.net https://*.hs-scripts.com https://*.hsforms.net https://*.hs-analytics.net https://*.hsadspixel.net https://*.usemessages.com https://*.hs-banner.com https://calendly.com https://api.calendly.com https://cdn.jsdelivr.net https://connect.facebook.net https://*.facebook.com https://sc.lfeeder.com https://tp.leadfeeder.com https://api.leadfeeder.com https://cs.lf-discover.com https://*.dealfront.com https://static.ads-twitter.com https://*.twitter.com https://*.hotjar.com https://*.hotjar.io; frame-src 'self' http://localhost:* http://0.0.0.0:* https://vercel.live https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://calendly.com https://*.hotjar.io https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.sanity.studio 2 frame-ancestors 'self' http://*.brose.net http://brose.net https://*.brose.net https://brose.net https://*.ariba.com https://*.zkw.at http://*.zkw.at https://*.mycatalogcloud.com http://*.mycatalogcloud.com http://*.valeo.determine.com https://*.valeo.determine.com http://valeo.determine.com https://valeo.determine.com http://*.mondigroup.com http://mondigroup.com https://*.mondigroup.com https://mondigroup.com http://*.elwitec.ch http://elwitec.ch https://*.elwitec.ch https://elwitec.ch http://*.ynovatec.ch http://ynovatec.ch https://*.ynovatec.ch https://ynovatec.ch http://prematic.ch http://*.prematic.ch https://prematic.ch https://*.prematic.ch http://brw.ch http://*.brw.ch https://brw.ch https://*.brw.ch http://uniprod-ag.ch http://*.uniprod-ag.ch https://uniprod-ag.ch https://*.uniprod-ag.ch http://montalpina.com http://*.montalpina.com https://montalpina.com https://*.montalpina.com http://sutter-hydraulik.com http://*.sutter-hydraulik.com https://sutter-hydraulik.com https://*.sutter-hydraulik.com http://bsaswiss.ch http://*.bsaswiss.ch https://bsaswiss.ch https://*.bsaswiss.ch http://salesconnect.sugarondemand.com https://salesconnect.sugarondemand.com http://*.salesconnect.sugarondemand.com https://*.salesconnect.sugarondemand.com http://muellershop.ch https://muellershop.ch http://*.muellershop.ch https://*.muellershop.ch http://asklio.ai https://asklio.ai http://*.asklio.ai https://*.asklio.ai http://weberprevost.ch https://weberprevost.ch http://*.weberprevost.ch https://*.weberprevost.ch 2 frame-ancestors 'self' *.poradnikzdrowie.pl *.se.pl *.grupazprmedia.pl *.grupazpr.pl 2 frame-ancestors 'self' http://localhost 2 frame-ancestors 'self' https://backend.novonesis.com; 2 default-src 'self'; child-src 'self' https://platform.twitter.com https://youtube.com; connect-src 'self' https://dap.digitalgov.gov https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://orcid.org/userStatus.json https://search.usa.gov https://translate.googleapis.com https://usda.libanswers.com; font-src 'self' data: https://cdn.knightlab.com https://fonts.gstatic.com; frame-src 'self' https://*.twitter.com https://usda.libanswers.com https://player.vimeo.com https://*.youtube.com; img-src 'self' data: https://cdn.knightlab.com https://feed.informer.com https://fonts.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.nal.usda.gov https://orcid.org https://info.orcid.org https://www.ssa.gov/accessibility/andi/ https://*.twitter.com https://*.usa.gov https://validator.swagger.io https://*.ytimg.com; script-src 'self' https://ajax.googleapis.com https://cdn.knightlab.com https://dap.digitalgov.gov https://feed.informer.com https://*.googletagmanager.com https://*.libanswers.com https://www.nal.usda.gov https://platform.twitter.com https://search.usa.gov https://www.youtube.com; script-src-elem 'self' 'unsafe-inline' https://ajax.googleapis.com https://cdn.knightlab.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.12/ https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/ https://dap.digitalgov.gov https://feed.informer.com https://*.libanswers.com https://www.nal.usda.gov https://search.usa.gov https://*.twitter.com https://unpkg.com/chart.js@4.4.0/ https://unpkg.com/chartjs-adapter-date-fns@3.0.0/ https://unpkg.com/chartjs-plugin-datalabels@2.0.0/ https://*.vimeo.com https://www.googletagmanager.com https://www.youtube.com https://www.ssa.gov/accessibility/andi/; style-src 'self' 'unsafe-inline' https://cdn.knightlab.com https://fonts.googleapis.com https://search.usa.gov; style-src-elem 'self' 'unsafe-inline' https://cdn.knightlab.com https://static-assets-us.libanswers.com https://search.usa.gov https://www.ssa.gov; 2 frame-ancestors https://*.singlestore.com https://*.contentstack.com; 2 default-src 'self' https://logrhythm.com https://*.exabeam.com https://*.cookieyes.com https://*.6sc.co https://*.6sense.com; connect-src 'self' https://logrhythm.com https://*.exabeam.com wss://ws.hotjar.com https://*.trustarc.com https://*.hotjar.io https://builder-assets.unbounce.com https://analytics.ahrefs.com/ https://to.getnitropack.com/ https://ws.zoominfo.com https://analytics3.wpmudev.com https://directory.cookieyes.com https://cdn-cookieyes.com https://log.cookieyes.com/ https://cdn-ilemogb.nitrocdn.com/ https://js.zi-scripts.com https://cdn-app.pathfactory.com https://epsilon-cloudfront.6sense.com https://cdn.jsdelivr.net https://unpkg.com https://*.wovn.io https://www.googleadservices.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://epsilon-globalaccelerator.6sense.com https://*.6sense.com https://google.com https://cdn.linkedin.oribi.io https://www.google.com https://px.ads.linkedin.com https://*.privacymanager.io https://epsilon.6sense.com https://*.6sc.co https://analytics.google.com https://*.googlesyndication.com https://bat.bing.com https://spcollector.pathfactory.com https://adservice.google.com https://*.logrhythm.com https://maps.googleapis.com https://*.fontawesome.com https://*.clarity.ms https://use.typekit.net https://050-uwt-888.mktoutil.com https://*.addthisedge.com https://ampcid.google.com https://www.googletagmanager.com https://*.ampproject.org https://*.addthis.com https://*.ampproject.net https://connect.facebook.net https://yoast.com https://*.facebook.com https://stats.g.doubleclick.net https://*.yoast.com https://www.g2.com https://jukebox.pathfactory.com https://www.google-analytics.com https://050-uwt-888.mktoresp.com; font-src 'self' data: https://*.logrhythm.com https://*.exabeam.com https://*.typekit.net https://*.sharepointonline.com/ https://cdn-ilemogb.nitrocdn.com/ https://fonts.gstatic.com https://cdn-app.pathfactory.com https://*.fontawesome.com https://www.gartner.com https://maxcdn.bootstrapcdn.com https://cdn.pathfactory.com https://app.cdn.lookbookhq.com; img-src https: data: blob: *.trustarc.com; media-src 'self' blob: https://*.logrhythm.com https://*.exabeam.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.logrhythm.com https://analytics.ahrefs.com https://js.zi-scripts.com https://static.hotjar.com/ https://cdn-ilemogb.nitrocdn.com/ https://script.hotjar.com https://builder-assets.unbounce.com https://code.jquery.com https://cdn.bizible.com https://connect.facebook.net https://*.vimeo.com https://vimeo.com https://*.vimeocdn.com https://analytics.wpmucdn.com https://www.gstatic.com https://*.wovn.io https://f.vimeocdn.com https://*.vimeocdn.com https://*.exabeam.com https://cdn-cookieyes.com https://*.trustarc.com https://launchpad.privacymanager.io https://launchpad-wrapper.privacymanager.io https://jobs.jobvite.com https://yoast.com https://*.clarity.ms https://j.6sc.co https://cdn.jsdelivr.net https://cdn-app.pathfactory.com https://unpkg.com/web-vitals https://www.g2.com https://*.facebook.com https://cdn.syndication.twimg.com https://www.gartner.com https://www.google.com https://*.googleapis.com https://tpc.googlesyndication.com https://optimize.google.com https://www.youtube.com https://ssl.google-analytics.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.ampproject.org https://www.googleadservices.com https://www.gstatic.com https://*.typeform.com js-agent.newrelic.com https://bam.nr-data.net https://beacon-v2.helpscout.net https://kit.fontawesome.com https://bat.bing.com https://munchkin.marketo.net https://snap.licdn.com https://static.ads-twitter.com https://*.twitter.com https://secure.leadforensics.com https://connect.facebook.net https://googleads.g.doubleclick.net https://app.cdn.lookbookhq.com https://jukebox.pathfactory.com https://app-abc.marketo.com https://www.brighttalk.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' blob: https://*.logrhythm.com https://cdn.jsdelivr.net https://*.exabeam.com https://*.wovn.io https://builder-assets.unbounce.com https://gtranslate.io https://app-abc.marketo.com/ https://cdn-ilemogb.nitrocdn.com/ https://fonts.bunny.net https://*.fontawesome.com https://yoast.com https://cdn-app.pathfactory.com https://www.googletagmanager.com/debug/ https://ka-p.fontawesome.com https://platform.twitter.com https://*.twimg.com https://*.typekit.net https://www.gartner.com https://*.googleapis.com https://tagmanager.google.com https://maxcdn.bootstrapcdn.com https://app.cdn.lookbookhq.com; frame-src 'self' blob: https://brighttalk.com https://*.soundcloud.com https://player.captivate.fm https://demostack.app https://*.trustarc.com https://*.exabeam.com https://app-abc.marketo.com https://*.doubleclick.net/ https://brighttalk.com/ https://www.googletagmanager.com https://player.vimeo.com https://shortpixel.com https://logrhythm.com https://*.logrhythm.com https://forms.office.com https://jobs.jobvite.com https://www.facebook.com https://*.elementor.com https://www.itcentralstation.com https://www.google.com https://tpc.googlesyndication.com https://*.twitter.com https://*.addthis.com https://*.ampproject.net https://www.slideshare.net https://maps.google.com https://www.gartner.com https://tags.bluekai.com https://www.g2.com https://www.youtube-nocookie.com https://googleads.g.doubleclick.net https://www.youtube.com https://bid.g.doubleclick.net https://www.brighttalk.com https://*.fls.doubleclick.net; frame-ancestors 'self' explore.logrhythm.com https://*.pathfactory.com explore.exabeam.com https://www.g2.com https://*.logrhythm.com https://*.exabeam.com; 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' giscus.app https://www.googletagmanager.com https://js.hsforms.net https://f.vimeocdn.com https://embed.lu.ma https://www.clarity.ms https://*.contentsquare.net http://*.contentsquare.net https://app.getdecimal.ai https://static.reo.dev https://*.clarity.ms https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://embed.lu.ma; img-src * blob: data:; media-src *; connect-src * https://api.reo.dev https://www.clarity.ms https://*.clarity.ms; font-src * 'self'; frame-src * giscus.app youtube.com https://app.getdecimal.ai; worker-src 'self' blob:; frame-ancestors 'self' https://signoz.io https://*.us.signoz.cloud https://*.in.signoz.cloud https://*.eu.signoz.cloud https://*.us2.signoz.cloud https://*.in2.signoz.cloud https://*.eu2.signoz.cloud; 2 default-src 'self'; frame-ancestors 'self' https://prod-author.repsol.com/ https://www.todoluzygas.es/ areacliente.repsol.es waylet.es newdev-areacliente.cloudapp.repsol.com test-areacliente.cloudapp.repsol.com pre-areacliente.repsol.es pre-pidetubombona.repsol.es pidetubombona.repsol.es repsol.pt pro.areaclientemultienergia.es *.repsolluzugas.com *.repsol.com pre-beta-areacliente.klikinlabs.com; frame-src * ; media-src *; img-src * https://cdn.valuesportal.com https://log.adtraction.fail blob: data: ; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://valuesportal.com https://cdn.adt356.com https://gtm.adt313.net https://cnv.adt632.com *.google-analytics.com *.analytics.google.com *.krxd.net www.google.com d3a.walmeric.com cdn.jsdelivr.net insight.adsrvr.org cdn.cookielaw.org p.teads.tv platform.twitter.com px.sunmedia.tv secure.adnxs.com s.yimg.com cdn.taboola.com pixel.mathtag.com amplify.outbrain.com bat.bing.com d1skycrvs9ubse.cloudfront.net www.gstatic.com googleads.g.doubleclick.net cdn.krxd.net *.hotjar.com www.googleadservices.com www.google-analytics.com cdns.eu1.gigya.com consent.cookiebot.com connect.facebook.net consentcdn.cookiebot.com assets.adobedtm.com www.googletagmanager.com www.youtube.com apis.google.com t.womtp.com ws.walmeric.com maps.googleapis.com unpkg.com sdk.inbenta.io up.pixel.ad static.ads-twitter.com secure-ds.serving-sys.com i.clarity.ms trc.taboola.com tr.outbrain.com bs.serving-sys.com embed.typeform.com siteintercept.qualtrics.com *.siteintercept.qualtrics.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com static-eu.oct8ne.com snap.licdn.com stories.adsocy.com 9000468.spxl.socy.es p1.socy.es repsol.my.site.com ai.trk42.net pro.areaclientemultienergia.es adtraction.net kwanko.com img.metaffiliation.com *.adobe.net jswebproduction.com Preciso.net 2trk.info cookieless-data.com sddan.com adnxs.com euob.isstarsbuilding.com c.amazon-adsystem.com obseu.isstarsbuilding.com s.kk-resources.com rum.hlx.page igodigital.com dynamic.criteo.com sslwidget.criteo.com widget.trustpilot.com *.tiktok.com sf16-website-login.neutral.ttwstatic.com js-tag.zemanta.com p1.outbrain.com redditstatic.com trackingplan.com; style-src * 'unsafe-inline'; font-src * blob: data:; connect-src *; object-src 'none' 2 default-src 'none'; base-uri 'none'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com/tr https://www.facebook.com/tr/; manifest-src 'self'; child-src 'none'; font-src 'self' https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com data:; media-src 'self' blob:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://use.typekit.net https://www.gstatic.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://use.typekit.net https://www.gstatic.com; script-src 'self' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://*.googletagmanager.com https://connect.facebook.net https://*.doubleclick.net https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com https://bzrcdn.openai.com https://r2e.reve.com; script-src-elem 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://*.googletagmanager.com https://connect.facebook.net https://*.doubleclick.net https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com https://bzrcdn.openai.com https://r2e.reve.com; connect-src 'self' data: blob: https://api.stability.ai https://*.ingest.us.sentry.io https://*.collect.observeinc.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://*.doubleclick.net https://*.g.doubleclick.net https://googleads.g.doubleclick.net https://*.fls.doubleclick.net https://google.com https://www.google.com https://www.googleadservices.com https://adservice.google.com https://*.adtrafficquality.google https://*.googletagmanager.com https://*.googlesyndication.com https://www.facebook.com https://bzr.openai.com https://r2e.reve.com; img-src 'self' data: blob: https://google.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://translate.google.com https://fonts.gstatic.com https://www.facebook.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com https://adservice.google.com https://connect.facebook.net; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://*.fls.doubleclick.net https://www.facebook.com; report-uri https://o4509844582105088.ingest.us.sentry.io/api/4509844592721920/security/?sentry_key=b580751c32e640bc26ba1ca1cf8e1ce3&sentry_environment=production 2 default-src 'self'; base-uri 'self'; script-src 'self' blob: 'nonce-a7bsdkFrfve5yopLBtSyiA==' 'strict-dynamic' *.openai.com *.googletagmanager.com *.usercentrics.eu *.storylane.io *.fraud0.com *.monsido.com *.reliaquest.com *.google.com *.gstatic.com *.wistia.com *.wistia.net src.litix.io *.ahrefs.com *.sentry-cdn.com *.6sc.co *.bing.com *.clarity.ms *.demandscience.com *.zi-scripts.com *.marketo.net *.g2.com *.doubleclick.net *.licdn.com *.buzzsprout.com cdn.jsdelivr.net *.jsdelivr.net ws-assets.zoominfo.com https://static.elfsight.com *.reddistatic.com *.unpkg.com *.bugherd.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.reliaquest.com blob: *.googletagmanager.com *.wistia.com *.wistia.net *.usercentrics.eu *.bugherd.com; img-src 'self' data: *.reliaquest.com https://resources.reliaquest.com *.zi-scripts.com *.openai.com *.fraud0.com *.doubleclick.net *.clarity.ms *.licdn.com bat.bing.com *.6sc.co *.wistia.com *.googletagmanager.com *.google.com https://*.cloudinary.com *.ctfassets.net *.googlesyndication.com *.monsido.com *.wistia.net *.usercentrics.eu *.buzzsprout.com px.ads.linkedin.com https://static.elfsight.com https://phosphor.utils.elfsightcdn.com *.bugherd.com; media-src 'self' data: blob: *.wistia.com *.cloudinary.com *.ctfassets.net *.wistia.net *.usercentrics.eu *.buzzsprout.com *.reliaquest.com *.resources.reliaquest.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com *.wistia.com *.wistia.net *.usercentrics.eu; connect-src 'self' *.zi-scripts.com *.doubleclick.net *.openai.com *.ahrefs.com *.clarity.ms *.fraud0.com *.licdn.com bat.bing.com *.6sc.co *.mktoresp.com *.wistia.com *.cloudinary.com *.reliaquest.com *.googlesyndication.com *.google-analytics.com *.usercentrics.eu *.monsido.com *.services-prod.nsvcs.net *.litix.io *.wistia.net *.algolia.net *.google.com *.buzzsprout.com px.ads.linkedin.com secure.adnxs.com epsilon.6sense.com tracking-api.g2.com intentstream.contanuity.com ws.zoominfo.com ws-assets.zoominfo.com https://core.service.elfsight.com https://widget-data.service.elfsight.com *.bugherd.com; frame-src 'self' *.wistia.com *.googletagmanager.com *.supademo.com *.storylane.com *.storylane.io *.reliaquest.com *.powerbi.com *.google.com *.wistia.net *.usercentrics.eu *.goldcast.io https://reliaquest.ondemand.goldcast.io *.gartner.com *.kuppingercole.com *.buzzsprout.com *.forrester.com https://reprint.forrester.com *.jifflenow.com https://reliaquest.com/ https://gartner.com/ *.bugherd.com; child-src blob:; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'self'; form-action 'self' *.marketo.net *.reliaquest.com; report-to csp-endpoint; report-uri https://reliaquest.com/api/csp-report.json 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https: http:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 2 default-src 'self' data: https: wss: blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.24ttl.stream *.breezyx.space *.cloudflareinsights.com *.demoup.com *.devinotele.com *.doubleclick.net *.facebook.net *.flix360.io *.flixcar.com *.flixfacts.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.homebank.kz *.hotjar.com *.mql5.com *.loadbee.com *.plerdy.com *.retailrocket.ru *.scarabresearch.com *.sulpak.kz *.tiktok.com *.useinsider.com *.yandex.com *.yandex.net *.yandex.ru *.blinger.io *.jquery.com *.creativecdn.com *.kaspi.kz *.yango.com *.yastatic.net yandex.ru yastatic.net;style-src 'self' 'unsafe-inline' data: blob: *.breezyx.space *.devino.chat *.devinotele.com *.flixcar.com *.flixfacts.com *.google.com *.googleapis.com *.loadbee.com *.useinsider.com 2 default-src 'self' dev-nas.io dev-nas.com nas.com dev-nas-io.web.app m.nas.io nas.io *.dev-nas.io *.nas.io *.dev-nas.com *.nas.com *.nasacademy.com data: *.framer.website server-side-tagging-o2ntnaqrua-uc.a.run.app; img-src 'self' i.vimeocdn.com i.ytimg.com dev-nas-io.web.app m.nas.io media.licdn.com data: https: blob:; script-src * 'self' challenges.cloudflare.com dev-nas-io.web.app m.nas.io cdn.jsdelivr.net connect.facebook.net snap.licdn.com 'unsafe-eval' 'unsafe-inline' blob: data: gap:; connect-src * 'self' dev-nas-io.web.app m.nas.io cdn.jsdelivr.net 'unsafe-inline' blob: data: gap:; media-src dev-nas-io.web.app m.nas.io *.dev-nas.io *.nas.io *.nasacademy.com *.vercel.app blob: *.cloudfront.net s3.ap-southeast-1.amazonaws.com *.nas.media px.ads.linkedin.com; object-src 'none'; style-src 'self' dev-nas-io.web.app m.nas.io cdnjs.cloudflare.com 'unsafe-inline' *.nas.io *.dev-nas.io *.nas.com *.dev-nas.com fonts.googleapis.com www.googletagmanager.com; font-src 'self' dev-nas-io.web.app *.nas.io *.nas.com fonts.gstatic.com *.fontawesome.com data: *.framerstatic.com framerusercontent.com *.fonts.intercomcdn.com; frame-src 'self' *.ebanx.com www.facebook.com player.vimeo.com challenges.cloudflare.com vercel.live dev-nas.io nas.io dev-nas.com nas.com nasacademy.com *.dev-nas.io *.nas.io *.dev-nas.com *.nas.com *.nasacademy.com *.snapchat.com *.stripe.com *.razorpay.com google.com *.google.com *.youtube.com *.youtube-nocookie.com *.typeform.com *.paypal.com intercom-sheets.com *.intercom.io view.officeapps.live.com *.youtube.com td.doubleclick.net www.googletagmanager.com server-side-tagging-o2ntnaqrua-uc.a.run.app facebook.com dkeexuinpcfb8.cloudfront.net; frame-ancestors 'self' *; form-action 'self' googletagmanager.com facebook.com www.facebook.com; worker-src 'self' blob: https://proxy.nas.io *.nas.io *.dev-nas.io *.dev-nas.com *.nas.com nas.io dev-nas.io dev-nas.com nas.com dev-nasacademy.com nasacademy.com; child-src 'self' blob *.youtube.com *.youtube-nocookie.com; 2 default-src 'none'; style-src 'self'; script-src 'self'; img-src 'self'; font-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' 2 style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://heapanalytics.com https://fonts.axept.io; default-src 'self' https://www.youtube.com https://www.google.com https://fonts.gstatic.com monext.cdn.prismic.io images.prismic.io axeptio.imgix.net favicons.axept.io px.ads.linkedin.com player.ausha.co heapanalytics.com https://monext.prismic.io https://px4.ads.linkedin.com https://fonts.axept.io https://www.facebook.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://td.doubleclick.net https://www.googleadservices.com https://google.fr data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' static.axept.io snap.licdn.com https://cdn.us.heap-api.com https://heapanalytics.com https://www.google.com https://www.gstatic.com https://static.cdn.prismic.io https://prismic.io https://html2canvas.hertzen.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://connect.facebook.net https://googleads.g.doubleclick.net https://capi-automation.s3.us-east-2.amazonaws.com https://www.googleadservices.com https://google.fr; object-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; connect-src 'self' https://www.google.com client.axept.io api.axept.io px.ads.linkedin.com https://c.us.heap-api.com https://heapanalytics.com https://monext.cdn.prismic.io https://static.axept.io https://cdn.jsdelivr.net https://fonts.axept.io https://www.facebook.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://connect.facebook.net https://www.googleadservices.com https://google.fr; worker-src 'self' blob:; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://aca-prod.accela.com https://powerconnect.ai https://*.powerconnect.ai https://unpkg.com https://petcolove.org https://*.petcolove.org *.pantheonsite.io *.pinellas.gov *.pinellascounty.org *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com https://*.hotjar.io https://*.hotjar.com *.googleapis.com *.weather.gov *.nr-data.net *.gstatic.com *.doubleclick.net *.cloudflare.com *.youtube.com *.wpmucdn.com *.fontawesome.com *.siteimproveanalytics.com siteimproveanalytics.com *.siteimproveanalytics.io *.googletagmanager.com *.loop11.com *.jsdelivr.net *.polyfill.io *.livehelpnow.net *.okta.com *.oktacdn.com *.oktapreview.com *.fastly.net *.newrelic.com *.formsite.com *.arcgisonline.com *.arcgis.com *.granicus.com *.twitter.com *.petango.com *.jquery.com *.gravatar.com *.recollect.net *.cloudfront.net *.opengov.com *.constantcontact.com *.google-analytics.com *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com;style-src 'self' 'unsafe-inline' *.petcolove.org *.pantheonsite.io *.pinellas.gov *.pinellascounty.org *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com *.hotjar.com *.googleapis.com *.weather.gov *.nr-data.net *.gstatic.com *.doubleclick.net *.cloudflare.com *.youtube.com *.wpmucdn.com *.fontawesome.com *.siteimproveanalytics.com *.siteimproveanalytics.io *.googletagmanager.com *.loop11.com *.jsdelivr.net *.polyfill.io *.livehelpnow.net *.okta.com *.oktapreview.com *.fastly.net *.newrelic.com *.formsite.com *.arcgisonline.com *.arcgis.com *.granicus.com *.twitter.com *.petango.com *.jquery.com *.gravatar.com *.recollect.net *.cloudfront.net *.opengov.com *.constantcontact.com *.google-analytics.com *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com;object-src 'self'; base-uri 'self'; connect-src 'self' https://powerconnect.ai https://*.powerconnect.ai wss://*.powerconnect.ai https://*.hotjar.io wss://*.hotjar.com https://petcolove.org https://*.petcolove.org wss://*.petcolove.org *.pantheonsite.io *.pinellas.gov *.pinellascounty.org *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com *.hotjar.com *.googleapis.com *.weather.gov *.nr-data.net *.gstatic.com *.doubleclick.net *.cloudflare.com *.youtube.com *.wpmucdn.com *.fontawesome.com *.siteimproveanalytics.com *.siteimproveanalytics.io *.googletagmanager.com *.loop11.com *.jsdelivr.net *.polyfill.io https://*.livehelpnow.net wss://app.livehelpnow.net *.okta.com *.oktapreview.com *.fastly.net *.newrelic.com *.formsite.com *.arcgisonline.com *.arcgis.com *.granicus.com *.twitter.com *.petango.com *.jquery.com *.gravatar.com *.recollect.net *.cloudfront.net *.opengov.com *.constantcontact.com *.google-analytics.com *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com;img-src 'self' 'unsafe-inline' data: https://petcolove.org https://*.petcolove.org *.pantheonsite.io *.pinellas.gov *.pinellascounty.org *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com *.hotjar.com *.googleapis.com *.weather.gov *.nr-data.net *.gstatic.com *.doubleclick.net *.cloudflare.com *.youtube.com *.wpmucdn.com *.wpmudev.com *.fontawesome.com *.siteimproveanalytics.com *.siteimproveanalytics.io *.googletagmanager.com *.loop11.com *.jsdelivr.net *.polyfill.io *.livehelpnow.net *.okta.com *.oktapreview.com *.fastly.net *.newrelic.com *.formsite.com *.arcgisonline.com *.arcgis.com *.granicus.com *.twitter.com *.petango.com *.jquery.com *.gravatar.com *.recollect.net *.cloudfront.net *.opengov.com *.constantcontact.com *.google-analytics.com *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com; manifest-src 'self'; media-src 'self' blob: https://*.petcolove.org *.pantheonsite.io *.pinellas.gov *.pinellascounty.org *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com *.hotjar.com *.googleapis.com *.weather.gov *.nr-data.net *.gstatic.com *.doubleclick.net *.cloudflare.com *.youtube.com *.wpmucdn.com *.fontawesome.com *.siteimproveanalytics.com *.siteimproveanalytics.io *.googletagmanager.com *.loop11.com *.jsdelivr.net *.polyfill.io *.livehelpnow.net *.okta.com *.oktapreview.com *.fastly.net *.newrelic.com *.formsite.com *.arcgisonline.com *.arcgis.com *.granicus.com *.twitter.com *.petango.com *.jquery.com *.gravatar.com *.recollect.net *.cloudfront.net *.opengov.com *.constantcontact.com *.google-analytics.com *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com;frame-src 'self' https://aca-prod.accela.com https://petcolove.org https://*.petcolove.org *.pantheonsite.io *.pinellas.gov *.pinellascounty.org *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com *.hotjar.com *.googleapis.com *.weather.gov *.nr-data.net *.gstatic.com *.doubleclick.net *.cloudflare.com *.youtube.com *.wpmucdn.com *.fontawesome.com *.siteimproveanalytics.com *.siteimproveanalytics.io *.googletagmanager.com *.loop11.com *.jsdelivr.net *.polyfill.io *.livehelpnow.net *.okta.com *.oktapreview.com *.fastly.net *.newrelic.com *.formsite.com *.arcgisonline.com *.arcgis.com *.granicus.com *.twitter.com *.petango.com *.jquery.com *.gravatar.com *.recollect.net *.cloudfront.net *.opengov.com *.constantcontact.com *.google-analytics.com *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com; font-src 'self' *.gstatic.com *.doubleclick.net *.livehelpnow.net *.hotjar.com *.formsite.com *.arcgisonline.com *.arcgis.com *.granicus.com *.twitter.com *.petango.com *.jquery.com *.gravatar.com *.recollect.net *.cloudfront.net *.opengov.com *.constantcontact.com *.google-analytics.com *.google.com *.ctctcdn.com *.powerbigov.us *.recyclebycity.com 2 default-src https: wss: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; font-src https: 'self' data:; frame-src https: mailto:;frame-ancestors 'self'; 2 frame-ancestors 'self' https://www.mitiendadearte.com https://mitiendadearte.com https://www.craftelier.com https://hartem.com https://www.hartem.com https://it-blog.craftelier.com https://de-blog.craftelier.com https://nl-blog.craftelier.com https://pl-blog.craftelier.com https://pt-blog.craftelier.com https://ie-blog.craftelier.com https://cl-blog.craftelier.com https://es-blog.craftelier.com https://esh-blog.craftelier.com https://fr-blog.craftelier.com https://gb-blog.craftelier.com https://hgb-blog.craftelier.com https://hfr-blog.craftelier.com https://hie-blog.craftelier.com https://hde-blog.craftelier.com https://hpt-blog.craftelier.com https://hit-blog.craftelier.com https://hnl-blog.craftelier.com; 2 frame-ancestors 'self' *.mybigcommerce.com *.shopify.com *.amptab.com *.wix.com framer.com *.fisglobal.com fisglobal.seismic.com app.gohighlevel.com 2 default-src *.antarctica.gov.au *.aad.gov.au *.marinemammals.gov.au use.typekit.net p.typekit.net cdn.plyr.io 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src *.antarctica.gov.au *.aad.gov.au *.marinemammals.gov.au data: blob: 2 default-src 'self'; img-src *; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' 2 frame-ancestors tpl.ca *.tpl.ca tpl.bibliocms.com *.tpl.bibliocms.com cdn-web-main.bibliocms.com cdn-web-main.bibliocms.com *.bibliocms.com *.bibliocommons.com *.libanswers.com 'self'; object-src 'none'; script-src tpl.ca *.tpl.ca tpl.bibliocms.com *.tpl.bibliocms.com cdn-web-main.bibliocms.com cdn-web-main.bibliocms.com *.bibliocms.com *.bibliocommons.com *.libanswers.com *.libcal.com *.quipugroup.net *.nicheacademy.com *.buzzsprout.com refchatter.net *.refchatter.net *.freshchat.com chat.uniqueic.com chat.mosio.com libraryh3lp.com *.libraryh3lp.com script.crazyegg.com dev.visualwebsiteoptimizer.com cdn.optimizely.com storage.googleapis.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ translate-pa.googleapis.com translate.google.com *.patronpoint.com cdnjs.cloudflare.com/ajax/libs/es6-shim/ www.volunteermatch.org ds-aksb-a.akamaihd.net connect.facebook.net embedr.flickr.com widgets.flickr.com platform.twitter.com platform.instagram.com www.instagram.com e.issuu.com www.tiktok.com *.tiktokcdn-us.com embed.reddit.com cdn.gtranslate.net 'self' 'unsafe-eval' 'unsafe-inline'; worker-src 'self' blob: 2 default-src 'self'; script-src 'self' 'unsafe-inline' http://js.hsforms.net https://js.hsforms.net https://www.google.com/recaptcha/ https://google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://recaptcha.net https://www.googletagmanager.com https://www.google-analytics.com https://cdn-cookieyes.com https://widget.intercom.io https://js.intercomcdn.com https://groot.mailerlite.com https://assets.mailerlite.com https://assets.mlcdn.com https://www.workable.com https://cdn.jsdelivr.net https://snap.licdn.com https://static.hotjar.com https://script.hotjar.com https://cdn.dreamdata.cloud https://connect.facebook.net https://cdn.drda.io https://pagead2.googlesyndication.com https://cdn.patchstack.com; style-src 'self' 'unsafe-inline' https://assets.mailerlite.com; img-src 'self' data: https:; font-src 'self' https://patchstack.com https://js.intercomcdn.com https://fonts.intercomcdn.com; connect-src 'self' https://api.hsforms.com https://forms.hsforms.com https://js.hsforms.net https://api.patchstack.com https://vdp-api.patchstack.com https://www.google.com https://google.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://cdn-cookieyes.com https://log.cookieyes.com https://widget.intercom.io https://api-iam.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://assets.mailerlite.com https://api.mailerlite.com https://connect.mailerlite.com https://assets.mlcdn.com https://cdn.dreamdata.cloud https://www.facebook.com https://px.ads.linkedin.com https://pagead2.googlesyndication.com; frame-src 'self' https://share.hsforms.com https://*.share.hsforms.com https://forms.hsforms.com https://www.google.com/recaptcha/ https://google.com https://www.gstatic.com http://js.hsforms.net https://js.hsforms.net https://www.youtube.com https://open.spotify.com https://www.workable.com https://intercom-sheets.com; 2 base-uri 'self';frame-ancestors 'self';object-src 'none' 2 default-src 'self' deskline.net concierge.goodguys.ai 'unsafe-inline' 'unsafe-eval' https: data: blob:; connect-src 'self' https: wss: blob:; 2 default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:; 2 default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://shrinerschildrens.containers.piwik.pro https://acsbapp.com https://solutions.invocacdn.com https://cdn.acsbapp.com/ https://cdn.bc0a.com https://tag.brandcdn.com https://analytics.tiktok.com https://collector-7921.tvsquared.com https://surveycompass-tools.consumerism.pressganey.com https://va.vercel-scripts.com https://maps.googleapis.com https://surveycompass.binaryfountain.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://adservices.brandcdn.com https://tag.simpli.fi https://shriner.my.salesforce-sites.com https://px.premion.com https://connect.facebook.net https://s.adroll.com https://px.premion.com https://www.youtube.com https://www.datadoghq-browser-agent.com https://zn4pdvjg3rzqhiebm-shriners.siteintercept.qualtrics.com https://d.adroll.com https://siteintercept.qualtrics.com https://d.adroll.com https://siteintercept.qualtrics.com https://www.gstatic.com https://shrinenet.jotform.com https://lovetotherescue.formstack.com https://js.adsrvr.org https://shrinenet.jotform.com https://lovetotherescue.formstack.com https://js.adsrvr.org https://static.formstack.com https://doublethedonation.com https://www.giftcalcs.com https://donatestock.com ; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com/ https://surveycompass-tools.consumerism.pressganey.com https://edge-platform.sitecorecloud.io/ https://shriner.my.salesforce-sites.com https://shriner.my.salesforce-sites.com https://doublethedonation.com https://d.adroll.com; img-src 'self' blob: data: https://*.sitecorecloud.io https://acsbapp.com https://solutions.invocacdn.com https://cdn.acsbapp.com/ https://shrinerschildrens.containers.piwik.pro https://insight.adsrvr.org https://collector-7921.tvsquared.com https://maps.gstatic.com https://surveycompass-tools.consumerism.pressganey.com https://mapsresources-pa.googleapis.com https://jelly.mdhv.io https://ads.scorecardresearch.com https://match.sharethrough.com https://mapsresources-pa.googleapis.com https://www.facebook.com https://jelly-v6.mdhv.io https://ml314.com https://www.facebook.com https://jelly-v6.mdhv.io https://www.google.com.ec https://i.liadm.com https://uipglob.semasio.net https://shriner.my.salesforce-sites.com https://eb2.3lift.com https://match.adsrvr.org https://dmp.truoptik.com https://mid.rkdms.com https://loadm.exelator.com https://odr.mookie1.com https://x.bidswitch.net https://doublethedonation.com https://ad.doubleclick.net https://www.google.com https://d.adroll.com https://www.googletagmanager.com; font-src 'self' https://fonts.gstatic.com https://surveycompass-tools.consumerism.pressganey.com https://static.formstack.com https://doublethedonation.com https://d.adroll.com; frame-src 'self' https://insight.adsrvr.org https://d1eoo1tco6rr5e.cloudfront.net https://adservices.brandcdn.com https://www.google.com https://shrinenet.jotform.com https://d.adroll.com https://www.giftcalcs.com https://www.youtube.com; connect-src 'self' https://*.sitecorecloud.io https://cdn.acsbapp.com/ https://shrinerschildrens.containers.piwik.pro https://shrinerschildrens.piwik.pro https://pnapi.invoca.net https://cdn.bc0a.com https://ixfd2-api.bc0a.com https://analytics.tiktok.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://analytics.google.com https://api2.consumerism.pressganey.com https://api.ipify.org https://mapsresources-pa.googleapis.com https://mpc-prod-23-s6uit34pua-ue.a.run.app https://5z-2b6b7616f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws https://px.premion.com https://px.premion.com https://shriner.my.salesforce-sites.com https://mpc-prod-23-s6uit34pua-ue.a.run.app https://5z-2b6b7616f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws https://px.premion.com https://shriner.my.salesforce-sites.com https://siteintercept.qualtrics.com https://analytics-ipv6.tiktokw.us https://lovetotherescue.formstack.com https://acsbapp.com https://doublethedonation.com https://backend.acsbapp.com https://d.adroll.com https://donatestock.com ; object-src 'none'; media-src 'self'; manifest-src 'self'; worker-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://www.google.com ; upgrade-insecure-requests; block-all-mixed-content; report-uri /cspreports.xml; 2 script-src 'self' *.amnhealthcare.com dl.episerver.net maps.googleapis.com www.youtube.com unpkg.com script.crazyegg.com *.cloudfront.net *.cookielaw.org d10lpsik1i8c69.cloudfront.net api.amnhealthcare.io bat.bing.com *.americanmobile.com *.pardot.com js.adsrvr.org snap.licdn.com dev.visualwebsiteoptimizer.com www.google.com assets.adobedtm.com www.googletagmanager.com js.zi-scripts.com www.gstatic.com www.rumiview.com *.amnhealthcare.com www.medtargetsystem.com match.deepintent.com trc.lhmos.com newton.newtonsoftware.com recruitingbypaycor.com apply.indeed.com cdn.botframework.com ajax.googleapis.com connect.facebook.net static.ads-twitter.com analytics.click2apply.net adservice.google.com www.googleadservices.com googleads.g.doubleclick.net s.pinimg.com analytics.tiktok.com pixel.byspotify.com tag.demandbase.com ct.pinterest.com *.formsite.com cdn.optimizely.com js.monitor.azure.com *.cdn.optimizely.com cdn-assets-prod.s3.amazonaws.com app.optimizely.com apps.usw2.pure.cloud 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https: data: blob: 'unsafe-inline'; worker-src 'self' blob:; 2 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; upgrade-insecure-requests 2 style-src smurfitkappa.concludis.de *.cookiebot.com fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline' 2 frame-ancestors https://*.et0965.epichosted.com https://*.mypatientchart.org https://redcap.wustl.edu/; report-uri /report-csp-violation 2 Upgrade-Insecure-Requests; default-src 'self' https: *.hotjar.com *.hotjar.io; connect-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https: *.hotjar.com *.hotjar.io wss://*.hotjar.com *.algolia.net *.algolianet.com *.adobedtm.com *.adobe.com *.day.com *.scene7.com *.demdex.net cm.everesttech.net performance.typekit.net *.osano.com *.drift.com *.driftt.com *.driftcdn.com *.youtube.com *.peopleclick.com *.doubleclick.net *.zoominfo.com *.peopleclick.eu.com *.pardot.com *.twitter.com *.ads-twitter.com *.googletagmanager.com *.googlesyndication.com *.googletagservices.com t.co lltrck.com; worker-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https: *.coherent.com *.google.com *.osano.com t.co lltrck.com; media-src 'self' blob: https: *.coherent.com; img-src 'self' data: https: *.coherent.com *.scene7.com *.ggpht.com *.ytimg.com *.google.com *.example.com *.linkedin.com *.facebook.com *.youtube.com *.google.com *.google-analytics.com *.imgix.net *.doubleclick.net *.pardot.com *.adsymptotic.com t.co; child-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https: *.algolia.net *.algolianet.com *.coherent.com *.peopleclick.com *.peopleclick.eu.com *.algolia.net *.algolianet.com *.adobedtm.com *.adobe.com *.day.com *.scene7.com *.demdex.net cm.everesttech.net *.hotjar.com *.hotjar.io *.pardot.com *.osano.com *.twitter.com *.ads-twitter.com *.googletagmanager.com *.googlesyndication.com *.googletagservices.com t.co lltrck.com; frame-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https: *.algolia.net *.algolianet.com *.coherent.com *.peopleclick.com *.peopleclick.eu.com *.algolia.net *.algolianet.com *.adobedtm.com *.adobe.com *.day.com *.scene7.com *.demdex.net cm.everesttech.net *.hotjar.com *.hotjar.io *.pardot.com *.osano.com *.twitter.com *.ads-twitter.com *.googletagmanager.com *.googlesyndication.com *.googletagservices.com t.co lltrck.com; font-src 'self' data: https: *.algolia.net *.algolianet.com *.adobedtm.com *.adobe.com *.day.com *.scene7.com *.demdex.net cm.everesttech.net *.typekit.com *.hotjar.com *.hotjar.io *.gstatic.com *.google.com *.doubleclick.net *.coherent.com *.google-analytics.com *.pardot.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' data: blob: https: *.algolia.net *.algolianet.com *.adobedtm.com *.adobe.com *.day.com *.scene7.com *.demdex.net cm.everesttech.net *.osano.com *.zoominfo.com *.facebook.net *.hotjar.com *.hotjar.io *.facebook.com *.linkedin.com *.searchcdn.com *.addsearch.com *.gstatic.com *.google.com *.googletagmanager.com *.driftt.com geoip-db.com *.wistia.net *.wistia.com *.googleapis.com *.coherent.com *.pardot.com *.google-analytics.com *.msecnd.net *.drift.com *.youtube.com *.licdn.com *.twitter.com *.ads-twitter.com *.googleadservices.com *.doubleclick.net *.peopleclick.com *.peopleclick.eu.com *.adsymptotic.com *.googlesyndication.com *.googletagservices.com t.co lltrck.com; style-src 'self' 'report-sample' 'unsafe-inline' blob: https: *.googleapis.com *.google.com *.google-analytics.com *.cloudfront.net *.addsearch.com *.drift.com *.coherent.com *.pardot.com *.driftt.com *.osano.com *.googletagmanager.com; form-action 'self' https: *.coherent.com *.osano.com *.drift.com *.driftt.com *.driftcdn.com *.youtube.com *.peopleclick.com *.doubleclick.net *.zoominfo.com *.peopleclick.eu.com *.pardot.com *.google-analytics.com *.google.com *.facebook.net; frame-ancestors 'self' blob: https: *.algolia.net *.algolianet.com *.coherent.com *.peopleclick.com *.peopleclick.eu.com *.algolia.net *.algolianet.com *.adobedtm.com *.adobe.com *.day.com *.scene7.com *.demdex.net cm.everesttech.net *.hotjar.com *.hotjar.io *.pardot.com *.osano.com t.co *.twitter.com *.ads-twitter.com *.googletagmanager.com *.googlesyndication.com *.googletagservices.com lltrck.com; base-uri 'self' 2 default-src 'self';manifest-src https://ddw3p1oh0ex89.cloudfront.net;script-src https://*.adroll.com https://*.facebook.net https://sdk.twilio.com https://cdn.humanapi.co/ https://ekr.zendesk.com 'sha256-c7M5EaJ4WdOCgAf4VR5PNAIx8Tfot/Q3Nsu8lkLFXlU=' https://static.zdassets.com https://cdn.jsdelivr.net/fingerprintjs2/1.5.1/fingerprint2.min.js 'sha256-28pWGDRYnND+KcXkQSsC8a7TlpIi4HPpfQ4OvqTUNY8=' https://*.zopim.com 'sha256-ZKu42s6NuuaVSSaKshRcJFOs1ctAeLMINp2+/JEaBWM=' https://*.linkedin.com/ https://ddw3p1oh0ex89.cloudfront.net https://*.adnxs.com/ https://www.googletagmanager.com https://*.twitter.com https://*.g.doubleclick.net https://maps.googleapis.com https://*.plaid.com wss://ladderlife.zendesk.com https://cdn.pbbl.co https://*.googlesyndication.com https://ads.nextdoor.com/public/pixel/ndp.js 'sha256-+9xfK56z1o8LjCn+r6aZvibnWQ4slrvpI04piONRQ5U=' 'sha256-I4sssOimP4aqQ3guQTL1/GuKKN/qcNxjkHE09MYMLQA=' https://www.google-analytics.com/analytics.js https://*.bizographics.com/ https://*.newrelic.com https://ekr.zdassets.com https://bam.nr-data.net https://www.google.com https://qp.delty.io/q1/HdwFxDxD.js https://cdn.cookielaw.org/scripttemplates/ wss://api.smooch.io 'sha256-Od08hzv9y6Vx8fH7Kz8bVZJpiAMT3DkJyoEjYXh4t50=' 'sha256-EhImtpQrxfrzkUueM3popkaGrI5KZmBuHLwfmTZTphA=' https://*.bing.com 'sha256-lpUhVVDo2EzRH5vTU08BulB+rpSke0YpGJ6ZmllJNys=' https://api.smooch.io https://qp.delty.io/q1/t/client.min.js https://media.smooch.io https://static.ads-twitter.com/uwt.js https://*.licdn.com/ 'sha256-a9K368kgMI7sk9t0Bk3PLOztxYxCDfIYzxgb6aA1dEg=' https://ladderlife.zendesk.com wss://voice-js.roaming.twilio.com 'sha256-LROnOwSP0gZe2prEj+944RV8WJ3wSYUdpLr1amrGxFE=' https://*.googleadservices.com https://*.stripe.com;child-src https://*.fls.doubleclick.net/ https://www.ladderlife.com https://*.choicescreening.com https://*.facebook.com https://www.youtube.com https://*.twitter.com https://*.g.doubleclick.net https://*.plaid.com https://track.adform.net https://*.googlesyndication.com https://www.emjcd.com https://connect.facebook.net https://pay.prudential.com https://hapi-connect.humanapi.co https://pay-cert.prudential.com https://*.stripe.com;frame-src https://*.fls.doubleclick.net/ https://www.ladderlife.com https://*.choicescreening.com https://*.facebook.com https://www.youtube.com https://*.twitter.com https://*.g.doubleclick.net https://*.plaid.com https://track.adform.net https://*.googlesyndication.com https://www.emjcd.com https://connect.facebook.net https://pay.prudential.com https://hapi-connect.humanapi.co https://pay-cert.prudential.com https://*.stripe.com;style-src https://ddw3p1oh0ex89.cloudfront.net https://fonts.googleapis.com 'unsafe-inline';media-src https://static.zdassets.com https://*.zopim.com https://ddw3p1oh0ex89.cloudfront.net;img-src https://static.zdassets.com https://ddw3p1oh0ex89.cloudfront.net https: data: blob: https://accounts.zendesk.com https://*.zdusercontent.com https://media.smooch.io https://ladderlife.zendesk.com 'self';font-src https://*.zopim.com https://ddw3p1oh0ex89.cloudfront.net data: https://fonts.gstatic.com;connect-src https://www.google-analytics.com/ https://ekr.zendesk.com https://adservice.google.com https://eng.trkcnv.com/postBack https://*.zopim.com https://ddw3p1oh0ex89.cloudfront.net https://api.segment.io https://*.doubleclick.net https://*.twitter.com https://browser-intake-us5-datadoghq.com https://maps.googleapis.com https://*.google.com https://www.facebook.com wss://ladderlife.zendesk.com https://*.datadoghq.com https://*.googlesyndication.com https://ekr.zdassets.com https://cdn.cookielaw.org/ https://bam.nr-data.net https://www.google.com https://geolocation.onetrust.com/ wss://api.smooch.io https://*.bing.com https://stripe.com https://api.smooch.io wss://*.zopim.com https://ladderlife.zendesk.com https://fonts.googleapis.com https://out.stashinvest.com/event https://*.stripe.com 'self' https://privacyportal.onetrust.com/;frame-ancestors https://banking.radiusbank.com/ https://*.lendingclub.com/; 2 frame-ancestors 'self' https://metrika.yandex.ru https://webvisor.com https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr; 2 default-src 'self'; connect-src 'self' sentry.io https://*.sentry.io *.sentry.io https://apikeys.civiccomputing.com https://www.googletagmanager.com https://maps.googleapis.com https://*.google-analytics.com https://connect.facebook.net https://clapi.civiccomputing.com https://*.azurewebsites.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.youtube.com https://vimeo.com https://www.google.com https://*.trussell.org.uk https://analytics.tiktok.com https://public.flourish.studio https://*.webtrends-optimize.com https://*.wtopt.io https://tvsquared.com https://*.tvsquared.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://browser.sentry-cdn.com https://js.sentry-cdn.com https://cc.cdn.civiccomputing.com https://www.googletagmanager.com https://www.google.com/recaptcha/ https://s3.amazonaws.com https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://*.list-manage.com https://*.turn2us.org.uk https://*.google-analytics.com https://connect.facebook.net https://clapi.civiccomputing.com https://*.azurewebsites.net https://*.sentry.io https://*.hotjar.com https://www.youtube.com https://*.vimeo.com https://*.vimeocdn.com https://*.trussell.org.uk https://analytics.tiktok.com https://*.tfaforms.com https://*.tfaforms.net https://public.flourish.studio https://*.webtrends-optimize.com https://*.wtopt.io https://tvsquared.com https://*.tvsquared.com; style-src 'self' 'unsafe-inline' https://at.alicdn.com https://fonts.googleapis.com https://cdn-images.mailchimp.com https://*.hotjar.com; style-src-elem 'self' 'unsafe-inline' https://at.alicdn.com https://*.webtrends-optimize.com; worker-src 'self' blob:; img-src 'self' data: blob: https://*.trussell.org.uk https://tt-website.ddev.site https://trusselltrustdev.prod.acquia-sites.com https://trusselltruststage.prod.acquia-sites.com https://trusselltrustprod.prod.acquia-sites.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://digitalasset.intuit.com https://www.facebook.com https://*.vimeocdn.com https://i.ytimg.com https://*.hotjar.com https://public.flourish.studio https://*.webtrends-optimize.com https://tvsquared.com https://*.tvsquared.com; font-src 'self' https://at.alicdn.com https://fonts.gstatic.com https://*.hotjar.com; object-src 'self' data:; base-uri 'self'; form-action 'self' https://*.list-manage.com;; frame-src 'self' data: https://*.trussell.org.uk https://tt-website.ddev.site https://trusselltrustdev.prod.acquia-sites.com https://trusselltruststage.prod.acquia-sites.com https://trusselltrustprod.prod.acquia-sites.com https://www.youtube.com https://www.turn2us.org.uk https://player.vimeo.com https://www.google.com https://*.turn2us.org.uk https://www.googletagmanager.com https://*.issuu.com https://*.tfaforms.com https://*.tfaforms.net https://givetoday.co.uk https://*.givetoday.co.uk https://app.bankthefood.org https://flo.uri.sh; frame-ancestors 'self' https://*.trussell.org.uk https://tt-website.ddev.site https://trusselltrustdev.prod.acquia-sites.com https://trusselltruststage.prod.acquia-sites.com https://trusselltrustprod.prod.acquia-sites.com; upgrade-insecure-requests; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://www.google.com https://www.gstatic.com https://*.googletagmanager.com https://tagmanager.google.com https://*.googleadservices.com https://*.doubleclick.net https://*.clarity.ms https://*.bing.com https://*.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https: https://*.ibero.mx https://*.google-analytics.com https://*.clarity.ms https://*.bing.com https://i.ytimg.com; connect-src 'self' https://cdn.jsdelivr.net https://api.ipify.org https://*.ibero.mx https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.doubleclick.net https://*.clarity.ms https://*.bing.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob: https://*.ibero.mx https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com; frame-src 'self' https://ibero.mx https://www.google.com https://*.ibero.mx https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://*.ibm.com; frame-ancestors 'self'; 2 default-src *; script-src * 'unsafe-inline' blob:; object-src 'none'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; connect-src * blob:; report-uri /report-csp-violation 2 frame-ancestors 'self' localhost:* https://*.doccle.be https://*.doccle.nl https://*.doccle-test.be 2 worker-src blob:; img-src https: blob: data:; default-src 'self' ogletree.com data: https: 'unsafe-eval' 'unsafe-inline'; frame-src blob: https:; 2 connect-src 'self' widget.datablocks.se https://publish.ne.cision.com https://ssm.teliacompany.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com wss://collection.decibelinsight.net *.decibelinsight.net https://stats.g.doubleclick.net https://cdn.linkedin.oribi.io https://www.google.com https://www.google.se; default-src 'self' https://www.googletagmanager.com; font-src 'self' https://cdn.voca.teliacompany.com https://fonts.gstatic.com; img-src 'self' https://images.ctfassets.net https://cdn-assets-eu.frontify.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://cdn.voca.teliacompany.com https://mb.cision.com data: https://ssm.teliacompany.com blob: https://px.ads.linkedin.com https://www.googletagmanager.com; media-src 'self' https://cdn-assets-eu.frontify.com; script-src 'self' 'unsafe-eval' blob: 'nonce-datablocks/widget' https://ssm.teliacompany.com https://cdn.cookielaw.org https://cdn.decibelinsight.net https://www.google.com https://www.gstatic.com https://snap.licdn.com https://stats.g.doubleclick.net https://tools.euroland.com; style-src 'unsafe-inline' 'self' widget.datablocks.se https://fonts.googleapis.com; frame-src 'self' https://maps.google.com widget.datablocks.se https://telia-external.videomarketingplatform.co https://tools.eurolandir.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://telia.videosync.fi https://telia-company.videosync.fi https://ssm.teliacompany.com; object-src 'none' 2 object-src 'self'; frame-ancestors 'self' http://*.publicissapient.com https://*.publicissapient.com www.publicissapient.fr publicissapient.fr sites-us.lumapps.com vox.publicissapient.com vox.publicis.sapient.com; 2 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob:; object-src * data: blob: 'unsafe-inline' 2 frame-ancestors 'self' https://app.contentful.com https://app.eu.contentful.com https://*.contentful.com 2 Content-Security-Policy: frame-ancestors 'self' https://*.superbid.net; 2 frame-ancestors 'self' nationaalarchief.sr *.nationaalarchief.sr; report-uri /report-csp-violation 2 frame-ancestors 'self' *.luxair.lu *.luxairtours.lu 2 default-src https:; style-src 'self' https: 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes'; img-src https: data: blob:; connect-src https:; font-src https:; frame-src https: blob: data:; 2 default-src 'self'; base-uri 'self'; object-src 'none'; img-src 'self' https: data:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline'; connect-src 'self' https: wss:; 2 default-src 'self' data:; script-src 'unsafe-inline' 'unsafe-eval' www.gstatic.com googletagmanager.com www.google.com www.googleadservices.com 'self' https:; font-src 'self' fonts.gstatic.com data:; style-src 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com https:; img-src 'self' hostingassured.thewebhostingdir.com phplive.astralinternet.com ps.w.org secure.gravatar.com www.google-analytics.com www.google.com www.google.ca www.gstatic.com googleads.g.doubleclick.net data:; frame-src 'self' blob: data: www.blob: data: google.com www.youtube.com phplive.astralinternet.com; connect-src 'self' www.google-analytics.com captcha.astralinternet.com 2 default-src 'self'; script-src 'unsafe-eval' 'self' 'report-sample' 'unsafe-inline' https://static.lightning.force.com/ https://service.force.com/ https://bicx.secure.force.com/ https://bi.force.com/ https://cdn-ukwest.onetrust.com/scripttemplates/ https://dl.episerver.net/ https://id.siteimprove.com/ https://my2.siteimprove.com/ https://cdn.siteimprove.net/ https://ajax.googleapis.com/ https://www.youtube-nocookie.com/ https://www.youtube.com/ http://play.google.com/ https://play.google.com/ https://*.vo.msecnd.net/ https://player.vimeo.com/ http://login.edialog24.com/ https://connect.facebook.net/ https://www.googletagmanager.com/ http://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.no/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://d8ejoa1fys2rk.cloudfront.net/ https://siteimproveanalytics.com/ https://unpkg.com/@gobistories/ https://maxcdn.bootstrapcdn.com/ https://cdn.jsdelivr.net/ https://cdnjs.cloudflare.com/ https://res.cloudinary.com/gobi-technologies-as/ https://api.useberry.com/ https://challenges.cloudflare.com/ https://analytics.silktide.com/ blob: https://app-bino-prod.azurewebsites.net/ https://app-bino-prod-staging.azurewebsites.net/ https://www.bi.no/ https://bicx.my.salesforce.com/ https://bicx.my.salesforce-sites.com/ https://external-bi-prod.azureedge.net/ https://d.la1-c1-cdg.salesforceliveagent.com/ https://widget.gobistories.com/ https://bicx.my.site.com/ https://api.useberry.com/ https://*.linkedin.com/; style-src 'unsafe-eval' 'self' 'report-sample' 'unsafe-inline' https://static.lightning.force.com/ https://service.force.com/ https://bicx.secure.force.com/ https://bi.force.com/ https://cdn-ukwest.onetrust.com/scripttemplates/ https://dl.episerver.net/ https://id.siteimprove.com/ https://my2.siteimprove.com/ https://cdn.siteimprove.net/ https://ajax.googleapis.com/ https://www.youtube-nocookie.com/ https://www.youtube.com/ http://play.google.com/ https://play.google.com/ https://*.vo.msecnd.net/ https://player.vimeo.com/ https://s.ytimg.com/yts/jsbin/www-widgetapi-vfl3m9ZW-/www-widgetapi.js http://login.edialog24.com/ https://connect.facebook.net/ https://www.googletagmanager.com/ http://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.no/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://d8ejoa1fys2rk.cloudfront.net/ https://siteimproveanalytics.com/ https://unpkg.com/@gobistories/ https://maxcdn.bootstrapcdn.com/ https://fonts.googleapis.com/ https://web-sdk-eu.aptrinsic.com/ https://cdn.jsdelivr.net/ https://app-bino-prod.azurewebsites.net/ https://app-bino-prod-staging.azurewebsites.net/ https://www.bi.no/ https://bicx.my.site.com/eswsbino/; object-src 'none'; base-uri 'self'; connect-src 'self' https://sgtm.bi.no/ https://*.applicationinsights.azure.com/ https://bicx.secure.force.com/ https://static.lightning.force.com/ https://bicx.my.salesforce.com/ https://bicx.my.salesforce-sites.com/ https://*.global.siteimproveanalytics.io/ https://id.siteimprove.com/ https://my2.siteimprove.com/ https://cdn-ukwest.onetrust.com/ https://geolocation.onetrust.com/ https://privacyportal-uk.onetrust.com/ https://www.youtube-nocookie.com/ https://www.youtube.com/ http://play.google.com/ https://play.google.com/ https://www.google.com/ https://www.google.no/ https://region1.google-analytics.com/ https://www.google-analytics.com/ https://vimeo.com/ https://player.vimeo.com/ https://dc.services.visualstudio.com/ https://stats.g.doubleclick.net/ https://www.facebook.com/ https://d8ejoa1fys2rk.cloudfront.net/ https://sentry10.bynder.cloud/ https://media.bi.no/ https://jsonplaceholder.typicore.com/ https://easycruit.com/ https://api.gobistories.com/ https://media-proxy.gobistories.com/ https://pagead2.googlesyndication.com/ https://esp-eu.aptrinsic.com/rte/v1/configuration/ https://googleads.g.doubleclick.net/ https://easycruit.com/api/ https://www.easycruit.com/ https://web-sdk-eu.aptrinsic.com/ https://esp-eu.aptrinsic.com/ https://res.cloudinary.com/gobi-technologies-as/ https://bilogin.b2clogin.com/ https://challenges.cloudflare.com/ https://a.eu.silktide.com/ https://bicx.my.salesforce-scrt.com/; font-src 'self' data: https://maxcdn.bootstrapcdn.com/ https://fonts.gstatic.com/ https://d8ejoa1fys2rk.cloudfront.net/ https://dl.episerver.net/ https://dhm5hy2vn8l0l.cloudfront.net/graphik/ https://dhm5hy2vn8l0l.cloudfront.net/lato/ https://app-bino-prod.azurewebsites.net/ https://app-bino-prod-staging.azurewebsites.net https://www.bi.no; frame-src 'self' https://sgtm.bi.no/ https://bicx--compoc.sandbox.my.site.com/ https://bicx--compoc.sandbox.lightning.force.com/ https://bicx--compoc.sandbox.my.salesforce.com/ https://service.force.com/ https://bicx.secure.force.com/ https://bi.force.com/ http://play.google.com/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://5995713.fls.doubleclick.net/ https://my2.siteimprove.com/ https://bi.easycruit.com/ https://www.facebook.com/ https://www.googletagmanager.com/ https://td.doubleclick.net/ https://challenges.cloudflare.com/ https://www.linkedin.com/ https://bicx.my.site.com/ https://bicx.file.force.com/; img-src 'self' data: https://media.bi.no/ https://www.bi.no/ https://6000471.global.siteimproveanalytics.io/ https://d2csxpduxe849s.cloudfront.net/ https://img.youtube.com/ https://i.ytimg.com/ https://www.facebook.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.no/ https://dl.episerver.net/ https://media-proxy.gobistories.com/ https://cdn-ukwest.onetrust.com/ https://www.bynder.com/ https://ad.doubleclick.net/ http://www.w3.org/2000/svg/ https://res.cloudinary.com/gobi-technologies-as/ https://www.linkedin.com/ https://app-bino-prod.azurewebsites.net/ https://app-bino-prod-staging.azurewebsites.net/ https://bicx.lightning.force.com/; manifest-src 'self'; media-src 'self' https://res.cloudinary.com/gobi-technologies-as/ https://media-proxy.gobistories.com/ blob:; report-uri https://631adb1029ad77a9b5a12c7b.endpoint.csper.io/?v=0/; worker-src blob:; 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https: data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data: blob:; connect-src 'self' https: wss: data: blob:; frame-src 'self' https: data: blob:; frame-ancestors 'self'; media-src 'self' https: data: blob:; worker-src 'self' https: data: blob:; form-action 'self' https:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; 2 upgrade-insecure-requests;connect-src * data: 2 script-src ‘self’ 2 upgrade-insecure-requests; report-uri /csp/report; 2 frame-ancestors https://auto-emotion.cupra.de https://showcase.cupra.de.showcase.dev.cupra.de 'self' 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn-cookieyes.com https://www.googletagmanager.com https://us.i.posthog.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: blob: https://images.ctfassets.net https://downloads.ctfassets.net https://cdn-cookieyes.com; media-src 'self' https://videos.ctfassets.net; connect-src 'self' https://cdn-cookieyes.com https://*.cookieyes.com https://us.i.posthog.com https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; upgrade-insecure-requests 2 default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src 'self' 2 object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://chat.openai.com https://chatgpt.com 2 frame-ancestors 'self' https://minhaclaro.claro.com.br https://www.clarocadastro.com.br https://clarocadastro.com.br; upgrade-insecure-requests; 2 default-src https: 'unsafe-eval' 'unsafe-inline'; img-src https:; object-src 'none';frame-ancestors 'self';form-action 'self' https://www.paypal.com; 2 frame-ancestors 'self' my.impakt-360.com 2 default-src 'self' 'unsafe-inline' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl https://www.googletagmanager.com https://www.google-analytics.com;img-src 'self' 'unsafe-inline' data: blob: https://logowanie.zpe.gov.pl https://platforma.zpe.gov.pl https://static.zpe.gov.pl https://static.epodreczniki.pl https://www.google-analytics.com https://www.googletagmanager.com https://kronika.gov.pl;connect-src 'self' ws: blob: https://logowanie.zpe.gov.pl https://platforma.zpe.gov.pl https://moje.zpe.gov.pl https://static.zpe.gov.pl https://static.epodreczniki.pl https://sandbox.zpe.gov.pl https://sr-production.contentplus.io https://*.google-analytics.com;media-src 'self' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl;worker-src 'self' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl;frame-src * data:;frame-ancestors 'self' https://logowanie.zpe.gov.pl 2 frame-ancestors 'self' https://student-stg.elsanow.co https://student.elsaspeak.com 2 default-src 'unsafe-inline' 'self' https:; child-src 'self'; connect-src 'self' https:; font-src 'self' fonts.gstatic.com; frame-src 'self' https:; img-src * data:; manifest-src 'self'; media-src 'self' https:; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https:; style-src 'unsafe-inline' 'self' *.twitter.com *.twimg.com fonts.googleapis.com; worker-src 'self'; base-uri 'self'; form-action 'self' *.twitter.com papi.hobex.at; navigate-to 'self' https: 2 default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob:; 2 default-src 'self' data:; manifest-src 'self'; script-src 'self' 'unsafe-inline' https://player.vimeo.com https://www.youtube.com https://statistik.kug.ac.at; style-src 'self' 'unsafe-inline'; connect-src 'self' https://statistik.kug.ac.at data:; img-src 'self' https://img.youtube.com https://tiles.wmflabs.org https://c.tile.openstreetmap.org; form-action 'self' https://*.ddev.site https://search-kug.obvsg.at https://www.kug.ac.at/; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://services.phaidra.kug.ac.at https://*.frcapi.com; media-src 'self'; child-src 'self' blob: https://player.vimeo.com https://www.youtube.com; 2 frame-ancestors 'self'; object-src 'self'; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com static.cloudflareinsights.com cdnjs.cloudflare.com cdn.tailwindcss.com www.google.com www.gstatic.com fonts.gstatic.com ajax.googleapis.com cdn.jsdelivr.net region-resource.optoma.com code.jquery.com assets.calendly.com; 2 frame-ancestors 'self' www.dbresearch.com www.dbresearch.de *.db.com *.db.com:* localhost:* localhost *research-db-a2.wsodqa.com *.cmfyapp-qa.com; 2 default-src 'self'; script-src 'self' https://cdn.builder.io https://builder.io https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.google.com https://connect.facebook.net https://*.facebook.com https://www.linkedin.com https://*.linkedin.com https://snap.licdn.com https://*.licdn.com https://static.ads-twitter.com https://*.ads-twitter.com https://cdnjs.cloudflare.com https://unpkg.com https://vercel.com https://*.vercel.live https://*.vercel-scripts.com https://va.vercel-scripts.com https://sp.analytics.yahoo.com https://*.yahoo.com https://*.eloqua.com https://img03.en25.com https://*.en25.com https://cdn.cookielaw.org https://*.cookielaw.org https://*.onetrust.com https://vercel.live https://*.vercel.app https://va.vercel-scripts.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://cdn.builder.io https://builder.io https://fonts.googleapis.com https://cdnjs.cloudflare.com https://unpkg.com https://vercel.com https://*.vercel.live https://cdn.cookielaw.org https://*.cookielaw.org https://cdn.linearicons.com 'unsafe-inline'; img-src 'self' https://cdn.builder.io https://builder.io https://placehold.co https://res.cloudinary.com https://*.cloudinary.com https://*.brandfolder.com https://images.pexels.com https://www.googletagmanager.com https://*.en25.com https://*.eloqua.com https://www.google-analytics.com https://analytics.google.com https://*.google.com https://www.facebook.com https://*.facebook.com https://www.linkedin.com https://*.linkedin.com https://vercel.com https://*.vercel.live https://sp.analytics.yahoo.com https://*.yahoo.com https://cdn.cookielaw.org https://*.cookielaw.org data: blob: https://cdn.printfriendly.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://builder.io https://vercel.com https://*.vercel.live data: https://cdn.linearicons.com; connect-src 'self' https://cdn.builder.io https://builder.io https://res.cloudinary.com https://*.cloudinary.com https://*.brandfolder.com https://www.googletagmanager.com https://*.en25.com https://*.eloqua.com https://www.google-analytics.com https://analytics.google.com https://*.google.com https://stats.g.doubleclick.net https://www.facebook.com https://*.facebook.com https://*.facebook.net https://www.linkedin.com https://*.linkedin.com https://snap.licdn.com https://*.licdn.com https://static.ads-twitter.com https://*.ads-twitter.com https://unpkg.com https://vercel.com https://*.vercel.live https://*.vercel-scripts.com https://va.vercel-scripts.com https://sp.analytics.yahoo.com https://*.yahoo.com https://cdn.cookielaw.org https://*.cookielaw.org https://*.onetrust.com https://vercel.live https://*.vercel.app https://va.vercel-scripts.com https://vimeo.com https://*.vimeo.com https://youtube.com https://www.youtube.com https://*.youtube.com https://*.cloudinary.com https://*.brandfolder.com https://privacyportal.onetrust.com https://cdn.printfriendly.com https://*.algolia.net https://*.algolianet.com https://cb.securustech.net https://ameliaq.stqlp.org; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://*.google.com https://www.facebook.com https://*.facebook.com https://www.linkedin.com https://*.linkedin.com https://*.cloudinary.com https://*.brandfolder.com https://vercel.com https://*.vercel.live https://builder.io https://*.cloudinary.com https://*.brandfolder.com https://vercel.live https://*.vercel.app https://player.vimeo.com https://*.vimeo.com https://f.vimeocdn.com https://www.youtube.com https://www.youtube-nocookie.com https://privacyportal.onetrust.com https://cdn.printfriendly.com https://cb.securustech.net https://ameliaq.stqlp.org; media-src 'self' https://res.cloudinary.com https://*.cloudinary.com https://*.brandfolder.com https://builder.io https://vercel.com https://*.vercel.live data: blob: https://*.vimeo.com https://f.vimeocdn.com https://*.cloudinary.com; frame-ancestors 'self' https://*.builder.io; upgrade-insecure-requests; block-all-mixed-content 2 default-src https: data: 'unsafe-inline'; 2 style-src 'self' *.engagement.coremedia.cloud *.gartner.com *.byside.com *.googleapis.com *.doubleclick.net 'unsafe-inline' *; connect-src 'self' *.engagement.coremedia.cloud *.byside.com wss://*.engagement.coremedia.cloud wss://*.byside.com *.linkedin.com *.hsforms.com *.amazonaws.com *.zi-scripts.com *.googlesyndication.com *.hscollectedforms.net *.hs-banner.com *.hubapi.com *.hubspot.com *.google-analytics.com *.google.com *.cookiebot.com *.dreamdata.cloud *; script-src 'self' *.engagement.coremedia.cloud *.cookiebot.com *.googletagmanager.com *.hsforms.net *.capterra.com *.gartner.com *.byside.com *.licdn.com *.hs-scripts.com *.cloudflare.com *.zi-scripts.com *.hsadspixel.net *.hsleadflows.net *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.google-analytics.com *.facebook.net *.dreamdata.cloud *.youtube.com *.doubleclick.net 'unsafe-inline' *; frame-src *.cookiebot.com *.gartner.com *.googletagmanager.com *.youtube.com *.google.com *.doubleclick.net *.facebook.com *.hsforms.com *; img-src 'self' *.engagement.coremedia.cloud *.byside.com *.cookiebot.com *.googlesyndication.com *.linkedin.com *.capterra.com *.hsforms.com *.hubspot.com *.gartner.com *.facebook.com *.google-analytics.com * data:; default-src 'self'; font-src 'self' *.gartner.com *.byside.com *.gstatic.com *.google.com * data: 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self' 2 frame-ancestors http://workflow.tyson.com/ http://workflow-test.tyson.com/ https://tysononline.sharepoint.com https://www.tysonfoods.com https://www-test.tysonfoods.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://vercel.live https://*.amplitude.com https://*.algolia.net https://*.algolianet.com https://*.sentry.io https://cdn.segment.com https://static.elfsight.com https://*.elfsightcdn.com https://www.doctify.com https://www.googletagmanager.com https://*.clerk.accounts.dev https://*.clerk.com https://clerk.reach.recovery.com https://challenges.cloudflare.com https://embed.recovery.com https://*.embed.recovery.com https://securepubads.g.doubleclick.net https://d2gjftn19i3x3l.cloudfront.net https://cdn.cookielaw.org https://maps.googleapis.com https://*.greencolumnart.com https://cdn.jsdelivr.net https://*.taboola.com https://googleads.g.doubleclick.net https://app.wonderchat.io http://*.outbrain.com https://pixel.byspotify.com http://collector-45532.tvsquared.com https://cdn.debugbear.com https://rec.smartlook.com https://www.buzzsprout.com https://snap.licdn.com https://www.redditstatic.com https://*.talkfurther.com https://*.tctm.co https://d2gjftn19i3x3l.cloudfront.net https://embed.typeform.com https://www.youtube.com https://api.heal.recovery.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://embed.typeform.com https://assets.buzzsprout.com; img-src 'self' data: blob: https://cdn.sanity.io https://*.cloudinary.com https://firebasestorage.googleapis.com https://media.recovery.com https://www.googletagmanager.com https://www.google-analytics.com https://img.clerk.com https://img.youtube.com https://*.elfsightcdn.com https://lh3.googleusercontent.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com http://*.outbrain.com https://*.greencolumnart.com http://collector-45532.tvsquared.com https://asset.brandfetch.io https://api.mapbox.com https://vumbnail.com https://px.ads.linkedin.com https://www.redditstatic.com https://alb.reddit.com; media-src 'self' https://*.cloudinary.com https://*.buzzsprout.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.iubenda.com https://*.amplitude.com https://*.sanity.io https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://*.sentry.io https://ipapi.co https://*.segment.com https://api.segment.io https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://*.clerk.accounts.dev https://*.clerk.com https://clerk.reach.recovery.com https://clerk-telemetry.com https://embed.recovery.com https://*.embed.recovery.com https://*.elfsight.com https://*.elfsightcdn.com https://ghost.recovery.com https://maps.googleapis.com https://vimeo.com https://*.taboola.com https://pixels.spotify.com http://*.outbrain.com https://*.greencolumnart.com https://*.debugbear.com https://manager.eu.smartlook.cloud https://px.ads.linkedin.com https://alb.reddit.com https://www.googleadservices.com https://pixel-config.reddit.com https://*.talkfurther.com https://*.tctm.co https://*.typeform.com https://api.heal.recovery.com https://api-prod.verifytx.com; frame-src 'self' https://vercel.live https://www.doctify.com https://*.elf.site https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.googletagmanager.com https://embed.typeform.com https://*.typeform.com https://player.vimeo.com https://www.buzzsprout.com https://*.hsforms.com https://embed.ricohtours.com https://embed.ricoh360.com https://my.matterport.com https://*.clerk.accounts.dev https://*.clerk.com https://clerk.reach.recovery.com https://challenges.cloudflare.com http://app.wonderchat.io; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'self' 2 base-uri 'none'; form-action 'self' *.facebook.com; object-src 'none'; script-src-attr 'none'; script-src 'self' 'nonce-pQmFvEi4x4IB5pxxbf1HFw==' https://assets.chatmind.tech/prod_mapify/ *.kwai-pro.com *.sentry.io *.cdn-apple.com *.googletagmanager.com *.yimg.jp 'unsafe-eval' https: 'sha256-YeBYfNOAAWSAEU3c2cFBxcW/LFaYGZyKIBvHaEj8zX0=' 'sha256-EO1b9YijxcjNiPsyJbU7lexZBExAvbBS7Mtrn43HQSQ=' 'sha256-9AfVDL57WSeqfcfVnIF4kHdm1swN74QR/WJTJNfOsCk=' 'sha256-dCAcyKbuJ0bGgL2k6dUZ7tdZ+jSZeaYt6uX2OyVgPpE=' 'sha256-cepnJH6WCuS6jWv1ILqqDKJjPLDslkMeoNUuZWbNUsk=' 'sha256-m4lkySWjevgouy2UkFw8PWDJYWjNrViUWhH+HXPLbTw=' 'sha256-GWyDadVkL0QpcpiOJWFClR7qjvXGwkcz85OuHGT6jZo=' 'sha256-4xUQQabZCtQ3X+SV/NRCpyGnDjFCdP67Bup/PMcM3j8=' 'sha256-gNsztJjuXn06wPMYYFhUY4bmh9uOBCCFVWe3pJXg+Qw=' 'sha256-RbFAE9w9iniW3rftiwHeS36KlxxNy9wHDR7/erq/KVA=' 'sha256-BYslVZasdwTCpHYP9Sy6F9s83tDTwQTUxpBOS7b3VKE=' 'sha256-oYfWKwJNCDSn49s0pF/3KOrONP4cz6jCSLHd062xu90=' 'sha256-ffrMO2cfuam9x5gxSUsMwPI0SYWjrbuNVouLejqX4MU=' 'sha256-qH9kafJzH2tlRf9HOO1olJ3MaZ+WymksQrEjTsF4qJ0=' 'sha256-Gi/nYCICyD4LRGFj9MsNVvca6TNBdFh0D4/fdz2euRI=' 'sha256-kTrBEEwMPEiOZ0BWgnHczhvynrGZ5irUPf8vSchyNiU='; upgrade-insecure-requests; report-uri /api/security/csp-report; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; 2 img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.boschcarservice.com *.dxtservice.com *.bosch.com *.snap.licdn.com *.licdn.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.facebook.net *.doubleclick.net *.bosch.tech *.mobility-media.cloud *.newrelic.com *.nr-data.net *.youtube.com *.translate.google.com *.google.com; object-src 2 default-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; 2 default-src https: 'unsafe-eval' 'unsafe-inline' 2 frame-ancestors 'self' https://sanity.io https://www.sanity.io https://reown.sanity.studio https://*.walletconnect.com https://*.walletconnect.org https://*.reown.com https://widget.solflare.com/ 2 default-src https://*.experimentation.dev *.kameleoon.com *.kameleoon.eu *.kameleoon.io dock.ui.bosch.tech *.hotjar.com wss://*.hotjar.com s096l072-hc-mwf-prd.app.intra bott-fs.nautilus bott-fs.kittelberger.net vc.hotjar.io in.hotjar.com script.hotjar.com *.bosch-thermotechnology.com *.boschtt-documents.com www.bimstore.co.uk *.kittelberger.net *.mycliplister.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: ; media-src *.sprinklr.com *.boschtt-documents.com services.kittelberger.net *.mycliplister.com mycliplister.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' ; font-src *.sprinklr.com bott-fs.nautilus bott-fs.kittelberger.net script.hotjar.com fonts.gstatic.com *.bosch-thermotechnology.com www.bosch-thermotechnology.us www.heizung-steuern.com fonts.gstatic.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: data: ; object-src data: 'self'; img-src *.sprinklr.com *.kameleoon.eu *.kameleoon.com *.experimentation.dev *.google-analytics.com *.googletagmanager.com s096l072-hc-mwf-prd.app.intra bott-fs.nautilus bott-fs.kittelberger.net optimize.google.com www.google-analytics.com www.googletagmanager.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: data: blob:; style-src 'unsafe-inline' *.sprinklr.com bott-fs.nautilus bott-fs.kittelberger.net *.bosch-thermotechnology.com cdn.datatables.net optimize.google.com fonts.googleapis.com www.bosch-easycontrol.com www.heizung-steuern.com www.bosch-thermotechnology.us *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' 'unsafe-inline' https: ; script-src *.sprinklr.com *.experimentation.dev *.kameleoon.io *.kameleoon.eu *.kameleoon.com *.googletagmanager.com bott-fs.nautilus bott-fs.kittelberger.net dock.ui.bosch.tech optimize.google.com *.google-analytics.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: 'unsafe-inline' 'unsafe-eval'; frame-src *.sprinklr.com mailto: bosch.mi4biz.net www.boschthermolife.com junkers-de-de-b.boschtt-documents.com optimize.google.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https:; frame-ancestors bosch.mi4biz.net bott-fs.kittelberger.net *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com 'self' https: ; connect-src *.sprinklr.com wss://*.sprinklr.com *.experimentation.dev *.kameleoon.io *.kameleoon.eu *.kameleoon.com www.facebook.com facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' https: *.google.com wss://endpoint.chatbot-suite.bosch.tech endpoint.chatbot-suite.bosch.tech www.bosch-thermotechnology.com region1.google-analytics.com www.google-analytics.com *.bosch-homecomfort.com *.bosch-homecomfortgroup.com *.bosch-industrial.com dock.ui.bosch.tech mycliplister.com *.mycliplister.com stats.g.doubleclick.net 2 frame-ancestors 'self'; base-uri 'self'; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://*.cloudflare.com https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com http://*.zohopublic.com ws://*.zohopublic.com https://*.zohostatic.com https://*.hotjar.com https://*.hotjar.io; form-action 'self'; object-src 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com http://*.zohopublic.com ws://*.zohopublic.com https://*.zohostatic.com https://*.hotjar.com https://*.hotjar.io https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.id https://googleads.g.doubleclick.net https://*.googlesyndication.com https://stats.g.doubleclick.net/ https://*.gstatic.com https://*.recaptcha.net; connect-src 'self' https://web-cms.biznetgio.com https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com http://*.zohopublic.com ws://*.zohopublic.com https://*.zohostatic.com https://*.hotjar.com https://*.hotjar.io https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.id https://googleads.g.doubleclick.net https://*.googlesyndication.com https://stats.g.doubleclick.net/ https://*.gstatic.com https://*.recaptcha.net; img-src 'self' data: https://web-cms.biznetgio.com https://cms.website.vendor.biznetgio.dev https://web-cms.biznetgio.com https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com http://*.zohopublic.com ws://*.zohopublic.com https://*.zohostatic.com https://*.hotjar.com https://*.hotjar.io https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.id https://googleads.g.doubleclick.net https://*.googlesyndication.com https://stats.g.doubleclick.net/ https://*.gstatic.com https://*.recaptcha.net; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://fonts.gstatic.com https://fonts.googleapis.com https://*.cloudflare.com https://web-cms.biznetgio.com https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com http://*.zohopublic.com ws://*.zohopublic.com https://*.zohostatic.com https://*.hotjar.com https://*.hotjar.io https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.id https://googleads.g.doubleclick.net https://*.googlesyndication.com https://stats.g.doubleclick.net/ https://*.gstatic.com https://*.recaptcha.net; script-src-attr 'unsafe-inline' 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chatbot.com https:; style-src 'self' 'unsafe-inline' https://chatbot.com https:; img-src 'self' data: blob: https://chatbot.com https:; font-src 'self' data: https://chatbot.com https:; connect-src 'self' https://chatbot.com wss://chatbot.com https: wss:; frame-src 'self' https://chatbot.com https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 2 default-src https: wss://*.hotjar.com wss://*.qualified.com; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline';frame-ancestors 'self' *.experityhealth.com; frame-src data: https:; media-src blob: data: https:; object-src 'self' blob:; worker-src blob: 'self'; child-src blob:; upgrade-insecure-requests; 2 font-src 'self'; frame-ancestors 'self' https://*.azurewebsites.net https://*.sst.dk https://*.etiskraad.dk https://*.dataetiskraad.dk https://*.videnskabsetik.dk; upgrade-insecure-requests; 2 upgrade-insecure-requests; frame-src *; 2 upgrade-insecure-requests; default-src 'self' https://cdn.plaid.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com https://www.google.com https://www.gstatic.com https://cdn.plaid.com/link/v2/stable/link-initialize.js https://platform.benefits.wexglobal.com/identityverification/v1/js/identityverificationwrapper.min.js; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com fonts.googleapis.com; font-src 'self' https://maxcdn.bootstrapcdn.com fonts.gstatic.com; media-src *; object-src 'none'; frame-src 'self' http: fast.whc.demdex.net https://cdn.plaid.com; connect-src 'self' dpm.demdex.net https://production.plaid.com https://northamerica.directline.botframework.com wss://northamerica.directline.botframework.com blob:; img-src 'self' * data:;frame-ancestors 'self';; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com use.fontawesome.com *.fbevents.js bat.bing.com *.facebook.net *.cookiebot.com *.cookiebox.ro www.listafirme.ro listafirme.ro *.gstatic.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.google.com *.google.ro *.googleadservices.com *.doubleclick.net *.youtube.com *.vimeo.com *.ytimg.com *.cloudflare.com; object-src 'self' ; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.cookiebot.com *.cookiebox.ro *.listafirme.ro *.gstatic.com *.google.com *.google.ro *.doubleclick.net *.google-analytics.com *.youtube.com *.vimeo.com *.ytimg.com *.fontawesome.com *.cloudflare.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googletagmanager.com www.googleadservices.com bat.bing.com *.cookiebot.com *.cookiebox.ro *.linkedin.com www.listafirme.ro listafirme.ro www.undelucram.ro *.gstatic.com *.google.com *.google.ro *.doubleclick.net *.google-analytics.com *.youtube.com *.vimeo.com *.ytimg.com *.cloudflare.com *.facebook.com *.facebook.net; media-src 'self'; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.cookiebot.com *.cookiebox.ro *.listafirme.ro *.google.com *.google.ro *.doubleclick.net *.google-analytics.com *.youtube.com *.youtube-nocookie.com *.vimeo.com *.ytimg.com *.facebook.com *.facebook.net; child-src 'self'; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.gts.ro *.cookiebot.com bat.bing.com *.cloudflare.com *.linkedin.com *.googlesyndication.com *.googletagmanager.com *.google.com google.com www.googleadservices.com *.google.ro *.doubleclick.net *.google-analytics.com *.youtube.com *.vimeo.com *.ytimg.com *.facebook.com *.fontawesome.com; font-src 'self' *.fontawesome.com *.cloudflare.com; 2 default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self' 2 child-src 'self'; connect-src 'self' *.google-analytics.com *.analytics.google.com https://cdn-cookieyes.com https://log.cookieyes.com https://*.hubapi.com https://*.hscollectedforms.net https://exposure.co https://*.googleapis.com https://*.hsforms.com https://directory.cookieyes.com https://static.hsappstatic.net https://enterpriseautomationws.table.core.windows.net/ https://www.google.com/ https://pagead2.googlesyndication.com/ https://ad.doubleclick.net; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com *.fontawesome.com https://*.typekit.net; frame-src 'self' https://*.careerarc.com/ https://*.googletagmanager.com/ https://*.google.com/ https://*.vimeo.com/ https://*.youtube.com https://*.office.com https://*.facebook.com https://*.hsforms.com; img-src 'self' data: https://*.google.com https://*.hubspot.com https://*.hsforms.com https://*.facebook.com https://*.accelerator.net https://*.googletagmanager.com https://*.accelerator.net https://*.gstatic.com https://cdn-cookieyes.com https://*.googleapis.com https://lh3.googleusercontent.com https://lh3.ggpht.com; manifest-src 'self' https://player.vimeo.com; media-src 'self' https://player.vimeo.com https://*.akamaized.net https://download-video-ak.vimeocdn.com/; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsadspixel.net https://*.facebook.net https://*.exposure.co https://*.googleapis.com https://*.youtube.com https://*.hsforms.net https://cdn-cookieyes.com https://cdnjs.cloudflare.com/ https://googleads.g.doubleclick.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.fontawesome.com *.typekit.net/ https://www.google.com; worker-src 'self' blob:; form-action 'self' https://*.hsforms.com https://tetratech.us14.list-manage.com https://www.facebook.com; frame-ancestors 'self'; block-all-mixed-content; upgrade-insecure-requests; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' playcanvas.com msg.playcanvas.com code.playcanvas.com relay.playcanvas.com https://js.stripe.com https://*.google.com https://*.google-analytics.com https://www.googletagmanager.com https://s3-eu-west-1.amazonaws.com; worker-src 'self' blob:; font-src https://playcanvas.com 'self' data:; 2 default-src 'self' *.mediavalet.com; object-src 'none'; base-uri 'self'; style-src 'self' 'unsafe-inline' *.googletagmanager.com *.ads-twitter.com *.adroll.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net https://fonts.googleapis.com https://cdn.jsdelivr.net; media-src 'self' mediastream: *.qualified.com *.mediavalet.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.qualified.com *.hubspotusercontent-na1.net *.mida.so *.zerobounce.net *.amplitude.com *.hsadspixel.net *.hs-analytics.net static.hsappstatic.net *.hubspot.com js.hscta.net *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com *.hubspot.net https://murf.ai https://cdn.jsdelivr.net https://www.googletagmanager.com https://js.usemessages.com https://boards.greenhouse.io https://stats.wp.com https://mediavalet.chilipiper.com https://js.hsforms.net *.adroll.com https://connect.facebook.net https://js.hs-scripts.com https://js.storylane.io https://www.google-analytics.com https://bat.bing.com https://snap.licdn.com *.ads-twitter.com https://sc.lfeeder.com https://js.zi-scripts.com https://static.hotjar.com https://s3-us-west-2.amazonaws.com https://tracking.g2crowd.com https://c.sf-syn.com https://js.qualified.com https://app.factors.ai https://js.hsadspixel.net https://js.hs-banner.com https://js.hubspot.com https://js.hs-analytics.net https://script.hotjar.com https://googleads.g.doubleclick.net https://www.youtube.com https://js.chilipiper.com blob:; img-src 'self' *.qualified.com *.hotjar.com *.hotjar.io segments.company-target.com storylane-prod-uploads.s3.us-east-2.amazonaws.com *.googleadservices.com *.adsrvr.org *.hscta.net *.google.com *.google.ca *.linkedin.com *.eyeota.net *.reson8.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hsforms.net *.hsforms.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.wp.com *.mediavalet.com *.adroll.com *.hsforms.com *.casalemedia.com *.bidswitch.net ml314.com *.tapad.com *.outbrain.com *.openx.net *.taboola.com *.pubmatic.com *.rubiconproject.com *.facebook.com *.3lift.com *.adnxs.com *.tapad.com *.rlcdn.com *.demdex.net *.media.net *.adentifi.com *.bing.com *.linksynergy.com *.adgrx.com *.tribalfusion.com data:; frame-src 'self' *.qualified.com *.facebook.com *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com murf.ai *.storylane.io *.hubspot.com *.googletagmanager.com *.cookiebot.com *.doubleclick.net *.usemessages.com *.chilipiper.com *.sf-syn.com *.greenhouse.io *.hsforms.net *.youtube.com *.hsforms.com blob:; connect-src 'self' *.qualified.com wss://*.qualified.com *.mida.so *.hsforms.net *.facebook.com *.amplitude.com *.ip-api.com *.hubapi.com *.hs-banner.com *.hscollectedforms.net js.hscta.net *.google-analytics.com *.googletagmanager.com *.hubspot.com *.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com *.wp.com *.chilipiper.com *.adroll.com *.google.ca *.google.com https://js.zi-scripts.com *.linkedin.com *.qualified.com *.factors.ai *.hotjar.io *.hotjar.com wss://ws.hotjar.com *.zoominfo.com *.googleadservices.com *.hubapi.com *.hsappstatic.net *.doubleclick.net *.chilipiper.com *.storylane.io *.g2.com; font-src 'self' *.qualified.com *.hubspot.net https://fonts.gstatic.com data:; worker-src 'self' blob:; 2 connect-src 'self' https://*.algolia.io https://*.algolia.net https://*.algolianet.com https://*.hsforms.com https://*.hsforms.net https://*.hs-scripts.com https://*.onetrust.com/ https://*.podigee-cdn.net https://cdn.cookielaw.org https://cdn.plyr.io https://consentcdn.cookiebot.com https://f.vimeocdn.com https://geolocation.onetrust.com https://noembed.com https://player.vimeo.com https://px.ads.linkedin.com https://region1.google-analytics.com https://vimeo.com https://www.google-analytics.com https://www.googletagmanager.com https://*.googleadservices.com https://google.com https://*.google.com https://*.google.com.co https://stats.g.doubleclick.net https://*.clarity.ms https://c.bing.com https://bat.bing.com https://askai.algolia.com; default-src 'self' 'unsafe-inline' http://www.w3.org https://cdn.plyr.io/3.5.10/plyr.svg https://consentcdn.cookiebot.com https://imgsct.cookiebot.com https://noembed.com https://px.ads.linkedin.com https://region1.google-analytics.com https://vimeo.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hsforms.com https://*.hsforms.net https://*.hs-scripts.com https://*.onetrust.com https://*.podigee-cdn.net https://cdn.cookielaw.org https://consent.cookiebot.com https://consentcdn.cookiebot.com https://f.vimeocdn.com https://googleads.g.doubleclick.net https://player.vimeo.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://va.vercel-scripts.com https://www.google-analytics.com/analytics.js https://www.google.com https://google.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://bat.bing.com https://*.clarity.ms https://c.bing.com https://static.hsappstatic.net https://*.hubspotusercontent-eu1.net; style-src 'self' 'unsafe-inline' https://*.podigee-cdn.net https://cdn.jsdelivr.net https://fast.fonts.net https://fonts.googleapis.com https://www.googletagmanager.com; font-src 'self' https://fast.fonts.net https://*.podigee-cdn.net https://fonts.gstatic.com; frame-src 'self' https://*.hsforms.com https://*.hsforms.net https://consentcdn.cookiebot.com https://player.podigee-cdn.net https://*.plvideo.cn https://*.podigee.io https://player.vimeo.com https://td.doubleclick.net/ https://www.google.com https://google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com https://open.spotify.com/ https://xperience.koerber.com; img-src 'self' data: http://www.w3.org https://*.hsforms.com https://*.hsforms.net https://*.hs-scripts.com https://*.onetrust.com/ https://cdn.cookielaw.org https://i.vimeocdn.com https://i.ytimg.com https://imgsct.cookiebot.com https://px.ads.linkedin.com https://www.google-analytics.com https://www.googletagmanager.com https://*.gstatic.com https://bat.bing.com https://*.google.com https://*.google.com.co https://stats.g.doubleclick.net https://*.clarity.ms https://c.bing.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://service.koerber-pharma.com; object-src 'self'; frame-ancestors https://app.kontent.ai https://google.com/ 2 base-uri 'self'; child-src 'self'; connect-src 'self' https://*.aptrinsic.com https://*.azure.com https://*.bing.com https://*.bing.net https://*.clarity.ms https://*.cookiebot.eu/ https://*.forsvarsmakten.se https://*.google-analytics.com https://*.optimizely.com https://analytics.google.com https://api.segment.io https://cdn.segment.com https://googleads.g.doubleclick.net https://js.userflow.com https://pagead2.googlesyndication.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.se https://www.googleadservices.com https://www.googletagmanager.com https://www.youtube-nocookie.com wss://e.userflow.com; font-src 'self' data: https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://*.cookiebot.eu/ https://*.episerver.net https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com; img-src 'self' data: https://*.bing.com https://*.bing.net https://*.clarity.ms https://*.google-analytics.com https://*.optimizely.com https://*.usercentrics.eu https://*.ytimg.com https://collector.ontame.io https://fonts.gstatic.com https://googleads.g.doubleclick.net https://js.userflow.com https://optimizely-public-design-assets.s3.amazonaws.com https://www.google.com https://www.google.se https://www.googleadservices.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self' https://*.forsvarsmakten.se; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.aptrinsic.com https://*.azure.com https://*.bing.com https://*.bing.net https://*.clarity.ms https://*.cookiebot.eu/ https://*.forsvarsmakten.se https://*.optimizely.com https://consent.cookiebot.eu https://dmcqaqmkk1tj3.cloudfront.net https://googleads.g.doubleclick.net https://js.userflow.com https://s2.adform.net https://track.adform.net https://www.clarity.ms/tag/uet/97009069 https://www.googletagmanager.com https://www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.aptrinsic.com https://*.cookiebot.eu/ https://cdn.userflow.com https://fonts.googleapis.com https://js.userflow.com; style-src 'self' 'unsafe-inline'; default-src 'none'; report-to stott-security-endpoint; 2 default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: googletagmanager.com tagmanager.google.com *.googletagmanager.com www.googleadservices.com www.google.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.episerver.net zefzhat.appspot.com *.hotjar.com *.hotjar.io *.google-analytics.com analytics.google.com code.jquery.com az416426.vo.msecnd.net dc.services.visualstudio.com netdna.bootstrapcdn.com pi.pardot.com syndication.twitter.com sjs.bizographics.com connect.facebook.net stats.livezhat.com *.ads.linkedin.com www.linkedin.com s.ytimg.com *.googleapis.com googleapis.com api.siteattention.com cdn.syndication.twimg.com flockler.com embed-cdn.flockler.com static.flockler.com fl-cdn.scdn1.secure.raxcdn.com cdn.datatables.net *.licdn.com www.youtube.com gateway.zscloud.net viewer.blipstar.com static.handpickedcherries.com maxcdn.bootstrapcdn.com rules.quantcount.com secure.quantserve.com apps.myzef.com tools.eurolandir.com webcc.sonera.fi stackpath.bootstrapcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com api.ipify.org munchkin.marketo.net eu1.snoobi.com ethn.io siteimproveanalytics.com www.gstatic.com *.giosgusercontent.com optimize.google.com *.lfeeder.com *.leadfeeder.com code.createjs.com *.vimeo.com go.upmspecialtypapers.com go.upmspecialtymaterials.com upm.leadfamly.com hm.baidu.com *.giosg.com t.lianacem.com static.ws.apsis.one static.ws-apac.apsis.one s3.amazonaws.com/beacon.pmmimediagroup.com/ static.ads-twitter.com js.monitor.azure.com ccchat-fi.telia.ee fonts.gstatic.com analytics.google.com bugcrowd.com assets.bugcrowdusercontent.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; font-src 'self' data: fonts.gstatic.com storage.googleapis.com netdna.bootstrapcdn.com i.s-microsoft.com upmapi.portal.azure-api.net *.hotjar.com *.hotjar.io css.zohostatic.com cdnjs.cloudflare.com use.fontawesome.com *.giosg.com *.giosgusercontent.com googleapis.com ccchat-fi.telia.ee *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; img-src 'self' data: blob: about: googletagmanager.com ssl.gstatic.com www.gstatic.com *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk *.google.fi *.google.dk *.google.de *.google.at *.google.pl *.google.ru *.google.se *.google.it www.googletagmanager.com www.google.com pagead2.googlesyndication.com www.googleadservices.com google.com www.google.co.uk www.google.fi www.google.dk www.google.de www.google.at www.google.pl www.google.ru www.google.se www.google.it livezhat.zef.fi *.hotjar.com *.hotjar.io *.analytics.google.com www.upmbiofore.fi pbs.twimg.com secure.adnxs.com www.upmbiofore.com *.googleapis.com googleapis.com maps.gstatic.com fonts.gstatic.com www.facebook.com static.flockler.com flockler.com hm.baidu.com img.youtube.com cdn.datatables.net s3.amazonaws.com hugin.info graph.facebook.com scontent.xx.fbcdn.net pixel.quantserve.com i.ytimg.com *.episerver.net cdn2.siteattention.com amplifypixel.outbrain.com *.ads.linkedin.com ad.doubleclick.net adservice.google.com.hk www.linkedin.com 6049499.global.siteimproveanalytics.io assets.upm.com eu1.snoobi.com ml-eu.globenewswire.com mb.cision.com gateway.zscloud.net *.lfeeder.com *.leadfeeder.com go.upmspecialtypapers.com go.upmspecialtymaterials.com p.adsymptotic.com upm.leadfamly.com *.fbcdn.net *.flockler.com scontent.cdninstagram.com *.giosgusercontent.com *.giosg.com analytics.twitter.com t.co ccchat-fi.telia.ee *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk *.google.fi *.google.dk *.google.de *.google.at *.google.pl *.google.ru *.google.se *.google.it pagead2.googlesyndication.com www.googleadservices.com www.google.com google.com www.google.co.uk www.google.fi www.google.dk www.google.de www.google.at www.google.pl www.google.ru www.google.se www.google.it *.hotjar.com *.hotjar.io www.upmbiofore.com dc.services.visualstudio.com api.siteattention.com upm-prod.taiste.fi translate.googleapis.com hm.baidu.com api.mapbox.com a.tiles.mapbox.com b.tiles.mapbox.com wss://*.hotjar.com restdev.siteattention.com *.mktoresp.com events.mapbox.com *.facebook.com *.giosgusercontent.com *.giosg.com prospector.pmmimediagroup.com audience.ws.apsis.one t.lianacem.com googleapis.com maps.googleapis.com cdn.linkedin.oribi.io analytics.twitter.com wss://ccchat-fi.telia.ee ccchat-fi.telia.ee px.ads.linkedin.com wss://www.upm.com t.lianacem.com px.ads.linkedin.com *.monitor.azure.com ixfd2-api.bc0a.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com googletagmanager.com tagmanager.google.com fonts.googleapis.com livezhat.zef.fi netdna.bootstrapcdn.com static.flockler.com googleapis.com maxcdn.bootstrapcdn.com translate.googleapis.com cdnjs.cloudflare.com *.episerver.net use.fontawesome.com stackpath.bootstrapcdn.com cdn.jsdelivr.net cdn.datatables.net optimize.google.com *.giosg.com *.giosgusercontent.com ccchat-fi.telia.ee *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; frame-src 'self' data: www.googletagmanager.com *.doubleclick.net www.facebook.com connect.facebook.net www.google.com go.pardot.com www.youtube.com *.hotjar.com *.hotjar.io www.ciuvo.com viewer.blipstar.com apps.myzef.com gamma.euroland.com tools.euroland.com tagmanager.google.com pr.globenewswire.com *.youku.com *.vimeo.com *.metsasoppi.com *.arbonaut.com optimize.google.com ethn.io web.microsoftstream.com *.giosgusercontent.com *.giosg.com go.upmspecialtypapers.com go.upmspecialtymaterials.com open.spotify.com upm.leadfamly.com form.apsis.one player.simplecast.com v.qq.com selectscience.net googleapis.com tools.eurolandir.com w.soundcloud.com bugcrowd.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; frame-ancestors 'self' *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; media-src 'self' *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmspecialtymaterials.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live *.beyondspot.com *.globalnotes.com *.printinform.com; upgrade-insecure-requests; report-uri https://upmcms.report-uri.com/r/d/csp/enforce 2 frame-ancestors 'self' https://www.mibaby.de/ https://jupiter.kk.lan/ 2 frame-ancestors 'self' *.kassel.de *.stadtreiniger.de *.stadt-kassel.de *.kasselkultur2022.de www-kassel-de.translate.goog 2 default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' blob: https://corp.sertifi.com https://campaigns.sertifi.com https://sertifi.chilipiper.com https://js.chilipiper.com https://api.chilipiper.com https://apps.chilipiper.com https://fire.chilipiper.com https://j.6sc.co https://s3-us-west-2.amazonaws.com https://b-code.liadm.com https://js.zi-scripts.com https://widget.surveymonkey.com https://ajax.googleapis.com https://anjt6a9l0k.execute-api.us-west-1.amazonaws.com https://app.jazz.co https://cdn.dreamdata.cloud https://cdn.jsdelivr.net https://connect.facebook.net https://diffuser-cdn.app-us1.com https://dyv6f9ner1ir9.cloudfront.net https://embed.typeform.com https://cdn-asset.optimonk.com https://front.optimonk.com https://googleads.g.doubleclick.net https://gs-cdn.optimonk.com https://js.intercomcdn.com https://kit.fontawesome.com https://l0w6hlar9j.execute-api.us-west-1.amazonaws.com https://onsite.optimonk.com https://onsite2.optimonk.com https://player.vimeo.com https://prism.app-us1.com https://script.hotjar.com https://sertifi.activehosted.com https://snap.licdn.com https://static.cloudflareinsights.com https://static.hotjar.com https://trackcmp.net https://app.intercom.io https://widget.intercom.io https://*.intercom-messenger.com https://www.googleadservices.com https://www.googletagmanager.com https://www.redditstatic.com; style-src 'report-sample' 'self' 'unsafe-inline' https://cdn-asset.optimonk.com https://cdn.jsdelivr.net https://embed.typeform.com https://fonts.bunny.net https://fonts.googleapis.com https://l0w6hlar9j.execute-api.us-west-1.amazonaws.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://www.google.com https://c.6sc.co https://ipv6.6sc.co https://epsilon.6sense.com https://pro.ip-api.com https://alocdn.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://stats.g.doubleclick.net https://analytics.google.com https://ws.zoominfo.com https://js.zi-scripts.com https://tracking.chilipiper.com https://sertifi.chilipiper.com https://js.chilipiper.com https://api.chilipiper.com https://apps.chilipiper.com https://fire.chilipiper.com https://api-iam.intercom.io https://api.intercom.io https://via.intercom.io https://api-ping.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://api.typeform.com https://cdn-limit.optimonk.com https://cdn-account.optimonk.com https://cdn-renderer.optimonk.com https://cdn-content.optimonk.com https://cdn.dreamdata.cloud https://content.hotjar.io https://vc.hotjar.io https://front.optimonk.com https://jfapiprod.optimonk.com https://metrics.hotjar.io https://pixel-config.reddit.com https://ka-p.fontawesome.com https://kit.fontawesome.com https://px.ads.linkedin.com https://www.google-analytics.com https://www.redditstatic.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io wss://ws.hotjar.com; font-src 'self' data: https://cdn-custom.optimonk.com https://fonts.bunny.net https://fonts.gstatic.com https://fonts.intercomcdn.com https://js.intercomcdn.com https://ka-p.fontawesome.com; frame-src 'self' https://sertifi.chilipiper.com https://js.chilipiper.com https://api.chilipiper.com https://apps.chilipiper.com https://fire.chilipiper.com https://www.googletagmanager.com https://www.tfaforms.com https://www.typeform.com https://www.surveymonkey.com https://sertifi818.outgrow.us https://form.typeform.com https://player.vimeo.com https://td.doubleclick.net https://www.youtube.com https://*.intercom-messenger.com https://intercom-sheets.com https://www.intercom-reporting.com https://fast.wistia.net; form-action 'self' https://intercom.help https://api-iam.intercom.io; img-src 'self' data: blob: https://testsertifiumbstorage.blob.core.windows.net https://prodsertifiumbstorage.blob.core.windows.net https://sertifi.chilipiper.com https://b.6sc.co https://js.chilipiper.com https://api.chilipiper.com https://apps.chilipiper.com https://fire.chilipiper.com https://prod.smassets.net https://www.facebook.com https://alb.reddit.com https://app.jazz.co https://googleads.g.doubleclick.net https://i.vimeocdn.com https://i.ytimg.com https://js.intercomcdn.com https://*.intercom-messenger.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://px.ads.linkedin.com https://static.intercomassets.com https://ucarecdn.com https://www.google.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self' https://corp.sertifi.com https://js.intercomcdn.com https://downloads.intercomcdn.com; worker-src https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; 2 default-src 'self'; connect-src 'self' *.readspeaker.com https://www.piwik.bayern.de/ wss://*.assistent.bayern.de/chat/widget/ https://eu-api.friendlycaptcha.eu/api/v1/puzzle; manifest-src 'self'; img-src 'self' data: https://*.assistent.bayern.de/bot-media/ https://*.assistent.bayern.de/static/ https://i.ytimg.com/; font-src 'self' data: https://*.assistent.bayern.de/static/; frame-src *.readspeaker.com *.bayern.de https://www.youtube-nocookie.com/ https://www.youtube.com/; media-src 'self' *.readspeaker.com; prefetch-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'wasm-unsafe-eval' 'self' https://www.piwik.bayern.de/piwik/piwik.js *.bayern.de https://*.assistent.bayern.de/static/; worker-src blob:; child-src blob: 2 default-src 'self' https://*.wpenginepowered.com *.wpengine.com *.pleg.es https://*.indragroup-usa.com https://indragroup-usa.com https://*.indragroup.com https://*.indramind.com https://*.minsait.com; connect-src 'self' https://*.pleg.es https://*.wpenginepowered.com *.wpengine.com *.minsait.com *.indracompany.com *.pardot.com https://www.googletagmanager.com *.google-analytics.com https://ipinfo.io *.ads.linkedin.com https://www.google.com https://vimeo.com https://www.youtube-nocookie.com https://www.youtube.com *.indragroup-usa.com https://*.indragroup.com https://*.indramind.com *.tiktok.com https://www.google.es/pagead/ *.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com/pagead/ *.linkedin.com *.licdn.com https://*.tiktokw.us *.google.com; script-src 'self' 'nonce-1c7df881-95f2-4c8f-b700-953364d950d9' 'strict-dynamic' *.euroland.com *.eurolandir.com *.minsait.com *.indracompany.com *.pardot.com https://www.googletagmanager.com *.google-analytics.com https://www.google.com https://www.gstatic.com *.ytimg.com https://s.ytimg.com https://www.youtube-nocookie.com https://www.youtube.com https://vimeo.com https://player.vimeo.com *.indragroup-usa.com https://indragroup-usa.com https://*.indragroup.com https://*.indramind.com *.ads.linkedin.com 'sha256-iIbftgfswFi0DpsAn51uA7pBFF9rAf5YHXncIlmwI/k='; style-src 'self' 'unsafe-inline' *.ytimg.com; img-src 'self' data: https://*.pleg.es *.wpengine.com https://*.wpenginepowered.com https://www.googletagmanager.com *.google-analytics.com *.minsait.com *.indracompany.com *.pardot.com *.ads.linkedin.com *.ytimg.com https://i.vimeocdn.com *.doubleclick.net https://googleads.g.doubleclick.net https://*.indragroup-usa.com https://indragroup-usa.com https://*.indragroup.com https://*.indramind.com *.google.com *.googleadservices.com *.google.es; font-src 'self' https://fonts.gstatic.com; frame-src *.euroland.com *.eurolandir.com https://www.google.com https://player.vimeo.com https://www.youtube-nocookie.com https://www.googletagmanager.com/ https://www.youtube.com https://*.indragroup-usa.com https://indragroup-usa.com https://*.indragroup.com https://*.indramind.com; frame-ancestors 'self'; object-src 'none'; block-all-mixed-content; upgrade-insecure-requests 2 default-src 'self'; img-src 'self' data: www.uniarts.fi https://imgsct.cookiebot.com customer.cludo.com opiskelija.uniarts.fi www.facebook.com *.gravatar.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.googleapis.com googleads.g.doubleclick.net *.google.com *.google.fi *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com secure.adnxs.com *.usercentrics.eu dev.visualwebsiteoptimizer.com *.global.siteimproveanalytics.io *.ytimg.com s.w.org; font-src 'self' data: cdn.askem.com fonts.gstatic.com *.sharepointonline.com; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' consentcdn.cookiebot.com consent.cookiebot.com customer.cludo.com connect.facebook.net cdn.askem.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com tagmanager.google.com *.google-analytics.com ssl.google-analytics.com *.googleapis.com www.googleadservices.com googleads.g.doubleclick.net www.google.com app.usercentrics.eu dev.visualwebsiteoptimizer.com siteimproveanalytics.com www.youtube.com; style-src 'self' 'unsafe-inline' customer.cludo.com cdn.askem.com googletagmanager.com tagmanager.google.com fonts.googleapis.com *.googleapis.com; frame-src 'self' consentcdn.cookiebot.com consent.cookiebot.com *.google.com www.recaptcha.google.com/recaptcha/ *.googletagmanager.com bid.g.doubleclick.net td.doubleclick.net *.fls.doubleclick.net app.usercentrics.eu www.youtube.com youtu.be blob:; object-src 'none'; media-src 'self' www.youtube.com youtu.be blob:; connect-src 'self' consentcdn.cookiebot.com api.cludo.com www.facebook.com feedback.askem.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.googleapis.com *.googlesyndication.com *.g.doubleclick.net www.googleadservices.com www.google.fi *.usercentrics.eu; 2 frame-ancestors 'self' https://register.sch.gr; 2 script-src-elem *.amazonaws.com *.clarity.ms *.google.com *.googleadservices.com *.hubspotusercontent-eu1.net *.kapa.ai *.recaptcha.net *.visitorqueue.com https://*.cookiebot.com/ https://*.cookiebot.eu https://*.doubleclick.net/ https://*.formstack.io/ https://*.hotjar.com/ https://*.hsadspixel.net/ https://*.hs-analytics.net/ https://*.hs-banner.com/ https://*.hscta.net/ https://*.hsforms.net/ https://*.hs-scripts.com/ https://*.hubspot.com/ https://*.leadinfo.net/ https://*.marketingautomation.services/ https://*.usemessages.com/ https://connect.facebook.net/ https://recaptcha.net/ https://snap.licdn.com https://static.hsappstatic.net https://unpkg.com https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ 'self' 'unsafe-inline';script-src *.amazonaws.com *.buckaroo.io *.google.com *.hubspotusercontent-eu1.net *.recaptcha.net *.visitorqueue.com https://*.cookiebot.com/ https://*.doubleclick.net/ https://*.formstack.io/ https://*.hsadspixel.net/ https://*.hs-banner.com/ https://*.hsforms.net/ https://*.hs-scripts.com/ https://*.hubspot.com/ https://recaptcha.net/ https://static.hsappstatic.net https://www.googletagmanager.com/ https://www.gstatic.com/ 'self' 'unsafe-eval' 'unsafe-inline';img-src *.bing.com *.buckaroo.io *.clarity.ms *.google.com *.googleadservices.com *.googlesyndication.com *.gstatic.com *.vimeocdn.com data: https://*.cookiebot.com/ https://*.doubleclick.net/ https://*.formstack.io/ https://*.hsforms.com https://*.hubspot.com/ https://*.usercentrics.eu/ https://i.ytimg.com/ https://px.ads.linkedin.com https://via.placeholder.com/ https://www.facebook.com/ https://www.google.nl https://www.google-analytics.com/ https://www.googletagmanager.com/ 'self';connect-src *.clarity.ms *.google.com *.googleadservices.com *.googlesyndication.com *.kapa.ai https://*.cookiebot.com/ https://*.cookiebot.eu https://*.doubleclick.net/ https://*.formstack.io/ https://*.google-analytics.com https://*.hsforms.com https://*.hubapi.com https://*.hubspot.com/ https://*.leadinfo.com/ https://*.leadinfo.net/ https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app/ https://lottie.host https://px.ads.linkedin.com https://static.hsappstatic.net https://www.facebook.com/ https://www.google.nl 'self';frame-src *.google.com *.hsforms.net https://*.cookiebot.com/ https://*.cookiebot.eu https://*.doubleclick.net/ https://*.hsforms.com https://*.hubspot.com/ https://new10.com/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://www.youtube.com/ 'self';media-src *.vimeocdn.com https://player.vimeo.com/ 'self';style-src *.visitorqueue.com https://*.formstack.io/ https://fonts.googleapis.com/ 'self' 'unsafe-inline';font-src data: https://designlibrary.tres.nl/ https://fonts.gstatic.com/ 'self';base-uri 'self';default-src 'self';manifest-src 'self';report-uri https://buckaroo.report-uri.com/r/t/csp/reportOnly 2 frame-ancestors 'self' *.realtor.com *.realtor.com:* http://*.realtor.com:* *.moveaws.com *.moveaws.com:* localhost:* http://localhost:* 2 frame-ancestors 'self' https://codepen.io https://cdpn.io https://qatarairways.com https://qatarairways.com.qa https://*.qatarairways.com https://*.qatarairways.com.qa https://www.katara.net https://genevamotorshow.com https://*.discoverqatar.qa https://discoverqatar.qa https://dq-staging-b2b.vibe.travel https://dq-staging-b2c.vibe.travel https://*.qf.org.qa https://staging-czg5cuhcbfd4a7fc.z01.azurefd.net https://educationcity.qa https://mappdev.educationcity.qa https://*.decc.qa https://www.the-afc.com https://www.katarahospitality.com https://qnb.com https://pp26-doha.gov.qa 2 frame-ancestors 'self' https://stat01.opsanalytics.ch https://content.opsone.ch; 2 default-src * data: blob: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' px.ads.linkedin.com *.ads.linkedin.com *.cookiebot.com *.facebook.com *.facebook.net *.g.doubleclick.net *.gigya.com *.go-mpulse.net *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.ivoclar.com *.ivoclarvivadent.com *.ownid.com *.pardot.com *.purechat.com *.purechatcdn.com *.vimeo.com *.youtube.com api.ipify.org cdn.fusedeck.net challenges.cloudflare.com g.doubleclick.net io.fusedeck.net js.hsforms.net script.hotjar.com service.excentos.com snap.licdn.com static.hotjar.com www.eventbrite.com www.googletagmanager.com www.linkedin.com yastatic.net *.stackadapt.com qvdt3feo.com tags.srv.stackadapt.com *.hsforms.com px.ads.linkedin.com i.vimeocdn.com f.vimeocdn.com googleads.g.doubleclick.net iytimg.com *.clarity.ms *.qualtrics.com fd.ivoclar.com server.fillout.com cdn.matomo.cloud;img-src 'self' data: px.ads.linkedin.com cdn.jsdelivr.net *.ivoclar.com *.ivoclarvivadent.com *.gigya.com *.google.com google.com *.google.at *.gstatic.com *.googleapis.com *.google-analytics.com *.purechat.com *.purechatcdn.com *.googleapis.com *.facebook.net *.facebook.com *.google-analytics.com *.pardot.com *.google.co.uk *.g.doubleclick.net g.doubleclick.net *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.youtube.com *.ads.linkedin.com *.vimeo.com *.excentos.com excentos.com *.google.com.sa google.com.sa *.google.de google.de cdn01.basis.net *.stackadapt.com qvdt3feo.com tags.srv.stackadapt.com *.hsforms.com px.ads.linkedin.com i.vimeocdn.com f.vimeocdn.com googleads.g.doubleclick.net yastatic.net iytimg.com *.cookiebot.com *.clarity.ms *.siteintercept.qualtrics.com fd.ivoclar.com;style-src 'self' data: blob: 'unsafe-inline' px.ads.linkedin.com cdn.jsdelivr.net *.google.com *.googleapis.com *.ivoclarvivadent.com *.ivoclar.com *.google.co.uk *.g.doubleclick.net g.doubleclick.net *.googleadservices.com *.googlesyndication.com cdn.fusedeck.net *.youtube.com *.vimeo.com *.excentos.com cdn01.basis.net tags.srv.stackadapt.com www.google.co.th *.hsforms.com px.ads.linkedin.com i.vimeocdn.com f.vimeocdn.com googleads.g.doubleclick.net yastatic.net iytimg.com *.clarity.ms *.siteintercept.qualtrics.com fd.ivoclar.com;object-src 'self';upgrade-insecure-requests ;frame-ancestors 'self' data: px.ads.linkedin.com *.google.com *.gstatic.com *.googletagmanager.com *.youtube.com *.gigya.com *.cookiebot.com *.purechat.com *.purechatcdn.com *.googleapis.com *.google-analytics.com *.go-mpulse.net *.ivoclarvivadent.com *.ivoclar.com *.vimeo.com challenges.cloudflare.com *.clarity.ms *.siteintercept.qualtrics.com fd.ivoclar.com;connect-src 'self' wss: https:;default-src https: mailto:;base-uri 'self';form-action 'self' https:; 2 default-src 'self'; media-src 'self' b.peatio.com assets.peatio.com assets.big.zone static.big.zone static.peatio.com static.zdassets.com data: blob:; img-src 'self' b.peatio.com assets.peatio.com assets.big.zone static.big.zone static.peatio.com mixin-images.zeromesh.net images.mixin.one storage.googleapis.com static.geetest.com static.geevisit.com v2assets.zopim.io bigone.zendesk.com static.zdassets.com www.google-analytics.com fourier.alibaba.com blob: data: https://assets.coingecko.com/coins/images/ https://s3.bmp.ovh/imgs/ https://parachains.info/images/ https://otc-assets.peatio.com https://storage.googleapis.com/bigotc/ https://polymarket-upload.s3.us-east-2.amazonaws.com; font-src 'self' b.peatio.com at.alicdn.com data:; frame-ancestors 'self'; frame-src 'self' bridge-loaded.b1.run bigone-queue-message.b1.run www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ www.recaptcha.net/recaptcha/ recaptcha.net/recaptcha/; style-src 'self' 'unsafe-inline' static.big.zone static.peatio.com assets.peatio.com b.peatio.com static.geetest.com static.geevisit.com; script-src 'self' static.big.zone assets.peatio.com static.peatio.com b.peatio.com storage.googleapis.com www.googletagmanager.com www.google-analytics.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.gstatic.cn/recaptcha/ www.recaptcha.net/recaptcha/ recaptcha.net/recaptcha/ static.zdassets.com static.geetest.com static.geevisit.com gcaptcha4.geetest.com gcaptcha4.geevisit.com s.go-mpulse.net s2.go-mpulse.net go-mpulse.net www.datadoghq-browser-agent.com g.alicdn.com/AWSC/ retcode.alicdn.com widget-mediator.zopim.com cf.aliyun.com/nocaptcha/ ynuf.aliapp.org/w/ 8ldr8y.tdum.alibaba.com; script-src-elem 'self' static.big.zone assets.peatio.com static.peatio.com b.peatio.com storage.googleapis.com www.googletagmanager.com www.google-analytics.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.gstatic.cn/recaptcha/ www.recaptcha.net/recaptcha/ recaptcha.net/recaptcha/ static.zdassets.com static.geetest.com static.geevisit.com gcaptcha4.geetest.com gcaptcha4.geevisit.com s.go-mpulse.net s2.go-mpulse.net go-mpulse.net www.datadoghq-browser-agent.com g.alicdn.com/AWSC/ retcode.alicdn.com widget-mediator.zopim.com cf.aliyun.com/nocaptcha/ ynuf.aliapp.org/w/ 8ldr8y.tdum.alibaba.com; script-src-attr 'none'; connect-src 'self' bigone.com big.one h5.bigone138.com h5.bigonemobi.com info.big.one info.bigone.com info.b1.zone info.big.zone outerlands.b1.zone mixin-api.zeromesh.net api.mixin.one c.go-mpulse.net browser-intake-datadoghq.com session-replay.browser-intake-datadoghq.com rum.browser-intake-datadoghq.com monitor.geetest.com gcaptcha4.geetest.com gcaptcha4.geevisit.com yumchina.geetest.com www.google-analytics.com ekr.zdassets.com bigone.zendesk.com widget-mediator.zopim.com wss://widget-mediator.zopim.com api.blockchair.com/bitcoin/stats www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ www.recaptcha.net/recaptcha/ recaptcha.net/recaptcha/ www.googletagmanager.com https://api.qiniu.com https://uplog.qbox.me https://upload-z2.qiniup.com https://otc-assets.peatio.com https://storage.googleapis.com/bigotc/; form-action 'self' https://account.volet.com; 2 frame-ancestors 'self' *.humacom.com *.iofbonehealth.org *.osteoporosis.foundation 2 frame-ancestors 'self' https://hackathon.guvi.in 2 worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://embed.cloudflarestream.com *.google.com *.googleapis.com *.googlesyndication.com *.2mdn.net *.gstatic.com *.twitter.com *.reddit.com *.googletagmanager.com *.stripe.com *.hscollectedforms.net *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.hubspot.com *.hscollectedforms.net *.hsforms.net *.hsforms.com *.vimeo.com *.hs-scripts.com *.sentry.io *.freshworks.com embed.cloudflarestream.com *.target-video.com *.brid.tv js-agent.newrelic.com *.nr-data.net https://src.litix.io/core/4/mux.js cdn.jsdelivr.net https://www.youtube.com *.b-cdn.net *.r-cdn.net; frame-src 'self' localhost *.realms.tv youtube.com *.youtube.com twitch.tv *.twitch.tv vimeo.com *.vimeo.com facebook.com *.facebook.com transistor.fm *.transistor.fm apple.com *.apple.com spotify.com *.spotify.com rumble.com *.rumble.com 1a-1791.com *.1a-1791.com *.cloudflarestream.com *.soundslice.com *.target-video.com target-video.com *.google.com *.stripe.com *.x.com *.twitter.com *.reddit.com *.hs-sites.com *.hubspot.com *.hsforms.net *.hsforms.com *.freshdesk.com *.googleapis.com rtmp://rtmp.realms.tv *.audent.ai https://www.youtube-nocookie.com/ https://www.youtube.com *.b-cdn.net *.r-cdn.net; frame-ancestors 'self' popdaze.com; img-src * data: blob: *.b-cdn.net *.r-cdn.net; 2 default-src 'self';style-src 'self' 'unsafe-eval' 'unsafe-inline' *.usercentrics.eu www.dachser.com translate.googleapis.com;object-src 'self';base-uri 'self';font-src 'self' data: fonts.gstatic.com github.com player.podigee-cdn.net pouch-global-font-assets.s3.eu-central-1.amazonaws.com static3.avast.com;frame-src 'self' dachser-warehouse.atrivio.net app.usercentrics.eu veronline.me players.brightcove.net player.podigee-cdn.net players.brightcove.net dachser-warehousekapazitaeten.atrivio.net;img-src 'self' data: https://px.ads.linkedin.com *.usercentrics.eu *.dachser.ch cf-images.eu-west-1.prod.boltdns.net metrics.brightcove.com app.usercentrics.eu www.dachser.com www.gstatic.com translate.google.com images.podigee-cdn.net www.dachser.com.tr www.etracker.de webtr.dachser.com www.facebook.com;manifest-src 'self';media-src blob: 'self';worker-src blob: ;connect-src mailto: 'self' www.dachser.com maps.googleapis.com bcboltbde696aa-a.akamaihd.net manifest.prod.boltdns.net edge.api.brightcove.com *.usercentrics.eu www.etracker.de webtr.dachser.com dachser-locations.atrivio.net www.google-analytics.com www.googletagmanager.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' webtr.dachser.com code.etracker.com app.usercentrics.eu edge.api.brightcove.com vjs.zencdn.net api.signalize.com players.brightcove.net maps.googleapis.com www.dachser.com 3001.scriptcdn.net s3-us-west-2.amazonaws.com s3.amazonaws.com www.google-analytics.com www.googletagmanager.com www.pagespeed-mod.com 2508t.dsp7c.com connect.facebook.net maps.googleapis.com www.dachser.com www.etracker.de webtr.dachser.com https://code.etracker.com/t.js https://dmr-notification.atrivio.net/js/main.js https://maps.googleapis.com/maps/api/js https://static.etracker.com/code/e.js https://www.etracker.de/cntcc;script-src-attr 'self' 'unsafe-inline';script-src-elem 'self' 'unsafe-inline' https://snap.licdn.com webtr.dachser.com www.googletagmanager.com edge.api.brightcove.com vjs.zencdn.net api.signalize.com players.brightcove.net app.usercentrics.eu cdn.podigee.com player.podigee-cdn.net maps.googleapis.com najiwu.xeyutezepo.com www.dachser.com dmr-notification.atrivio.net static.etracker.com www.etracker.de data1.pamurt.com bopati.xuyobidexe-vipopucec.com code.etracker.com data1.scopich.com images.podigee-cdn.net www.dachser.com.tr www.etracker.de www.facebook.com www.gstatic.com;style-src-attr 'self' 'unsafe-inline';style-src-elem 'self' 'unsafe-inline' webtr.dachser.com code.etracker.com player.podigee-cdn.net www.dachser.com cdn.podigee.com; report-uri https://atrivio.report-uri.com/r/d/csp/reportOnly https://atrivio.report-uri.com/r/d/csp/wizard; 2 default-src 'self' ka-p.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: mkta.bbbell.it *.google.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.gstatic.com connect.facebook.net *.doubleclick.net *.linkedin.com *.licdn.com *.criteo.com *.criteo.net kit.fontawesome.com consent.cookiebot.eu consentcdn.cookiebot.eu; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com; img-src 'self' data: *.google.com *.gwallet.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.it *.googletagmanager.com *.doubleclick.net hicmobile.go2cloud.org track.hicmobile.com www.facebook.com imgsct.cookiebot.com ciphercoin.com img.sct.eu1.usercentrics.eu; frame-src 'self' *.google.com *.googletagmanager.com *.youtube.com *.doubleclick.net *.amazon-adsystem.com *.elegantthemes.com *.yousign.com *.criteo.com www.facebook.com consentcdn.cookiebot.eu app.powerbi.com sst.bbbell.it; font-src 'self' data: fonts.gstatic.com ka-p.fontawesome.com; connect-src 'self' sst.bbbell.it mkta.bbbell.it *.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com ka-p.fontawesome.com www.facebook.com connect.facebook.net googleads.g.doubleclick.net *.doubleclick.net consentcdn.cookiebot.eu; 2 default-src 'self'; script-src 'self'; script-src-elem 'self'; script-src-attr 'self'; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-src 'self'; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; form-action 'self' metager.org metager.de 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com cdnjs.cloudflare.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: https:; connect-src 'self' dpm.demdex.net; frame-src 'self' newsquestdigital.demdex.net https://player.vimeo.com; 2 frame-ancestors 'self' https://go.app.rhenus.com https://rheo.app.rhenus.com https://jobcloud.ch https://www.jobcloud.ch https://jobs.ch https://www.jobs.ch https://jobup.ch https://www.jobup.ch https://ingjobs.ch https://ictcareer.ch https://jobs4sales.ch https://financejobs.ch https://medtalents.ch https://jobwinner.ch https://alpha.ch https://topjobs.ch https://www.jobscout24.ch https://jobscout24.ch https://impieghi.ch https://www.impieghi.ch https://www.stellenmarkt.ch https://stellenmarkt.ch https://www.jobbasel.ch https://www.jobbern.ch https://www.jobmittelland.ch https://www.myjob.ch https://www.ostjob.ch https://www.zentraljob.ch https://www.rhenus.com https://rhenus.com https://www.rhenus-truckerjobs.com https://www.lager-mitarbeiter.de 2 child-src 'self' https://survey.jam-software.com;frame-src https://www.googletagmanager.com https://jam-software-gmbh.jobs.personio.de; base-uri 'self';font-src 'self';form-action 'self' https://survey.jam-software.com https://customers.jam-software.de;frame-ancestors 'self' *.jam-software.de *.jam-software.com ;img-src *.jam-software.com 'self' www.googletagmanager.com https://www.google.com https://www.google.de https://ja.jam-software.com https://www.jam-software.de https://www.jam-software.com https://customers.jam-software.de https://manuals.jam-software.de https://manuals.jam-software.com https://survey.jam-software.com media.jam-software.com;media-src 'self' media.jam-software.com https://survey.jam-software.com;style-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.apollo.io https://matomo.jam-software.de https://matomo.jam-software.com https://www.googletagmanager.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://survey.jam-software.com; 2 connect-src 'self' mc.yandex.ru wss://mc.yandex.com wss://vi-sber1-26.jivo.ru mc.yandex.com uaas.yandex.ru abt.s3.yandex.net api-maps.yandex.ru log.api-maps.yandex.ru yastatic.net maps.yastatic.net yandex.ru core-renderer-tiles.maps.yandex.ru mod.calltouch.ru static.calltouch.ru ws.calltouch.ru ab-ct.ru code.jivo.ru node-sber1-az3-21.jivo.ru vi-sber1-26.jivo.ru telemetry.jivo.ru telemetry.jivosite.com top-fwz1.mail.ru privacy-cs.mail.ru dzen.ru static.dzeninfra.ru avatars.dzeninfra.ru cdn.jsdelivr.net api.searchbooster.net cdn.searchbooster.io cdn2.searchbooster.net wss://ws.calltouch.ru api4.searchbooster.io; 2 frame-ancestors https://*.realitykings.com 2 base-uri 'self'; frame-ancestors 'self' https://betterstack.com https://uptime.betterstack.com https://telemetry.betterstack.com https://direct.betterstack.com https://errors.betterstack.com https://warehouse.betterstack.com https://agents.betterstack.com https://chat.betterstack.com https://rum.betterstack.com https://cloud.betterstack.com; connect-src 'self' betterstack.com uptime.betterstack.com telemetry.betterstack.com direct.betterstack.com errors.betterstack.com warehouse.betterstack.com agents.betterstack.com chat.betterstack.com rum.betterstack.com cloud.betterstack.com wss://betterstack.com wss://uptime.betterstack.com wss://telemetry.betterstack.com wss://direct.betterstack.com wss://errors.betterstack.com wss://warehouse.betterstack.com wss://agents.betterstack.com wss://chat.betterstack.com wss://rum.betterstack.com wss://cloud.betterstack.com betterstackcdn.com cdnjs.betterstack.com cdnjs.betterstackcdn.com betterstack-organization-logos.s3.us-west-002.backblazeb2.com betterstack-team-logos.s3.us-west-002.backblazeb2.com betterstack-user-avatars.s3.us-west-002.backblazeb2.com *.okta.com *.sentry.io https://browser.sentry-cdn.com https://api.stripe.com https://chat-assets.frontapp.com https://chat.frontapp.com https://us-west-1-chat-server.frontapp.com https://us-west-2-chat-server.frontapp.com https://eu-west-1-chat-server.frontapp.com wss://front-us-realtime.ably.io wss://front-eu-realtime.ably.io https://chat-webhook.frontapp.com *.bugsnag.com https://*.browser-intake-datadoghq.com https://internet-up.ably-realtime.com www.google.com www.google.ca www.google.co.uk www.google.de www.google.fr www.google.es www.google.it www.google.nl www.google.jp www.google.au www.google.ru www.google.br www.google.in www.google.cn www.google.sg www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.br www.google.com.co www.google.com.eg www.google.com.hk www.google.com.id www.google.com.il www.google.com.in www.google.com.jp www.google.com.kr www.google.com.mx www.google.com.my www.google.com.nz www.google.com.ph www.google.com.pk www.google.com.sg www.google.com.tr www.google.com.ua www.google.co.za https://betterstack.net *.google-analytics.com www.google-analytics.com *.doubleclick.net www.google.com/pagead/ www.google.com/ccm/collect adservice.google.com www.googleadservices.com www.googletagmanager.com googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com/tr https://www.facebook.com/tr/ ads.linkedin.com *.ads.linkedin.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://plausible.io bat.bing.com bat.bing.net https://static.ads-twitter.com https://analytics.twitter.com https://snap.licdn.com https://upload.imagedelivery.net *.betterstackdata.com; font-src 'self' betterstackcdn.com https://fonts.gstatic.com https://use.typekit.net https://chat-assets.frontapp.com; frame-src 'self' https://betterstack.com https://uptime.betterstack.com https://telemetry.betterstack.com https://direct.betterstack.com https://errors.betterstack.com https://warehouse.betterstack.com https://agents.betterstack.com https://chat.betterstack.com https://rum.betterstack.com https://cloud.betterstack.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.youtube.com https://www.facebook.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com newsletter.betterstack.com betterstack.substack.com www.loom.com www.youtube.com; form-action *; style-src 'report-sample' 'self' 'unsafe-inline' betterstackcdn.com cdnjs.betterstack.com cdnjs.betterstackcdn.com https://fonts.googleapis.com blob:; script-src 'report-sample' 'self' 'unsafe-eval' betterstackcdn.com cdnjs.betterstack.com cdnjs.betterstackcdn.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://browser.sentry-cdn.com https://js.sentry-cdn.com https://*.js.stripe.com https://js.stripe.com https://chat-assets.frontapp.com https://betterstack.net *.google-analytics.com www.google-analytics.com *.doubleclick.net www.google.com/pagead/ www.google.com/ccm/collect adservice.google.com www.googleadservices.com www.googletagmanager.com googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com/tr https://www.facebook.com/tr/ ads.linkedin.com *.ads.linkedin.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://plausible.io bat.bing.com bat.bing.net https://static.ads-twitter.com https://analytics.twitter.com https://snap.licdn.com 'nonce-15d3719d44b4d050aa866f9ffc040e5c'; worker-src 'report-sample' 'self' blob: betterstackcdn.com cdnjs.betterstack.com cdnjs.betterstackcdn.com; img-src 'self' blob: data: betterstackcdn.com cdnjs.betterstack.com cdnjs.betterstackcdn.com www.gravatar.com ui-avatars.com https://*.wp.com/ui-avatars.com/api/ betterstack-organization-logos.s3.us-west-002.backblazeb2.com betterstack-team-logos.s3.us-west-002.backblazeb2.com betterstack-user-avatars.s3.us-west-002.backblazeb2.com https://imagedelivery.net https://imagedelivery.betterstackcdn.com https://betterstack.com/cdn-cgi/image/ https://betterstackcdn.com/cdn-cgi/image/ https://chat.frontapp.com https://chat-assets.frontapp.com https://chat-assets.frontusercontent.com https://nibbler.frontapp.com www.google.com www.google.ca www.google.co.uk www.google.de www.google.fr www.google.es www.google.it www.google.nl www.google.jp www.google.au www.google.ru www.google.br www.google.in www.google.cn www.google.sg www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.br www.google.com.co www.google.com.eg www.google.com.hk www.google.com.id www.google.com.il www.google.com.in www.google.com.jp www.google.com.kr www.google.com.mx www.google.com.my www.google.com.nz www.google.com.ph www.google.com.pk www.google.com.sg www.google.com.tr www.google.com.ua www.google.co.za *.google-analytics.com *.doubleclick.net www.google.com google.com https://alb.reddit.com linkedin.com *.linkedin.com bat.bing.com bat.bing.net https://www.facebook.com www.googletagmanager.com https://t.co/i/ https://t.co/1/ https://analytics.twitter.com img.youtube.com i.ytimg.com; default-src 'self' 2 default-src 'self' https://cdn.vargroup.com https://*.gstatic.com https://*.adacto.it https://*.vargroup.it https://*.vargroup.com http://*.tidiochat.com https://*.tidiochat.com https://*.dynamics.com https://*.genially.com https://*.typeform.com wss://*.typeform.com ws://*.typeform.com https://*.tidio.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.vargroup.com https://*.hsforms.net https://matomo01.bizmart2.it https://matomo.ubics.app https://sc-matomo.adacto.it https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://*.googleapis.com https://*.google.com https://*.google.it https://*.gstatic.com http://*.hsforms.net https://*.hsforms.net https://*.recaptcha.net https://*.addthis.com https://*.intervieweb.it https://*.azureedge.net https://*.googletagmanager.com https://*.cloudflareinsights.com https://*.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com http://*.tidio.co https://*.tidio.co http://*.tidiochat.com https://*.tidiochat.com https://*.youtube.com https://*.aspnetcdn.com https://*.dynamics.com https://*.clarity.ms https://snap.licdn.com https://*.linkedin.com https://*.hubspot.com https://cdnjs.cloudflare.com https://*.bing.com https://*.genially.com https://*.tableau.com https://*.facebook.net https://*.facebook.com https://*.lfeeder.com https://*.typeform.com https://*.vargroup.com https://*.vargroup.it wss://*.typeform.com ws://*.typeform.com http://*.typeform.com https://*.googleadservices.com https://*.fillout.com; style-src 'self' 'unsafe-inline' https://cdn.vargroup.com https://*.googleapis.com https://*.azureedge.net https://*.genially.com https://*.typeform.com wss://*.typeform.com ws://*.typeform.com https://*.tidio.co https://*.vargroup.com https://*.vargroup.it https://*.fillout.com; img-src * data:; media-src 'self' https://cdn.vargroup.com https://sitecore.vargroup.com https://edge.sitecorecloud.io http://*.tidiochat.com https://*.tidiochat.com https://*.genially.com https://*.typeform.com wss://*.typeform.com ws://*.typeform.com https://*.tidio.co https://*.vargroup.com https://*.vargroup.it; frame-src 'self' https://www.youtube.com https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://docs.google.com https://*.google.com https://*.google.it https://*.hsforms.com https://*.recaptcha.net https://*.intervieweb.it https://*.dynamics.com https://*.googletagmanager.com https://*.microsoft.com https://*.googleadservices.com https://*.doubleclick.net https://sitecore.vargroup.com https://*.hubspot.com https://player.vimeo.com/ https://go.pardot.com/ https://*.genially.com https://*.powerbi.com https://*.tableau.com https://*.facebook.net https://*.facebook.com https://*.typeform.com wss://*.typeform.com ws://*.typeform.com https://*.tidio.co https://*.vargroup.com https://*.vargroup.it https://*.fillout.com https://sitecore.vargroup.com https://*.vargroup.it https://*.vargroup.com https://*.adacto.it https://*.vargroup.ch https://*.vargroup.de https://*.vargroup.es https://*.vargroup.ad https://*.dsec.it https://*.mediamenteconsulting.it https://*.tekneretail.it https://*.wisesecurity.com https://*.yarix.com https://*.cyres-consulting.com https://*.ubics.it https://*.infolog.it https://*.incidentresponse.com https://*.nip.io https://*.adview.mx https://*.adview.it https://*.pluribus.it https://*.leapfrog.it https://cdn.vargroup.com; frame-ancestors https://sitecore.vargroup.com https://cdn.vargroup.com https://*.vargroup.it https://*.vargroup.com https://*.adacto.it https://*.vargroup.ch https://*.vargroup.de https://*.vargroup.es https://*.vargroup.ad https://*.dsec.it https://*.mediamenteconsulting.it https://*.tekneretail.it https://*.wisesecurity.com https://*.yarix.com https://*.cyres-consulting.com https://*.ubics.it https://*.infolog.it https://*.incidentresponse.com https://*.nip.io https://*.adview.mx https://*.adview.it https://*.pluribus.it https://*.leapfrog.it; object-src none; connect-src 'self' https://cdn.vargroup.com https://*.hsforms.com https://www.youtube.com https://matomo01.bizmart2.it https://matomo.ubics.app https://sc-matomo.adacto.it https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://*.googleapis.com https://*.ingest.sentry.io https://*.intervieweb.it https://*.googletagmanager.com https://*.cloudflareinsights.com https://*.google.com https://*.google.it https://*.google-analytics.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.doubleclick.net http://*.tidiochat.com https://*.tidiochat.com ws://*.tidio.co wss://*.tidio.co https://*.dynamics.com https://*.azureedge.net https://sitecore.vargroup.com https://*.clarity.ms https://snap.licdn.com https://*.linkedin.com https://google.com/pagead/form-data/ https://google.com/ccm/form-data/ https://googleadservices.com/ https://google.it/ https://*.hubspot.com https://*.bing.com https://*.genially.com https://*.tableau.com https://*.facebook.net https://*.facebook.com https://*.lfeeder.com https://*.typeform.com wss://*.typeform.com ws://*.typeform.com https://*.tidio.co https://*.vargroup.com https://*.vargroup.it https://*.googleadservices.com https://*.fillout.com https://*.recaptcha.net 2 default-src 'self' data: blob: https://erotik.com/ https://dvderotik.com/ https://*.ffrtz.com/ https://*.erotik.com/ https://*.dvderotik.com/ https://*.dvdl.net/ https://*.chatbase.co/; connect-src 'self' http://localhost/ http://localhost:3000/ https://localhost/ https://erotik.com/ https://dvderotik.com/ https://*.ffrtz.com/ https://*.erotik.com/ https://*.dvderotik.com/ https://*.dvdl.net/ https://*.ingest.sentry.io/ https://*.sentry.io/ wss://*.piesocket.com wss://*.ffrtz.com https://*.pingdom.net/ https://*.hotjar.com/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.izooto.com/ https://t.adcell.com/ https://www.adcell.de/ https://ad4m.at/ https://*.ad4m.at/ https://*.trafficjunky.net/ wss://knpb-media.zammad.com/ https://*.vxcdn.org/ https://*.mmapiws.com/ wss://*.tantumpay.com/ https://*.chatbase.co/; font-src 'self' data: http://localhost/ http://localhost:3000/ https://*.hotjar.com/ https://fonts.gstatic.com/ https://erotik.com/ https://dvderotik.com/ https://*.ffrtz.com/ https://*.erotik.com/ https://*.dvderotik.com/ https://*.chatbase.co/; frame-src 'self' antennapod-subscribe: castros: downcast: gpodder: icatcher: instacast: overcast: playerfm: pktc: podcastaddict: podcastguru: podcat: podkicker: rssradio: podcast: https://erotik.com/ https://dvderotik.com/ https://*.ffrtz.com/ https://*.erotik.com/ https://*.dvderotik.com/ https://*.dvdl.net/ https://cdn.izooto.com https://*.hotjar.com/ https://ad.ad-srv.net/ https://*.tantumpay.com https://*.chatbase.co/; img-src 'self' data: blob: android-webview-video-poster: http://localhost/ http://localhost:3000/ http://localhost:10001/ https://erotik.com/ https://dvderotik.com/ https://*.ffrtz.com/ https://*.erotik.com/ https://*.dvderotik.com/ https://*.dvdl.net/ https://via.placeholder.com/ https://source.unsplash.com/ https://images.unsplash.com/ https://loremflickr.com/ https://*.hotjar.com/ https://*.trafficjunky.net/ https://syndication.exoclick.com/ https://syndication.realsrv.com/ https://syndication.exdynsrv.com/ https://tsyndicate.com/ https://*.vxcdn.org/ https://*.chatbase.co/; manifest-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: http://localhost/ http://localhost:3000/ https://localhost/ https://erotik.com/ https://dvderotik.com/ https://*.ffrtz.com/ https://*.erotik.com/ https://*.dvderotik.com/ http://mac.fritz.box http://mbpvonchristian.fritz.box https://www.gstatic.com/ https://*.sentry-cdn.com/ https://*.pingdom.net/ https://t.adcell.com/ https://www.adcell.de/ https://ad4m.at/ https://*.ad4m.at/ https://static.hotjar.com/ https://script.hotjar.com/ https://cdn.izooto.com/ https://static.trafficjunky.com/ https://*.exoclick.com/ https://device.maxmind.com/ https://knpb-media.zammad.com/ https://*.tantumpay.com https://cdn.jsdelivr.net/npm/ua-parser-js/dist/ua-parser.min.js https://*.chatbase.co/; style-src 'self' 'unsafe-inline' data: http://localhost/ http://localhost:3000/ https://localhost/ https://erotik.com/ https://dvderotik.com/ https://*.ffrtz.com/ https://*.erotik.com/ https://*.dvderotik.com/ https://knpb-media.zammad.com/ https://*.chatbase.co/; media-src 'self' blob: data: https://*.erotik.com/ https://*.dvderotik.com/ https://*.dvdl.net/ https://*.vxcdn.org/; form-action 'self' https:; worker-src 'self' blob:; block-all-mixed-content; upgrade-insecure-requests; frame-ancestors 'self' https://*.ffrtz.com; child-src 'self' blob: https://pixel.bsmartdata.com 2 default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.knorr-bremse.com:* https://cdn.cookielaw.org https://responder.wt-safetag.com https://fbc.wcfbc.net https://*.gstatic.com https://*.googleapis.com https://www.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://n0c357rmy1njbuit2friqwu.blob.core.windows.net https://snap.licdn.com https://px.ads.linkedin.com; frame-ancestors 'self' https://www.threesixty-events.de/selectron_innotrans/; 2 frame-ancestors *.austinisd.org 2 default-src * blob: data:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 2 base-uri 'none'; font-src 'self' https: data: https://heapanalytics.com; form-action 'self' https://forms.hsforms.com; frame-ancestors 'self' https://app.storyblok.com; img-src 'self' data: https: images.ctfassets.net https://heapanalytics.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' https: 'unsafe-inline' https://heapanalytics.com; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' https://cdn.heapanalytics.com https://heapanalytics.com; upgrade-insecure-requests; default-src 'self'; frame-src 'self' https:; worker-src blob:; connect-src 'self' https: http://cdn.cookielaw.org wss: https://heapanalytics.com; media-src blob: 'self' https:; 2 font-src 'self' data: https://d12ux87dkit87z.cloudfront.net https://themes.googleusercontent.com https://fonts.gstatic.com https://mystrom.ch https://www.mystrom.ch 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdnjs.cloudflare.com/ https://www.youtube.com/ https://cdn.jsdelivr.net/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://app-script.monsido.com/ https://cdn-apac.onetrust.com/ https://u.heatmap.it/ https://cdn.yellowmessenger.com/ https://www.google.com/ https://www.gstatic.com/ https://static.elfsight.com/platform/platform.js https://elfsightcdn.com/platform.js https://www.petronas.com/608242b4-6b3e-4aff-8979-014519414d0c https://app-script.monsido.com/ https://static.elfsight.com/ https://api.swiftype.com/ https://geotargetly-api-1.com/ https://g10498469755.co/ https://code.jquery.com/; object-src 'none'; upgrade-insecure-requests 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://localhost:8090 https://cdn.polyfill.io https://seal.verisign.com https://polyfill.io https://cdn.ravenjs.com; object-src 'self'; 2 frame-ancestors 'self' arthrex.com *.arthrex.com orthoillustrated.com *.jointpreservation.com *.orthoillustrated.com surgicaloutcomesystem.com *.surgicaloutcomesystem.com arthrex-celltherapy.com *.arthrex-celltherapy.com arthrex.xyz *.arthrex.xyz arthrex.io *.mwprod.arthrex.io *.arthrex.io orthopedia.com *.orthopedia.com anklesprain.com *.anklesprain.com arthrex.virtualevents-hub.com arthrexemea.sharepoint.com arthrex.sharepoint.com myarthrex.sharepoint.com arthrexapac.sharepoint.com bunionpain.com *.bunionpain.com shoulderreplacement.com *.shoulderreplacement.com acltear.com *.acltear.com arthrex-russia.ru arthrex.at arthrex.be arthrex.co.jp arthrex.co.uk arthrex.com.au arthrex.cz arthrex.dk arthrex.fr arthrex.it arthrex.mx arthrex.nl arthrex.pl arthrex.pt arthrex.se *.arthrex-russia.ru *.arthrex.at *.arthrex.be *.arthrex.co.jp *.arthrex.co.uk *.arthrex.com.au *.arthrex.cz *.arthrex.dk *.arthrex.fr *.arthrex.it *.arthrex.mx *.arthrex.nl *.arthrex.pl *.arthrex.pt *.arthrex.se hallux-valgus-behandlung.de *.hallux-valgus-behandlung.de mis-bunion-patient-site.webflow.io arthroplasty-narrative-home.webflow.io discover.acp-therapie.de mis-bunion-patient-site.webflow.io mis-bunion-surgeon-site-c07373b5fb6b0bc.webflow.io arthrex-design-system-4dd8ae96a06c10be9.webflow.io anklesprain.webflow.io srlp.webflow.io arthroplasty-narrative-home.webflow.io korea-global-landing-page.webflow.io global-landingpage-mexico.webflow.io inc-acltear-patient-en-working.webflow.io arthrex-jobs-site.webflow.io marketingintakeportal.webflow.io orthopedia-landing-page1.webflow.io arthrex-history.webflow.io arthrex-design-system.webflow.io arthrex-design-system-de8e093c0a3bf70d8.webflow.io arthrex-endoscopy.webflow.io case-reports.webflow.io synergy-integrated-or.de *.synergy-integrated-or.de arthrex.kr *.arthrex.kr gmbh-pct.webflow.io *.gmbh-pct.webflow.io sis-preview-03-809ae25532a090913a51d7a6.webflow.io *.sis-preview-03-809ae25532a090913a51d7a6.webflow.io arthrex-technical-support-services.webflow.io *.arthrex-technical-support-services.webflow.io digital-agenda-emea.webflow.io *.digital-agenda-emea.webflow.io thenanoexperience.com *.thenanoexperience.com arthrexmexico.webflow.io arthrexbrazil.webflow.io arthrex-australia.webflow.io arthrex.com.br *.arthrex.com.br arthrex-joint-pres.webflow.io jointpreservation.arthrex.com arthrex-synergy-staging-bdaff93973d3e28.webflow.io jointpreservation.com synergynew.arthrex.com.s3-website-us-east-1.amazonaws.com sternalclosure.arthrex.com.s3-website-us-east-1.amazonaws.com synergynewdev.arthrex.com.s3-website-us-east-1.amazonaws.com sternalclosuredev.arthrex.com.s3-website-us-east-1.amazonaws.com s3.amazonaws.com/synergynewdev.arthrex.com s3.amazonaws.com/sternalclosuredev.arthrex.com s3.amazonaws.com/synergynew.arthrex.com s3.amazonaws.com/sternalclosure.arthrex.com arthrex-synergy.webflow.io synergy.arthrex.com *.arthrexendoscopicspine.com arthrex-spine.webflow.io arthrexendoscopicspine.com branch--home-arthrex-spine-6a28ac.webflow.io *.branch--home-arthrex-spine-6a28ac.webflow.io shoulder-replacement.webflow.io aesthetics.arthrex.com *.aesthetics.arthrex.com case-reports.arthrex.com arthrex-emea-joint-preservation-surgeon.webflow.io *.arthrex-emea-joint-preservation-surgeon.webflow.io joint-preservation.de *.joint-preservation.de gmbh-pct-b390519d0b438c360cdf2e4a5ad25b.webflow.io *.gmbh-pct-b390519d0b438c360cdf2e4a5ad25b.webflow.io *.case-reports.webflow.io dev-arthrex-arthroplasty.webflow.io *.shoulderarthroplasty.arthrex.de *.arthrex-spine-staging.webflow.io arthrex-spine-staging.webflow.io *.spine.arthrex.com spine.arthrex.com *.dev-acp-therapie-arthrex.webflow.io dev-acp-therapie-arthrex.webflow.io *.acp-therapie.de acp-therapie.de *.arthrex-aesthetics.webflow.io arthrex-aesthetics.webflow.io aesthetics-arthrex.webflow.io *.aesthetics-arthrex.webflow.io anklesprain-5d00c1acac14e85faef249f081.webflow.io *.anklesprain-5d00c1acac14e85faef249f081.webflow.io *.acl-solutions.arthrex.com acl-solutions.arthrex.com acl-solutions.arthrex.io *.acl-solutions.arthrex.io arthrexchile-f65971612d4-1453b7a9421f4.webflow.io *.arthrexchile-f65971612d4-1453b7a9421f4.webflow.io acl-solutions.webflow.io *.acl-solutions.webflow.io arthrex.cl *.arthrex.cl *.bio.arthrex.com bio.arthrex.com dev-better-with-bio.webflow.io *.dev-better-with-bio.webflow.io dev-better-with-bio.design.webflow.com *.dev-better-with-bio.design.webflow.com *.kneereplacementprocedure.com kneereplacementprocedure.com knee-arthroplasty-uka.webflow.io *.knee-arthroplasty-uka.webflow.io *.siuu.arthrex.com siuu.arthrex.com siuu-arthrex-com.webflow.io *.siuu-arthrex-com.webflow.io petowner.arthrexvetsystems.com *.petowner.arthrexvetsystems.com pet-owners.webflow.io *.pet-owners.webflow.io *.global-landingpage-uk.webflow.io global-landingpage-uk.webflow.io arthrex-jointpreservation-patient.webflow.io *.arthrex-jointpreservation-patient.webflow.io *.valhalla2.stage.jobs2web.com cdn.intellimize.co *.intellimizeio.com; 2 default-src 'none'; script-src 'self' 'sha256-m7Sc32V4VtwcCJmXRju0QGxnkd9Rb+yXPtPycoExsSI='; style-src 'self' data: 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; media-src 'self' data: blob:; object-src 'self'; child-src 'none'; frame-src 'none'; worker-src 'self'; frame-ancestors 'none'; form-action 'self' https://docs.immerda.ch/de/search; base-uri 'self'; manifest-src 'none'; report-uri https://csp-report.immerda.ch/report.php; upgrade-insecure-requests; block-all-mixed-content 2 default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; connect-src 'self' https:; frame-src 'self' https:; 2 default-src https: http: blob: data: ws: wss: 'self' 'unsafe-inline' 'unsafe-eval' 2 frame-ancestors 'self' *.senecacollege.ca *.senecapolytechnic.ca; 2 default-src data: https:; script-src data: https: 'unsafe-eval' 'unsafe-inline'; style-src data: https: 'unsafe-inline'; frame-ancestors 'self' https://dashboard.eye-able.com; report-uri /report/content-security-policy 2 default-src https://api.typeform.com http://embed.typeform.com/next/embed.js https://embed.typeform.com 'self' 'unsafe-inline' https://data.fiawec.com https://storage.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://fiawec.com https://hatscripts.github.io https://flagcdn.com https://static.rolex.com https://www.youtube.com https://storage.googleapis.com https://www.fiawec.com https://i.ytimg.com https://www.youtube.com http://www.youtube.com https://play.google.com data: https://*.cdninstagram.com https://www.googletagmanager.com https://sdk.privacy-center.org https://api.privacy-center.org https://www.google.com; block-all-mixed-content; connect-src http://embed.typeform.com/next/embed.js https://embed.typeform.com https://api.typeform.com 'self' https://region1.google-analytics.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://storage.googleapis.com https://data.wec-master.6tm.eu/ https://data.fiawec.com https://www.google.com https://www.google.fr https://analytics.lmem.com wss://www.fiawec.com https://www.fiawec.com wss://www.europeanlemansseries.com https://www.europeanlemansseries.com https://mpc-prod-16-s6uit34pua-uk.a.run.app https://demo-1.conversionsapigateway.com http://www.fiawec.com https://pagead2.googlesyndication.com; font-src 'self' data: https://fonts.cdnfonts.com https://fonts.gstatic.com https://fonts.googleapis.com https://use.typekit.net; frame-ancestors 'self'; frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://static.rolex.com https://form.typeform.com; img-src https://api.typeform.com 'self' https://www.fiawec.com/ https://www.youtube.com http://www.youtube.com https://play.google.com https://www.facebook.com https://sdk.privacy-center.org https://api.privacy-center.org https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.fr https://ssl.gstatic.com 'unsafe-inline' https://i.ytimg.com https://storage.googleapis.com https://*.cdninstagram.com data: https://hatscripts.github.io https://flagcdn.com https://pagead2.googlesyndication.com; script-src https://api.typeform.com http://embed.typeform.com/next/embed.js https://embed.typeform.com 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com https://connect.facebook.net https://cdnjs.cloudflare.com https://connect.facebook.net https://www.youtube.com http://www.youtube.com https://play.google.com https://sdk.privacy-center.org https://api.privacy-center.org https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://app-worker.visitor-analytics.io https://visits.visitor-analytics.io https://www.gstatic.com https://www.google.com https://analytics.lmem.com https://www.fiawec.com http://www.fiawec.com; style-src 'self' 'unsafe-inline' https://fonts.cdnfonts.com https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://embed.typeform.com 2 base-uri 'none'; font-src 'self' https: data:; form-action 'self' https://www.formstack.com; frame-ancestors 'self'; img-src 'self' data: https://res.cloudinary.com https://images.contentstack.io https://cdn.userway.org https://api.mapbox.com *.mouseflow.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' *.mouseflow.com; upgrade-insecure-requests; 2 default-src 'self';script-src 'unsafe-inline' 'unsafe-eval' 'self' www.gstatic.com cdn.evgnet.com *.evergage.com wompi.us-6.evergage.com pod-19-sunco-ws.zendesk.com https://cdn.jsdelivr.net https://npmcdn.com https://www.googletagmanager.com https://www.google.com http://www.googletagmanager.com https://snap.licdn.com http://www.google-analytics.com https://connect.facebook.net https://static.zdassets.com;media-src 'self' https://static.zdassets.com;style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net galatea-dev.apps.ambientesbc.com;frame-src 'self' www.google.com *.evergage.com wompi.us-6.evergage.com cdn.evgnet.com *.email.wompi.com recaptcha.google.com youtube.com https://td.doubleclick.net https://www.youtube.com blob: data:; img-src 'self' https://wompi.com *.email.wompi.com wompi.zendesk.com pod-19-sunco-ws.zendesk.com s3-analytics-wompi-bot-audios-uclfy1vt5qag.s3.amazonaws.com public-assets.wompi.com https://www.linkedin.com data: https://www.googletagmanager.com https://www.google-analytics.com https://px.ads.linkedin.com https://www.facebook.com https://www.google.com https://www.google.com.co; font-src 'self' data: galatea-dev.apps.ambientesbc.com wompi.us-6.evergage.com; object-src 'self'; base-uri 'self';form-action 'self'; frame-ancestors 'self' *.evergage.com wompi.us-6.evergage.com *.email.wompi.com cdn.evgnet.com; connect-src 'self' wss://kozwas16z0.execute-api.us-east-1.amazonaws.com o4507427284123728.ingest.de.sentry.io ekr.zdassets.com pod-19-sunco-ws.zendesk.com cdn.evgnet.com wompi.us-6.evergage.com www.google.com https://*.wompi.co https://*.wompi.dev https://zendesk-eu.my.sentry.io https://wompipa.zendesk.com https://www.google-analytics.com https://www.google-analytics.com www.google-analytics.com px.ads.linkedin.com analytics.google.com ekr.zdassets.com https://px.ads.linkedin.com/wa wompi.zendesk.com wss://widget-mediator.zopim.com https://stats.g.doubleclick.net https://www.google.com.co https://hook.us1.make.com;report-to https://api.wompi.co/v1/csp-report;report-uri https://api.wompi.co/v1/csp-report; 2 object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; connect-src * 2 default-src 'self'; img-src 'self' www.dianomi.com googleads.g.doubleclick.net ad.doubleclick.net www.google.co.in s7g10.scene7.com assets.mandg.com cdn.cookielaw.org cm.everesttech.net privacy-digital.mandg.com *.akstat.io pixel.quantserve.com tags.srv.stackadapt.com bat.bing.com bat.bing.net *.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net t.teads.tv l.teads.tv px.ads.linkedin.com googleads.g.doubleclick.net www.facebook.com pixel.quantserve.com www.google.com www.google.co.uk data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googleadservices.com performance.autofintech.link tags.creativecdn.com googleads.g.doubleclick.net privacy-digital.mandg.com *.mandg.com cdn.cookielaw.org policylookup.mandg.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ public.flourish.studio *.go-mpulse.net secure.quantserve.com connect.facebook.net p.teads.tv tags.srv.stackadapt.com snap.licdn.com bat.bing.com performance.autofintech.link edge.quantserve.com rules.quantcount.com googleads.g.doubleclick.net *.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' performance.autofintech.link tags.creativecdn.com *.go-mpulse.net privacy-digital.mandg.com www.mandg.com cdn.cookielaw.org policylookup.mandg.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ public.flourish.studio secure.quantserve.com connect.facebook.net p.teads.tv tags.srv.stackadapt.com snap.licdn.com bat.bing.com performance.autofintech.link rules.quantcount.com googleads.g.doubleclick.net *.googletagmanager.com; style-src tags.srv.stackadapt.com 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' 15482312.fls.doubleclick.net googleads.g.doubleclick.net ad.doubleclick.net *.pru.co.uk *.pruadviser.co.uk mandg.videomarketingplatform.co prudential.videomarketingplatform.co mandg-podcast.videomarketingplatform.co privacy-digital.mandg.com policylookup.mandg.com prudentialdistribution.demdex.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ flo.uri.sh securedigital.wealth.mandg.com secure.digital.mandg.com securedigital.pru.mandg.com api.pru.co.uk *.googletagmanager.com; connect-src 'self' www.google.co.in www.google.nl www.googleadservices.com performance.autofintech.link tags.creativecdn.com googleads.g.doubleclick.net ad.doubleclick.net privacy-digital.mandg.com policylookup.mandg.com smetrics.mandg.com smetrics.mandgadvice.com cdn.cookielaw.org dpm.demdex.net adobedc.demdex.net privacyportal-de.onetrust.com geolocation.onetrust.com api.pru.co.uk assets.mandg.com s7g10.scene7.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ public.flourish.studio www.mandg.com *.akstat.io *.go-mpulse.net *.akamaihd.net secure.quantserve.com pixel.quantserve.com p.teads.tv cm.teads.tv t.teads.tv tags.srv.stackadapt.com bat.bing.com bat.bing.net my.advertisingmarketplace.ai performance.autofintech.link px.ads.linkedin.com pixel.quantcount.com edge.quantserve.com *.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net www.google.com www.google.co.uk; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; 2 upgrade-insecure-requests;base-uri 'self';form-action 'self';frame-ancestors 'none';default-src 'self';child-src 'self';frame-src https://www.google.com https://*.linkedin.com *.hotjar.com;script-src *.smartology.net *.hotjar.com https://www.gstatic.com https://*.google-analytics.com https://www.google.com https://*.googletagmanager.com https://kit.fontawesome.com https://*.sharethis.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://connect.facebook.net https://*.smartlook.com https://*.smartlook.cloud https://*.posthog.com https://app.analyzz.com https://*.linkedin.com https://unpkg.com https://code.jquery.com/ 'self' 'unsafe-inline' 'unsafe-eval';img-src http://www.w3.org https://www.smartology.net https://*.google-analytics.com https://secure.gravatar.com https://*.googletagmanager.com https://*.sharethis.com 'self' data:;style-src https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://buttons-config.sharethis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline';font-src https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.fontawesome.com 'self' data:;connect-src *.hotjar.com *.hotjar.io https://stats.g.doubleclick.net https://website-api.smartology.co https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.fontawesome.com https://l.sharethis.com https://*.smartlook.com https://*.smartlook.cloud https://*.posthog.com https://app.analyzz.com https://lottie.host 'self' ws:;object-src 'self' 2 default-src 'self' data: blob: wss://ws.calltouch.ru wss://*.comagic.ru wss://*.yandex.ru wss://*.yandex.net wss://*.uiscom.ru https://mc.yandex.ru https://yastatic.net https://webvisor.com https://*.yandex.ru https://*.yandex.net https://*.yandexcloud.net https://*.selcdn.net https://cdn.trx.tradedealer.ru https://*.tradedealer.ru https://*.tradedealer.net https://*.site-chat.me https://*.tradeins.ru https://tradeins.space https://cdn.jsdelivr.net https://mod.calltouch.ru https://ws.calltouch.ru https://ab-ct.ru https://static.calltouch.ru https://panel.smartpoint.pro https://smartpoint.pro https://fonts.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com https://analytics.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://static.dentsu.1dmp.io https://secure-ds.serving-sys.com https://app.call-tracking.by https://event.tradedealer.ru https://script.tradedealer.ru https://zcdn.ru https://static.me-talk.ru https://widget.me-talk.ru https://*.uiscom.ru https://*.comagic.ru https://panel.getloyalty.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' wss://ws.calltouch.ru wss://*.comagic.ru wss://*.yandex.ru wss://*.yandex.net wss://*.uiscom.ru https://mc.yandex.ru https://yastatic.net https://webvisor.com https://*.yandex.ru https://*.yandex.net https://*.yandexcloud.net https://*.selcdn.net https://cdn.trx.tradedealer.ru https://*.tradedealer.ru https://*.tradedealer.net https://*.site-chat.me https://*.tradeins.ru https://tradeins.space https://cdn.jsdelivr.net https://mod.calltouch.ru https://ws.calltouch.ru https://ab-ct.ru https://static.calltouch.ru https://panel.smartpoint.pro https://smartpoint.pro https://fonts.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com https://analytics.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://static.dentsu.1dmp.io https://secure-ds.serving-sys.com https://app.call-tracking.by https://event.tradedealer.ru https://script.tradedealer.ru https://zcdn.ru https://static.me-talk.ru https://widget.me-talk.ru https://*.uiscom.ru https://*.comagic.ru; style-src 'self' 'unsafe-inline' https://mc.yandex.ru https://yastatic.net https://*.yandex.ru https://*.yandexcloud.net https://*.selcdn.net https://cdn.trx.tradedealer.ru https://*.tradedealer.ru https://*.tradedealer.net https://*.site-chat.me https://*.tradeins.ru https://cdn.jsdelivr.net https://mod.calltouch.ru https://ws.calltouch.ru https://ab-ct.ru https://static.calltouch.ru https://panel.smartpoint.pro https://smartpoint.pro https://fonts.googleapis.com https://*.uiscom.ru; frame-src 'self' blob: https://webvisor.com https://*.yandex.ru https://*.yandex.net https://*.yandexcloud.net; object-src 'none'; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /csp-report; 2 default-src 'self' telit.com *.telit.com telit.di.partsearch.oemsecretsapi.com *.oemsecrets.com blob: bing.com *.bing.com licdn.com google-analytics.com *.google-analytics.com demandbase.com *.demandbase.com company-target.com *.company-target.com *.licdn.com *.recaptcha.net recaptcha.net gstatic.com *.gstatic.com google.com youtube-nocookie.com *.youtube-nocookie.com youtube.com *.youtube.com ggpht.com *.ggpht.com googleapis.com *.googleapis.com ytimg.com *.ytimg.com *.doubleclick.net googletagmanager.com *.googletagmanager.com pardot.com *.pardot.com osano.com *.osano.com *.sharethis.com sharethis.com driftt.com *.driftt.com oribi.io *.oribi.io linkedin.com *.linkedin.com rlcdn.com *.rlcdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat gravatar.com *.gravatar.com w.org *.w.org wpengine.com *.wpengine.com yoast.com *.yoast.com jsdelivr.net *.jsdelivr.net wistia.com *.wistia.com helpscout.net *.helpscout.net *.litix.io litix.io cloudfront.net *.cloudfront.net *.devmobo.com cinterion.com *.cinterion.com securityscorecard.com *.securityscorecard.com *.googlesyndication.com googlesyndication.com *.facebook.net *.facebook.com *.alicdn.com *.typekit.net *.vimeo.com *.indeed.com *.killadsapi.com *.zi-scripts.com *.zoominfo.com data: blob: 'unsafe-inline' 'unsafe-eval';report-uri https://telit-newsletter.devmobo.com/l.php; base-uri 'self';frame-ancestors 'self' 2 default-src https:; font-src https: data:; img-src https: data:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: blob:; frame-src 'self' https:; child-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; 2 default-src 'self'; img-src * blob: data: https://*.google-analytics.com https://*.gstatic.com; style-src 'self' 'unsafe-inline' data: https://*.googleapis.com; style-src-elem 'self' 'unsafe-inline' data: https://*.gstatic.com https://*.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.usercentrics.eu https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://*.googleapis.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.gstatic.com https://*.usercentrics.eu https://*.google-analytics.com https://*.googletagmanager.com https://svrdntfctn.com; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; connect-src 'self' https://*.usercentrics.eu https://*.gstatic.com https://dialogflow.cloud.google.com https://svrdntfctn.com; frame-src 'self'; object-src 'none'; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: wss: blob:; img-src 'self' https: data:; frame-ancestors 'self' 2 connect-src 'self' *.tuerchen.com tuerchen.app *.tuerchen.app *.etracker.de *.etracker.com *.usercentrics.eu *.cmp.usercentrics.eu *.novomind.com *.ekomiapps.de *.google.de *.googleadservices.com *.google.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.bing.net *.bing.com *.trbo.com *.quantserve.com *.hansemerkur-vertriebsportal.de *.hansemerkur.de *.fitrockr.com *.heyflow.com *.loyjoy.com *.moin.ai wss://bot.moin.ai *.qualtrics.com *.clarity.ms *.1000grad.com; default-src 'self'; font-src 'self' data: *.novomind.com font.gstatic.com *.tuerchen.app core.tuerchen.com *.loyjoy.com *.heyflow.cloud *.moin.ai; frame-ancestors 'self' *.hanse-merkur.de newapp.etracker.com app.etracker.com localhost http://localhost:3000 *.hokify.de www.dwin1.com; frame-src 'self' blob: hansemerkur.happymo.re *.usercentrics.eu *.cmp.usercentrics.eu youtube.com *.youtube.com *.youtube-nocookie.com *.novomind.com *.kasko.io *.kaskocloud.com *.google.com *.trbo.com *.facebook.com *.pantumdetect.com *.awin1.com *.hansemerkur.de *.hmrv.de *.hansemerkur-video.de *.hanse-merkur.de *.ad-srv.net *.mein-hmrv.de *.criteo.com www.public-hansemerkur.de outlook.office365.com calendly.com *.qualtrics.com *.doubleclick.net *.googletagmanager.com; img-src 'self' data: *.tuerchen.app core.tuerchen.com *.hmrv.de *.hansemerkur.de tile.geofabrik.de *.etracker.de *.etracker.com *.gstatic.com *.google-analytics.com *.novomind.com *.bing.net *.bing.com *.doubleclick.net *.usercentrics.eu *.cmp.usercentrics.eu *.google.com *.google.de *.trbo.com ekomi-ui.s3.amazonaws.com www.facebook.com *.quantcount.com *.quantserve.com lantern.roeye.com *.hansemerkur-vertriebsportal.de *.hansemerkur.de *.tradedoubler.com *.googletagmanager.com *.loyjoy.com *.heyflow.com *.moin.ai *.qualtrics.com *.public-hansemerkur.de; media-src 'self' *.hansemerkur-video.de *.youtube.com *.moin.ai; object-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tuerchen.app tuerchen.app www.happymo.re *.etracker.de *.etracker.com *.googletagmanager.com www.dwin1.com *.usercentrics.eu *.cmp.usercentrics.eu *.novomind.com *.bing.com *.google.com *.google-analytics.com *.kasko.io *.kaskojs.com *.ekomiapps.de *.doubleclick.net *.googleadservices.com *.trbo.com connect.facebook.net *.hanse-merkur.de *.quantserve.com *.quantcount.com lantern.roeyecdn.com *.signalize.com *.tradedoubler.com *.criteo.com *.fitrockr.com *.heyflow.com *.calendly.com *.loyjoy.com widget.moin.ai *.qualtrics.com *.clarity.ms *.1000grad.com; style-src 'self' 'unsafe-inline' *.tuerchen.app tuerchen.app www.etracker.de fonts.googleapis.com tagmanager.google.com *.googletagmanager.com *.novomind.com *.ekomiapps.de *.heyflow.com *.heyflow.cloud *.loyjoy.com *.moin.ai 2 frame-ancestors 'self' https://*.ftm.nl https://*.ftm.eu 2 font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.google.com *.hotjar.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.meetanshi.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com https://js.hsforms.net https://js.klevu.com/core/v2/klevu.js js.klevu.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com td.doubleclick.net www.googletagmanager.com *.hotjar.com snap.licdn.com *.hs-scripts.com *.hs-banner.com *.hscollectedforms.net *.tiktok.com *.facebook.net *.inimg.com *.hs-analytics.net *.bing.com bing.com *.pinimg.com *.hsadspixel.net *.usemessages.com *.hsleadflows.net *.doubleclick.net js.hsforms.net www.gstatic.com js.braintreegateway.com https://js.hscta.net https://cta-service-cms2.hubspot.com *.hubspot.com *.hubapi.com *.pinterest.com youtube.com https://www.youtube.com/ *.weltpixel.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klevu.com *.ksearchnet.com services.postcodeanywhere.co.uk https://meetanshi.com/media/logo.png *.meetanshi.com blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.gstatic.com https://forms-na1.hsforms.com/embed https://no-cache.hubspot.com *.hubspot.com https://perf.hsforms.com *.linkedin.com www.google.al *.bing.com bing.com *.facebook.com www.facebook.com *.ytimg.com ytimg.com connect.facebook.net stats.g.doubleclick.net *.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io www.xtento.com cdn.xtento.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.klevu.com *.ksearchnet.com api.addressy.com *.meetanshi.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com youtube.com *.hotjar.com snap.licdn.com *.hs-scripts.com *.hs-banner.com *.hscollectedforms.net *.tiktok.com *.facebook.net connect.facebook.net *.inimg.com *.hs-analytics.net *.bing.com bing.com *.pinimg.com *.hsadspixel.net *.usemessages.com *.hsleadflows.net *.doubleclick.net https://js.hsforms.net js.hsforms.net www.google.com www.gstatic.com https://js.hscta.net https://cta-service-cms2.hubspot.com *.hubspot.com *.pinterest.com *.googletagmanager.com *.visualwebsiteoptimizer.com app.vwo.com www.xtento.com cdn.xtento.com *.googleadservices.com *.redditstatic.com *.reddit.com *.ads-twitter.com *.clarity.ms *.klaviyo.com unpkg.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klevu.com *.ksearchnet.com api.addressy.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com www.gstatic.com *.hsforms.com https://js.hscta.net *.visualwebsiteoptimizer.com app.vwo.com *.tagmanager.google.com *.googletagmanager.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: https://tormach.com https://forms-na1.hsforms.com/embed *.linkedin.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klevu.com *.ksearchnet.com api.addressy.com *.meetanshi.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://forms.hsforms.com https://js.klevu.com/core/v2/klevu.js https://hubspot-forms-static-embed.s3.amazonaws.com statsjs.klevu.com forms.hsforms.com www.google.com https://cta-service-cms2.hubspot.com analytics.google.com *.linkedin.com *.hubspot.com *.hscollectedforms.net td.doubleclick.net https://js.hsforms.net js.klevu.com *.googletagmanager.com *.hotjar.com wss://ws.hotjar.com hotjar.com snap.licdn.com *.hs-scripts.com *.hs-banner.com *.tiktok.com *.facebook.net *.inimg.com *.hs-analytics.net *.bing.com bing.com *.pinimg.com *.hsadspixel.net *.usemessages.com *.hsleadflows.net *.doubleclick.net js.hsforms.net www.gstatic.com js.braintreegateway.com https://js.hscta.net *.hubapi.com *.pinterest.com *.hotjar.io *.visualwebsiteoptimizer.com app.vwo.com *.redditstatic.com *.reddit.com *.twitter.com *.ads-twitter.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 default-src 'self'; connect-src 'self' *.itzbund.de *.readspeaker.com *.bmbfcluster.de; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.vimeo.com *.instagram.com; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.vimeo.com vimeo.com *.aktion-mensch.de *.bmbfcluster.de *.tremonia-dxp.de; frame-src 'self' *.readspeaker.com *.google.com *.gstatic.com *.youtube.com *.vimeo.com kumasta.buendnisse-fuer-bildung.de *.facebook.com *.instagram.com *.bmbf.de graphcommons.com www.baden-tv.com/ *.video-stream-hosting.de ;img-src 'self' data: *.materna.de *.bmbf.de *.bmftr.bund.de *.google.com *.gstatic.com *.youtube.com *.twimg.com *.openstreetmap.org *.openstreetmap.de *.wmflabs.org *.bmbfcluster.de; font-src 'self' data:; frame-ancestors 'self'; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net *.googleads.com *.googleadservices.com *.googletagservices.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://ajax.aspnetcdn.com *.vimeocdn.com *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com https://hcaptcha.com https://js.hcaptcha.com *.surveymonkey.com *.googleoptimize.com *.cookiebot.com *.vimeo.com *.facebook.net *.laborpublisher.de *.bing.com *.sonichealthcare.com *.onetrust.com *.laborpublisher.staging.lfda.de 'unsafe-inline' 'unsafe-eval'; style-src data: 'self' *.googleapis.com *.sonichealthcare.com *.gstatic.com *.laborpublisher.de *.cookiebot.com *.onetrust.com 'unsafe-inline' 'unsafe-eval'; connect-src data: 'self' https://sentry.lfda.de https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://google.com https://www.google.com *.googleapis.com *.google-analytics.com https://stats.g.doubleclick.net *.google.com *.linkedin.com *.laborpublisher.de *.cookiebot.com *.onetrust.com *.laborpublisher.staging.lfda.de; font-src 'self' data: *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://www.google.com *.google-analytics.com *.gstatic.com *.googleapis.com *.amazonaws.com *.o3n.io *.google.com *.googletagmanager.com *.bing.com *.facebook.com *.linkedin.com *.sonichealthcare.com *.sonichealthcare.co.uk *.laborpublisher.de https://www.teamviewer.com *.cookiebot.com *.onetrust.com *.laborpublisher.staging.lfda.de 'unsafe-inline'; frame-src 'self' https://www.googletagmanager.com https://forms.office.com *.google.com *.youtube.com https://www.zeemaps.com *.surveymonkey.com *.hcaptcha.com *.vimeo.com *.facebook.com https://www.youtube-nocookie.com https://scnem3.com *.softgarden.io *.cookiebot.com; frame-ancestors 'self' https://*.mkt.dynamics.com https://*.azureedge.net; object-src 'none'; 2 default-src 'self' https://cdn.sei.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 2 default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; frame-src *; 2 default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; worker-src https: 'self' blob:; frame-src https: 'self' blob:; 2 upgrade-insecure-requests ; script-src 'self' https: blob: 'unsafe-eval' 'unsafe-inline';script-src-elem 'self' https: blob: 'unsafe-eval' 'unsafe-inline';media-src 'self' https: blob:;style-src 'self' https: 'unsafe-inline';media-src 'self' https: ; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.useinsider.com https://www.google.com https://ads.nextdoor.com https://www.googletagmanager.com https://*.secureprivacy.ai/ https://analytics.tiktok.com https://connect.facebook.net https://js.adsrvr.org https://c.amazon-adsystem.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://bat.bing.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://www.googleoptimize.com/optimize.js https://code.jquery.com/jquery-3.2.1.slim.min.js https://www.google-analytics.com/analytics.js https://ad.doubleclick.net https://snap.licdn.com https://code.jquery.com https://up.pixel.ad https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://secure-ds.serving-sys.com https://js.web-2-tel.com https://bs.serving-sys.com https://maps.googleapis.com https://maps.gstatic.com https://www.googleadservices.com https://www.youtube.com; img-src 'self' data: https://adservice.google.com https://s.gravatar.com https://bat.bing.net https://*.useinsider.com https://*.secureprivacy.ai/ https://*.wp.com/cdn.auth0.com/avatars https://arttrk.com https://www.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://bat.bing.com https://www.google.com https://www.google.co.in https://px.ads.linkedin.com https://pixel.sitescout.com https://www.googletagmanager.com https://attribution.sitescout.com https://insight.adsrvr.org https://s.amazon-adsystem.com https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://match.adsrvr.org/ https://www.google-analytics.com/ https://ad.doubleclick.net https://ib.adnxs.com/ https://pixel.rubiconproject.com/ https://i.ytimg.com https://clickserv.sitescout.com/ https://fonts.gstatic.com https://www.linkedin.com https://px4.ads.linkedin.com https://www.speedwaydigest.com https://speedwaydigest.com https://www.interstatebatteries.com/ https://interstatebatteries.com/ https://quickstart.interstatebatteries.com/ https://qa.home.interstatebatteries.com/; style-src 'self' 'unsafe-inline' https://*.useinsider.com https://fonts.googleapis.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://www.googletagmanager.com; font-src 'self' 'unsafe-inline' https://*.useinsider.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com; connect-src 'self' https://googleads.g.doubleclick.net https://google.com https://google.ad https://google.ae https://google.com.af https://google.com.ag https://google.al https://google.am https://google.co.ao https://google.com.ar https://google.as https://google.at https://google.com.au https://google.az https://google.ba https://google.com.bd https://google.be https://google.bf https://google.bg https://google.com.bh https://google.bi https://google.bj https://google.com.bn https://google.com.bo https://google.com.br https://google.bs https://google.bt https://google.co.bw https://google.by https://google.com.bz https://google.ca https://google.cd https://google.cf https://google.cg https://google.ch https://google.ci https://google.co.ck https://google.cl https://google.cm https://google.cn https://google.com.co https://google.co.cr https://google.com.cu https://google.cv https://google.com.cy https://google.cz https://google.de https://google.dj https://google.dk https://google.dm https://google.com.do https://google.dz https://google.com.ec https://google.ee https://google.com.eg https://google.es https://google.com.et https://google.fi https://google.com.fj https://google.fm https://google.fr https://google.ga https://google.ge https://google.gg https://google.com.gh https://google.com.gi https://google.gl https://google.gm https://google.gr https://google.com.gt https://google.gy https://google.com.hk https://google.hn https://google.hr https://google.ht https://google.hu https://google.co.id https://google.ie https://google.co.il https://google.im https://google.co.in https://google.iq https://google.is https://google.it https://google.je https://google.com.jm https://google.jo https://google.co.jp https://google.co.ke https://google.com.kh https://google.ki https://google.km https://google.kn https://google.co.kr https://google.com.kw https://google.kz https://google.la https://google.com.lb https://google.li https://google.lk https://google.co.ls https://google.lt https://google.lu https://google.lv https://google.com.ly https://google.co.ma https://google.md https://google.me https://google.mg https://google.mk https://google.ml https://google.com.mm https://google.mn https://google.ms https://google.com.mt https://google.mu https://google.mv https://google.mw https://google.com.mx https://google.com.my https://google.co.mz https://google.com.na https://google.com.ng https://google.com.ni https://google.ne https://google.nl https://google.no https://google.com.np https://google.nr https://google.nu https://google.co.nz https://google.com.om https://google.com.pa https://google.com.pe https://google.com.pg https://google.com.ph https://google.com.pk https://google.pl https://google.pn https://google.com.pr https://google.ps https://google.pt https://google.com.py https://google.com.qa https://google.ro https://google.ru https://google.rw https://google.com.sa https://google.com.sb https://google.sc https://google.se https://google.com.sg https://google.sh https://google.si https://google.sk https://google.com.sl https://google.sn https://google.so https://google.sm https://google.sr https://google.st https://google.com.sv https://google.td https://google.tg https://google.co.th https://google.com.tj https://google.tk https://google.tl https://google.tm https://google.tn https://google.to https://google.com.tr https://google.tt https://google.com.tw https://google.co.tz https://google.com.ua https://google.co.ug https://google.co.uk https://google.com.uy https://google.co.uz https://google.com.vc https://google.co.ve https://google.vg https://google.co.vi https://google.com.vn https://google.vu https://google.ws https://google.co.za https://google.co.zm https://google.co.zw https://www.googleadservices.com https://bat.bing.net https://www.google.com https://www.googleapis.com https://*.google-analytics.com https://*.useinsider.com https://s.amazon-adsystem.com https://analytics.tiktok.com https://*.secureprivacy.ai/ https://ara.paa-reporting-advertising.amazon https://maps.googleapis.com https://analytics.interstatebatteries.com https://analytics.google.com https://googleads4.g.doubleclick.net https://stats.g.doubleclick.net https://px.ads.linkedin.com https://secure-ds.serving-sys.com https://lm.serving-sys.com https://js.web-2-tel.com https://bat.bing.com https://www.facebook.com https://web-2-tel.com https://insight.adsrvr.org https://ad.doubleclick.net; frame-src 'self' https://*.useinsider.com https://analytics.interstatebatteries.com/ https://www.googletagmanager.com https://s.amazon-adsystem.com/ https://www.youtube.com https://insight.adsrvr.org https://www.google.com https://td.doubleclick.net https://pixel-sync.sitescout.com https://match.adsrvr.org/ https://www.facebook.com https://*.doubleclick.net; media-src 'self' data:; upgrade-insecure-requests; 2 frame-ancestors 'self' https://app.gather.town; 2 frame-ancestors 'self' https://*.cit.com https://citbankapp.cit.com https://uat-oao.cit.com https://stage-oao.cit.com https://sape-oao.cit.com https://pl-oao.cit.com https://qa-oao.cit.com https://customerfinancing.directcapital2.com https://www.customerfinancing.com https://customerfinancing.directcapital-test1.com https://customerfinancing.directcapital-test2.com https://customerfinancing.directcapital-test3.com https://customerfinancing.directcapital-test4.com onlineapps-conv.readiness.ibanking-services.com onlineapps.ibanking-services.com ibanking-services.com https://*.fisglobal.com https://*.citbank.com https://citcom-dev.ase1-dev.citnet.cit.com https://*.firstcitizens.com 2 frame-ancestors 'self' https://hansa-autoversicherung.de https://lumen.da-dg.com https://www.wigger-versicherung.de https://www.elbtor-versicherungen.de https://www.sternauto-versicherung.de 2 frame-ancestors 'self' https://go.pardot.com/ https://contactmarketing.dksh.com/ https://my.matterport.com/ https://www.google.co/ https://www.youtube.com/ https://irpages2.eqs.com/ https://online.anyflip.com/ https://charts3.equitystory.com/ https://www.instagram.com/ https://contactinfo.dksh.com/ https://contactgroup.dksh.com/ https://player.vimeo.com/ https://stg.paradox.ai/ https://td.doubleclick.net/ https://www.googletagmanager.com/ https://olivia.paradox.ai/ 2 object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /a/mxp.php; 2 default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-src https: data: 'self' blob:; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.gstatic.com; script-src-elem 'self' https://www.gstatic.com https://www.google.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://consent.cookiebot.com 'unsafe-inline'; connect-src 'self' https://rest.zse.hr https://*.google-analytics.com https://consentcdn.cookiebot.com; frame-src 'self' https://consentcdn.cookiebot.com https://youtube.com https://www.youtube.com https://www.google.com; img-src 'self' https://imgsct.cookiebot.com https://zse.hr data:; style-src 'self' 'unsafe-inline' 2 frame-ancestors 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://ssl.google-analytics.com http://maps.googleapis.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdn.plyr.io https://www.youtube.com https://pennyelectra.com https://*.azureedge.net https://*.dynamics.com https://snap.licdn.com https://*.hotjar.com https://googleads.g.doubleclick.net; object-src *; style-src 'self' data: 'unsafe-inline' https://*.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.typekit.net https://*.bootstrapcdn.com https://cdn.plyr.io https://pennyelectra.com https://*.azureedge.net https://*.dynamics.com; media-src * blob:; frame-src 'self' https://player.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com https://consentcdn.cookiebot.com https://maps.google.com https://vimeo.com https://*.azureedge.net https://*.dynamics.com https://forms.microsoft.com https://www.googletagmanager.com https://cdn.forms-content-1.sg-form.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://*.typekit.net https://*.googleapis.com; connect-src 'self' data: https://www.google-analytics.com https://analytics.google.com https://www.facebook.com https://consentcdn.cookiebot.com https://api.openai.com https://api.getimg.ai https://cdn.plyr.io https://noembed.com https://*.pennyelectra.com https://*.azureedge.net https://*.dynamics.com https://*.google.com https://px.ads.linkedin.com https://px.ads.linkedin.com wss://ws.hotjar.com https://*.hotjar.io https://*.google-analytics.com https://pagead2.googlesyndication.com; worker-src blob:; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.doubleclick.net https://us-assets.i.posthog.com https://eu-assets.i.posthog.com https://cdn.cookielaw.org https://maps.googleapis.com https://player.vimeo.com https://www.youtube.com https://*.youtube.com https://*.ytimg.com https://connect.facebook.net https://analytics.tiktok.com https://*.tiktok.com https://www.gstatic.com https://www.google.com https://ampisanmigueldeallende.com https://unpkg.com/leaflet@1.9.4/dist/ https://cdnjs.cloudflare.com/ajax/libs/photoswipe/5.4.4/ https://*.tawk.to https://cdn.jsdelivr.net/emojione/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com/leaflet@1.9.4/dist/ https://cdnjs.cloudflare.com/ajax/libs/photoswipe/5.4.4/ https://*.tawk.to https://cdn.jsdelivr.net/emojione/; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.tawk.to; connect-src 'self' webpack: https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.doubleclick.net https://www.googletagmanager.com https://*.googletagmanager.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://cdn.segment.com https://api.segment.io https://code.listtrac.com https://cdn.contentful.com https://experience.ninetailed.co https://*.ninetailed.co https://images.ctfassets.net https://videos.ctfassets.net https://downloads.ctfassets.net https://assets.ctfassets.net https://us.i.posthog.com wss://us.i.posthog.com https://eu.i.posthog.com https://us-assets.i.posthog.com https://eu-assets.i.posthog.com https://app.posthog.com https://eu.posthog.com https://photos.qa.cirrussystem.net https://photos.prod.cirrussystem.net https://cdn.sanity.io https://images.marketleader.com https://maps.googleapis.com https://player.vimeo.com https://vimeo.com https://www.youtube.com https://*.youtube.com https://*.ytimg.com https://analytics.tiktok.com https://business-api.tiktok.com https://*.tiktok.com https://analytics-ipv6.tiktokw.us https://www.google.com https://*.google.com https://www.google.ca https://www.googleadservices.com https://www.gstatic.com https://accounts.google.com https://appleid.apple.com https://www.facebook.com https://graph.facebook.com https://cognito-idp.us-west-2.amazonaws.com https://cognito-identity.us-west-2.amazonaws.com https://*.amazoncognito.com https://*.amazonaws.com https://ampisanmigueldeallende.com https://unpkg.com/leaflet@1.9.4/dist/ https://cdnjs.cloudflare.com/ajax/libs/photoswipe/5.4.4/ https://*.tawk.to wss://*.tawk.to https://eva-digital-experience-api.evipscloud.com https://eva-personnel-service.evipscloud.com https://eva-teams-service.evipscloud.com https://eva-shop-service.evipscloud.com https://cms.evipscloud.com https://www.evrealestate.com https://eva-digital-exp.auth.us-west-2.amazoncognito.com; frame-src 'self' https: blob: https://www.googletagmanager.com; worker-src 'self' blob:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.amazoncognito.com https://accounts.google.com https://www.facebook.com https://*.tawk.to; frame-ancestors 'self' https://app.contentful.com 2 default-src 'self' *.roche.com *.roche.net *.gene.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.roche.com *.roche.net www.datadoghq-browser-agent.com *.sandbox.my.site.com www.googleadservices.com cdn.mouseflow.com googleads.g.doubleclick.net www.youtube.com www.clarity.ms dianews.roche.com cdn.c360a.salesforce.com *.gstatic.com platform.twitter.com static.cloudflareinsights.com roche.piwik.pro widget.usersnap.com twitter.com t.contentsquare.net cdnjs.cloudflare.com cdn.jsdelivr.net www.googletagmanager.com www.google-analytics.com www.google.com munchkin.marketo.net *.marketo.com snippet.ramblechat.com ajax.googleapis.com dev.virtualearth.net app-sji.marketo.com maps.googleapis.com assets.adobedtm.com assets.adoberesources.net cdn.cookielaw.org static.ads-twitter.com connect.facebook.net snap.licdn.com sc.lfeeder.com cdn.leadinfo.net platform-api.sharethis.com buttons-config.sharethis.com www.gstatic.com https://t.sharethis.com https://*.bing.com player.vimeo.com znccssodhgpbfve5g-rochediacx.siteintercept.qualtrics.com siteintercept.qualtrics.com *.qualtrics.com rexis--apollo.sandbox.my.site.com https://rexis--selma.sandbox.my.site.com znehyzqu4e5xaovmd-rochediagnostics1.siteintercept.qualtrics.com roche.containers.piwik.pro bot.eu-rochebot.intersofthub.com bh.contextweb.com eu-cdn.walkme.com documentcloud.adobe.com tags.srv.stackadapt.com; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self' https://rexis--selma.sandbox.my.site.com; media-src * 'self' data:; object-src 'self'; child-src 'self' *.roche.com *.roche.net www.googletagmanager.com; frame-src 'self' *.roche.com *.roche.net rochediacx.fra1.qualtrics.com rochediagnostics1.az1.qualtrics.com bot.eu-rochebot.intersofthub.com creators.spotify.com www.brighttalk.com podcasters.spotify.com anchor.fm fhoffmann-larocheag.demdex.net sites.google.com *.googleapis.com *.marketo.com *.twitter.com *.google.com roche.scene7.com *.youtube.com *.googletagmanager.com sftp.rch.cm platform.twitter.com app-sji.marketo.com cdn.walkme.com/* heyzine.com app.smartsheet.com roche.demdex.net dayintegrationinternal.demdex.net td.doubleclick.net https://t.sharethis.com https://r.bing.com/* https://www.bing.com/* v.calameo.com player.vimeo.com docs.google.com accounts.google.com https://docs.google.com/ *.monday.com documentcloud.adobe.com; worker-src 'self' *.roche.com *.roche.net blob:; frame-ancestors 'self' *.roche.com *.roche.net sites.google.com https://docs.google.com/ docs.google.com accounts.google.com *.cloudflareworkers.com; form-action 'self' *.roche.com *.roche.net rochediacx.fra1.qualtrics.com rochediagnostics1.az1.qualtrics.com; base-uri 'self' *.roche.com *.roche.net *.gene.com *.secure.roche.com assets.adobedtm.com; report-uri https://bxu7fu4kkj.execute-api.eu-west-1.amazonaws.com/TestStage/CSPReports; 2 frame-ancestors 'self' *.quattropod.com quattropod.com *.quattropod.com.cn quattropod.com.cn ezcast-pro.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-eval' *.hotjar.com guysandstthomas.shorthandstories.com *.trac.jobs www.google.com www.gstatic.com *.googletagmanager.com *.shorthand.com unpkg.com cdnjs.cloudflare.com *.webspellchecker.net *.visualwebsiteoptimizer.com *.cloudflare.com *.jsdelivr.net *.contentsquare.net *.teams.cdn.office.net; script-src-elem 'self' 'unsafe-inline' *.hotjar.com guysandstthomas.shorthandstories.com *.trac.jobs www.google.com www.gstatic.com *.googletagmanager.com *.shorthand.com unpkg.com cdnjs.cloudflare.com *.webspellchecker.net *.visualwebsiteoptimizer.com *.cloudflare.com *.jsdelivr.net *.contentsquare.net *.teams.cdn.office.net www.connect.facebook.net *.clarity.ms c.bing.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.webspellchecker.net www.gstatic.com cdnjs.cloudflare.com unpkg.com; img-src 'self' https://www.guysandstthomas.nhs.uk data: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.gstatic.com *.ytimg.com *.shorthandstories.com *.visualwebsiteoptimizer.com *.baidu.com *.hotjar.com *.trac.jobs *.contentsquare.net https://dev.visualwebsiteoptimizer.com *.clarity.ms c.bing.com; frame-src 'self' *.youtube.com www.google.com https://accounts.google.com; frame-ancestors 'self'; child-src blob:; font-src 'self' data: *.gstatic.com *.googleusercontent.com *.googleapis.com; connect-src 'self' *.hotjar.io *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googleapis.com *.google.com *.g.doubleclick.net *.visualwebsiteoptimizer.com *.shorthand.com *.webspellchecker.net wss://*.hotjar.com *.cloudflare.com *.hotjar.com *.trac.jobs wss://ws.hotjar.com *.launchdarkly.com *.contentsquare.net https://cdn.jsdelivr.net unpkg.com *.clarity.ms c.bing.com; report-uri /report-csp-violation; upgrade-insecure-requests 2 frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com https://*.petrolplus.ru https://*.gpc-rus.ru https://*.transitcard.ru https://*.resheno.xyz https://*.petrolplus.kz 2 frame-ancestors 'self' https://app.storyblok.com http://app.storyblok.com/; font-src 'self' https://fonts.gstatic.com https://*.hotjar.com data: https://fast.wistia.net/ https://www.sjwoe.com; 2 default-src 'self' *.wistia.com *.hotjar.com www.google.com www.google.co.in pages.wcgclinical.com www.google-analytics.com *.doubleclick.net *.centerwatch.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.wcgclinical.com trinitymedia.ai *.trinitymedia.ai *.cookielaw.org www.googletagmanager.com *.marketo.com *.marker.io pages.wcgclinical.com www.google-analytics.com www.googleadservices.com *.doubleclick.net *.hotjar.com unpkg.com *.unpkg.com *.marketo.net *.cloudfront.net *.mktoresp.com www.google.com *.cdntwrk.com snap.licdn.com *.wistia.com *.wistia.net wcgclinical.staging.wpengine.com widget.yeps.io www.buzzsprout.com *.adoberesources.net documentcloud.adobe.com gstatic.com *.gstatic.com pki.goog *.pki.goog *.google.com googleapis.com *.googleapis.com js.zi-scripts.com *.centerwatch.com *.sentry-cdn.com *.mktoweb.com edge.fullstory.com tags.srv.stackadapt.com *.mountain.com *.talkdeskapp.com; style-src 'self' 'unsafe-inline' *.cloudfront.net fonts.googleapis.com pages.wcgclinical.com *.cdntwrk.com *.wcgclinical.com *.marketo.com *.centerwatch.com *.mktoweb.com *.typekit.net tags.srv.stackadapt.com; object-src 'self' *.wcgclinical.com *.wcgirb.com *.centerwatch.com *.wpengine.com *.wpenginepowered.com; base-uri 'self'; connect-src 'self' *.amazonaws.com *.googlesyndication.com *.cookielaw.org *.google-analytics.com *.linkedin.oribi.io *.onetrust.com *.doubleclick.net *.marker.io *.hotjar.io *.hotjar.com *.mktoresp.com *.hotjar.io *.wistia.com *.wistia.net fg8vvsvnieiv3ej16jby.litix.io *.yeps.io embedwistia-a.akamaihd.net js.zi-scripts.com *.centerwatch.com *.google.com www.wcgclinical.com browser.sentry-cdn.com *.adobe.io wss://*.adobe.io *.adoberesources.net www.googletagmanager.com tags.srv.stackadapt.com qvdt3feo.com *.mountain.com 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 *.talkdeskapp.com api.talkdeskapp.com wss://tsock.us1.twilio.com mcs.us1.twilio.com *.dynatrace.com; font-src 'self' fast.wistia.com fonts.gstatic.com fonts.googleapis.com *.centerwatch.com *.typekit.net talkdeskchatsdk.talkdeskapp.com data:; frame-src 'self' *.wcgclinical.com trinitymedia.ai *.trinitymedia.ai *.marker.io *.doubleclick.net *.hotjar.com *.google.com *.wistia.net *.wistia.com *.powerbi.com *.youtube.com *.vimeo.com wcgclinical.outgrow.us *.five9.com *.marketo.com www.buzzsprout.com *.centerwatch.com www.googletagmanager.com *.mktoweb.com *.wpengine.com *.wpenginepowered.com documentcloud.adobe.com *.talkdeskapp.com data:; img-src 'self' www.wcgclinical.com www.wcgirb.com *.gravatar.com www.google-analytics.com www.googletagmanager.com www.google.com www.google.co.in *.cdntwrk.co *.cdntwrk.com *.wistia.net *.wistia.com *.fdanews.com via.placeholder.com wcgclinical.staging.wpengine.com embedwistia-a.akamaihd.net wcgclinical.wpengine.com wcgnewprod.wpengine.com wcgnewprodstg.wpengine.com wcgnewprod.wpenginepowered.com wcgnewprodstg.wpenginepowered.com px.ads.linkedin.com *.cookielaw.org *.centerwatch.com *.mktoweb.com assets.adoberesources.net lh3.googleusercontent.com *.talkdeskapp.com qa-cdn-talkdesk.talkdeskdev.com media.us1.twilio.com googleads.g.doubleclick.net raw.githubusercontent.com data:; media-src 'self' *.wistia.com embedwistia-a.akamaihd.net embed-fastly.wistia.com *.centerwatch.com www.wcgclinical.com assets.adoberesources.net media.us1.twilio.com data: blob:; worker-src 'self' blob:; 2 default-src * blob: data: cid:; img-src * data: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline'; font-src * data:; frame-ancestors *.ouhealth.com 2 default-src 'self'; script-src 'self' *.optimizely.com https://player.vimeo.com 'unsafe-inline' 'unsafe-eval' tags.tiqcdn.com *.typekit.net *.loyalhealth.com maps.googleapis.com *.tealiumiq.com; font-src 'self' *.typekit.net fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.optimizely.com *.typekit.net fonts.googleapis.com *.tiqcdn.com; img-src 'self' data: https://i.vimeocdn.com *.azureedge.net *.loyalhealth.com *.typekit.net www.baptist-health.com maps.googleapis.com maps.gstatic.com *.cms.optimizely.com *.ytimg.com *.wpenginepowered.com; connect-src 'self' data: *.optimizely.com https://vimeo.com *.typekit.net *.loyalhealth.com api-js.mixpanel.com *.googleapis.com *.tealiumiq.com *.tiqcdn.com; object-src 'none'; frame-ancestors 'self' *.optimizely.com *.vimeo.com; worker-src 'self' blob:; form-action 'self' *.eloqua.com *.t.eloqua.com ; frame-src 'self' https://player.vimeo.com https://vimeo.com https://www.vimeo.com *.ypo.education youtube.com www.youtube.com youtu.be https://baptisthealtharkansas.jotform.com; 2 default-src * blob: data: cid:; img-src * data: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline'; font-src * data:; frame-ancestors *.lcmchealth.org 2 default-src 'self' https://analytics.mmlan.de; style-src 'self' https://analytics.mmlan.de/ 'sha256-VqWowlraFBNcw9MSUtRKR9wWVcfqnRco7jxuBHj8Y/o='; script-src 'self' https://analytics.mmlan.de; img-src 'self' data: https://analytics.mmlan.de/; 2 default-src 'self'; script-src 'self' https://www.havas.com https://www.havas.fr https://www.youtube.com https://yt.zone-secure.net https://www.googletagmanager.com https://www.google-analytics.com https://cdn.matomo.cloud/matomo.js https://unpkg.com/friendly-challenge@0.9.11/widget.module.min.js 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://cdnjs.cloudflare.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https://region1.google-analytics.com https://www.google-analytics.com https://havasgroup-site.matomo.cloud https://www.havas.com https://www.havas.fr; font-src 'self' data:; frame-src 'self' https://sdk.companywebcast.com https://gateway.euronext.com https://www.dailymotion.com https://www.youtube-nocookie.com https://geo.dailymotion.com https://player.vimeo.com https://havas.engagestream.euronext.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://s2.dmcdn.net/ https://s1.dmcdn.net/; manifest-src 'self'; media-src 'self'; 2 default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'self' *.youtube.com youtube.com *.vimeo.com vimeo.com; img-src * data:; font-src * data:; style-src 'unsafe-inline' *; 2 default-src *.fontawesome.com *.typekit.net https://cdn.insight.sitefinity.com https://pro.itech.cloud.sitefinity.com 'self' https://cdn.cookielaw.org https://*.clarity.ms https://c.bing.com; style-src 'unsafe-inline' *.typekit.net https://www.gstatic.com 'self' https://ka-f.fontawesome.com https://kit.fontawesome.com https://www.ssa.gov https://cdn.cookielaw.org https://tagmanager.google.com googletagmanager.com www.googletagmanager.com https://cdn.insight.sitefinity.com; script-src *.fontawesome.com https://js.hsforms.net/forms/embed/v2.js 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://cdn.insight.sitefinity.com kit.fontawesome.com ka-f.fontawesome.com https://cdn.cookielaw.org https://www.googletagmanager.com https://www.ssa.gov https://ajax.googleapis.com https://tagmanager.google.com https://www.clarity.ms https://scripts.clarity.ms/ *.ipredictive.com https://js.ipredictive.com/viant_universal_pixel.js https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api; connect-src *.fontawesome.com forms.hubspot.com *.hubspot.com *.hsforms.com *.hsforms.net 'self' https://www.google.com https://www.gstatic.com https://ka-f.fontawesome.com https://cdn.cookielaw.org https://geolocation.onetrust.com/ https://roper-privacy.my.onetrust.com/request/v1/consentreceipts/anonymous https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.clarity.ms https://c.clarity.ms https://n.clarity.ms/collect https://*.clarity.ms https://c.bing.com *.ipredictive.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com; img-src data: https://pro.itech.cloud.sitefinity.com https://sta.itech.cloud.sitefinity.com https://cdn.insight.sitefinity.com *.hsforms.com *.hsforms.net *.hubspot.com 'self' https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.clarity.ms https://c.clarity.ms https://*.clarity.ms https://c.bing.com *.ipredictive.com https://snap.licdn.com/ https://fonts.gstatic.com fonts.gstatic.com; frame-src https://www.google.com https://forms.hsforms.com/ https://player.vimeo.com/ https://www.youtube.com/ https://cdn.cookielaw.org *.ipredictive.com; font-src https://ka-f.fontawesome.com https://use.typekit.net https://ka-p.fontawesome.com data: 'self'; media-src 'self' 2 frame-ancestors 'self' https://*.voya.com https://mybetterworld.es https://*.mybetterworld.es; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; base-uri 'none'; 2 child-src 'self' blob:; connect-src 'self' https://www.facebook.com/ https://ct.pinterest.com https://bam.nr-data.net https://www.google-analytics.com https://*.doubleclick.net https://ct.pinterest.com https://*.logrocket.io https://*.lr-ingest.io https://*.lr-in.com https://aq.flippenterprise.net https://dam.flippenterprise.net https://sfml.flippback.com https://p.flipp.com https://eu-prod.oppwa.com https://tr.snapchat.com https://*.googleapis.com https://analytics.google.com https://*.googlesyndication.com https://*.linkedin.oribi.io https://*.linkedin.com https://license.strich.io https://global.ketchcdn.com https://cdn.ketchjs.com https://www.google.com https://googletagmanager.com https://www.googletagmanager.com https://api.bazaarvoice.com https://network-a.bazaarvoice.com/ https://apps.bazaarvoice.com data:; default-src 'self'; font-src 'self' https://fonts.gstatic.com https://apps.bazaarvoice.com data:; frame-ancestors 'self'; frame-src 'self' https://ct.pinterest.com/ https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.doubleclick.net https://www.facebook.com https://tr.snapchat.com https://tr6.snapchat.com https://www.youtube.com https://www.youtube-nocookie.com https://static.addtoany.com https://eu-prod.oppwa.com https://www.pinterest.com https://*.gordonnow.gfsstore.com https://*.gordonnow.restaurantmarket.com https://*.gordonnow.gordonrestaurantmarket.com; img-src 'self' https://www.gordonrestaurantmarket.com https://gordonrestaurantmarket.com https://www.restaurantmarket.com https://restaurantmarket.com https://gfsstore.com https://ajax.googleapis.com https://graph.facebook.com https://platform-lookaside.fbsbx.com https://*.fbsbx.com https://*.fbcdn.net https://*.gstatic.com https://www.google-analytics.com https://www.google.com https://*.googleapis.com https://*.doubleclick.net https://sgfscom.global.ssl.fastly.net https://2qhopr5c.micpn.com https://mi.gfsstore.com https://ct.pinterest.com https://www.facebook.com https://connect.facebook.net https://*.collect.igodigital.com https://i.ytimg.com https://aq.flippenterprise.net https://cdn.flippenterprise.net https://a.wishabi.com https://www.googletagmanager.com https://eu-prod.oppwa.com https://*.linkedin.com http://*.cdninstagram.com/ https://global.ketchcdn.com https://cdn.ketchjs.com https://network-a.bazaarvoice.com/ https://api.bazaarvoice.com https://apps.bazaarvoice.com https://photos-uat-us.bazaarvoice.com https://c1.ugc.bazaarvoice.com https://*.bazaarvoice.com data:; media-src https://*.cdninstagram.com; object-src none; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js-agent.newrelic.com https://bam.nr-data.net https://*.gfsstore.com https://*.restaurantmarket.com https://*.gordonrestaurantmarket.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://*.gstatic.com https://*.doubleclick.net https://*.googleapis.com https://www.youtube.com https://s.ytimg.com https://static.addtoany.com https://*.gordonnow.gfsstore.com https://s.pinimg.com https://connect.facebook.net https://sc-static.net https://2qhopr5c.micpn.com https://mi.gfsstore.com https://cdn.logrocket.io https://cdn.lr-ingest.io https://10983160.collect.igodigital.com https://aq.flippenterprise.net https://cdn.lr-in.com https://eu-prod.oppwa.com https://*.licdn.com https://tr.snapchat.com https://global.ketchcdn.com https://cdn.ketchjs.com https://cdn.logr-in.com https://apps.bazaarvoice.com data: blob:; style-src 'self' 'unsafe-inline' https://*.gfsstore.com https://www.gordonrestaurantmarket.com https://gordonrestaurantmarket.com https://www.restaurantmarket.com https://restaurantmarket.com https://gfsstore.com https://ajax.googleapis.com https://fonts.googleapis.com https://www.gstatic.com https://tagmanager.google.com https://aq.flippenterprise.net https://eu-prod.oppwa.com https://*.googletagmanager.com; worker-src 'self' blob:; 2 frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; upgrade-insecure-requests; form-action 'self' https://hayward.com/customer/account/logout/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com www.paypal.com 'self' 'unsafe-inline'; style-src https://haywardpools.tfaforms.net/ https://stackpath.bootstrapcdn.com/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css https://cdnjs.cloudflare.com *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.yotpo.com *.googleapis.com maxcdn.bootstrapcdn.com static.ecorebates.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; script-src https://code.jquery.com/jquery-1.12.4.min.js https://code.jquery.com/jquery-2.2.4.min.js https://code.jquery.com/jquery-3.2.1.min.js https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.js https://html5.dcatalog.com/dcviewer.js https://api.ipify.org/ https://unpkg.com/react@18/umd/react.production.min.js https://unpkg.com/react-dom@18/umd/react-dom.production.min.js https://assets.adobedtm.com/ https://adobedc.demdex.net/ https://edge.adobedc.net https://haywardpools.tfaforms.net/ https://widget-hosts.mavenoid.com https://app.mavenoid.com https://api.mavenoid.com/ https://mavenoidfiles.com/ https://mavenoid.com/ https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net https://www.clarity.ms https://p.clarity.ms https://i.clarity.ms https://scripts.clarity.ms https://www.clarity.ms/ https://*.clarity.ms/ assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com *.paypal.com bam.nr-data.net js-agent.newrelic.com tfaforms.com adobedc.demdex.net https://www.clarity.ms/tag/g2gweglsfd https://cdn.bc0a.com/autopilot/ app.konecto.ai *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com commerce.hayward-pool-assets.com *.yotpo.com *.disqus.com static.ecorebates.com hayward.ecorebates.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net www.paypal.com api.braintreegateway.com client-analytics.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; media-src https://www.youtube.com 'self' *.adobe.com www.totallyhayward.com app.konecto.ai 'self' 'unsafe-inline'; img-src https://hayward-pool-assets.com https://haywardpools.tfaforms.net https://mavenoidfiles.com/ https://mavenoid.com/ https://www.facebook.com https://www.poolspaparts.net https://connect.facebook.net https://commerce.hayward-pool-assets.com/ https://*.clarity.ms/ data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypalobjects.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com www.gstatic.com magefan.com cm.magefan.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.google.ca/ads/ga-audiences app.konecto.ai lu-railsapp-learnupon-use2.s3.us-east-2.amazonaws.com commerce.hayward-pool-assets.com *.yotpo.com www.poolspaparts.net *.disqus.com https://img.youtube.com dhv2ziothpgrr.cloudfront.net www.paypal.com fpdbs.paypal.com *.hayward-pool-assets.com data: 'self' 'unsafe-inline'; frame-src http://www.haywardnet.com https://html5.dcatalog.com https://haywardpools.tfaforms.net https://maps.google.com/ blob: https://haywardpools.tfaforms.net/72 fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * haywardpools.tfaforms.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com www.paypal.com 'self' 'unsafe-inline'; font-src https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/ www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://app.mavenoid.com/fonts/ https://widget-hosts.mavenoid.com/fonts/hayward-fonts/ app.konecto.ai *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com maxcdn.bootstrapcdn.com static.ecorebates.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; connect-src https://www.haywardnet.com/inground/products/energysolutions/getEnergyCalculatorResults.cfm https://hayward.ecorebates.com/ https://hayward-test-jsons.s3.amazonaws.com/data/locationData.json https://hayward-test-jsons.s3.amazonaws.com/data/featuresData.json https://hayward-test-jsons.s3.amazonaws.com/data/materialData.json https://hayward-test-jsons.s3.amazonaws.com/data/propertyTypeData.json https://hayward-test-jsons.s3.amazonaws.com/data/shapeSizeData.json https://hayward-test-jsons.s3.amazonaws.com/data/galleryData.json https://www.youtube.com https://assets.adobedtm.com/ https://adobedc.demdex.net/ https://edge.adobedc.net https://us-east-1-otel.formassembly.com/v1/traces https://stats.g.doubleclick.net/g/collect https://widget-hosts.mavenoid.com https://app.mavenoid.com https://api.mavenoid.com/ https://mavenoidfiles.com/ https://mavenoid.com/ https://commerce.hayward-pool-assets.com/magento/ https://haywardpools.tfaforms.net/72 https://i.clarity.ms https://e.clarity.ms https://connect.facebook.net https://www.facebook.com https://*.clarity.ms/ dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.paypalobjects.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com api.addressy.com *.cardinalcommerce.com bam.nr-data.net js-agent.newrelic.com https://ixfd2-api.bc0a.com https://cdn.bc0a.com app.konecto.ai *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com adobedc.demdex.net edge.adobedc.net hayward.com www.hayward.com commerce.hayward-pool-assets.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com www.paypal.com api.braintreegateway.com client-analytics.braintreegateway.com 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; 2 script-src 'self' https://checkout.stripe.com https://kit.fontawesome.com https://use.fontawesome.com; style-src 'self' 'unsafe-inline' https://*.fontawesome.com https://maxcdn.bootstrapcdn.com; font-src 'self' data: https://*.fontawesome.com https://maxcdn.bootstrapcdn.com; object-src 'self'; child-src 'self' https://checkout.stripe.com; connect-src 'self' https://checkout.stripe.com https://*.fontawesome.com 2 default-src 'self' 'unsafe-inline' data: *.clarity.ms *.onetrust.com *.datatables.net *.trackingplan.com *.wsasitecore.net *.site.com *.salesforce-scrt.com *.widex.com *.wsa.com *.signia.net *.rexton.com *.audioservice.com *.coselgi.com *.signia-pro.com *.signia-hearing.com *.salesforce-sites.com *.widexpro.com *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.cookielaw.org *.typekit.net *.azureedge.net *.azurefd.net *.youtube-nocookie.com *.bootstrapcdn.com *.w3.org *.doubleclick.net *.facebook.net *.mouseflow.com *.googlesyndication.com *.gstatic.com *.sleeknote.com *.stackadapt.com *.linkedin.com *.shoeboxonline.com *.nr-data.net *.force.com *.nakanohito.jp gift.echoes.plus blob:; img-src 'self' data: blob: *.widex.com *.wsa.com *.signia.net *.rexton.com *.audioservice.com *.coselgi.com *.signia-pro.com *.signia-hearing.com *.widexpro.com stats.g.doubleclick.net *.googleapis.com *.gstatic.com *.ytimg.com *.cloudflare.com *.cookielaw.org *.onetrust.com *.azureedge.net *.azurefd.net *.linkedin.com *.w3.org *.googletagmanager.com *.google-analytics.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.facebook.com *.ggpht.com *.ytimg.com *.sleeknote.com *.shoeboxonline.com *.sivantos.com *.auditionsolidarite.org *.nakanohito.jp *.userlocal.jp *.simpli.fi *.doubleclick.net www.googleadservices.com *.convertexperiences.com *.convertexperiments.com gift.echoes.plus; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.clarity.ms *.jquery.com *.datatables.net *.simpli.fi *.site.com *.cookieinformation.com *.rawgit.com *.salesforce-sites.com *.salesforceliveagent.com *.salesforce.com *.jsdelivr.net *.widex.com *.wsa.com *.signia.net *.signia-hearing.com *.rexton.com *.audioservice.com *.coselgi.com *.signia-pro.com *.widexpro.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.cookielaw.org *.onetrust.com *.youtube-nocookie.com *.azureedge.net *.azurefd.net *.facebook.net *.doubleclick.net *.googlesyndication.com https://browser-update.org *.w3.org *.youtube.com *.livechatinc.com *.newrelic.com *.nr-data.net *.stackadapt.com *.gstatic.com *.sleeknote.com *.licdn.com *.shoeboxonline.com *.piwik.pro *.google-analytics.com *.mouseflow.com *.force.com *.nakanohito.jp js.adsrvr.org qvdt3feo.com cdn.bttrack.com static.airtable.com *.convertexperiences.com *.convertexperiments.com gift.echoes.plus blob:; frame-src https://embedsocial.com https://sst.coselgi.com/ https://sst.rexton.com/ https://sst.signia-pro.com/ https://wsaud.my.site.com/ https://wsaud--playground.sandbox.my.site.com/ https://insight.adsrvr.org/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://cdn.cookielaw.org https://www.shoeboxonline.com/ https://www.google.com/ https://features.signia-hearing.com/ https://service.force.com/ https://embed.acast.com/ https://www.googletagmanager.com/ https://airtable.com/ https://sst.audioservice.com https://sst.widex.com https://sst.signia.net https://sst.signia-pro.com https://sst.widexpro.com; media-src storage.userlocal.jp *.widex.com *.wsa.com *.signia.net *.rexton.com *.audioservice.com *.coselgi.com *.signia-pro.com *.signia-hearing.com *.widexpro.com *.azureedge.net *.azurefd.net; worker-src blob:; child-src blob: 2 default-src 'self'; script-src 'self' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://code.jquery.com https://widget.trustpilot.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.datatables.net https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net/npm https://cdn.jsdelivr.net https://esm.sh https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.bunny.net https://unpkg.com https://cdn.datatables.net https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net/npm https://cdn.jsdelivr.net 'unsafe-inline'; img-src * data: blob:; font-src 'self' https://fonts.gstatic.com https://fonts.bunny.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com data:; connect-src 'self' https://stats.revbid.net https://probe.revbid.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://esm.sh https://unpkg.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com blob: data:; worker-src 'self' blob:; frame-src 'self' https://widget.trustpilot.com https://www.google.com/ https://www.gstatic.com/; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://s.pinimg.com https://ecncdn.b-cdn.net https://monitor.econda-monitor.de https://plugins.flockler.com https://googleads.g.doubleclick.net https://*.cloudflare.com https://*.googleapis.com https://l.ecn-ldr.de https://*.welthungerhilfe.de https://snap.licdn.com https://*.datawrapper.de https://flockler.com https://*.flockler.com https://*.tiktok.com https://*.bing.com https://www.flipsnack.com https://*.mapbox.com https://embed.typeform.com https://player.podigee-cdn.net https://cdn.podigee.com https://cdn.ablyft.com https://*.usercentrics.eu https://connect.facebook.net https://www.youtube.com https://www.verizonmedia.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://ct.pinterest.com https://my.raceresult.com https://media.cologne-timing.de https://events2.raceresult.com https://widget.proca.app; frame-ancestors 'self'; worker-src blob: 'self'; 2 default-src 'self' ; style-src https: 'unsafe-inline'; script-src https://*.ispserver.com/ https://*.ispserver.ae/ https://ispserver.ae/ https://ispserver.ru/ https://ispserver.com/ wss://*.chathost.ru/ https://*.chathost.ru/ https://*.carrotquest.app/ https://chat.hoztnode.net:3000 https://chat.ispsystem.net:3001 https://www.googletagmanager.com/ https://www.google.com/ https://my.ispserver.ru/ https://my.ispserver.com/ https://my.ispserver.ae/ https://www.google-analytics.com/ https://www.googleadservices.com/ https://tag.marinsm.com/ https://mc.yandex.ru/ https://top-fwz1.mail.ru/ https://www.gstatic.com/ https://googleads.g.doubleclick.net/ https://pixel-geo.prfct.co/ 'unsafe-inline'; img-src * data:; connect-src 'self' https://api.carrottrack.app/ wss://*.chathost.ru/ https://*.chathost.ru/ https://*.carrottrack.io/ https://chat.hoztnode.net:3000/ wss://chat.hoztnode.net:3000/ https://*.carrotquest.app/ wss://*.carrotquest.app/ https://stats.g.doubleclick.net/ https://top-fwz1.mail.ru/ https://mc.yandex.ru/; frame-src 'self' https://www.google.com/ https://bid.g.doubleclick.net/; font-src 'self' https://*.carrotquest.app/; media-src 'self' https://*.carrotquest.app/; object-src 'self'; frame-ancestors 'self' https://metrika.yandex.ru; 2 font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.oney.io *.staging.oney.io *.bio.coop *.biocoop.fr *.cookieless-data.com *.youtube-nocookie.com *.adserver01.de *.creative-serving.com *.adnxs.com *.facil-iti.app *.facil-iti.com *.merci-app.com *.scite.ai *.flymenu.fr 'self' data: assets.merci-app.com cdn.scite.ai data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.bio.coop *.biocoop.fr *.google.com *.googletagmanager.com *.facebook.com *.youtube-nocookie.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com *.bio.coop *.biocoop.fr *.google.fr *.googletagmanager.com *.doubleclick.net *.ad-srv.net *.redintelligence.net *.dynamo.one *.ad4m.at *.ad4mat.net *.cookieless-data.com *.adserver01.de *.creative-serving.com *.adnxs.com *.avis-verifies.com *.facebook.com *.tradedoubler.com *.calameo.com *.facil-iti.app *.facil-iti.com *.spotify.com *.snapchat.com *.flymenu.fr td.doubleclick.net tr.snapchat.com docs.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io *.hsforms.net *.hsforms.com *.bio.coop *.biocoop.fr blob: *.google.com *.google.fr *.google.co.uk *.google.es *.google.nl *.google.ca *.google.de *.google.it *.google.pt *.google.pl *.google.ru *.google.co.jp *.google.com.br *.google.com.au *.google.mx *.google.ch *.google.be *.google.dz *.google.sn *.googleusercontent.com *.avis-verifies.com *.bing.com *.adform.net *.ad4m.at *.ad4mat.net *.adscale.de *.smartadserver.com *.casalemedia.com *.twiago.com *.googletagmanager.com *.cookieless-data.com *.youtube-nocookie.com *.ytimg.com *.adserver01.de *.creative-serving.com *.adnxs.com *.demdex.net *.justpremium.com *.bidswitch.net *.1rx.io *.unrulymedia.com *.id5-sync.com *.360yield.com *.facebook.com *.facebook.net *.clarity.ms *.doubleclick.net *.facil-iti.app *.facil-iti.com *.digital-metric.net *.linkedin.com *.imgstatics.com *.snapchat.com *.taboola.com *.datnova.com *.googlesyndication.com *.cookielaw.org/ *.flymenu.fr 'self' data: www.facebook.com adservice.google.com www.google.pl www.google.ch www.google.be www.google.es www.google.de www.google.mg tr.snapchat.com trk.datnova.com pagead2.googlesyndication.com px.ads.linkedin.com connect.facebook.net www.google.sn a.imgstatics.com www.google.it www.google.dz data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.oney.io *.staging.oney.io *.hsforms.net *.hsforms.com *.bio.coop *.biocoop.fr *.google.fr *.googleapis.com *.gstatic.com *.googletagmanager.com *.avis-verifies.com *.bing.com *.metaffiliation.com *.dynamo.one *.veoxa.com *.sddan.com *.social-media-system.com *.ad4mat.de *.ad4m.at *.consensu.org *.ciblelink.com *.cookieless-data.com *.youtube-nocookie.com *.adserver01.de *.creative-serving.com *.adnxs.com *.sbc30.net *.facebook.com *.facebook.net *.optimalpeople.fr *.adschoom.com *.tradedoubler.com *.clarity.ms *.facil-iti.app *.facil-iti.com *.digital-metric.net *.aticdn.net *.unpkg.com *.licdn.com *.flymenu.fr *.sc-static.net *.apicit.net *.gsitrix.com *.snapchat.com *.cookielaw.org *.priixclub.com *.datnova.com *.taginsight.com *.doubleclick.net https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.cookielaw.org/ api.flymenu.fr sc-static.net apicit.net p.gsitrix.com tr.snapchat.com cdn.cookielaw.org xir.prixclub.com bat.bing.com tags.clickintext.net tag.aticdn.net o.gsitrix.com swrap.tradedoubler.com trk.datnova.com gateway.taginsight.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.hipay.com *.googleapis.com *.bio.coop *.biocoop.fr *.cookieless-data.com *.youtube-nocookie.com *.adserver01.de *.creative-serving.com *.adnxs.com *.facil-iti.app *.facil-iti.com *.flymenu.fr *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com *.bio.coop *.biocoop.fr *.cookieless-data.com *.youtube-nocookie.com *.adserver01.de *.creative-serving.com *.adnxs.com *.facil-iti.app *.facil-iti.com *.bing.com *.flymenu.fr www.bing.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.googleapis.com *.oney.io *.staging.oney.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.bio.coop *.biocoop.fr *.google.fr *.doubleclick.net *.metaffiliation.com *.cookieless-data.com *.youtube-nocookie.com *.adserver01.de *.creative-serving.com *.adnxs.com *.optimalpeople.fr *.clarity.ms *.pvnsolutions.com *.facil-iti.app *.facil-iti.com *.unpkg.com *.taginsight.com *.hlx.page *.linkedin.com *.flymenu.fr *.xiti.com *.facebook.com *.bing.com *.bing.net *.gsitrix.com *.onetrust.com *.snapchat.com *.googlesyndication.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.cookielaw.org/ *.onetrust.com/ api.flymenu.fr logc412.xiti.com www.facebook.com bat.bing.com p.gsitrix.com adservice.google.com pagead2.googlesyndication.com gateway.taginsight.com rum.hlx.page px.ads.linkedin.com www.google.com bat.bing.net unpkg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 upgrade-insecure-requests; base-uri 'self'; img-src 'self' https: blob: data:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.idec.com idecusa.my.site.com service.force.com *.salesforce.com *.doubleclick.net *.google.com tpc.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.go-mpulse.net browser-update.org *.salesforceliveagent.com snap.licdn.com *.webtraxs.com api.ipify.org cdn.doofinder.com rw1.marchex.io h.online-metrix.net *.cybersource.com s.yimg.jp yubinbango.github.io *.feedbackify.com consent.cookiebot.com platform-api.sharethis.com code.jivosite.com www.gstatic.com consentcdn.cookiebot.com buttons-config.sharethis.com t.sharethis.com s3.amazonaws.com 684d0d41.akstat.io orbitvu.co *.orbitvu.co *.go-mpulse.net hm.baidu.com bat.bing.com js.hs-scripts.com js.hs-analytics.net js.hscollectedforms.net js.hs-banner.com js.hubspot.com js.hsadspixel.net *.contentsquare.net js.hsforms.net cdn.jsdelivr.net *.imagino.com *.newrelic.com cdn.beschannels.com cdn.dingxiang-inc.com api.sheepgeo.com; frame-ancestors 'self' *.contentful.com; worker-src 'self' blob:; 2 frame-ancestors 'self' https://app.contentful.com https://secure.axosbank.com https://onlinebanking.axosbank.com https://onboard.axos.com https://axosbank.outsystems.app https://secure.axos.com https://client.axos.com https://secure.ufbdirect.com https://client.ufbdirect.com; 2 frame-ancestors 'self' https://strapi.byteful.com/api; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googlesyndication.com https://*.mailerlite.com https://cdnjs.cloudflare.com https://assets.mlcdn.com https://*.adtrafficquality.google https://unpkg.com https://analytics.ahrefs.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.cloudflare.com https://*.mailerlite.com https://*.mlcdn.com https://*.jsdelivr.net https://*.bootstrapcdn.com https://unpkg.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://*.cloudflare.com https://*.jsdelivr.net https://*.bootstrapcdn.com https://fonts.mailerlite.com; frame-src 'self' https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google; connect-src 'self' https://*.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googlesyndication.com https://*.adtrafficquality.google https://unpkg.com https://analytics.ahrefs.com https://cdn.jsdelivr.net; manifest-src 'self'; object-src 'none'; base-uri 'self' https://cloud.google.com; upgrade-insecure-requests; block-all-mixed-content; 2 default-src 'self'; frame-src http: data:; connect-src http: data:; script-src 'unsafe-inline' 'unsafe-eval' http:; style-src 'unsafe-inline' http:; img-src http: data:; font-src http: data: 2 frame-ancestors 'self' https://*.georgfischer.com; 2 default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js www.googletagmanager.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com *.fontawesome.com use.fontawesome.com www5.smartadserver.com www.smartadserver.com https://id5-sync.com/ https://ced.sascdn.com/ *.sascdn.com www.congressweb.com https://embed.podcasts.apple.com https://form.asana.com video.theassociationpartner.com *.salespanel.io *.visitorqueue.io *.marinsm.com *.licdn.com *.adnxs.com *.contextweb.com *.amazonaws.com *.inspectlet.com *.googlesyndication.com *.prfct.co *.moatads.com *.googleadservices.com *.doubleclick.net *.processwebsitedata.com *.datasteam.io *.sitedataprocessing.com *.id5-sync.com *.ads-twitter.com *.liadm.com *.usbrowserspeed.com https://www.k12insight.com/ cdnjs.cloudflare.com 'self' https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com *.fontawesome.com use.fontawesome.com www5.smartadserver.com www.congressweb.com video.theassociationpartner.com *.sitedataprocessing.com https://www.k12insight.com/ 'self' https://cdn.insight.sitefinity.com 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.aasa.org *.google-analytics.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.eloqua.com track.hubspot.com placeimg.com www5.smartadserver.com *.sascdn.com picsum.photos *.picsum.photos *.adnxs.com *.pontiac.media *.googletagmanager.com *.smartadserver.com *.linkedin.com *.thrtle.com *.prfct.co *.twitter.com *.addthis.com *.yahoo.com *.openx.net *.rubiconproject.com *.doubleclick.net 'self' https://cdn.insight.sitefinity.com ; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.fontawesome.com use.fontawesome.com; frame-src 'self' *.doubleclick.net *.youtube.com video.theassociationpartner.com/ *.snapwidget.com snapwidget.com *.apple.com *.podbean.com *.soundcloud.com *.sascdn.com https://www.googletagmanager.com/ *.k12insight.com https://i.liadm.com/ *.padlet.com padlet.com *.padlet.net padlet.net; connect-src data: accounts.google.com *.google-analytics.com *.gstatic.com https://*.googleapis.com/ https://www.google.com https://www.googleadservices.com/ *.mktoresp.com *.fontawesome.com www5.smartadserver.com www.congressweb.com https://embed.podcasts.apple.com https://id5-sync.com analytics.google.com *.smartadserver.com *.ipify.org *.ipinfo.io *.inspectlet.com 'self' https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: https://www.youtube.com video.theassociationpartner.com; child-src https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www5.smartadserver.com https://id5-sync.com www.congressweb.com https://embed.podcasts.apple.com video.theassociationpartner.com https://snapwidget.com www.podbean.com 'self'; frame-ancestors 'self' 2 frame-ancestors https://www.loomly.com 2 default-src 'self'; script-src 'self' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://www.youtube.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://js.hsforms.net https://player.vimeo.com https://static.hotjar.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hs-banner.com https://js.hubspot.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js-na1.hs-scripts.com https://snap.licdn.com; connect-src 'self' 'unsafe-inline' https://vimeo.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://js.hs-banner.com https://api.hubapi.com https://cta-service-cms2.hubspot.com https://forms.hscollectedforms.net; img-src 'self' 'unsafe-inline' https://res.cloudinary.com https://teamtailor-production.s3.eu-west-1.amazonaws.com https://critizr-test.ams3.cdn.digitaloceanspaces.com https://assets.critizr.staging.verveagency.com https://assets.goodays.prod.verveagency.com https://images.teamtailor-cdn.com https://www.google.com https://www.google.nl https://track.hubspot.com https://perf-na1.hsforms.co https://forms.hsforms.com https://perf-na1.hsforms.com https://px.ads.linkedin.com; child-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' https://admin.goodays.co/ https://www.youtube.com https://player.vimeo.com https://td.doubleclick.net; 2 base-uri 'self' 'unsafe-inline'; child-src https: blob: 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com *.algolia.net *.algolia.com *.algolianet.com *.authorize.net *.yotpo.com *.signifyd.com bam.nr-data.net *.google.com wss://mpsnare.iesnare.com endpoint-app-us.cognigy.ai lippert-components.formstack.com 7228630.collect.igodigital.com c.contentsquare.net *.facebook.com 'self' 'unsafe-inline' *.lippert.com *.salsify.com *.locally.com salsify-ecdn.com static.formstack.com objects.githubusercontent.com t.contentsquare.net www.instagram.com *.clarity.ms api.mapbox.com *.contentsquare.net bat.bing.com google.com insights.algolia.io stats.g.doubleclick.net k-aus1.contentsquare.net q-aus1.contentsquare.net srm.bf.contentsquare.net region1.google-analytics.com wss://endpoint-app-us.cognigy.ai endpoint-app.cognigy.ai d2c-manage.lippert.com bat.bing.net test-drive-20-1053047382554.us-central1.run.app insight.adsrvr.org *.qualtrics.com preview.threekit.com admin-fts.threekit.com demo-1.conversionsapigateway.com mpc-prod-14-s6uit34pua-ue.a.run.app mpc2-prod-23-is5qnl632q-ue.a.run.app *.contentsquare.com www.googletagmanager.com webpack: lippert.tfaforms.net *.doubleclick.net *.bc0a.com *.ranchhand.com px.mountain.com cdn.clkmc.com consent.trustarc.com *.ecs.us-east-2.on.aws www.clkmc.com pagead2.googlesyndication.com us-east-1-prod-forms-submission-uploads.s3.amazonaws.com cdnapisec.kaltura.com cfvod.kaltura.com yotpo-cors-production.s3.amazonaws.com cmp.osano.com; font-src *.lippert.com data: *.yotpo.com fonts.gstatic.com static.formstack.com 'self' *.ranchhand.com *.trustarc.com; frame-ancestors *.authorize.net *.lippert.com 'self' d2c-manage.lippert.com *.ranchhand.com; img-src *.lippert.com 'self' data: 'unsafe-inline' bat.bing.com www.google.com c.contentsquare.net www.facebook.com *.yotpo.com *.youtube.com *.authorize.net *.googleapis.com www.google.com.ua www.instagram.com cfvod.kaltura.com www.googletagmanager.com www.googleadservices.com connect.facebook.net *.signifyd.com *.hotjar.com *.salesforceliveagent.com *.my.salesforce.com salsify-ecdn.com *.contentsquare.net store.paradoxlabs.com c.clarity.ms res.cloudinary.com tools.applemediaservices.com *.googleusercontent.com www.google.ca www.google.co.uk *.adroll.com d.adroll.com media.locally.com blob: gist.githubusercontent.com www.p65warnings.ca.gov d2c-manage.lippert.com bat.bing.net *.locally.com *.doubleclick.net pixel.tapad.com ml314.com dsum-sec.casalemedia.com idsync.rlcdn.com pixel.rubiconproject.com image2.pubmatic.com us-u.openx.net sync.outbrain.com sync.taboola.com ib.adnxs.com eb2.3lift.com ups.analytics.yahoo.com crb.kargo.com pixel-sync.sitescout.com segments.company-target.com c.bing.com tags.rd.linksynergy.com cm.adgrx.com *.adsrvr.org *.qualtrics.com p.yotpoapi.com fonts.gstatic.com *.lippertdev.net *.ranchhand.com *.trustarc.com ps.eyeota.net x.bidswitch.net cs.media.net rtb.adentifi.com www.google.co.in ade.googlesyndication.com yotpo-editor-production.s3.amazonaws.com; media-src 'self' data: 'unsafe-inline' *.lippert.com res.cloudinary.com *.ranchhand.com asset.cloudinary.com www.ranchhand.com blob:; object-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.curtmfg.com *.hotjar.com bam-cell.nr-data.net connect.facebook.net googleads.g.doubleclick.net maps.googleapis.com static.hotjar.com stats.g.doubleclick.net www.google-analytics.com www.google.com www.googleadservices.com www.gstatic.com *.igodigital.com *.githubusercontent.com t.contentsquare.net bat.bing.com mpsnare.iesnare.com www.clarity.ms cdnapisec.kaltura.com *.yotpo.com static.formstack.com lippert-components.formstack.com www.youtube.com lippert.locally.com *.locally.com secure.adnxs.com *.authorize.net *.algolianet.com *.algolia.net cdn.jsdelivr.net *.newrelic.com lippert.tfaforms.net 7228630.collect.igodigital.com/collect.js salsify-ecdn.com/sdk/latest/salsify.js objects.githubusercontent.com js.adsrvr.org www.instagram.com data: cdn-widgetsrepository.yotpo.com www.googletagmanager.com *.lippert.com github.com/Cognigy/WebchatWidget/releases/latest/download/webchat.js github.com/Cognigy/WebchatWidget/releases/download/v2.65.0/webchat.js js-agent.newrelic.com github.com s.adroll.com *.adroll.com staticw2.yotpo.com https://github.com/Cognigy/WebchatWidget/releases/latest/download/webchat.js *.clarity.ms salsify-ecdn.com *.sharethis.com data.lci1.com *.lci1.com region1.google-analytics.com d2c.lippertstage.net d2c-manage.lippertstage.net *.contentsquare.net d2c-manage.lippert.com lex.33across.com cdn.weglot.com *.qualtrics.com preview.threekit.com admin-fts.threekit.com www.googleapis.com app.contentsquare.com *.trustarc.com *.bc0a.com dx.mountain.com *.ranchhand.com *.cloudinary.com *.cloudflare.com px.mountain.com cdn.clkmc.com capi-automation.s3.us-east-2.amazonaws.com www.clkmc.com cmp.osano.com; upgrade-insecure-requests; worker-src blob: *.lippert.com 'self' d2c-manage.lippert.com *.ranchhand.com; report-uri /.webscale/csp-report 2 frame-ancestors 'self' https://hotelnetsolutions.de 2 frame-ancestors 'self' https://content.radiosystemscorporation.com; style-src 'self' 'unsafe-inline' * 2 default-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://connect.facebook.net; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: *.amazonaws.com *.cloudfront.net *.magaluobjects.com *.digitaloceanspaces.com *.nyc3.digitaloceanspaces.com *.googleusercontent.com img.youtube.com i.ytimg.com i.pravatar.cc picsum.photos https://catarse.com.br https://*.catarse.com.br https://catarse.me https://*.catarse.me https://*.google-analytics.com https://*.googletagmanager.com https://www.google-analytics.com https://www.googletagmanager.com https://*.g.doubleclick.net https://www.google.com https://www.facebook.com; media-src 'self' blob: *.amazonaws.com *.cloudfront.net *.magaluobjects.com *.digitaloceanspaces.com *.nyc3.digitaloceanspaces.com; frame-src 'self' accounts.google.com anchor.fm bandcamp.com castbox.fm catarse-iframe.pages.dev cdn.embedly.com cdn.flipsnack.com cdn.knightlab.com darkagerpg.com docs.google.com drive.google.com e.issuu.com embed.podcasts.apple.com embed.spotify.com embed.wattpad.com embeds.audioboom.com fast.wistia.com fc.tos.world gamma.app gfycat.com giphy.com heyzine.com i.giphy.com itch.io manoweb.ip.tv onedrive.live.com online.fliphtml5.com online.pubhtml5.com open.spotify.com platform.twitter.com player.captivate.fm player.flipsnack.com player.twitch.tv player.vimeo.com podcasters.spotify.com prezi.com pt.scribd.com publisher.bebyte.com.br roundme.com simplebooklet.com sketchfab.com sorteador.com.br store.steampowered.com strawpoll.com tabletopia.com tapas.io tenor.com trello.com v.calameo.com vimeo.com w.soundcloud.com web.facebook.com widget.spreaker.com widgets.wp.com www.artsteps.com www.blogger.com www.canva.com www.facebook.com www.googletagmanager.com www.google.com www.instagram.com www.ocioso.com.br www.podbean.com www.powr.io www.powtoon.com www.reverbnation.com www.rpgnext.com.br www.scribd.com www.slideshare.net www.spreaker.com www.veed.io www.widbook.com www.yumpu.com www.youtube-nocookie.com www.youtube.com youtube.com catarse.com.br *.catarse.com.br catarse.me *.catarse.me typeform.com *.typeform.com; frame-ancestors 'self' https://catarse.me https://*.catarse.me https://catarse.com.br https://*.catarse.com.br; connect-src 'self' https://api-prod.catarse.com.br *.amazonaws.com *.cloudfront.net *.magaluobjects.com *.digitaloceanspaces.com *.nyc3.digitaloceanspaces.com https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com *.pagar.me *.posthog.com https://us.i.posthog.com https://eu.i.posthog.com *.sentry.io *.ingest.sentry.io https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.youtube.com https://vimeo.com https://publish.x.com https://open.spotify.com https://soundcloud.com https://viacep.com.br https://connect.facebook.net https://www.facebook.com; font-src 'self' data: 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.analytics.google.com https://*.azure.com https://*.clarity.ms https://*.convert.com https://*.convertexperiments.com https://*.cookiebot.com https://*.doubleclick.net https://*.evolv.ai https://*.g.doubleclick.net https://*.google.be https://*.google.co.uk https://*.google.com https://*.google.de https://*.google.es https://*.google.fr https://*.google.ie https://*.google.it https://*.google-analytics.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.vimeo.com https://analytics-eu.clickdimensions.com https://api.uk.exponea.com https://assets-eu-01.kc-usercontent.com https://c.bing.com https://cdn-eu.clickdimensions.com https://connect.facebook.net https://dc.services.visualstudio.com https://discoverireland-f5cnbffec6cca8cn.a03.azurefd.net https://fonts.gstatic.com https://googleapis.com https://maps.gstatic.com https://preview-assets-eu-01.kc-usercontent.com https://www.facebook.com https://www.googleadservices.com https://www.googleoptimize.com https://www.youtube.com wss://*.hotjar.com/api/v2/client/ws wws://*.hotjar.com/api/v2/client/ws https://*.tiktok.com https://*.byteoversea.com https://*.snapchat.com https://*.sc-static.net https://sc-static.net; img-src 'self' data: blob: https://*.cloudfront.net https://*.crowdriff.com https://img.youtube.com https://i.ytimg.com https://i.vimeocdn.com https://*.analytics.google.com https://*.azure.com https://*.clarity.ms https://*.convert.com https://*.convertexperiments.com https://*.cookiebot.com https://*.doubleclick.net https://*.evolv.ai https://*.g.doubleclick.net https://*.google.be https://*.google.co.uk https://*.google.com https://*.google.de https://*.google.es https://*.google.fr https://*.google.ie https://*.google.it https://*.google-analytics.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.vimeo.com https://analytics-eu.clickdimensions.com https://api.uk.exponea.com https://assets-eu-01.kc-usercontent.com https://c.bing.com https://cdn-eu.clickdimensions.com https://connect.facebook.net https://dc.services.visualstudio.com https://discoverireland-f5cnbffec6cca8cn.a03.azurefd.net https://fonts.gstatic.com https://googleapis.com https://maps.gstatic.com https://preview-assets-eu-01.kc-usercontent.com https://www.facebook.com https://www.googleadservices.com https://www.googleoptimize.com https://www.youtube.com wss://*.hotjar.com/api/v2/client/ws wws://*.hotjar.com/api/v2/client/ws https://*.tiktok.com https://*.byteoversea.com https://*.snapchat.com https://*.sc-static.net https://sc-static.net; frame-ancestors 'none'; form-action 'self' https://analytics-eu.clickdimensions.com https://www.facebook.com; 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.siteimprove.com siteimproveanalytics.com covid-19-kort.dk *.survey-xact.dk;style-src 'self' 'unsafe-inline' *.typekit.net *.mailchimp.com covid-19-kort.dk *.survey-xact.dk;img-src 'self' data: covid-19-kort.dk *.datafordeler.dk *.siteimproveanalytics.io *.basemaps.cartocdn.com *.survey-xact.dk;font-src 'self' *.typekit.net data:;frame-src 'self' *.cookiebot.com *.youtube-nocookie.com ourworldindata.org *.survey-xact.dk;base-uri 'self';form-action 'self' ssi.us6.list-manage.com *.uxmail.io;connect-src 'self' covid-19-kort.dk *.cookiebot.com *.survey-xact.dk; 2 frame-ancestors 'self' https://gather.town https://virtual.adesso.de https://app.neyroo-hub.de 2 frame-ancestors 'self' memberapp.exerp.com webtracapp.myvscloud.com *.myfitapp.de *.myfitapp.com *.myfitapp.ch cockpit.mobilepro.uk.com myfitapp.brightlime.com mobileapp.legendonlineservices.co.uk; 2 default-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src 'self' https://unpkg.com; connect-src 'self' https://unpkg.com; 2 default-src 'self' *.google.com *.gstatic.com *.google-analytics.com cdn.panq.nl; script-src 'self' 'unsafe-inline' *.google.com *.gstatic.com *.google-analytics.com cdn.panq.nl; style-src 'self' 'unsafe-inline' *.googleapis.com cdn.panq.nl 2 default-src 'none' ; script-src 'self' 'unsafe-inline' https://princestrust-opa--upgrade.custhelp.com https://partner-tools.moneyadviceservice.org.uk https://debt-advice-locator.moneyhelper.org.uk https://tool.moneyhelper.org.uk https://tools.moneyhelper.org.uk https://static.hotjar.com https://script.hotjar.com https://cc.cdn.civiccomputing.com https://www.gstatic.com https://www.google.com https://kit.fontawesome.com https://princestrust.widget.custhelp.com https://js.stripe.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://analytics.tiktok.com https://snap.licdn.com https://s7.addthis.com https://static.hotjar.com https://static.hotjar.io https://script.hotjar.com https://connect.facebook.net https://static.ads-twitter.com https://analytics.silktide.com https://princestrust-opa.custhelp.com https://princestrust-opa--uat.custhelp.com https://www.rnengage.com; style-src 'self' 'unsafe-inline' https://static.hotjar.com https://script.hotjar.com https://fonts.googleapis.com https://princestrust-opa.custhelp.com https://princestrust-opa--uat.custhelp.com https://princestrust.widget.custhelp.com; img-src 'self' data: https://i.ytimg.com https://www.fundraisingregulator.org.uk https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com https://www.linkedin.com https://downloads.ctfassets.net https://images.ctfassets.net https://downloads.ctfassets.net https://maps.gstatic.com https://maps.googleapis.com https://img.youtube.com https://www.google.co.uk https://www.google.co.in https://www.google.com https://px.ads.linkedin.com https://t.co https://analytics.twitter.com https://www.facebook.com https://www.googletagmanager.com https://www.rnengage.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data:; font-src 'self' data: https://script.hotjar.com https://fonts.gstatic.com https://princestrust-opa.custhelp.com https://princestrust-opa--uat.custhelp.com https://fonts.gstatic.com; connect-src 'self' https://analytics-ipv6.tiktokw.us https://www.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://metrics.hotjar.io https://surveystats.hotjar.io https://ask.hotjar.io https://static.hotjar.io https://static.hotjar.com https://www.google.com https://candidateportal.kingstrust.org.uk https://api.getthedata.com https://www.googleapis.com https://clapi.civiccomputing.com https://apikeys.civiccomputing.com https://candidateportal.princestrust.org.uk https://pagead2.googlesyndication.com https://graphql.contentful.com https://downloads.ctfassets.net https://images.ctfassets.net https://ka-p.fontawesome.com https://api.stripe.com https://drzyrklbmz-dsn.algolia.net https://drzyrklbmz-1.algolianet.com https://drzyrklbmz-2.algolianet.com https://drzyrklbmz-3.algolianet.com https://maps.googleapis.com https://fonts.gstatic.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.tiktok.com https://cdn.linkedin.oribi.io https://vc.hotjar.io https://a.eu.silktide.com wss://ws.hotjar.com https://content.hotjar.io https://princestrust-opa--uat.custhelp.com https://princestrust--uat.custhelp.com https://princestrust-opa.custhelp.com https://js.stripe.com https://px.ads.linkedin.com; frame-src https://digital.kingstrust.org.uk/ https://debt-advice-locator.moneyhelper.org.uk https://tool.moneyhelper.org.uk https://tools.moneyhelper.org.uk https://www.googletagmanager.com https://www.google.com https://princestrust-opa--uat.custhelp.com https://princestrust-opa.custhelp.com https://princes-trust-digital.co.uk https://js.stripe.com https://hooks.stripe.com https://partner-tools.moneyadviceservice.org.uk https://r1.dotdigital-pages.com https://www.youtube.com https://*.doubleclick.net https://www.getmyfirstjob.co.uk https://www.youtube-nocookie.com https://www.youtube-nocookie.com/embed/ https://www.facebook.com/ *.google.com; media-src https://assets.ctfassets.net https://videos.ctfassets.net; 2 default-src 'self' 'unsafe-eval' http://localhost:3000; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://localhost:3000 https://consent.cookiebot.com https://consentcdn.cookiebot.com https://static.hotjar.com https://script.hotjar.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://eu2.snoobi.eu http://eu2.snoobi.eu; worker-src 'self' blob:; style-src 'self' https://static.hotjar.com https://script.hotjar.com 'unsafe-inline'; img-src 'self' data: blob: https://images.ctfassets.net https://imgsct.cookiebot.com https://img.youtube.com https://luontoon-fi-assets.s3.eu-north-1.amazonaws.com https://luontoon-fi-cms-production.druid.fi https://lipas-data.s3.eu-north-1.amazonaws.com https://s3.eu-central-1.amazonaws.com https://cdn-datahub.visitfinland.com https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com; font-src 'self' https://script.hotjar.com; connect-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://luontoon-fi-cms-production.druid.fi https://eu2.snoobi.eu https://luontoon.fi https://www.luontoon.fi https://tiles.stadiamaps.com; frame-src https://consent.cookiebot.com https://consentcdn.cookiebot.com https://challenges.cloudflare.com https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; 2 default-src 'self'; script-src *.googleapis.com *.gstatic.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://youtube.com https://player.vimeo.com/api/player.js https://vjs.zencdn.net/7.11.4/video.min.js https://analytics.twitter.com/i/adsct https://www.linkedin.com/ https://twitter.com/ https://static.ads-twitter.com/uwt.js https://dec.azureedge.net/ munchkin.marketo.net https://sopra-steria.career-inspiration.com/js/fbapppromobox.js https://snap.licdn.com/ https://sjs.bizographics.com/insight.min.js https://secure.quantserve.com/quant.js https://rules.quantcount.com/rules-p-U-rxjfyRkAJ0Y.js https://static.pathmotion.io/initjs/init.min.js https://rules.quantcount.com/rules-p-5eXwvumSeTF0n.js *.lfeeder.com *.leadfeeder.com https://pi.pardot.com/pd.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://pi.pardot.com/ https://go.soprasteria.de/ https://walls.io/js/ https://ytimg.com https://siteimproveanalytics.com/js/siteanalyze_6035851.js https://npmcdn.com/imagesloaded@4.1/imagesloaded.pkgd.js https://tags.inzynk.io/cl383xbw/iztag.js https://analytics.inzynk.io/v/cl383xbw https://player.gobistories.com/index.js https://www.buzzsprout.com https://tag.aticdn.net/piano-analytics.js https://*.xiti.com https://*.ati-host.net https://*.aticdn.net https://unpkg.com https://tagmanager.google.com *.googletagmanager.com *.goldenbees.fr/ https://cdn.goldenbees.mgr.consensu.org/ https://cdnjs.cloudflare.com/ajax/libs/videojs-youtube/2.5.0/Youtube.min.js https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.16.6/xlsx.full.min.js https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.9.3/Chart.min.js https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.6.1/iframeResizer.min.js https://www2.soprasteria.no https://analytics.inzynk.io */widget/v1/sr-job-alerts.js https://widget.gobistories.com/ https://js.datadome.co/tags.js js.datadome.co https://karriere.soprasteria.de https://karriere.css.soprasteria.de https://karriere.css.soprasteria.de/post_message_receiver.js https://cdn.mouseflow.com https://survey.survicate.com https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com *.usercentrics.eu embed.vev.page https://js-eu1.hsforms.net/ https://js-eu1.hscollectedforms.net/ https://js-eu1.hs-scripts.com https://js-eu1.hs-banner.com/ https://js-eu1.hsadspixel.net/ https://js-eu1.hs-analytics.net/ https://js-eu1.hubspot.com/ *.ceros.com *.hsadspixel.net *.hs-analytics.net js.hscta.net js-eu1.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com feedback-eu1.hubapi.com *.mouseflow.com https://go.soprahr.com/ *.oraclecloud.com eloqua.soprasteria.co.uk https://www.google.com/recaptcha/enterprise.js https://www.youtube.com/ *.inzynk.io https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://cdn.jsdelivr.net/npm/ixbrl-viewer@1.4.54/iXBRLViewerPlugin/viewer/dist/ixbrlviewer.js https://cdn.jsdelivr.net/npm/ixbrl-viewer@1.4.75/iXBRLViewerPlugin/viewer/dist/ixbrlviewer.js 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com *.eloqua.com *.en25.com js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com platform.twitter.com/css/ *.twimg.com https://tagmanager.google.com/debug/css.css https://pixel.quantserve.com/pixel https://vjs.zencdn.net/7.11.4/video-js.css https://www.googletagmanager.com/debug/badge.css https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com *.eloqua.com *.en25.com *.oraclecloud.com eloqua.soprasteria.co.uk 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.facebook.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com https://dc.ads.linkedin.com/collect/ https://px.ads.linkedin.com/ https://t.co/i/adsct https://counter.adcourier.com https://stats.g.doubleclick.net/r/collect https://pixel.quantserve.com/ *.cdninstagram.com *.lfeeder.com *.leadfeeder.com *.google.fr/ads/ *.google.com/ads/ https://i.ytimg.com/ https://hellojaiblog.files.wordpress.com https://media.giphy.com https://s3.eu-central-1.amazonaws.com https://ytimg.com https://6035851.global.siteimproveanalytics.io/ https://conv.indeed.com/pagead/conv/5314231913872130/ https://img.youtube.com/ https://media-proxy.gobistories.co/ https://res.cloudinary.com https://ad.doubleclick.net https://analytics.twitter.com https://www.googletagmanager.com https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com https://assets.survicate.com https://img.survicate.com https://images.unsplash.com *.usercentrics.eu https://www.buzzsprout.com https://forms-eu1.hsforms.com/ https://perf-eu1.hsforms.com/ https://track-eu1.hubspot.com/ js.hscta.net js-eu1.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com *.ads.linkedin.com i.vimeocdn.com https://www.soprasteria.nl https://www.soprasteria.lu *.mouseflow.com *.en25.com *.oraclecloud.com eloqua.soprasteria.co.uk https://www.soprasteria.be https://googleads.g.doubleclick.net https://www.google.com https://google.com https://www.google.fr https://pagead2.googlesyndication.com https://hubspot-no-cache-eu1-prod.s3.amazonaws.com 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com *.eloqua.com track.hubspot.com js.hsleadflows.net forms.hsforms.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com data: https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com *.mouseflow.com; frame-src https://platform.twitter.com/ https://www.youtube.com/ https://youtu.be/ https://player.vimeo.com/ https://karriere.soprasteria.de/ https://candidate.hr-manager.net/ https://my.walls.io/ https://sopra.symex.be/ https://charts.symex.be/ https://maps.google.com/ https://sopra-steria.career-inspiration.com/ https://youtube.com https://app.livestorm.co/ https://www.buzzsprout.com https://forms.office.com/ https://app.powerbi.com/ https://subscriptions.smartrecruiters.com/ https://go.soprasteria.com/ https://smrtr.io/ https://join.smartrecruiters.com/ *.doubleclick.net https://it-economics.jobs.personio.de/ https://karriere.css.soprasteria.de https://soprasteria.jobs.personio.de/ https://view.ceros.com/ *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com *.hubspot.net play.hubspotvideo.com play-eu1.hubspotvideo.com *.hsforms.net *.hsforms.com https://forms-eu1.hsforms.com/ *.mouseflow.com https://go.soprahr.com/ *.eloqua.com *.en25.com *.oraclecloud.com eloqua.soprasteria.co.uk https://www.google.com/ https://www.googletagmanager.com/ https://www.googletagmanager.com https://td.doubleclick.net https://go.pardot.com/ https://mkt.soprasteria.com/ 'self' web-chat.nativechat.com forms.hsforms.com; connect-src accounts.google.com. *.sitefinity.com *.mktoresp.com https://maps.googleapis.com/ https://vimeo.com/ https://www.digitale-exzellenz.de https://www.instagram.com *.lfeeder.com *.leadfeeder.com https://stats.g.doubleclick.net/ https://www.linkedin.com/ *.linkedin.com https://api.gobistories.co/ https://api.gobistories.com/ https://res.cloudinary.com https://*.xiti.com https://*.pa-cd.com https://*.ati-host.net https://*.aticdn.net https://cdn.linkedin.oribi.io https://analytics.inzynk.io https://o2.mouseflow.com https://eu-api.friendlycaptcha.eu https://respondent.survicate.com https://survey.survicate.com *.usercentrics.eu https://forms-eu1.hsforms.com/ https://forms-eu1.hscollectedforms.net/ https://api-eu1.hubapi.com/ https://cta-eu1.hubspot.com/ *.hubapi.com js.hscta.net js-eu1.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.mouseflow.com https://www.google.com/ccm/collect https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://static.hsappstatic.net/adsscriptloaderstatic/static-1.3143/bundles/pixels-release.js.map https://restapi/adminapp/ 'self' https://*.insight.sitefinity.com https://*.dec.sitefinity.com forms.hubspot.com *.hsforms.com; media-src 'self' data: blob: https://firebasestorage.googleapis.com https://s3.eu-central-1.amazonaws.com https://youtube.com https://googlevideo.com https://www.youtube.com/ https://res.cloudinary.com https://smartcdn.dam.gettyimages.com/ https://cdn.soprasteria.com/ https://publish-p153311-e1620657.adobeaemcloud.com https://www.soprasteria.com; child-src https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com badge.stumbleupon.com blob: *.twitter.com *.facebook.com https://charts.symex.be/ https://sopra.symex.be/ https://sopra-steria.career-inspiration.com/ https://candidate.hr-manager.net/ https://karriere.soprasteria.de/ *.hsforms.com *.mouseflow.com 'self' web-chat.nativechat.com 2 default-src 'self' *; worker-src blob:; frame-ancestors 'self' *.svc.wolf.eu; child-src 'self' *.svc.wolf.eu; script-src * https://static1.wolfeu.website.svc.wolf.eu 'unsafe-inline' 'unsafe-eval'; connect-src *; img-src * data: blob:; frame-src 'self' blob: *; style-src * https://static1.wolfeu.website.svc.wolf.eu 'unsafe-inline'; 2 frame-ancestors 'self' https://fingov-prod.softco.com:8443 https://fingov-prod.softco.com; 2 frame-ancestors 'self' https://dbrand.sanity.studio 2 frame-ancestors 'self' https://uxwizz.icinga.com; 2 default-src 'none'; script-src 'self' *.unpkg.com *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com 'nonce-c2NyaXB0X2dvb2dsZV9hbmFsaXR5Y3M=' 'nonce-c2NyaXB0X2dydXBvY3JpYXI=' 'nonce-c2NyaXB0X21haW5fZ3J1cG9jcmlhcg==' 'nonce-c2NyaXB0X3JlY2FwdGNoYQ==' 'nonce-c2NyaXB0X3JlY2FwdGNoYV9pbnZpc2libGU=' 'nonce-aG9tZS1zY3JpcHQ=' 'nonce-c2NyaXB0LXRyYWJhbGhlLWNvbm9zY28=' 'nonce-c2NyaXB0LW91dmlkb3JpYQ==' 'nonce-c2NyaXB0LW5hdGFs'; style-src 'self' *.googleapis.com 'nonce-c3R5bGVfZ3J1cG9jcmlhcg==' 'nonce-c3R5bGUtYS1oaXN0b3JpYQ==' 'nonce-c3R5bGUtaW5pY2lv' 'nonce-c3R5bGUtdHJlaW5hbWVudG8=' 'nonce-c3R5bGUtdmlkZW8=' 'nonce-c3R5bGUtY2xpcHBpbmc='; img-src 'self' data: *.gstatic.com *.google.com.br *.googletagmanager.com; frame-src 'self' *.google.com *.grupocriar.com.br https://localhost; connect-src 'self' *.analytics.google.com *.google-analytics.com *.doubleclick.net *.google.com; font-src 'self' *.googleapis.com *.gstatic.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self' *.unpkg.com *.google.com; object-src 'self'; media-src 'self' 2 default-src 'self' *.vanguard.com:* *.vgcontent.info:* *.vanguard.com *.vanguardinvestor.co.uk *.vanguard.co.uk *.kampyle.com https://*.wistia.com https://*.wistia.net;base-uri 'self';font-src 'self' https: data: *.vanguard.com:* *.vgcontent.info:* https://*.wistia.com https://www.gstatic.com https://ssl.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com;form-action 'self';frame-ancestors 'self';img-src 'self' data: vanguard.d2.sc.omtrdc.net *.amazon-adsystem.com www.facebook.com *.doubleclick.net www.google.com *.adservice.google.com *.ytimg.com sjs.bizographics.com *.linkedin.com snap.licdn.com P.adsymptotic.com insight.adsrvr.org *.vanguard.com:* *.vgcontent.info:* *.vanguard.com *.vanguard.co.uk ade.googlesyndication.com *.kampyle.com blob: https://*.wistia.com https://*.wistia.net https://*.vanguardinvestor.co.uk https://alb.reddit.com https://match.adsrvr.org/ https://ib.adnxs.com https://www.googlesyndication.com https://www.google.com https://pagead2.googlesyndication.com;object-src 'none';script-src 'self' 'unsafe-inline' *.vgdynamic.info connect.facebook.net www.googleadservices.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net *.youtube.com/ *.vanguard.com:* *.vgcontent.info:* corp-pmj-ukpi.web.vanguard.com corp-pmj-ukpi.webt.vanguard.com *.kampyle.com https://*.vanguardinvestor.co.uk cdn.botframework.com/botframework-webchat/latest/webchat.js https://solutions.eu.invocacdn.com https://td.doubleclick.net https://www.redditstatic.com https://www.amcharts.com https://www.gstatic.com https://www.google.com https://tagmanager.google.com https://fonts.googleapis.com https://fast.wistia.com https://fast.wistia.net https://src.litix.io https://*.sentry-cdn.com/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline' *.vanguard.com:* *.vgcontent.info:* *.kampyle.com blob: https://fast.wistia.com https://fonts.googleapis.com;connect-src *.demdex.net vanguard.d2.sc.omtrdc.net *.tt.omtrdc.net *.vanguard.com *.vanguard.co.uk static.vgcontent.info cdn.cookielaw.org geolocation.onetrust.com privacyportal-de.onetrust.com corp-pmj.webt.vanguard.com corp-pmj-ukpi.web.vanguard.com corp-pmj-ukpi.webt.vanguard.com corp.etm.testassets.vgdynamic.info corp.etm.assets.vgdynamic.info corp.at2.assets.vgdynamic.info *.googlesyndication.com www.google.com googleads.g.doubleclick.net *.kampyle.com *.medallia.com *.medallia.eu 'self' https://*.vanguardinvestor.co.uk https://*.vanguardinvestor.com https://*.vanguard.com directline.botframework.com https://pnapi.eu.invoca.net https://ad.doubleclick.net https://google.com https://www.redditstatic.com https://pixel-config.reddit.com https://conversions-config.reddit.com https://www.googleapis.com https://tagmanager.google.com https://connect.facebook.net https://googletagmanager.com https://*.litix.io https://*.wistia.com https://*.wistia.net https://*.algolia.net https://*.coveo.com https://*.cloud.coveo.com;frame-src *.demdex.net *.youtube.com insight.adsrvr.org 'self' *.vanguard.com *.kampyle.com vanguard-pf-git-vgpf-prod-raindrop-tech.vercel.app vanguard-pf-git-vgpf-dev-raindrop-tech.vercel.app https://www.googletagmanager.com https://td.doubleclick.net https://4598102.fls.doubleclick.net https://13621799.fls.doubleclick.net https://www.googlesyndication.com https://www.google.com https://pagead2.googlesyndication.com https://fast.wistia.com https://fast.wistia.net https://datawrapper.dwcdn.net;child-src blob:;media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net;worker-src 'self' blob:;upgrade-insecure-requests 2 default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline' 2 frame-ancestors 'self' https://*.gls.de external.centralstationcrm.net; default-src 'self' external.centralstationcrm.net; style-src 'self' 'unsafe-inline' external.centralstationcrm.net cdn.eye-able.com; script-src 'self' 'unsafe-inline' *.gls.de connect.facebook.net www.facebook.com external.centralstationcrm.net cdn.eye-able.com https://spenden.twingle.de 'wasm-unsafe-eval'; img-src 'self' *.gls.de connect.facebook.net www.facebook.com external.centralstationcrm.net cdn.eye-able.com data: https://i.vimeocdn.com https://rtc.maptoolkit.net external.centralstationcrm.net; font-src 'self' data:; connect-src 'self' *.gls.de external.centralstationcrm.net documents.anevis-solutions.com https://api.friendlycaptcha.com/api/v1/puzzle; object-src 'self'; base-uri 'none'; frame-src 'self' *.glsbank.de *.gls.de *.gls-bank.de https://videos.gls.de https://*.vimeo.com https://vimeo.com https://*.vimeocdn.com https://vimeocdn.com https://vr-international.vr-bankenportal.de *.frcapi.com https://spenden.twingle.de; form-action 'self'; worker-src blob:; child-src blob:; 2 default-src *.myidx.cloud 'self' *.lfeeder.com sc.lfeeder.com lftracker.leadfeeder.com liveassistfor365.com liveperson.com liveperson.net lpsnmedia.net liveengage.net liveengage.com liveper.sn *.selective.com *.d41.co tags.srv.stackadapt.com *.imirwin.com px.ads.linkedin.com geo.privacymanager.io cdn.linkedin.oribi.io cdn.cookielaw.org cdn.linkedin.oribi.io api.company-target.com geolocation.onetrust.com adservice.google.com www.clarity.ms stats.g.doubleclick.net bam.nr-data.net *.anura.io script.anura.io ads.anura.io www.google-analytics.com *.hotjar.io *.hotjar.com wss://*.hotjar.com www.youtube.com viz.tools.investis.com edge.api.brightcove.com cdnjs.cloudflare.com use.typekit.net kit.fontawesome.com p.typekit.net www.facebook.com lpcdn.lpsnmedia.net ka-f.fontawesome.com ka-p.fontawesome.com *.d41.co customer.selective.com www.google.com segments.company-target.com; img-src *.myidx.cloud 'self' data: *.lfeeder.com *.leadfeeder.com www.google.co.za l.mbs.zip log.pinterest.com tr.lfeeder.com translate.google.com www.google.com.jm www.google.co.uk https://survey-images.hotjar.com www.google.com.jm content.selective.com www.google.com.pe www.google.com.mx www.googleadservices.com photos.prnewswire.com c212.net mma.prnewswire.com tags.srv.stackadapt.com analytics.imirwin.com http://www.selective.com googleads.g.doubleclick.net liveassistfor365.com liveperson.com liveperson.net lpsnmedia.net liveengage.net liveengage.com liveper.sn www.businesswire.com cts.businesswire.com t.co c.bing.com segments.company-target.com di.rlcdn.com id.rlcdn.com c.clarity.ms px4.ads.linkedin.com p.adsymptotic.com tracking.selective.com www.youtube.com p.adsymptotic.com www.linkedin.com viz.tools.investis.com *.gstatic.com tagmanager.google.com cdn.cookielaw.org www.googletagmanager.com i.ytimg.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.co.in px.ads.linkedin.com www.facebook.com analytics.twitter.com lpcdn.lpsnmedia.net www.rumiview.com customer.selective.com api.phia.com blob:; frame-src *.myidx.cloud 'self' data: tel: www.houzz.com support.google.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net anwebconsole translate.googleapis.com redirect.isolation.zscaler.com login.microsoftonline.com 127.0.0.1 customer.mbsmartservices.net customer.selective.com beuniquelyinsured.selective.com va.shiftstatus.liveperson.net support.google.com va.msghist.liveperson.net va.idp.liveperson.net liveassistfor365.com liveperson.com liveperson.net lpsnmedia.net liveengage.net liveengage.com liveper.sn selective-qa.hclvoltmx.net i.ytimg.com www.youtube.com *.company-target.com view.ceros.com www.facebook.com www.google.com player.vimeo.com otp.tools.investis.com irs.tools.investis.com *.hotjar.com lpcdn.lpsnmedia.net bid.g.doubleclick.net td.doubleclick.net va-s.c.liveperson.net https://www.googletagmanager.com; style-src *.myidx.cloud 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net tags.srv.stackadapt.com https://www.googletagmanager.com http://www.google-analytics.com liveassistfor365.com liveperson.com liveperson.net lpsnmedia.net liveengage.net liveengage.com liveper.sn www.youtube.com tagmanager.google.com fonts.googleapis.com ka-f.fontawesome.com viz.tools.investis.com use.typekit.net kit.fontawesome.com p.typekit.net kit-free.fontawesome.com; font-src *.myidx.cloud 'self' data: croissant-services-data-public-assets-us-east-2-production.s3.us-east-2.amazonaws.com https://script.hotjar.com images.simplycodes.com tagmanager.google.com viz.tools.investis.com fonts.gstatic.com ka-f.fontawesome.com ka-p.fontawesome.com fonts.googleapis.com use.typekit.net kit.fontawesome.com p.typekit.net kit-free.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.lfeeder.com *.leadfeeder.com sc.lfeeder.com lftracker.leadfeeder.com *.myidx.cloud *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net he70.82omyo.com www.selective.com qvdt3feo.com/events.js tags.srv.stackadapt.com liveassistfor365.com *.bc0a.com liveperson.com liveperson.net lpsnmedia.net liveengage.net liveengage.com liveper.sn launchpad.privacymanager.io ats-wrapper.privacymanager.io launchpad-wrapper.privacymanager.io static.cloudflareinsights.com *.imirwin.com view.ceros.com static.ads-twitter.com *.d41.co ats.rlcdn.com www.youtube.com www.gstatic.com www.google.com bam.nr-data.net js-agent.newrelic.com tagmanager.google.com www.googleadservices.com *.googleapis.com cdn.jsdelivr.net script.anura.io www.google-analytics.com viz.tools.investis.com *.hotjar.com www.googletagmanager.com s.ytimg.com cdnjs.cloudflare.com use.typekit.net kit.fontawesome.com p.typekit.net tag.simpli.fi i.simpli.fi ajax.googleapis.com snap.licdn.com googleads.g.doubleclick.net lptag.liveperson.net connect.facebook.net assets.adobedtm.com accdn.lpsnmedia.net va.v.liveperson.net lpcdn.lpsnmedia.net www.rumiview.com otp.tools.investis.com img.en25.com www.clarity.ms analytics.twitter.com cdn.cookielaw.org; connect-src *.myidx.cloud 'self' *.bc0a.com accdn.lpsnmedia.net clientstream.launchdarkly.com c.ba.contentsquare.net in.hotjar.com c.ba.contentsquare.net surveystats.hotjar.io https://script.hotjar.com ask.hotjar.io surveystats.hotjar.io segments.company-target.com www.googletagmanager.com region1.google-analytics.com kit.fontawesome.com www.googleadservices.com www.facebook.com wss://va.msg.liveperson.net 38.108.179.5 privacyportal.onetrust.com analytics.imirwin.com ka-p.fontawesome.com www.clarity.ms px.ads.linkedin.com geolocation.onetrust.com cdn.cookielaw.org liveassistfor365.com liveperson.com liveperson.net lpsnmedia.net liveengage.net liveengage.com liveper.sn www.google.com geo.privacymanager.io api.company-target.com www.google-analytics.com hotjar.com content.hotjar.io tags.srv.stackadapt.com ws.hotjar.com vc.hotjar.io wss://ws.hotjar.com metrics.hotjar.io ads.anura.io script.anura.io va.idp.liveperson.net accdn.lpsnmedia.net googleads.g.doubleclick.net sentry-proxy.hotjar.com connect.facebook.net; worker-src 'self' selective.com blob:; report-uri https://stageselectiveidx2025.report-uri.com/r/d/csp/reportOnly; style-src-elem 'self' 'unsafe-inline' data: p.typekit.net *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net fonts.googleapis.com www.gstatic.com tags.srv.stackadapt.com; script-src-elem 'self' 'unsafe-inline' data: *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net sc.lfeeder.com www.selective.com *.bc0a.com qvdt3feo.com/events.js tags.srv.stackadapt.com liveassistfor365.com liveperson.com liveperson.net lpsnmedia.net liveengage.net liveengage.com liveper.sn launchpad.privacymanager.io ats-wrapper.privacymanager.io launchpad-wrapper.privacymanager.io static.cloudflareinsights.com *.imirwin.com view.ceros.com static.ads-twitter.com *.d41.co ats.rlcdn.com www.youtube.com www.gstatic.com www.google.com bam.nr-data.net js-agent.newrelic.com tagmanager.google.com www.googleadservices.com *.googleapis.com cdn.jsdelivr.net script.anura.io www.google-analytics.com viz.tools.investis.com *.hotjar.com www.googletagmanager.com s.ytimg.com cdnjs.cloudflare.com use.typekit.net kit.fontawesome.com p.typekit.net tag.simpli.fi i.simpli.fi ajax.googleapis.com snap.licdn.com googleads.g.doubleclick.net lptag.liveperson.net connect.facebook.net assets.adobedtm.com accdn.lpsnmedia.net va.v.liveperson.net lpcdn.lpsnmedia.net www.rumiview.com otp.tools.investis.com img.en25.com www.clarity.ms analytics.twitter.com cdn.cookielaw.org; child-src blob:; 2 frame-ancestors canvas.mdu.se https://eu.smartsigncloud.com; 2 default-src 'self'; connect-src 'self' https://*.doubleclick.net/ https://*.googlesyndication.com/ https://analytics.google.com/ https://www.google-analytics.com/ https://api.hubapi.com/ https://csi.gstatic.com/ https://www.google.com/ccm/collect https://*.adtrafficquality.google/ https://www.google.com/recaptcha/; frame-src 'self' data: https://www.googleadservices.com/ https://*.doubleclick.net/ https://*.googlesyndication.com/ https://www.google.com/ https://www.youtube.com/ https://www.googletagmanager.com/ https://*.adtrafficquality.google/ https://www.instagram.com/ https://www.linkedin.com/; fenced-frame-src 'self' data:; media-src 'self' https://player.vimeo.com/ https://download-video.akamaized.net/ https://www.youtube.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com/ https://*.doubleclick.net/ https://*.googlesyndication.com/ https://www.googletagservices.com/ https://diffuser-cdn.app-us1.com/ https://prism.app-us1.com/ https://trackcmp.net/ https://*.adtrafficquality.google/ https://www.instagram.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com/ https://fonts.googleapis.com/; img-src 'self' blob: data: https://api.eremedia.com/ https://googleads.g.doubleclick.net/ https://*.googlesyndication.com/ http://www.google.com/ https://i.ytimg.com/ https://www.googletagmanager.com/ https://fonts.gstatic.com/ https://*.adtrafficquality.google/; font-src 'self' https://fonts.gstatic.com/; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; 2 base-uri 'self';child-src 'none';connect-src 'self' https://*.arcgis.com https://*.snapchat.com https://sc-static.net https://*.hsforms.net https://*.hubapi.com https://*.hsforms.com https://*.hsappstatic.net https://*.hsadspixel.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hubspot.com https://*.hs-scripts.com http://*.hs-scripts.com https://*.googlesyndication.com https://*.google-analytics.com https://insights.algolia.io https://www.google-analytics.com https://*.algolia.net https://*.algolianet.com https://*.doubleclick.net https://*.usercentrics.eu https://webapps.portofantwerpbruges.com https://geocode.arcgis.com wss://*.hotjar.com http://*.hotjar.com https://*.hotjar.com wss://*.hotjar.io http://*.hotjar.io https://*.hotjar.io https://*.google.com https://*.google.de https://*.googletagmanager.com https://*.googleadservices.com https://*.linkedin.oribi.io https://www.clarity.ms https://*.clarity.ms https://*.linkedin.com https://data.stbuttons.click https://www.facebook.com https://*.bing.com https://cdn.jsdelivr.net;media-src 'self' https://d2csxpduxe849s.cloudfront.net https://media.portofantwerp.com https://media.portofantwerpbruges.com;default-src 'self' https://d2csxpduxe849s.cloudfront.net https://media.portofantwerp.com https://media.portofantwerpbruges.com;font-src 'self' https://sc-static.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;form-action 'self' https://analytics.clickdimensions.com https://www.facebook.com https://*.hsforms.com;frame-ancestors 'self';frame-src *;img-src 'self' https://*.hubspotusercontent-eu1.net https://*.snapchat.com https://sc-static.net https://*.hsforms.net https://*.hubapi.com https://*.hsforms.com https://*.hsadspixel.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hubspot.com https://*.hsappstatic.net https://*.hs-scripts.com http://*.hs-scripts.com https://*.doubleclick.net https://*.googlesyndication.com https://*.amazonaws.com https://cdn.uc.assets.prezly.com https://cdn.uc.assets.hubspot.com https://www.google.be d2csxpduxe849s.cloudfront.net https://media.portofantwerp.com https://media.portofantwerpbruges.com https://*.portofantwerpbruges.com https://www.google-analytics.com https://app.clickdimensions.com www.googletagmanager.com https://*.google.com http://services.arcgisonline.com http://server.arcgisonline.com https://webapps.portofantwerpbruges.com https://unpkg.com https://www.facebook.com https://t.co https://*.twitter.com https://*.linkedin.com https://p.adsymptotic.com https://cdn.jwplayer.com https://*.jwpcdn.com https://www.google.nl https://*.google.de https://www.googleadservices.com https://www.clarity.ms https://*.clarity.ms https://*.bing.com data: https://idloom.events https://www.google.hu https://fonts.gstatic.com https://*.usercentrics.eu;manifest-src 'self';object-src 'none';script-src 'self' http://*.hsforms.net https://*.snapchat.com https://sc-static.net https://*.hsforms.net https://*.hubapi.com https://*.hsforms.com https://*.hsadspixel.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hubspot.com https://static.hsappstatic.net https://*.hubspotusercontent-eu1.net https://*.hs-scripts.com http://*.hs-scripts.com https://*.linkedin.com https://*.googlesyndication.com https://port-of-antwerp-bruges.involve.me https://*.usercentrics.eu https://www.googletagmanager.com https://www.google-analytics.com https://edge.marker.io https://cdn-us.clickdimensions.com https://analytics.clickdimensions.com https://z.moatads.com 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net https://webapps.portofantwerpbruges.com https://geocode.arcgis.com https://*.google.com https://www.gstatic.com https://snap.licdn.com https://*.ads-twitter.com https://connect.facebook.net wss://*.hotjar.com http://*.hotjar.com https://*.hotjar.com wss://*.hotjar.io http://*.hotjar.io https://*.hotjar.io https://www.googleadservices.com https://mfpembedcdnweu.azureedge.net https://*.doubleclick.net https://cdn.jwplayer.com https://*.jwpcdn.com https://www.clarity.ms https://*.clarity.ms https://*.bing.com https://static.cloudflareinsights.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn-us.clickdimensions.com https://unpkg.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://www.googletagmanager.com;worker-src 'self' blob:; 2 default-src 'self' https://*.mhh.de chrome-extension; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mhh.de https://www.probeweis.de https://*.youtube.com https://*.youtube-nocookie.com https://cdnjs.cloudflare.com https://spenden.twingle.de ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.mhh.de https://www.probeweis.de https://*.youtube.com https://*.youtube-nocookie.com https://mh-hannover-390466.workflowcloud.com https://cdnjs.cloudflare.com https://spenden.twingle.de ; script-src-attr 'self' 'unsafe-inline' https://*.mhh.de https://www.probeweis.de; connect-src 'self' https://*.mhh.de https://www.probeweis.de https://*.youtube-nocookie.com https://spenden.twingle.de; style-src 'self' 'unsafe-inline' https://*.mhh.de https://www.probeweis.de; img-src 'self' data: https://*.mhh.de https://www.probeweis.de https://*.ytimg.com ; frame-src 'self' https://*.mhh.de https://www.probeweis.de https://*.youtube-nocookie.com https://mh-hannover-390466.workflowcloud.com https://gbo-app-znc.nintex.io https://spenden.twingle.de; child-src 'self' https://*.mhh.de https://www.probeweis.de https://*.youtube-nocookie.com https://mh-hannover-390466.workflowcloud.com https://gbo-app-znc.nintex.io https://spenden.twingle.de; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://www.mhh.de/_mc/csp; report-to https://www.mhh.de/_mc/csp 2 frame-ancestors 'self' https://cerveza.eko.org 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://snap.licdn.com https://tracking-api.g2.com https://tags.clickagy.com https://js.adsrvr.org https://fast.wistia.com https://fast.wistia.net https://js.qualified.com https://browser.sentry-cdn.com https://www2.secureauth.solutions https://pages.secureauth.com https://ws.zoominfo.com https://js.zi-scripts.com https://ws-assets.zoominfo.com blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: ; font-src 'self' data:; connect-src 'self' https://www.google.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://www.googleadservices.com https://*.ads.linkedin.com https://tracking-api.g2.com https://tags.clickagy.com https://*.adsrvr.org https://www2.secureauth.solutions https://connect.secureauth.com https://fast.wistia.com https://fast.wistia.net https://embed-ssl.wistia.com https://*.wistia.com https://*.qualified.com wss://*.qualified.com https://pages.secureauth.com https://ws.zoominfo.com https://js.zi-scripts.com https://ws-assets.zoominfo.com; media-src 'self' blob: https://embed-ssl.wistia.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://app.qualified.com https://*.transistor.fm; frame-src https://app.qualified.com https://www.youtube.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://connect.secureauth.com 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://sgtm.actian.com https://*.sentry-cdn.com https://ads.reddit.com https://scripts.clarity.ms https://s.company-target.com https://snap.licdn.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.google-analytics.com https://*.googlesyndication.com https://www.tiktok.com https://www.facebook.com https://clarity.ms https://heyzine.com https://*.heyzine.com https://*.doubleclick.net https://176-hnm-524.mktoutil.com https://actian.com https://api.neverbounce.com https://cdn.cookielaw.org https://cdn.intellimize.co https://cdn.neverbounce.com https://cdn.weglot.com https://challenges.cloudflare.com https://connect.facebook.net https://*.vimeocdn.com https://go.actian.com https://js.adsrvr.org https://js.zi-scripts.com https://munchkin.marketo.net https://player.vimeo.com https://scout-cdn.salesloft.com https://static.cloud.coveo.com https://ws-assets.zoominfo.com https://ws.zoominfo.com https://www.actian.com https://www.clarity.ms https://www.googleadservices.com https://www.googletagmanager.com https://*.youtube.com https://yoast.com https://schema-cf.bc0a.com https://*.pathfactory.com https://cdnjs.cloudflare.com https://happy.teddybearmetal.com https://joy.teddybearmetal.com https://www.redditstatic.com https://alb.reddit.com https://*.navattic.com https://*.demandbase.com; style-src 'self' 'unsafe-inline' https://cdn.weglot.com https://accounts.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://heyzine.com https://*.heyzine.com https://actian.com https://cdn.cookielaw.org https://*.vimeocdn.com https://go.actian.com https://static.cloud.coveo.com https://www.actian.com https://www.googletagmanager.com https://www.youtube.com https://*.pathfactory.com https://*.navattic.com; img-src 'self' data: blob: https://ads.reddit.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.google-analytics.com https://*.googlesyndication.com https://*.google.com.br https://*.google.com.mx https://*.google.com.sg https://*.google.com.pk https://*.google.com.co https://*.google.com.au https://*.google.com.hk https://*.google.com.pe https://*.google.com.tr https://*.google.com.ph https://*.google.com.ng https://*.google.com.ar https://*.google.co.ma https://*.google.co.ve https://*.google.com.ec https://*.google.ae https://*.google.ba https://*.google.com.ni https://*.google.ht https://*.google.com.do https://*.google.com.np https://*.google.tn https://*.google.co.il https://*.google.com.my https://*.google.by https://*.google.co.ke https://*.google.com.bd https://*.google.ch https://*.google.co.uk https://*.google.de https://*.google.fr https://*.google.es https://*.google.it https://*.google.nl https://*.google.pl https://*.google.se https://*.google.at https://*.google.be https://*.google.pt https://*.google.fi https://*.google.no https://*.google.ie https://*.google.co.in https://*.google.co.jp https://*.google.ca https://*.google.co.za https://*.google.co.th https://*.google.co.id https://*.google.co.kr https://*.google.ru https://*.google.dk https://*.google.cz https://*.google.gr https://*.google.ro https://*.google.hu https://*.facebook.com https://clarity.ms https://*.clarity.ms https://bing.com https://c.bing.com https://www.googletagmanager.com https://*.doubleclick.net https://s3.amazonaws.com https://player.vimeo.com https://i.vimeocdn.com https://heyzine.com https://*.heyzine.com https://actian.com https://cdn.cookielaw.org https://cdn.neverbounce.com https://cdn.weglot.com https://d.adroll.com https://go.actian.com https://i.ytimg.com https://joy.teddybearmetal.com https://scout.us2.salesloft.com https://segments.company-target.com https://www.actian.com https://www.googleadservices.com https://www.linkedin.com https://*.pathfactory.com https://insight.adsrvr.org https://sgtm.actian.com https://www.redditstatic.com https://alb.reddit.com https://*.rlcdn.com; font-src 'self' data: https://heyzine.com https://*.heyzine.com https://actian.com https://cdn.neverbounce.com https://fonts.googleapis.com https://*.gstatic.com https://www.actian.com https://*.pathfactory.com https://*.navattic.com; connect-src 'self' https://cdn-api-weglot.com https://events.reddit.com https://*.sentry-cdn.com https://*.sentry.io https://ads.reddit.com https://*.pathfactory.com https://sgtm.actian.com https://schema-cf.bc0a.com https://schema-cdn.bc0a.com https://facebook.com https://px.ads.linkedin.com https://tiktok.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.google-analytics.com https://*.googlesyndication.com https://*.google.com.br https://*.google.com.mx https://*.google.com.sg https://*.google.com.pk https://*.google.com.co https://*.google.com.au https://*.google.com.hk https://*.google.com.pe https://*.google.com.tr https://*.google.com.ph https://*.google.com.ng https://*.google.com.ar https://*.google.co.ma https://*.google.co.ve https://*.google.com.ec https://*.google.ae https://*.google.ba https://*.google.com.ni https://*.google.ht https://*.google.com.do https://*.google.com.np https://*.google.tn https://*.google.co.il https://*.google.com.my https://*.google.by https://*.google.co.ke https://*.google.com.bd https://*.google.ch https://*.google.co.uk https://*.google.de https://*.google.fr https://*.google.es https://*.google.it https://*.google.nl https://*.google.pl https://*.google.se https://*.google.at https://*.google.be https://*.google.pt https://*.google.fi https://*.google.no https://*.google.ie https://*.google.co.in https://*.google.co.jp https://*.google.ca https://*.google.co.za https://*.google.co.th https://*.google.co.id https://*.google.co.kr https://*.google.ru https://*.google.dk https://*.google.cz https://*.google.gr https://*.google.ro https://*.google.hu https://heyzine.com https://*.heyzine.com https://*.clarity.ms https://*.doubleclick.net https://*.zoominfo.com https://117629792.intellimizeio.com https://176-hnm-524.mktoresp.com https://176-hnm-524.mktoutil.com https://actianynmehrnx.analytics.org.coveo.com https://actianynmehrnx.org.coveo.com https://api.intellimize.co https://api.weglot.com https://c.bing.com https://cdn.cookielaw.org https://cdn.neverbounce.com https://cdn.weglot.com https://geolocation.onetrust.com https://privacyportal.onetrust.com https://go.actian.com https://insight.adsrvr.org https://joy.teddybearmetal.com https://js.zi-scripts.com https://log.intellimize.co https://match.adsrvr.org https://player.vimeo.com https://scout.salesloft.com https://static.cloud.coveo.com https://vimeo.com https://vod-adaptive-ak.vimeocdn.com https://www.facebook.com https://www.googleadservices.com https://www.googletagmanager.com https://www.linkedin.com https://pixel-config.reddit.com https://to.getnitropack.com https://www.redditstatic.com https://alb.reddit.com https://*.navattic.com https://*.demandbase.com https://*.company-target.com; frame-src 'self' https://accounts.google.com https://sgtm.actian.com https://resources.actian.com https://*.pathfactory.com https://www.googletagmanager.com https://*.facebook.com https://www.google.com https://heyzine.com https://*.heyzine.com https://*.doubleclick.net https://117629792.intellimizeio.com https://api.intellimize.co https://go.actian.com https://insight.adsrvr.org https://match.adsrvr.org https://player.vimeo.com https://www.youtube.com https://www.actian.com https://*.navattic.com https://*.company-target.com; media-src 'self' https://heyzine.com https://*.heyzine.com https://vod-adaptive-ak.vimeocdn.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors https://*.actian.com https://reddit.com https://www.reddit.com https://ads.reddit.com https://events.reddit.com https://www.redditstatic.com https://alb.reddit.com; worker-src 'self' blob:; report-uri https://csp-report-collector-4zpraffy4q-ew.a.run.app?token=0da073cef90c11db46e1978f7fd6e078; 2 default-src 'self'; base-uri 'self'; child-src https://policy.app.cookieinformation.com blob:; connect-src 'self' *.cookieinformation.com http://prod-dxp-cms-6cd-service.line6.svc.cluster.local:8000/ undefined http://api-service.api:9000/ undefined undefined undefined dpm.demdex.net *.sc.omtrdc.net https://udviklingsogforenk.tt.omtrdc.net *.kaltura.com *.readspeaker.com https://ufst.piwik.pro https://ufst.containers.piwik.pro https://api.cludo.com https://supchat.skat.supwizapp.com wss://supchat.skat.supwizapp.com https://js.monitor.azure.com https://westeurope-5.in.applicationinsights.azure.com https://info.skat.dk/ https://rofusweb.spillemyndigheden.dk/ https://appserver.awork.one https://dkd-skatlist.rke-prod-02.k8s.internal/; font-src 'self' data:; frame-ancestors 'self' https://sktst.dk https://info.skat.dk; frame-src 'self' https://policy.app.cookieinformation.com *.kaltura.com https://skat.dk https://info.skat.dk/; img-src 'self' http://prod-dxp-cms-6cd-service.line6.svc.cluster.local:8000/ https://meeting.skat.dk data: *.kaltura.com *.cludo.com https://skat.dk *.sc.omtrdc.net https://supchat.skat.supwizapp.com https://info.skat.dk https://meeting.skat.dk; media-src 'self' *.kaltura.com data: blob: https://supchat.skat.supwizapp.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://policy.app.cookieinformation.com https://policy.cookieinformation.com *.kaltura.com https://supchat.skat.supwizapp.com https://appserver.awork.one https://ufst.containers.piwik.pro; style-src 'self' 'unsafe-inline' *.supwizapp.com; 2 default-src https:; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval' 'report-sample'; img-src https: data:; form-action https:; connect-src https: wss:; object-src 'none'; worker-src https: wss: blob:; upgrade-insecure-requests 2 frame-ancestors 'self' https://wiki.mdigital.kg https://wiki.mbank.kg https://mtravel.kg https://test.mtravel.kg https://m-market.kg https://site.bmarket.kg https://test.bmarket.kg https://testib.mbusiness.kg https://lk-ras-test.mbank.kg https://lk-ras.mbank.kg https://smart.mbusiness.kg; 2 default-src https://*.consolewars.de *.youtube.com *.twitter.com *.twitch.tv *.bsky.app; style-src 'unsafe-inline' https://*.consolewars.de; script-src 'unsafe-inline' https://*.consolewars.de *.twitter.com *.twitch.tv *.bsky.app 2 frame-ancestors 'self' https://www.anyvan.com https://payload.anyvan.com 2 default-src 'self' https://in2-files.zohopublic.in/ https://static.zohocdn.com/salesiq/MEDIA_14/sound/ping_B3Q7CttOJr4_tpj5BQsAbUyBDTjROkEVntM-uJp-rdZT3N_ALeIfWJZULOfCeBiL_.mp3; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://salesiq.zohopublic.in https://e.clarity.ms/collect https://maps.googleapis.com https://googleads.g.doubleclick.net/ https://www.google.com https://www.google-analytics.com https://analytics.google.com/ https://gisprod.tataskybb.com https://pagesense-collect.zoho.in https://www.facebook.com https://www.google-analytics.com https://www.google-analytics.com https://www.facebook.com https://maps.googleapis.com https://www.google.com https://www.tataplayfiber.com https://maps.gstatic.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: gap: https://www.googletagmanager.com https://www.clarity.ms/tag/r8iowognwh https://www.clarity.ms/s/0.8.1/clarity.js https://www.clarity.ms/s/0.7.68/clarity.js https://code.jquery.com/ https://tsbb-corporate-portal-uat-files.s3.ap-south-1.amazonaws.com/s3fs-public/js/ https://crm.zoho.in/crm/javascript/zcga.js https://www.clarity.ms/tag/ml3qizflr2 https://tsbb-corporate-portal-uat-files.s3.ap-south-1.amazonaws.com/ https://tsbb-corporate-portal-files.s3.ap-south-1.amazonaws.com/s3fs-public/js/ https://tsbb-corporate-portal-files.s3.ap-south-1.amazonaws.com/ https://googleads.g.doubleclick.net/ https://www.googletagmanager.com https://googleads.g.doubleclick.net/ https://static.zohocdn.com/pagesense/ https://static.zohocdn.com/ https://js.zohocdn.com https://salesiq.zohopublic.in https://salesiq.zohopublic.in/* https://crm.zoho.in/crm/javascript/zcga.js https://www.google-analytics.com/analytics.js https://connect.facebook.net/en_US/fbevents.js https://public.releases.juspay.in/hyper-sdk-web/HyperServices.js https://public.releases.juspay.in/ https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js https://connect.facebook.net https://cdn-in.pagesense.io https://cdn.jsdelivr.net https://cdn.rawgit.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://static.addtoany.com https://static.zohocdn.com/pagesense/tracking https://www.google-analytics.com https://www.facebook.com https://maps.googleapis.com https://www.tataplayfiber.com https://www.gstatic.com/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/recaptcha__en.js https://www.google.com https://maps.gstatic.com; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://tsbb-dev-billing-bucket.s3.ap-south-1.amazonaws.com https://css.zohocdn.com https://static.zohocdn.com/ https://in2-files.zohopublic.in https://salesiq.zohopublic.in https://tataplayfiber.com https://static.zohocdn.com/ https://c.clarity.ms/c.gif https://tsbb-corporate-portal-files.s3.ap-south-1.amazonaws.com https://tsbb-corporate-portal-uat-files.s3.ap-south-1.amazonaws.com/ https://www.google.co.in/pagead/1p-user-list/10796352102/ https://www.google.co.in/pagead/1p-user-list/10796352102/* https://www.google.co.in/ads/ga-audiences/* https://www.google-analytics.com https://maps.googleapis.com https://www.facebook.com/tr http://tsbb-dev-billing-bucket.s3.amazonaws.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://maps.googleapis.com https://www.tataplayfiber.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://css.zohocdn.com https://webfonts.zoho.in/ https://tsbb-corporate-portal-files.s3.ap-south-1.amazonaws.com/ https://tsbb-corporate-portal-uat-files.s3.ap-south-1.amazonaws.com/ https://www.tataplayfiber.com/themes/custom/tsb/css/bootstrap.css https://static.zohocdn.com/ https://fonts.googleapis.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://maps.googleapis.com https://www.tataplayfiber.com https://maps.gstatic.com ; font-src 'self' data: https://css.zohocdn.com https://static.zohocdn.com/ https://s3.ap-south-1.amazonaws.com https://fonts.gstatic.com https://www.google-analytics.com https://www.facebook.com https://maps.googleapis.com https://www.tataplayfiber.com https://maps.gstatic.com ; frame-src 'self' bytedance: https://www.googletagmanager.com/ https://salesiq.zohopublic.in/ https://td.doubleclick.net/ https://static.addtoany.com/ https://payments.juspay.in/ https://sandbox.assets.juspay.in/ https://www.facebook.com/ https://cdn-in.pagesense.io/ https://public.releases.juspay.in/ https://www.google-analytics.com https://www.facebook.com https://www.google.com https://maps.googleapis.com https://www.tataplayfiber.com https://maps.gstatic.com ; object-src 'self' https://www.google-analytics.com https://www.facebook.com https://maps.googleapis.com https://www.tataplayfiber.com https://maps.gstatic.com https://www.google.com ; 2 default-src 'self' *.econda-monitor.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' secure.pay1.de api.deepl.com api-free.deepl.com https://*.googleapis.com https://*.google.com https://*.gstatic.com t.adcell.com containertags.belboon.de containertags.belboon.com https://*.r.akipam.com https://*.r.jakuli.com https://*.r.lafamo.com https://*.r.niwepa.com https://*.r.powuta.com https://cdn.logico3c.com https://pix.hyj.mobi https://s.retargeted.co https://maytrics.marvellousmachine.net tr.fatmedia.io as.ad4m.at ad4m.at https://*.adform.net bsmartdata.com fatmedia.io ad.ad-srv.net lekkerads.nl marvellousmachine.net https://*.gsitrix.com mediards.com https://*.mediards.com pikkasrv.com https://*.redintelligence.net https://*.adc-srv.net https://*.ad-srv.net a.twiago.com ad.doubleclick.net ad.yieldlab.net ad13.adfarm1.adition.com adscale.de apptracker.stream dsum-sec.casalemedia.com https://*.fatmedia.io r.adserver01.de r.df-srv.de rtb-csync.smartadserver.com secure.adnxs.com simage2.pubmatic.com trc.taboola.com tr.mediards.de https://s.marvellousmachine.net https://trk.cytelligence.io/ https://sdk-set1.com/ bat.bing.com sync.targeting.unrulymedia.com sync.1rx.io static.criteo.net sslwidget.criteo.com dynamic.criteo.com https://glp8.net connect.facebook.net www.facebook.com cm.g.doubleclick.net adservice.google.com googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com https://*.google-analytics.com https://unpkg.com/web-vitals/dist/web-vitals.iife.js s.pinimg.com ct.pinterest.com api.sovendus.com *.adsrvr.org *.trustedshops.com *.etrusted.com https://static.hotjar.com https://script.hotjar.com https://youtube.com https://www.youtube.com https://applepay.cdn-apple.com; connect-src 'self' https://eu1-search.doofinder.com api.deepl.com api-free.deepl.com pro.ip-api.com data: blob: https://*.googleapis.com https://*.google.com https://*.gstatic.com ginkgo.kraeuterhaus.de t.adcell.com https://tr.fatmedia.io https://api.retargeted.co https://as.ad4m.at bat.bing.com measurement-api.criteo.com https://glp8.net www.econda-monitor.de www.facebook.com stats.g.doubleclick.net https://www.google.de/ads/ https://pagead2.googlesyndication.com/ccm/ https://*.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com/ ct.pinterest.com https://www.pinterest.com https://*.sovendus.com *.trustedshops.com *.etrusted.com *.trustbadge.com https://*.hotjar.com https://vc.hotjar.io https://content.hotjar.io https://events.hotjar.io https://surveystats.hotjar.io wss://*.hotjar.com; style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com; img-src 'self' data: i.ytimg.com https://*.googleapis.com https://*.google.com https://*.gstatic.com kraeuterhaus-nocookie.de www.kraeuterhaus-nocookie.de https://t.adcell.com https://janus.r.jakuli.com/ https://img.youtube.com https://ads.yieldmo.com https://sync.1rx.io https://as.ad4m.at https://ih.adscale.de https://dsum-sec.casalemedia.com https://a.twiago.com https://sync.targeting.unrulymedia.com bat.bing.com gum.criteo.com x.bidswitch.net ib.adnxs.com contextual.media.net pixel.rubiconproject.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv eb2.3lift.com hb.yahoo.net cm.adform.net visitor.omnitagjs.com r.casalemedia.com id5-sync.com ad.360yield.com matching.ivitrack.com exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com match.sharethrough.com criteo-partners.tremorhub.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com c1.adform.net dpm.demdex.net dis.criteo.com https://glp8.net www.facebook.com https://connect.facebook.net www.google.com www.google.de https://*.g.doubleclick.net adservice.google.com cm.g.doubleclick.net https://server.seadform.net https://pagead2.googlesyndication.com/ccm/ www.googletagmanager.com https://public-prod-dspcookiematching.dmxleo.com ct.pinterest.com *.trustedshops.com https://static.hotjar.com https://script.hotjar.com; font-src 'self' data: https://fonts.gstatic.com *.trustedshops.com https://script.hotjar.com https://applepay.cdn-apple.com; frame-src 'self' mailto: secure.pay1.de www.youtube-nocookie.com https://*.google.com https://t.adcell.com hal9000.redintelligence.net pixel.bsmartdata.com ads.lekkerads.nl ad.ad-srv.net s.marvellousmachine.net https://containertags.belboon.com https://analytics.bestofluck.io https://roxxtraxx.de https://ad4m.at https://c1.adform.net https://*.ad-srv.net/ https://cm.g.doubleclick.net https://ban.tangooserver.com *.mediards.com gum.criteo.com fledge.eu.criteo.com static.criteo.net connect.facebook.net www.facebook.com https://*.fls.doubleclick.net https://td.doubleclick.net/ ct.pinterest.com https://*.sovendus.com https://www.sovendus-connect.com https://vars.hotjar.com https://youtube.com https://www.youtube.com; media-src 'self'; base-uri 'self'; form-action 'self' login.microsoftonline.com www.facebook.com; upgrade-insecure-requests; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https://wa.me; frame-src 'self' https://maps.google.com https://www.google.com; connect-src 'self' https://www.google-analytics.com; base-uri 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.googletagmanager.com https://api.firststreet.org https://events.statsigapi.net https://statsigapi.net https://plausible.io https://featuregates.org https://googleads.g.doubleclick.net https://*.js.stripe.com https://connect-js.stripe.com https://js.stripe.com https://checkout.stripe.com https://api.hcaptcha.com https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://pagead2.googlesyndication.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.youtube.com https://s.ytimg.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-forms.com https://js.hscollectedforms.net https://api.hubapi.com https://track.hubspot.com https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com https://api.hsforms.com https://cdn2.hubspot.net https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://forms-na1.hsforms.com https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://analytics.pointdrive.linkedin.com; child-src 'self' blob: https://www.googleadservices.com https://www.youtube.com https://youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.youtube.com; img-src 'self' data: blob: https://raw.githubusercontent.com https://assets.firststreet.org https://assets.riskfactor.com https://*.stripe.com http://www.w3.org/2000/svg https://www.googletagmanager.com https://www.google.com https://www.googleadservices.com https://*.doubleclick.net https://www.gstatic.com https://pagead2.googlesyndication.com https://imgsct.cookiebot.com https://assets.floodfactor.com https://i.ytimg.com https://img.youtube.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-forms.com https://js.hscollectedforms.net https://api.hubapi.com https://track.hubspot.com https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com https://api.hsforms.com https://cdn2.hubspot.net https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://forms-na1.hsforms.com https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://analytics.pointdrive.linkedin.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://connect-js.stripe.com https://checkout.stripe.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://api.hcaptcha.com https://www.googletagmanager.com https://www.google.com https://td.doubleclick.net https://www.googleadservices.com https://bid.g.doubleclick.net https://pagead2.googlesyndication.com https://consentcdn.cookiebot.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://youtube-nocookie.com https://js.hs-forms.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-forms.com https://js.hscollectedforms.net https://api.hubapi.com https://track.hubspot.com https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com https://api.hsforms.com https://cdn2.hubspot.net https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://forms-na1.hsforms.com; frame-ancestors 'none'; media-src 'self' https://assets.firststreet.org https://assets.riskfactor.com https://www.youtube.com https://youtube.com https://youtu.be; connect-src 'self' https://*.riskfactor.com https://*.riskfactor.dev https://maps.googleapis.com https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com/pagead/ https://www.google.com/ccm/collect https://api.firststreet.org https://plausible.io https://*.doubleclick.net https://www.google-analytics.com https://api.stripe.com https://checkout.stripe.com https://*.firststreet.org https://*.firststreet.dev https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com https://td.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.g.doubleclick.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://www.youtube.com https://youtube.com https://youtu.be https://js.hs-scripts.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-forms.com https://js.hscollectedforms.net https://api.hubapi.com https://track.hubspot.com https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com https://api.hsforms.com https://cdn2.hubspot.net https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://forms-na1.hsforms.com https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://analytics.pointdrive.linkedin.com https://featureassets.org https://events.statsigapi.net https://statsigapi.net https://api.statsig.com https://featuregates.org https://beyondwickedmapping.org wss://realtime.statsigapi.net https://api.statsigcdn.com https://prodregistryv2.org https://cloudflare-dns.com https://assetsconfigcdn.org https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://youtube-nocookie.com https://youtu.be https://img.youtube.com https://i.ytimg.com https://s.ytimg.com; report-uri https://o96591.ingest.sentry.io/api/4507611656159232/security/?sentry_key=42354ebeb5d22fbb2bb3100a5c58c995; worker-src 'self' blob: https://localhost:3000 https://*.riskfactor.dev https://*.firststreet.dev https://*.firststreet.org 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.b-cdn.net *.os.uk *.silktide.com *.somerset.gov.uk *.cloudflare.com *.jsdelivr.net unpkg.com *.googleapis.com *.google.com wbb-chat-plugin.webuildbots.ai *.gstatic.com *.livechatinc.com *.euw2.pure.cloud *.astuntechnology.com uicdn.toast.com; style-src 'self' 'unsafe-inline' *.b-cdn.net *.os.uk *.cloudflare.com *.jsdelivr.net unpkg.com *.googleapis.com *.google.com use.fontawesome.com wbb-chat-plugin.webuildbots.ai *.gstatic.com *.livechatinc.com *.somerset.gov.uk *.euw2.pure.cloud *.astuntechnology.com uicdn.toast.com; img-src 'self' data: https: blob: *.b-cdn.net; connect-src 'self' *.b-cdn.net *.googleapis.com *.google.com *.jsdelivr.net unpkg.com *.cloudflare.com *.astuntechnology.com *.silktide.com *.somerset.gov.uk *.euw2.pure.cloud wss://*.euw2.pure.cloud; media-src 'self' *.somerset.gov.uk *.euw2.pure.cloud; font-src 'self' *.gstatic.com data: https:; frame-src 'self' https:; frame-ancestors *.euw2.pure.cloud; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; 2 default-src 'unsafe-inline' https: https://www.jung-group.com; script-src 'unsafe-inline' 'unsafe-eval' https: https://www.jung-group.com; object-src 'unsafe-inline' https://*.mollie.com; style-src 'unsafe-inline' https:; img-src data: https:; font-src data: https:; frame-src https://www.jung-group.com https://*.jung.de https://*.jung-group.cn https://*.jung-group.com https://scnem3.com https://*.mollie.com blob: https://*.arviewer.jung.de https://*.cms-assets.jung.de https://*.cms.jung.de https://*.downloads.jung.de https://*.jung.app https://*.jung.de https://*.jung.ee https://*.jung.es https://*.jung.lt https://*.jung-russia.ru https://*.jung.ua https://*.m.jung.de https://*.musterkoffer.jung.de https://*.qr.jung.de https://*.service.jung.de https://*.smarthome.jung.de https://*.software.jung.de https://*.jung.be https://*.jungcontrols.com https://*.mein-elektroinstallateur.de https://*.youtube.com https://www.youtube-nocookie.com https://player.podigee-cdn.net https://scnem3.com https://*.pay1.de https://*.paypal.com https://*.paypalobjects.com https://*.archlabtransfer.de https://*.partcommunity.com https://*.jung-group.cn https://planung.fs-conf3-jung-qm.p14.de https://planung.konfigurator.jung.de https://planung.jung.de https://planung.jung-group.com https://*.mypurecloud.de https://*.nr-data.net https://shyrka-prod-euc1.s3.eu-central-1.amazonaws.com https://*.newrelic.com https://jung.canto.de https://d30qymu4o00meq.cloudfront.net https://*.cloudfront.net https://canto.us1app.churnzero.net https://embeds.beehiiv.com https://*.euc1.pure.cloud wss://*.mypurecloud.de wss://*.euc1.pure.cloud https://digital.jung-group.com https://digital.jung-group.com/de/knx-configurator https://digital.jung-group.com/de/home-configurator https://digital.jung-group.com/de/switch-configurator https://jung-configurator.canvaslogic.tech https://www.googletagmanager.com https://productimages.jung-group.com https://default-german-bucket-staging.s3-accelerate.amazonaws.com https://default-german-bucket-staging-public.s3-accelerate.amazonaws.com https://default-german-bucket.s3.eu-central-1.amazonaws.com https://oauth.canto.de https://jung.sw.localhost https://digital.jung-service.com; frame-ancestors 'self' https://www.jung-group.com https://jung.canto.de 2 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; script-src 'self' http: https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 2 frame-ancestors 'self' https://*${toyota_KZ_RU_ROOT} https://webvisor.com https://lexus-dxp.dobit.com https://lexustest.dobit.com http://localhost:88; 2 default-src 'none'; font-src https: data:; img-src https:; script-src-elem https: 'unsafe-inline'; style-src-elem https: 'unsafe-inline'; style-src https: 'unsafe-inline'; media-src https: data:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; connect-src https:; frame-src https:; script-src https:; 2 default-src * data: 'unsafe-inline'; frame-ancestors 'self'; 2 upgrade-insecure-requests; report-uri 2 default-src 'self';script-src 'self' https://bat.bing.com https://*.ceros.com https://d1wao037kgukun.cloudfront.net https://dn2dl4laeftzg.cloudfront.net https://olivia.eu1.paradox.ai wss://ws.eu1.paradox.ai https://*.pardot.com https://player.vimeo.com https://www.youtube.com https://*.googleapis.com https://stg.eu1.paradox.ai/ wss://ws.stg.eu1.paradox.ai/ wss://ws.paradox.ai https://o1000039.ingest.sentry.io https://dokumfe7mps0i.cloudfront.net https://olivia.paradox.ai https://stats.g.doubleclick.net https://stg.paradox.ai https://d25zu39ynyitwy.cloudfront.net https://s7g10.scene7.com https://cdn.cookielaw.org https://assets.adobedtm.com https://analytics.google.com https://*.analytics.google.com https://static.hotjar.com/ https://a.omappapi.com https://*.kerry.com https://app-ab33.marketo.com https://munchkin.marketo.net https://platform.twitter.com https://platform.linkedin.com https://www.googletagmanager.com https://code.jquery.com https://dnn506yrbagrg.cloudfront.net https://siteimproveanalytics.com https://*.google-analytics.com https://cdnjs.cloudflare.com https://www.google.com/recaptcha/api.js https://newdownload.seismic.com https://*.blob.core.windows.net https://js.hcaptcha.com/1/api.js https://hcaptcha.com/1/api.js https://script.hotjar.com https://www.gstatic.com https://a.opmnstr.com https://*.kerry.com https://kerry.tt.omtrdc.net https://snap.licdn.com https://connect.facebook.net https://*.marketo.com https://ipinfo.io https://www.kerrygroup.com https://otp.tools.investis.com https://kerry.cnddtid.com https://assets.keychain.com/keychain/pixel.js https://openfpcdn.io/fingerprintjs/v5 https://cdn.snitcher.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' fonts.gstatic.com blob: data: https://newdownload.seismic.com https://bat.bing.net https://bat.bing.com https://*.blob.core.windows.net https://d1wao037kgukun.cloudfront.net https://dn2dl4laeftzg.cloudfront.net https://www.google.ie https://www.linkedin.com https://i.ytimg.com https://d25zu39ynyitwy.cloudfront.net https://dokumfe7mps0i.cloudfront.net https://olivia.paradox.ai https://s7g10.scene7.com https://cdnkdc.azureedge.net https://cm.everesttech.net https://dpm.demdex.net https://cdn.cookielaw.org https://optanon.blob.core.windows.net https://*.kerry.com https://6071260.global.siteimproveanalytics.io https://*.google-analytics.com data: https://px.ads.linkedin.com https://px4.ads.linkedin.com https://x.bidswitch.net https://www.facebook.com https://syndication.twitter.com https://*.hotjar.com https://www.kerrygroup.com https://insight.adsrvr.org https://match.sharethrough.com https://p.adsymptotic.com https://a.omappapi.com https://dev.day.com https://tags.bluekai.com https://www.googletagmanager.com https://ups.analytics.yahoo.com https://pixel.rubiconproject.com https://cm.g.doubleclick.net https://secure-gl.imrworldwide.com https://tags.rd.linksynergy.com https://match.adsrvr.org https://ads.scorecardresearch.com https://s.thebrighttag.com https://i.liadm.com https://ml314.com https://mid.rkdms.com https://match.sync.ad.cpe.dotomi.com https://odr.mookie1.com https://uipglob.semasio.net https://secure.insightexpressai.com https://eb2.3lift.com https://loadm.exelator.com https://usermatch.krxd.net https://su.addthis.com https://dmp.truoptik.com https://*.global.siteimproveanalytics.io https://www.google.com/ads/ga-audiences https://kerryportaldevreportsuite.112.2o7.net https://images.salsify.com https://maps.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://d1wao037kgukun.cloudfront.net https://dn2dl4laeftzg.cloudfront.net https://dokumfe7mps0i.cloudfront.net https://d25zu39ynyitwy.cloudfront.net https://s7g10.scene7.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://p.typekit.net https://*.kerry.com; style-src-elem 'unsafe-inline' 'self' https://www.googletagmanager.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://s7g10.scene7.com https://use.typekit.net https://p.typekit.net https://*.kerry.com https://*.marketo.com/ https://a.omappapi.com; connect-src 'self' https://bat.bing.com https://bat.bing.net https://www.facebook.com https://maps.googleapis.com https://analytics.google.com https://www.google.ie https://*.analytics.google.com https://d1wao037kgukun.cloudfront.net https://dn2dl4laeftzg.cloudfront.net https://olivia.eu1.paradox.ai wss://ws.eu1.paradox.ai https://dokumfe7mps0i.cloudfront.net https://olivia.paradox.ai https://stg.eu1.paradox.ai/ wss://ws.stg.eu1.paradox.ai/ wss://ws.paradox.ai https://stg.paradox.ai https://d25zu39ynyitwy.cloudfront.net https://dpm.demdex.net https://cdn.cookielaw.org https://s7mbrstream-g1.scene7.com https://s7g10.scene7.com https://privacyportal-de.onetrust.com https://*.algolia.net https://*.google-analytics.com https://stats.g.doubleclick.net https://www.kerrygroup.com https://*.hotjar.io https://in.hotjar.com wss://*.hotjar.com https://a.opmnstr.com https://munchkin.marketo.net https://117-tlu-222.mktoresp.com https://geolocation.onetrust.com https://smetrics.kerry.com https://*.hotjar.com https://*.kerry.com https://kerry.tt.omtrdc.net https://*.mktoresp.com https://*.omappapi.com https://*.tt.omtrdc.net/ https://*.marketo.com https://*.algolianet.com https://ipinfo.io https://www.kerrygroup.com https://otp.tools.investis.com https://kerryluxembourgsarl.hb.omtrdc.net https://adobedc.demdex.net https://edge.adobedc.net https://px.ads.linkedin.com https://www.google.com/ccm/collect https://addressvalidation.googleapis.com https://kerryshareholders-test.okta.com https://kerryshareholders-production.okta.com https://northeurope-2.in.applicationinsights.azure.com https://js.monitor.azure.com https://pixel-edge.keychain.com https://radar.snitcher.com; font-src 'self' https://d1wao037kgukun.cloudfront.net https://dn2dl4laeftzg.cloudfront.net https://dokumfe7mps0i.cloudfront.net https://d25zu39ynyitwy.cloudfront.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://*.kerry.com https://script.hotjar.com; frame-src 'self' https://www.googletagmanager.com https://*.ceros.com https://5722629.fls.doubleclick.net/ https://www.youtube-nocookie.com https://kerry.demdex.net https://irs.tools.investis.com https://otp.tools.investis.com https://platform.twitter.com https://*.kerry.com https://vars.hotjar.com/ https://www.youtube.com https://www.google.com https://*.marketo.com/ https://www.facebook.com https://newassets.hcaptcha.com/ https://gateway.zscloud.net/; media-src 'self' blob: https://*.kerry.com https://*.scene7.com http://*.scene7.com https://cdnkdc.azureedge.net; worker-src 'self' blob: 2 frame-ancestors 'self' https://*.model-t.cc.commerce.ondemand.com https://*.freedom.com.au 2 frame-ancestors 'self' https://app.speechlive.com https://ui.speakachu.com 2 frame-ancestors 'self' *, object-src 'none', font-src 'self' https://fonts.gstatic.com https://script.hotjar.com/, frame-src 'self' https://www.google.com/ https://www.googletagmanager.com/ https://consentcdn.cookiebot.com/ https://outlook.office365.com/ https://sflink.maltego.com/ https://www.youtube.com/ https://app.vwo.com/ https://www.youtube-nocookie.com/ https://forms.office.com/ https://maltego.jobs.personio.de/ https://cdn.openwidget.com/ https://open.spotify.com/ https://keycloak-invx.dev.maltego.com/ https://app.netlify.com/ https://identity.maltego.com/, img-src 'self' data: https://analytics.twitter.com https://chart.googleapis.com https://company.g2.com https://dev.visualwebsiteoptimizer.com https://px.ads.linkedin.com https://t.co https://useruploads.visualwebsiteoptimizer.com https://wingify-assets.s3.amazonaws.com https://www.google.com https://www.google.com.br https://imgsct.cookiebot.com/ https://www.google-analytics.com/ https://px4.ads.linkedin.com/ https://bat.bing.com/ https://www.fbi.gov/ https://static.maltego.com/cdn/ 2 frame-ancestors https://*.trend.at https://*.vgn.at; upgrade-insecure-requests; block-all-mixed-content 2 frame-ancestors 'self' https://*.mailersend.com; 2 frame-ancestors 'self' https://d1nglz1cg8c1z3.cloudfront.net 2 frame-ancestors 'self' https://*.axcsfprod.aws.axfoodapp.cloud https://*.commerce.ondemand.com 2 default-src 'self'; frame-ancestors 'self'; img-src 'self' data: https://web-solutions.com.pl https://web-solutions.eu https://chat.web-solutions.eu https://*.w.org https://www.google.com https://bat.bing.com https://bat.bing.net https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.google.com; connect-src 'self' https://web-solutions.eu https://web-solutions.com.pl https://clients.web-solutions.eu https://*.sentry.io https://cdn.jsdelivr.net https://bat.bing.com https://bat.bing.net https://*.googletagmanager.com https://*.google-analytics.com; object-src 'none' 2 default-src * ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.rienergy.com https://*.pplelectric.com https://admin.sparkflow.net https://js-cdn.dynatrace.com https://www.google-analytics.com https://www.googletagmanager.com https://cdn.mouseflow.com https://n2.mouseflow.com https://ajax.googleapis.com https://connect.facebook.net https://seal.verisign.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.onelink-edge.com https://www.gstatic.com/charts/ https://*.google.com https://*.googleapis.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https://*.zscalerthree.net https://js.adsrvr.org https://cdn.bttrack.com/ https://bttrack.com/ https://pixel.mathtag.com/event/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://static.ads-twitter.com/ https://collector-17692.us.tvsquared.com/; img-src 'self' https://*.rienergy.com https://*.pplelectric.com https://*.optimizely.com https://www.google-analytics.com https://www.facebook.com https://seal.websecurity.norton.com https://esus-pplelectric.onelink-translations.com https://es.pplelectric.com https://www.gstatic.com/charts/ https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://ad.doubleclick.net https://gateway.zscalerthree.net https://bttrack.com https://collector-17692.us.tvsquared.com/; style-src 'self' 'unsafe-inline' https://*.rienergy.com https://*.pplelectric.com https://ajax.googleapis.com https://googletagmanager.com https://www.gstatic.com/charts/ https://*.google.com https://*.googleapis.com https://www.gstatic.com; font-src 'self' data:` fonts.gstatic.com https://www.gstatic.com/charts/; frame-src 'self' https://*.rienergy.com https://*.pplelectric.com https://*.cdn.optimizely.com https://*.cdn-pci.optimizely.com https://www.google.com/recaptcha/ https://admin.sparkflow.net https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://player.vimeo.com https://*.paymentus.com https://*.doubleclick.net https://gateway.zscalerthree.net https://pixel.mathtag.com https://insight.adsrvr.org; child-src 'self' https://*.rienergy.com https://*.pplelectric.com https://*.google.com https://google.com https://connect.facebook.net https://www.facebook.com https://player.vimeo.com https://*.paymentus.com https://*.optimizely.com https://optimizely.com; frame-ancestors 'self' https://*.optimizely.com; 2 default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: blob: 'unsafe-inline'; font-src * data: 2 default-src 'self' gap: 'unsafe-inline'; script-src 'self' data: https://cdn.amcharts.com data: https://c.mql5.com/ data: https://cdn.ampproject.org/ data: https://content.mql5.com/ data: https://connect.facebook.net/ data: https://ifccd.net data: code.jquery.com data: *.ifcmarkets.com data: *.ifcmiran.asia data: *.tradeifcm.asia data: https://apis.google.com data: www.google-analytics.com data: www.googleadservices.com data: www.googletagmanager.com data: https://www.google.com/ data: www.googleapis.com/ data: cse.google.com/ data: clients1.google.com/ data: https://www.gstatic.com/ data: https://www.googleadservices.com data: trade.mql5.com data: https://ipinfo.io data: https://ajax.cloudflare.com data: https://yastatic.net/share2/share.js data: https://mc.yandex.ru/metrika/tag.js data: https://dsp-media.eskimi.com data: https://ssl.pstatic.net data: https://cdn-cookieyes.com data: wcs.naver.net data: *.bing.com data: *.twitter.com data: *.adroll.com data: *.conv.rs data: widget.trustpilot.com data: connect.facebook.net data: https://www.aparat.com data: https://webchat.conv.rs 'unsafe-eval' 'unsafe-inline'; frame-src 'self' data: *.trustpilot.com data: *.google.com data: https://*.adroll.com data: https://component.autochartist.com data: *.ifcm-invest.com data: https://www.tradays.com data: https://www.mql5.com data: https://www.youtube.com data: https://chat.ifcmtz.com data: https://chat.ifctr.asia data: https://chat.fxifcm.asia data: https://chat.ifcmfx.com data: https://chat.ifcmfx.cn data: https://chat.ifcm.co.uk data: https://chat.ifcmarkets.tw data: https://chat.ifcmarkets.my data: https://chat.ifcmarkets.net data: https://chat.ifcmarkets.hk data: https://chat.ifcmarkets.mx data: https://chat.ifcmarkets.com.br data: https://chat.ifcmarkets.co.id data: https://chat.ifcmarkets.co.in data: https://chat.ifcmarkets.co data: https://chat.ifcmarkets.ae data: https://trade.mql5.com data: https://td.doubleclick.net data: *.googletagmanager.com data: *.ifcmarkets.com data: *.ifcmiran.asia data: *.tradeifcm.asia data: *.ifcmarkets.co.za data: https://*.facebook.com data: https://www.aparat.com data: https://chat.conv.rs data: https://ifccd.net; media-src * data: https://www.ifcmarkets.com/downloads/video/; object-src *; style-src 'self' data: *.ifcmarkets.com data: *.ifcmiran.asia data: https://ifccd.net data: https://pr.ifccd.net data: https://www.google.com data: https://fonts.googleapis.com 'unsafe-inline'; img-src * data: http://www.w3.org/; font-src 'self' data: *.ifcmiran.asia data: https://ifccd.net data: https://fonts.gstatic.com data: https://fonts.googleapis.com data: https://pr.ifccd.net; connect-src *; manifest-src 'self' data: https://ifccd.net data: https://be1.ifcmfar.com data: *.ifcmiran.asia; worker-src 'self' blob: data:; 2 default-src 'self'; script-src 'self' 'unsafe-inline' data: blob: https://cdn.jsdelivr.net https://*.linkedin.com https://*.google.com https://www.google.com https://www.youtube.com https://youtube.com https://*.googlesyndication.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://j.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com https://*.clarity.ms https://js.hs-scripts.com https://js.hsforms.net https://*.hscollectedforms.net https://js.hs-banner.com https://js.hs-analytics.net https://js.zi-scripts.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://*.linkedin.com https://fonts.googleapis.com https://www.gstatic.com https://*.qualified.com; img-src 'self' data: https://cdn.jsdelivr.net https://*.linkedin.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.google.com https://*.googletagmanager.com https://px.ads.linkedin.com https://bat.bing.com https://b.6sc.co https://imgsct.cookiebot.com https://googleads.g.doubleclick.net https://track.hubspot.com https://c.bing.com https://www.gstatic.com https://*.gravatar.com https://*.wp.com https://*.hsforms.com https://*.hscollectedforms.net https://*.clarity.ms https://*.qualified.com; font-src 'self' data: https://cdn.jsdelivr.net https://*.linkedin.com https://fonts.gstatic.com https://harver.com https://www.gstatic.com https://*.wp.com; connect-src 'self' https://cdn.jsdelivr.net https://*.linkedin.com https://bat.bing.com https://js.zi-scripts.com https://pagead2.googlesyndication.com https://*.qualified.com wss://*.qualified.com https://px.ads.linkedin.com https://www.googleadservices.com https://c.6sc.co https://ipv6.6sc.co https://consentcdn.cookiebot.com https://*.google.com https://*.youtube.com https://*.google-analytics.com https://ws.zoominfo.com https://js.hs-banner.com https://googleads.g.doubleclick.net https://hubspot-forms-static-embed.s3.amazonaws.com https://www.gstatic.com https://*.hsforms.com https://*.hscollectedforms.net https://*.clarity.ms; frame-src 'self' https://cdn.jsdelivr.net https://*.linkedin.com https://player.vimeo.com https://www.youtube.com https://youtube.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://*.qualified.com https://*.google.com https://*.hsforms.com https://*.hscollectedforms.net; media-src 'self' mediastream: https://cdn.jsdelivr.net https://*.linkedin.com https://*.qualified.com; child-src https://*.qualified.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com https://*.hscollectedforms.net; upgrade-insecure-requests; 2 upgrade-insecure-requests; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2 base-uri 'self'; font-src 'self' data: https://sdk.woosmap.com https://fonts.gstatic.com https://cdn.honey.io; form-action 'self' https://*.cardinalcommerce.com https://*.wibmo.com https://*.wlp-acs.com https://geostag.cardinalcommerce.com https://0merchantacsstag.cardinalcommerce.com https://www.facebook.com; frame-ancestors 'self'; img-src 'self' data: blob: https://cdn.toolstation.nl https://cdn.toolstation.be https://cdn.toolstation.fr https://*.builder.io https://cdn.builder.io https://images.woosmap.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.google.nl https://*.google.be https://*.google.co.in https://www.google.co.in https://*.google.es https://*.googlesyndication.com https://*.googleadservices.com https://*.paypal.com https://*.paypalobjects.com https://*.bazaarvoice.com https://load.sst.toolstation.nl https://sst.toolstation.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.monetate.net https://*.onetrust.com https://*.tiktok.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.bing.com https://bat.bing.com https://*.facebook.com https://*.facebook.net https://*.toolstation.dev https://*.kelkoogroup.net https://s.kelkoogroup.net https://*.doubleclick.net https://cookiesuksouth.blob.core.windows.net https://dapi.videoly.co https://i.ytimg.com https://www.google.com.sg; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'unsafe-inline' 'self' 'unsafe-eval' https://fonts.googleapis.com https://toolstationbenelux.freshchat.com https://www.gstatic.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.uk.exponea.com https://swrap.tradedoubler.com https://cdn-ukwest.onetrust.com https://*.onetrust.com https://js.braintreegateway.com https://pay.google.com https://*.paypal.com https://*.paypalobjects.com https://*.cardinalcommerce.com https://songbird.cardinalcommerce.com https://load.sst.toolstation.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://apps.bazaarvoice.com https://sdk.woosmap.com https://*.monetate.net https://se.monetate.net https://engine.monetate.net https://api.videoly.co https://*.builder.io https://cdn.builder.io https://*.algolia.net https://*.algolianet.com https://*.toolstation.dev https://cdn.toolstation.nl https://cdn.toolstation.be https://*.googlesyndication.com https://*.google.com https://*.google.nl https://*.google.be https://*.google.co.in https://www.google.co.in https://*.google.es https://*.googleadservices.com https://*.googleapis.com https://*.paypalobjects.com https://ct.beslist.nl https://s.kk-resources.com https://*.tiktok.com https://analytics.tiktok.com https://connect.facebook.net https://*.bing.com https://bat.bing.com https://stapecdn.com https://wrap.tradedoubler.com https://widget.trustpilot.com https://assets.braintreegateway.com https://toolstationbenelux.freshchat.com https://s3.amazonaws.com https://dapi.videoly.co https://www.youtube.com https://sst.toolstation.nl https://googleads.g.doubleclick.net https://static.client.cardinaltrusted.com; upgrade-insecure-requests; frame-src 'self' https://sst.pre-prod.nl.toolstation.dev https://pay.google.com https://assets.braintreegateway.com https://*.paypal.com https://*.cardinalcommerce.com https://*.wibmo.com https://*.wlp-acs.com https://songbird.cardinalcommerce.com https://*.braintreegateway.com https://cdn-ukwest.onetrust.com https://*.builder.io https://widget.trustpilot.com https://www.googletagmanager.com https://sst.toolstation.nl https://load.sst.toolstation.nl https://tbs.tradedoubler.com https://*.tradedoubler.com https://*.google.com https://*.google.nl https://*.google.be https://*.doubleclick.net https://e.issuu.com https://sdk.woosmap.com https://www.youtube.com https://toolstationeurope.freshdesk.com https://www.youtube-nocookie.com https://toolstationbenelux.freshchat.com https://www.facebook.com https://secure5.arcot.com; connect-src 'self' https://api.uk.exponea.com https://www.facebook.com https://*.toolstation.dev https://*.toolstation.nl https://*.toolstation.be https://ecom-api.toolstation.nl https://ecom-api.toolstation.be https://cdn.toolstation.nl https://cdn.toolstation.be https://cdn.builder.io https://*.builder.io https://*.algolia.net https://*.algolia.io https://*.algolianet.com https://api.bazaarvoice.com https://apps.bazaarvoice.com https://api.woosmap.com https://*.googleapis.com https://maps.googleapis.com https://services.postcodeanywhere.co.uk https://js.braintreegateway.com https://*.braintreegateway.com https://*.braintree-api.com https://*.paypal.com https://pay.google.com https://cdn-ukwest.onetrust.com https://*.onetrust.com https://load.sst.toolstation.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://engine.monetate.net https://se.monetate.net https://*.monetate.net https://api.videoly.co https://api-sandbox.postnl.nl https://api.postnl.nl https://*.datadoghq.com https://*.datadoghq.eu https://*.browser-intake-datadoghq.com https://*.browser-intake-datadoghq.eu https://browser-intake-datadoghq.eu wss://*.toolstation.dev wss://localhost:* ws://localhost:* https://*.cardinalcommerce.com https://*.amazonaws.com https://*.braintreegateway.com https://*.googlesyndication.com https://*.google.com https://google.com https://www.google.com https://*.google.nl https://*.google.be https://*.google.co.in https://www.google.co.in https://*.google.es https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://www.paypalobjects.com https://*.paypalobjects.com https://ct.beslist.nl https://s.kk-resources.com https://*.tiktok.com https://analytics.tiktok.com https://connect.facebook.net https://*.bing.com https://bat.bing.com https://stapecdn.com https://wrap.tradedoubler.com https://widget.trustpilot.com https://*.kelkoogroup.net https://*.doubleclick.net https://cdn-ukwest.onetrust.com https://fonts.googleapis.com https://dapi.videoly.co https://sdk.woosmap.com https://analytics-ipv6.tiktokw.us https://*.cardinaltrusted.com https://spay.samsung.com; media-src 'self' data: https://cdn.builder.io; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self'; 2 object-src 'none'; frame-ancestors 'none'; 2 frame-ancestors login.tiscali.cz ticket.login.tiscali.cz osobnosti.cz www.osobnosti.cz https://osobnosti.cz https://*.osobnosti.cz https://*.spisovatele.cz https://*.hudebniskupiny.cz https://*.panovnici.cz https://*.financnici.cz 2 frame-ancestors https://app.kontent.ai; 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.storygize.net *.google.com *.gstatic.com *.googleapis.com *.onenorth.com https://goodwinlaw102u0.admin.oniqa.com *.oniqa.com *.onistaged.com public.flourish.studio *.amazonaws.com public.flourish.studio flo.uri.sh *.googletagmanager.com *.google-analytics.com *.google.com *.ceros.com *.cvent.com *.cvent.cloud *.cventevents.com assets-usa.mkt.dynamics.com public-usa.mkt.dynamics.com *.azureedge.net clarity.ms *.clarity.ms *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.vimeo.com *.vimeocdn.com *.simplecast.com *.cookielaw.org *.typekit.net cdnjs.cloudflare.com us1.siteimprove.com cdnjs.cloudflare.com *.brightcove.net siteimproveanalytics.com cdn.yoshki.com 61282325.global.siteimproveanalytics.io w.soundcloud.com goodwin.photoshelter.com photoshelter.com player.vimeo.com cdn.cookielaw.org geolocation.onetrust.com drive.google.com code.jquery.com yoshki.com *.adnxs.com *.6sc.co *.hotjar.com *.hotjar.io *.cvent.com *.cvent.cloud wss://*.hotjar.com ws.zoominfo.com js.zi-scripts.com ws-assets.zoominfo.com *.parsely.com https://my.walls.io *.coveo.com https://snap.licdn.com https://px.ads.linkedin.com *.linkedin.com https://cdn.jwplayer.com https://public.tableau.com ; img-src * data:; font-src 'self' data: *.typekit.net; 2 frame-ancestors 'self' *.gdms.cloud; 2 default-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com; script-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com 'unsafe-inline' 'unsafe-eval' https://*.ada.support https://*.bing.com https://www.google-analytics.com https://www.googleanalytics.com https://www.googletagmanager.com https://www.gstatic.com https://*.launchdarkly.com https://optimize.google.com https://www.googleoptimize.com https://js-agent.newrelic.com https://bam.nr-data.net https://static.ads-twitter.com https://analytics.twitter.com https://connect.facebook.net https://cdn.pdst.fm https://tracker.adreadyclick.com https://www.googleadservices.com https://cdn.pbbl.co https://websdk.appsflyer.com https://banner.appsflyer.com https://www.youtube.com https://creatives-cdn.appsflyer.com https://googleads.g.doubleclick.net https://www.google.com https://dend6g4sigg57.cloudfront.net https://5mky5td3g9.execute-api.us-east-1.amazonaws.com https://8jq0hovjeg.execute-api.us-east-1.amazonaws.com https://cdn.jsdelivr.net https://pixel.mathtag.com https://collector-20545.tvsquared.com https://*.google.com/; style-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com https://optimize.google.com https://cdn.jsdelivr.net https://banner.appsflyer.com https://creatives-cdn.appsflyer.com; frame-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com https://*.ada.support https://www.facebook.com https://cdn.pbbl.co https://bid.g.doubleclick.net https://optimize.google.com https://www.youtube.com https://dend6g4sigg57.cloudfront.net https://5mky5td3g9.execute-api.us-east-1.amazonaws.com https://8jq0hovjeg.execute-api.us-east-1.amazonaws.com https://pixel.mathtag.com https://collector-20545.tvsquared.com; connect-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com https://*.ada.support https://stats.g.doubleclick.net https://www.google-analytics.com https://*.bing.com https://bam.nr-data.net https://www.facebook.com https://pixelconnector.adready.com https://tracker.adreadyclick.com https://us-central1-adaptive-growth.cloudfunctions.net https://8jq0hovjeg.execute-api.us-east-1.amazonaws.com wss://*.connect.us-east-1.amazonaws.com https://5mky5td3g9.execute-api.us-east-1.amazonaws.com https://participant.connect.us-east-1.amazonaws.com https://wa.onelink.me https://wa.appsflyer.com https://banner.appsflyer.com https://creatives-cdn.appsflyer.com https://*.google.com/; img-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com https://secure.gravatar.com https://m1.com data: https://m1.com https://*.bing.com https://s3.amazonaws.com https://www.google-analytics.com https://www.googleanalytics.com https://www.google.com https://www.googletagmanager.com https://optimize.google.com https://trkn.us https://t.co https://www.facebook.com https://secure.adnxs.com https://pixel.pointmediatracker.com https://cnv.event.prod.bidr.io https://px0.pbbl.co https://aa.agkn.com https://analytics.twitter.com https://pixel.mathtag.com https://collector-20545.tvsquared.com https://banner.appsflyer.com https://creatives-cdn.appsflyer.com https://cdnappicons.appsflyer.com https://impressions.onelink.me https://*.google.com/; font-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com https://fonts.googleapis.com https://fonts.gstatic.com data: https://www.googletagmanager.com https://optimize.google.com https://cdn.appsflyer.com; object-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com; media-src 'self' *.m1finance.dev *.m1.dev *.m1finance.com m1.com m1finance.lndo.site https://secure.adnxs.com https://acdn.adnxs.com https://ib.adnxs.com *.m1.com https://*.launchdarkly.com https://www.google.com/ dev-m1finance.pantheonsite.io test-m1finance.pantheonsite.io live-m1finance.pantheonsite.io projkadence-m1finance.pantheonsite.io https://googleads.g.doubleclick.net *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io https://intercom-sheets.com https://static.intercomassets.com; 2 default-src 'self'; connect-src 'self' *.google-analytics.com *.googlesyndication.com api.leadinfo.com *.leadinfo.net *.lndrflp.net *.hubspot.com *.hsforms.com *.hscollectedforms.net *.oribi.io *.usercentrics.eu *.nelioabtesting.com *.google.com *.google.de *.facebook.com *.lfeeder.com *.doubleclick.net *.linkedin.com *.ads.linkedin.com yoast.com *.mouseflow.com salesviewer.org salesviewer.com *.salesviewer.com *.salesviewer.org bot-iagent.novomind.cloud; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdn.mouseflow.com *.leadinfo.net cdn.leadinfo.net *.mouseflow.com *.googletagmanager.com *.google-analytics.com *.hsforms.net *.hs-scripts.com *.hsleadflows.net *.hubspot.com *.hsappstatic.net *.hs-banner.com *.hscollectedforms.net *.hs-analytics.net *.licdn.com *.usercentrics.eu *.doubleclick.net *.lfeeder.com *.facebook.net *.licdn.net *.lndrflp.net cdn.lndrflp.net salesviewer.org salesviewer.com ecdn.novomind.com; worker-src blob:; style-src 'self' 'unsafe-inline' *.novomind.com *.hubspot.com *.hsappstatic.net; img-src 'self' data: *.novomind.com *.lfeeder.com tr-rc.lfeeder.com *.salesviewer.org salesviewer.org *.salesviewer.com salesviewer.com *.google-analytics.com *.hubspot.com *.hsforms.com *.forms-na1.hsforms.com *.perf-na1.hsforms.com *.usercentrics.eu *.service.usercentrics.eu *.google.com *.google.de *.googleadservices.com *.ads.linkedin.com *.doubleclick.net *.mouseflow.com; font-src 'self' data: *.mouseflow.com; frame-src 'self' blob: *.googletagmanager.com *.novomind.com bot-iagent.novomind.cloud *.doubleclick.net *.hubspot.com *.hsforms.com *.hsappstatic.net *.youtube.com *.youtube-nocookie.com *.vimeo.com *.mouseflow.com; child-src *.mouseflow.com; 2 script-src * 'unsafe-inline' 'unsafe-eval' blob: data:; style-src * 'unsafe-inline'; img-src * data: blob:; connect-src *; default-src * data: blob:; 2 default-src 'self' blob:; script-src https://*.visit-x.net http://*.visit-x.net https://*.visit-x.es http://*.visit-x.es https://*.visit-x.co.uk http://*.visit-x.co.uk https://*.visit-x.us http://*.visit-x.us https://*.visit-x.it http://*.visit-x.it https://*.visit-x.fr http://*.visit-x.fr 'self' 'unsafe-eval' 'unsafe-inline' https://optimize.google.com *.analytics.google.com https://analytics.google.com https://tagmanager.google.com *.campoints.net *.google-analytics.com browser-update.org *.zopim.com https://*.getsentry.com https://*.disqus.com https://*.disquscdn.com https://*.bing.com https://*.googleadservices.com data: https://disqus.com https://*.wowza.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://static.zdassets.com https://trck.spoteffects.net https://phyon.communipay.net; object-src 'self' *.vxcdn.org *.cpmessenger.io *.inethoster.org https://vjs.zencdn.net https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://optimize.google.com https://*.disquscdn.com https://*.wowza.com https://*.google.com https://fonts.googleapis.com; img-src *.visit-x.net *.visit-x.es *.visit-x.co.uk *.visit-x.us *.visit-x.it *.visit-x.fr 'self' *.vxcdn.org *.cpmessenger.io *.inethoster.org *.campoints.net http://visitx.testunikat.com http://194.116.150.87/ https://*.maptilehoster.com *.google-analytics.com https://*.bing.com https://*.googleadservices.com https://*.doubleclick.net https://*.google.com https://*.google.com.ec https://*.google.de https://*.google.ch https://*.google.at https://*.google.es https://*.google.fr data: browser-update.org https://v2.zopim.com https://v2assets.zopim.io https://*.disquscdn.com https://*.disqus.com https://www.googletagmanager.com https://prod-railsapp.s3.amazonaws.com https://*.wowza.com https://*.gstatic.com https://trck.spoteffects.net https://phyon.communipay.net https://*.vxmodels.com https://cdn.jsdelivr.net https://*.vxmodelsites.com blob:; media-src 'self' *.vxcdn.org *.cpmessenger.io *.inethoster.org *.campoints.net stream.visit-x.tv blob: https://v2.zopim.com https://*.akamaihd.net https://bintu-h5live.nanocosmos.de https://cdn.jsdelivr.net https://static.zdassets.com; frame-src https://*.visit-x.net http://*.visit-x.net https://*.visit-x.es http://*.visit-x.es https://*.visit-x.co.uk http://*.visit-x.co.uk https://*.visit-x.us http://*.visit-x.us https://*.visit-x.it http://*.visit-x.it https://*.visit-x.fr http://*.visit-x.fr 'self' https://optimize.google.com *.analytics.google.com https://analytics.google.com *.campoints.net https://*.vxcdn.org https://*.cpmessenger.io https://*.inethoster.org https://*.youtube.com https://*.disqus.com https://disqus.com https://*.feedtures.com https://player.vimeo.com https://paytour.communipay.net https://checkout.communipay.net https://phyon.communipay.net https://*.sexole.com; child-src https://*.visit-x.net http://*.visit-x.net https://*.visit-x.es http://*.visit-x.es https://*.visit-x.co.uk http://*.visit-x.co.uk https://*.visit-x.us http://*.visit-x.us https://*.visit-x.it http://*.visit-x.it https://*.visit-x.fr http://*.visit-x.fr 'self' *.campoints.net blob:; font-src *.visit-x.net *.visit-x.es *.visit-x.co.uk *.visit-x.us *.visit-x.it *.visit-x.fr 'self' fonts.gstatic.com data: https://*.zopim.com https://*.disquscdn.com; connect-src https://*.visit-x.net https://*.visit-x.es https://*.visit-x.co.uk https://*.visit-x.us https://*.visit-x.it https://*.visit-x.fr 'self' wss://*.campoints.net wss://*.campoints.net:443 wss://websocket.campoints.net wss://ws.campoints.net wss://*.farm1.campoints.net wss://*.farm1.campoints.net:443 *.campoints.net *.vxcdn.org *.cpmessenger.io https://*.visit-x.tv *.google-analytics.com wss://*.zopim.com https://*.getsentry.com https://*.akamaihd.net https://*.disqus.com https://*.wowza.com https://stream.vxcdn.org https://latencytimer.azurewebsites.net/api/HttpTriggerJS1 *.vx-services.net https://ekr.zdassets.com https://visitxbv.zendesk.com wss://bintu-h5live.nanocosmos.de https://stats.g.doubleclick.net https://glog1.nanocosmos.de https://phyon.communipay.net *.inethoster.org *.services.vxmodels.com https://api.rollbar.com https://cdn.jsdelivr.net https://zendesk-eu.my.sentry.io *.analytics.google.com https://analytics.google.com https://api.videosdk.live wss://*.rm.videosdk.live; 2 style-src 'self' https: 'report-sample' 'unsafe-inline' https://p.typekit.net https://use.typekit.net https://www.google.com cdn.jsdelivr.net www.googletagmanager.com https://www.netsurion.com; img-src 'self' https: data: https://bat.bing.com https://clients1.google.com https://px.ads.linkedin.com https://tribl.io https://www.google-analytics.com https://www.google.com https://www.netsurion.com; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://www.netsurion.com/ https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://assets.calendly.com https://www.google.com https://cse.google.com https://clients1.google.com https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://analytics.google.com/ https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.googleadservices.com/pagead/conversion_async.js https://apis.google.com https://www.recaptcha.net https://recaptcha.net https://www.gstatic.cn/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com https://snap.licdn.com https://bat.bing.com https://ajax.googleapis.com https://ws.zoominfo.com https://www.netsurion.com https://www.google.co.uk https://www.google.nl https://www.google.de https://www.google.fr https://www.google.co.in https://www.google.pl https://www.google.com.au https://www.google.co.id https://www.google.it https://www.google.co.il https://www.google.com.ph https://www.google.ie https://www.google.be https://www.google.ru https://www.google.se https://www.google.co.nz https://www.google.com.co https://www.google.com.mx https://www.google.pt https://www.google.co.th https://www.google.com.ng https://www.google.ca https://www.google.es https://www.google.no https://www.google.dk https://www.google.com.bd https://www.google.ch https://www.google.com.my https://www.google.co.za https://www.google.cz https://www.google.com.pk https://www.google.co.ma https://www.google.si https://www.google.com.tr https://www.google.com.tw https://www.google.com.br https://www.google.bg https://www.google.co.kr https://www.google.com.ua https://www.google.co.cr https://www.google.com.pe https://www.google.fi https://www.google.lt https://www.google.ge https://www.google.com.ar https://www.google.com.pr https://www.google.com.sg https://www.google.gr https://www.google.lk https://www.google.co.jp https://www.google.ae https://www.google.com.eg https://www.google.com.sa https://www.google.com.do https://www.google.com.pa https://www.google.ro https://www.google.hu https://www.google.cl https://www.google.hr https://www.google.lv https://www.google.at https://www.google.com.ec https://www.google.com.vn https://www.google.cn https://www.google.com.hk https://www.google.rs https://www.google.com.cy https://www.google.al https://www.google.com.py https://www.google.co.ke https://www.google.ee https://www.google.com.sv https://www.google.com.np https://www.google.co.ug https://www.google.kz https://www.google.com.jm https://www.google.lu https://www.google.mu https://www.google.com.kw https://www.google.iq https://www.google.com.gh https://www.google.by https://www.google.mk https://www.google.co.mz https://www.google.com.uy https://www.google.sk https://www.google.md https://www.google.hn https://www.google.jo https://www.google.dz https://www.google.com.et https://www.google.am https://www.google.co.ve https://tribl.io https://scout-cdn.salesloft.com www.google.com/jsapi https://partner.googleadservices.com/gampad/cookie.js https://tags.clickagy.com/data.js https://pi.pardot.com https://info.netsurion.com https://j.6sc.co/6si.min.js; connect-src 'self' https://px.ads.linkedin.com/wa/ https://csp.withgoogle.com https://pagead2.googlesyndication.com/pagead/buyside_topics/set/ https://bat.bing.com https://stats.g.doubleclick.net https://ws.zoominfo.com https://www.google-analytics.com https://adservice.google.com/ https://analytics.google.com/ https://www.netsurion.com https://scout.salesloft.com/ https://cdn.linkedin.oribi.io/ https://aorta.clickagy.com https://hemsync.clickagy.com https://secure.adnxs.com/getuidj https://c.6sc.co/ https://ipv6.6sc.co/; frame-src 'self' blob: https://www.netsurion.com/latest-news https://www.netsurion.com/latest-news/news https://www.google.com/recaptcha/ https://cse.google.com/ https://www.googletagmanager.com https://bid.g.doubleclick.net https://www.youtube.com/ https://player.vimeo.com/ https://www.youtube-nocookie.com/ https://cdn.embedly.com/ https://tribl.io https://www.netsurion.com/ https://info.netsurion.com/ https://td.doubleclick.net/; child-src https://www.googletagmanager.com/ns.html; object-src 'none'; base-uri 'self'; manifest-src 'self'; media-src 'self' https://www.netsurion.com; worker-src 'none';form-action 'self' https://www.netsurion.com/assessments/gap-analysis https://www.netsurion.com/campaigns/ppc-gap-analysis https://www.netsurion.com/campaigns/cmit-gap-analysis; 2 upgrade-insecure-requests; frame-ancestors 'self' pcsoft.fr *.pcsoft.fr windev.com *.windev.com windev.es *.windev.es pcsoft-windev-webdev.com *.pcsoft-windev-webdev.com 2 'self' 2 frame-ancestors https://serpzilla.com https://*.serpzilla.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: blob:; frame-src 'self' https: blob:; child-src 'self' blob:; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 2 frame-ancestors 'self' alanhealth.cloudflareaccess.com/ app.intercom.com/ app.eu.intercom.com/ cdp-eu.customer.io/ localhost:9999 *.eu.saleor.cloud 2 default-src 'self'; script-src 'self' https://chat.voipfone.co.uk *.livechatinc.com *.mouseflow.com https://*.googletagmanager.com https://challenges.cloudflare.com https://maps.googleapis.com https://fonts.google.com https://www.youtube.com https://s.ytimg.com; connect-src 'self' https://chat.voipfone.co.uk *.livechatinc.com *.mouseflow.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://www.googleapis.com https://maps.googleapis.com https://ipapi.co controlpanel.voipfone.co.uk api.voipfone.co.uk controlpanel.voipfone.co.uk api.voipfone.co.uk controlpanel.voipfone.co.uk api.voipfone.co.uk controlpanel.voipfone.co.uk api.voipfone.co.uk controlpanel.voipfone.co.uk api.voipfone.co.uk; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; child-src 'self' https://chat.voipfone.co.uk *.livechatinc.com; frame-src 'self' https://chat.voipfone.co.uk *.livechatinc.com https://*.google.com https://challenges.cloudflare.com https://www.youtube.com; frame-ancestors 'none'; font-src 'self' https://fonts.gstatic.com; report-uri https://api.voipfone.co.uk/v1/csp-report; report-to csp-report 2 base-uri 'self'; default-src 'self'; frame-src 'self' smgov.maps.arcgis.com public.tableau.com youtu.be www.youtube-nocookie.com www.youtube.com www.google.com santamonicacity.wufoo.com smplca.patronpoint.com; script-src 'self' 'unsafe-inline' js.monitor.azure.com 'unsafe-eval' blob: unpkg.com maxcdn.bootstrapcdn.com fastly.jsdelivr.net code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net www.gstatic.com; style-src 'self' 'unsafe-inline' unpkg.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com fonts.cdnfonts.com fastly.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net; form-action 'self' smpl.bibliocommons.com https://*.list-manage.com smplca.patronpoint.com login.microsoftonline.com; img-src 'self' data: www.santamonica.gov santamonica.gov *.arcgis.com www.google.com translate.google.com translate.googleapis.com www.googletagmanager.com www.gstatic.com fonts.gstatic.com *.clarity.ms c.bing.com cdn.jsdelivr.net *.getbynder.com *.openstreetmap.org; object-src 'none'; frame-ancestors 'self' ike.ikesmartcity.com; connect-src 'self' *.applicationinsights.azure.com *.arcgis.com public.tableau.com data.santamonica.gov ka-f.fontawesome.com translate-pa.googleapis.com translate.googleapis.com region1.google-analytics.com www.google-analytics.com dc.services.visualstudio.com js.monitor.azure.com *.clarity.ms sentry10.bynder.cloud d8ejoa1fys2rk.cloudfront.net cityofsantamonica.getbynder.com unpkg.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com fonts.cdnfonts.com fastly.jsdelivr.net cdnjs.cloudflare.com cdn.jsdelivr.net code.jquery.com; script-src-elem 'self' 'unsafe-inline' kit.fontawesome.com cdn.jsdelivr.net code.jquery.com unpkg.com *.arcgis.com js.monitor.azure.com www.googletagmanager.com www.clarity.ms translate.google.com translate.googleapis.com translate-pa.googleapis.com scripts.clarity.ms www.google-analytics.com public.tableau.com secure.wufoo.com smplca.patronpoint.com www.google.com d8ejoa1fys2rk.cloudfront.net www.gstatic.com; font-src 'self' ka-f.fontawesome.com *.arcgis.com d8ejoa1fys2rk.cloudfront.net fonts.gstatic.com fonts.googleapis.com fonts.cdnfonts.com cdnjs.cloudflare.com cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' *.arcgis.com cdn.jsdelivr.net fonts.googleapis.com smplca.patronpoint.com www.gstatic.com d8ejoa1fys2rk.cloudfront.net 2 default-src https: data: wss://*.hotjar.com wss://*.crazyegg.com *.crazyegg.com wss://*.zohopublic.com *.growthbook.io *.jsdelivr.net; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self' https://storable.my.salesforce.com https://storable.lightning.force.com; object-src 'self' blob; upgrade-insecure-requests; media-src 'self' blob: data: https:; 2 frame-ancestors 'self' https://my.cermo360.de https://my.matterport.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://js-agent.newrelic.com https://*.nr-data.net https://bam.nr-data.net; worker-src 'self' blob: https://*.pantheonsite.io https://js-agent.newrelic.com https://*.nr-data.net https://bam.nr-data.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: https://*.pantheonsite.io; font-src 'self' data: https://fonts.gstatic.com https://*.pantheonsite.io https:; connect-src 'self' https://*.pantheonsite.io https://*.nr-data.net https://bam.nr-data.net; media-src 'self' https://*.pantheonsite.io; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 2 default-src 'self' https://tngr.co https://*.yellow.ai; connect-src 'self' https://develop--whimsical-donut-f2fd99.netlify.app https://uat--whimsical-donut-f2fd99.netlify.app https://uat.tanger.com https://api.tanger.com https://www.tanger.com https://account.tanger.com *.mappedin.com data: *.onetrust.com https://cdn.cookielaw.org https://images.contentstack.io https://d1p5cqqchvbqmy.cloudfront.net https://api-gateway.mappedin.com https://cdn.mappedin.com https://www.google-analytics.com https://analytics.tiktok.com https://connect.facebook.net https://js.stripe.com/ https://ingesteer.services-prod.nsvcs.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.sojern.com *.doubleclick.net *.adnxs.com https://www.google.com/recaptcha/ https://aw-services.us.vibes.com//api/ https://aw-services.us.vibes.com//authenticate https://aw-services.us.vibes.com//widgets/ wss://*.yellow.ai https://*.yellow.ai https://*.yellowmessenger.com https://*.liadm.com https://us01.records.in.treasuredata.com https://insights.sitesearch360.com https://global.sitesearch360.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://d1p5cqqchvbqmy.cloudfront.net https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://cdn.cookielaw.org https://cdn.vibes.com https://connect.facebook.net https://analytics.tiktok.com https://resources.fidel.uk https://js.stripe.com https://js.adsrvr.org siteimproveanalytics.com https://*.hotjar.com *.sojern.com *.doubleclick.net *.adnxs.com https://*.yellowmessenger.com https://b-code.liadm.com *.mappedin.com http://cdn.treasuredata.com https://www.youtube.com/ https://cdn.sitesearch360.com/ blob:; worker-src 'self' blob:; frame-src 'self' https://www.google.com https://resources.fidel.uk https://js.stripe.com/ https://13250566.fls.doubleclick.net https://td.doubleclick.net https://insight.adsrvr.org *.sojern.com *.doubleclick.net *.adnxs.com https://tngr.co https://cdn.tangeroutlet.com/ https://i.liadm.com https://www.youtube.com/ https://www.youtube-nocookie.com; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' cdn.mappedin.com https://d1p5cqqchvbqmy.cloudfront.net https://*.hotjar.com https://fonts.googleapis.com https://*.yellowmessenger.com; img-src 'self' blob: https://www.google-analytics.com https://r4.app.yellow.ai https://r4-ym-uploads.s3-us-west-2.amazonaws.com https://r4-ym-confidential.s3.amazonaws.com https://*.yellowmessenger.com https://*.liadm.com *.mappedin.com data: https://www.tanger.com https://images.contentstack.io https://cdn.cookielaw.org https://cdn.mappedin.com https://www.facebook.com https://ad.ipredictive.com https://ad.doubleclick.net https://ciqtracking.com https://secure.adnxs.com https://adservice.google.com https://insight.adsrvr.org *.siteimproveanalytics.io https://*.hotjar.com *.sojern.com *.doubleclick.net *.adnxs.com https://analytics.tiktok.com/ https://upload.wikimedia.org/wikipedia/commons/6/6f/Tanger_logo.svg https://tngr.co https://cdn.tangeroutlet.com https://d2xs7zaan7w9gl.cloudfront.net https://insights.sitesearch360.com https://cdn.sitesearch360.com; font-src 'self' cdn.mappedin.com https://d1p5cqqchvbqmy.cloudfront.net https://*.hotjar.com https://fonts.gstatic.com https://*.yellowmessenger.com; form-action 'self'; manifest-src 'self' 2 connect-src 'self' *.squarecloud.app *.squarecloud.dev *.github.com *.crisp.chat wss://*.crisp.chat *.googletagmanager.com *.google-analytics.com www.google.com *.gstatic.com *.googleapis.com *.cloudflare.com discord.com js.stripe.com api.stripe.com 2 frame-ancestors 'self' cooksongold.com cooksongold.answerbase.com cooksongold.services.answerbase.com localhost:3000 avisor.pro *.franceclatdata.fr faq.cooksongold.com threedsecurempi.com https://www.threedsecurempi.com 2 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src * data: blob:; font-src * data:; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; frame-src *; object-src 'none'; base-uri 'self'; 2 navigate-to hercrentals.com 2 default-src 'self' *; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js * https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdnjs.cloudflare.com 'self' cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com * 'self' 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.google-analytics.com https://*.dec.sitefinity.com *.eloqua.com track.hubspot.com https://www.google.co.ve:* https://www.googletagmanager.com:* https://www.google.com:* https://cdnjs.cloudflare.com:* https://px.ads.linkedin.com:* https://www.achssalud.cl:* https://achssalud.cl:* https://www.google.com.ar https://www.google.cl *.linkedin.com 'self'; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *; frame-src https://www.google.com:* https://www.youtube.com:* https://td.doubleclick.net:* https://www.googletagmanager.com:* https://externo.achs.cl:* https://apps.sae1.pure.cloud:* https://dyo3z5271kl7e.cloudfront.net:* https://iframe.lfi-app.cl:* https://app.powerbi.com http://achs.my.salesforce-sites.com 'self'; connect-src accounts.google.com * *.mktoresp.com https://www.googletagmanager.com:* 'self'; media-src 'self' data: blob:; child-src https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://td.doubleclick.net:* https://www.googletagmanager.com:* 'self'; frame-ancestors https://www.google.com:* https://www.youtube.com:* https://td.doubleclick.net:* https://www.googletagmanager.com:* https://externo.achs.cl:* https://apps.sae1.pure.cloud:* https://dyo3z5271kl7e.cloudfront.net:* https://iframe.lfi-app.cl:* https://app.powerbi.com 'self' 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;style-src 'self' 'unsafe-inline' https:;img-src 'self' data: blob: https:;media-src 'self' data:;connect-src 'self' data: https: wss:;font-src 'self' data: https:;frame-src 'self' https:;frame-ancestors 'self' https://eshop.biano.cz;worker-src 'self' blob:;report-to csp-endpoint;base-uri 'self';form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests 2 default-src http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval' data: https: service-content.lumion.com services.lumion3d.net lumion.com s.ytimg.com www.youtube.com www.youtube-nocookie.com kit.fontawesome.com kit-free.fontaw.com ajax.googleapis.com fonts.googleapis.com use.typekit.net p.typekit.net use.fontawesome.com t.co ipapi.co www.google-analytics.com www.googleadservices.com connect.facebook.net static.ads-twitter.com analytics.twitter.com platform.twitter.com cdn.syndication.twimg.com static.hotjar.com script.hotjar.com vars.hotjar.com in.hotjar.com vc.hotjar.io www.google.com www.facebook.com fonts.gstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ www.googletagmanager.com static.cloudflareinsights.com ajax.cloudflare.com api.iconify.design https://*.sheerid.com platform.twitter.com https://js.hsforms.net https://js-eu1.hsforms.net *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; frame-ancestors 'self' https://*.storyblok.com/; frame-src https://calendly.com/ https://www.googletagmanager.com/ https://meetings-eu1.hubspot.com/ https://app-eu1.hubspot.com/ https://portal.productboard.com https://*.hsforms.com https://js.hsforms.net https://js-eu1.hsforms.net https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://11264468.fls.doubleclick.net/ https://td.doubleclick.net/ download.lumion.com https://*.sheerid.com view.mylumion.com www.youtube.com www.youtube-nocookie.com platform.twitter.com vars.hotjar.com www.facebook.com syndication.twitter.com player.vimeo.com *.visualwebsiteoptimizer.com app.vwo.com; object-src 'none'; worker-src 'self' blob:; 2 media-src 'self'; 2 frame-ancestors 'self' *.vietgiaitri.com *.vgt.vn 2 default-src 'self';script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://*.onetrust.com https://www.googletagmanager.com https://siteimproveanalytics.com;style-src 'self' 'unsafe-inline';img-src 'self' https://* data:;font-src 'self' data:;connect-src 'self' https://*.google-analytics.com https://yoshki.com https://cdn.yoshki.com https://analytics.google.com https://challenges.cloudflare.com https://*.onetrust.com https://*.cookielaw.org https://61282113.global.siteimproveanalytics.io https://communication.winstontaylor.com;frame-src 'self' https://challenges.cloudflare.com https://player.vimeo.com https://yoshki.com https://cdn.yoshki.com;;object-src 'none';base-uri 'self';frame-ancestors 'self'; 2 frame-ancestors https://development.maritim.de https://karriere.maritim.de https://www.maritim.de https://www.maritim.com https://www.maritim-hotels.cn https://www.orangerie-timmendorfer-strand.de https://www.maritim-reisedienst.de https://www.reinhardtundsander.de 2 default-src * data: *.crazyegg.com 'unsafe-eval' 'unsafe-inline' blob:; font-src 'self' fonts.gstatic.com *.crazyegg.com data:; script-src * *.crazyegg.com 'unsafe-inline' 'unsafe-eval' blob:; connect-src * *.crazyegg.com 'unsafe-inline' data:; img-src * *.crazyegg.com data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline' 2 script-src 'self' 'report-sample' https://js.hsforms.net http://js.hsforms.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hscollectedforms.net https://forms.hsforms.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://cdn.usefathom.com https://www.clarity.ms https://scripts.clarity.ms https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://cdn.jsdelivr.net 'sha256-M28mypAFwwpIwIF9e1/A6867PQiwVvOrdqFSTFSa8/U=' 'sha256-Ed6Lei7deBSXT1iYYw0V36YZXaA4v7OsRknNjmNl/9c=' 'sha256-uDN+KkW4ljf+D4DbsWP5KpxyfG/7h+LNmZxMzbz/+1E=' 'sha256-9seBUu3uBabJT/26wJPQEjpi+FB2ayw9N8BnQJlh/ls=' 'sha256-mqxawUgIH8vW3/GxWmOFDp5zt8IejNl5rNH2j9PXF88=' 'sha256-wkSWDFufZapa7t3NvV+JhSRXHb/4CI3ZnaqCvg7byns=' 'sha256-Tq4uREmlYInMCBRtudvmIOCc+VdyPNg3t18I9xtvdgs=' 'sha256-/mLWo7as1uoH7YxKP28RczpTaAJYtZFOdU0Okz4RWRo=' 'sha256-vHWNkFcRXsOiOWmmubySLtLeZ3xAubNJpC7UdmQgSQU=' 'sha256-FHfozmosNdt5yUG9l8OmVM1S/oTxw2TNWHPejSjEr58=' 'sha256-2VNfiq6Um2ua9MLfzend4JESqZeD1VSgkWvUrPvrlZE=' 'sha256-6Z9XwT1XsndpCDjoLgO3W3g2Dptc9WedO+nSCr9k3no=' 'sha256-+Ozb/ItuZAdaQgJd2RebN2rKWj1XkBuXVaV6/lT4Juo=' 'sha256-9qgU5FDrauEgF+e1iJWvsh46OwsIkNOLjkXggr/02jk=' 'sha256-v7ddZtWCUr5oF3kgrlEot4fG861CKDXUt0aTaNaIk6Q=' 'sha256-+t5Z3fJi7uJxARWEzFEVaSRgtaAn0r97XkxpJNbQiK0='; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.redocly.com https://webhook.frontapp.com https://j.clarity.ms/* https://api.github.com https://api.rebilly.com https://forms.hsforms.com https://forms.hscollectedforms.net https://*.google-analytics.com https://hubspot-forms-static-embed.s3.amazonaws.com https://v.clarity.ms/collect https://cdn.jsdelivr.net https://forms-na2.hscollectedforms.net https://forms-na2.hsforms.com; form-action 'self' https://forms.hsforms.com https://webhook.frontapp.com https:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; worker-src 'self' blob:; frame-src 'self' https://www.google.com https://www.youtube.com https://forms-na2.hsforms.com/ https://demo.arcade.software; child-src 'self' blob:; img-src 'self' data: https: blob:; 2 default-src https:; img-src 'self' data: cdn.cookielaw.org cookie-cdn.cookiepro.com i.vimeocdn.com maps.gstatic.com *.googleapis.com *.ggpht.com *.linkedin.com *.google.com *.google.co.in *.google.com.sg *.crazyeggcdn.com *.crazyegg.com *.google.ca; script-src 'self' admin.ceros.com *.preview.ceros.com sharejs.ceros.com 104.18.33.58 172.64.154.198 172.64.144.4 104.18.43.252 view.ceros.com tools.euroland.com tools.eurolandir.com *.googleadservices.com *.google.com *.googleapis.com *.gstatic.com vimeo.com *.vimeo.com *.worley.com snap.licdn.com *.pardot.com *.googletagmanager.com *.doubleclick.net *.crazyegg.com cdn.cookielaw.org cdn.jsdelivr.net cookie-cdn.cookiepro.com 'unsafe-eval' 'unsafe-inline' blob:; style-src 'self' fonts.googleapis.com *.typekit.net *.crazyegg.com cdn.jsdelivr.net 'unsafe-inline'; font-src 'self' fonts.gstatic.com *.typekit.net; media-src i.vimeocdn.com *.crazyegg.com; connect-src 'self' *.google.com *.googleapis.com *.google-analytics.com *.googleanalytics.com *.googletagmanager.com *.doubleclick.net *.linkedin.com px.ads.linkedin.com *.pardot.com *.vimeo.com vimeo.com *.worley.com tools.euroland.com tools.eurolandir.com view.ceros.com *.ceros.com admin.ceros.com sharejs.ceros.com cdn.cookielaw.org cdn.jsdelivr.net cookie-cdn.cookiepro.com *.onetrust.com *.my.onetrust.com *.crazyegg.com *.crazyeggcdn.com; frame-src 'self' *.google.com *.googletagmanager.com *.vimeo.com vimeo.com view.ceros.com tools.euroland.com tools.eurolandir.com *.ceros.com admin.ceros.com *.worley.com *.crazyegg.com *.crazyeggcdn.com; object-src i.vimeocdn.com; upgrade-insecure-requests; block-all-mixed-content; 2 default-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://ssl.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com https://embed.tawk.to https://va.tawk.to https://upload.tawk.to wss://*.tawk.to; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://ssl.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com https://embed.tawk.to https://va.tawk.to https://cdn.jsdelivr.net; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://ssl.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com https://embed.tawk.to https://cdn.jsdelivr.net; script-src-attr 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://ssl.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://embed.tawk.to; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://embed.tawk.to https://cdn.jsdelivr.net; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com https://embed.tawk.to; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://embed.tawk.to; upgrade-insecure-requests; block-all-mixed-content; 2 default-src 'self' data: https:; font-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https:; connect-src 'self' https:; style-src 'self' 'unsafe-inline' data: https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'self'; upgrade-insecure-requests; 2 frame-ancestors 'self' https://portal.ukbonn.de https://portal-test.ukbonn.de; 2 frame-ancestors https://*.mofos.com 2 frame-ancestors 'self' everygame.eu www.everygame.eu sblp.everygame.eu sports.everygame.eu poker.everygame.eu casino.everygame.eu classic.everygame.eu lobby.everygame.eu account.everygame.eu 2 default-src 'self' *.ist.ac.at *.ista.ac.at *.google-analytics.com *.azureedge.net *.dynamics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.ist.ac.at *.ista.ac.at https://www.google-analytics.com https://www.googletagmanager.com *.azureedge.net *.dynamics.com; style-src 'self' *.googleapis.com *.ist.ac.at *.ista.ac.at *.azureedge.net *.dynamics.com 'unsafe-inline'; img-src 'self' data: *.ist.ac.at *.ista.ac.at *.googletagmanager.com https://secure.gravatar.com *.azureedge.net *.dynamics.com; font-src 'self' fonts.gstatic.com *.ist.ac.at *.ista.ac.at data:; connect-src 'self' *.ist.ac.at *.ista.ac.at *.google-analytics.com *.azureedge.net *.dynamics.com; media-src 'self' *.ist.ac.at *.ista.ac.at; object-src 'none'; base-uri 'self'; frame-ancestors 'self' *.ist.ac.at *.ista.ac.at; 2 default-src 'self' https://ccm19.webhome.at; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://ccm19.webhome.at https://challenges.cloudflare.com https://alpinechat.io https://maps.googleapis.com https://www.googletagmanager.com https://sibforms.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://ccm19.webhome.at https://challenges.cloudflare.com https://alpinechat.io https://sibforms.com; img-src 'self' data: https:; connect-src 'self' https://*.mollie.com https://ccm19.webhome.at https://alpinechat.io https://www.google.com https://recaptcha.google.com https://maps.googleapis.com https://www.googletagmanager.com https://region1.analytics.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://sibforms.com https://*.sibforms.com https://api.brevo.com; font-src 'self' data: https://fonts.gstatic.com https://sibforms.com https://assets.brevo.com; frame-src 'self' https://www.google.com https://challenges.cloudflare.com https://alpinechat.io https://ccm19.webhome.at https://payment-links.mollie.com https://www.mollie.com https://*.mollie.com https://www.youtube-nocookie.com https://www.youtube.com; child-src 'self' https://ccm19.webhome.at https://www.google.com https://challenges.cloudflare.com https://alpinechat.io https://payment-links.mollie.com https://www.mollie.com https://*.mollie.com https://www.youtube-nocookie.com https://www.youtube.com; worker-src 'self' https://ccm19.webhome.at; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://sibforms.com; object-src 'none' 2 default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://app.termly.io https://browser.sentry-cdn.com https://go.r1rcm.com https://googleads.g.doubleclick.net https://i.simpli.fi https://js.adsrvr.org https://js.zi-scripts.com https://pi.pardot.com https://scripts.clarity.ms https://static.addtoany.com https://tag.demandbase.com https://tag.simpli.fi https://tags.clickagy.com https://unpkg.com/@alpinejs/ https://*.atlassian.net https://*.wistia.com https://*.wistia.net https://www.clarity.ms https://www.googletagmanager.com https://www.google-analytics.com https://r1rcmstg.wpengine.com https://r1rcm.wpengine.com https://s.go-mpulse.net https://*.upsun-us.observability-pipeline.blackfire.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://r1rcmstg.wpengine.com https://r1rcm.wpengine.com; connect-src 'self' https://api.company-target.com https://analytics.google.com https://app.termly.io https://aorta.clickagy.com https://browser.sentry-cdn.com https://c.go-mpulse.net https://*.g.doubleclick.net https://insight.adsrvr.org https://*.clarity.ms https://js.zi-scripts.com https://pagead2.googlesyndication.com https://stats.addtoany.com https://us.consent.api.termly.io https://ws.zoominfo.com https://*.akstat.io https://*.akamaihd.net https://*.atlassian.net https://*.uriports.com https://*.wistia.com https://*.wistia.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://yoast.com https://r1rcm.wpengine.com https://r1rcmstg.wpengine.com https://staging.r1rcm.com https://r1rcm.com; font-src 'self' data: https://fonts.gstatic.com https://*.wistia.com https://*.wistia.net https://r1rcmstg.wpengine.com https://r1rcm.wpengine.com; img-src 'self' data: blob: https:; frame-src 'self' https://go.cloudmed.com https://go.r1rcm.com https://insight.adsrvr.org https://match.adsrvr.org https://s.company-target.com https://static.addtoany.com https://*.atlassian.net https://*.wistia.com https://*.wistia.net https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com; manifest-src 'self'; media-src 'self' blob: https://*.wistia.com https://*.wistia.net; worker-src 'self' blob:; report-uri https://sm2a5wgs2.uriports.com/reports; 2 default-src 'self' https: https://*.wistia.com https://*.wistia.net; font-src 'self' https: data: https://*.wistia.com; img-src 'self' http: https: data: blob: https://*.wistia.com https://*.wistia.net; object-src 'none'; script-src 'self' http: https: 'unsafe-inline' 'unsafe-eval' blob: https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.sentry-cdn.com/; style-src 'self' http: https: 'unsafe-inline' blob: https://fast.wistia.com; connect-src 'self' http: https: blob: ws: wss: https://*.litix.io https://*.wistia.com https://*.wistia.net https://*.algolia.net; worker-src 'self' https: blob:; media-src 'self' https: blob: https://*.wistia.com https://*.wistia.net; child-src 'self' blob:; frame-src 'self' https: blob: https://fast.wistia.com https://fast.wistia.net 2 default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; 2 default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https: 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cloudflare.com https://*.datatables.net https://*.jquery.com https://*.jsdelivr.net https://*.googleapis.com https://*.treasury.gov.my https://appscdn.joomla.org https://www.balbooa.com; style-src 'self' 'unsafe-inline' https://*.cloudflare.com https://*.datatables.net https://*.jquery.com https://*.jsdelivr.net https://fonts.googleapis.com https://*.mof.gov.my https://*.treasury.gov.my; img-src 'self' data: blob: https://*.mof.gov.my https://*.googleapis.com https://*.facebook.com https://*.instagram.com https://*.x.com https://*.treasury.gov.my https://www.joomshaper.com https://extensionscdn.joomla.org https://appscdn.joomla.org; font-src 'self' https://fonts.gstatic.com https://*.googleapis.com https://*.mof.gov.my https://*.treasury.gov.my; connect-src 'self' https://*.cloudflare.com https://*.jquery.com https://*.googleapis.com https://*.mof.gov.my https://*.treasury.gov.my https://appscdn.joomla.org https://www.balbooa.com; frame-src 'self' https://rtm-player.glueapi.io https://www.youtube.com https://*.facebook.com https://*.instagram.com https://*.x.com https://*.treasury.gov.my https://www.balbooa.com; object-src 'none'; base-uri 'self'; form-action 'self'; 2 base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; child-src blob:; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; style-src 'self' https: 'unsafe-inline' *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; img-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; font-src 'self' data: *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; connect-src 'self' *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; frame-src 'self' data: *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; frame-ancestors 'self' *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; object-src data: *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; media-src 'self' data: *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com; worker-src 'self' data: blob: *.adnxs.com *.ads-twitter.com *.adsymptotic.com *.amazonaws.com *.analytics.google.com *.aptica.es *.bankofafrica.ma *.bing.com *.bing.net *.bizographics.com *.boomtrain.com *.byside.com *.capitalone.com *.clarity.ms cdnjs.cloudflare.com/ajax/libs/three.js/* *.configcat.com *.contentful.com *.cookielaw.com *.cookielaw.org *.ctfassets.net *.conversionsapigateway.com *.doubleclick.net *.engagement.coremedia.cloud *.facebook.com *.facebook.net *.go2sdk.com *.google-analytics.com *.google.com *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.krxd.net *.licdn.com *.linkedin.com *.linkedin.oribi.io *.masmovil.com *.masmovil.es *.masstack.com mpc2-prod-1-is5qnl632q-uc.a.run.app *.netmng.com *.onetrust.com *.optimizely.com *.orsac.net *.quantummetric.com *.realytics.io *.realytics.net *.rezync.com *.rfihub.com *.rfihub.net *.reddit.com *.redditstatic.com *.segment.com *.segment.io *.speedtestcustom.com tally.so *.tally.so *.tiktok.com *.tiktokw.us *.twitter.com *.useinsider.com *.vwo.com *.vwo.io *.youtube-nocookie.com *.youtube.com *.zetaglobal.net *.abanca.com *.adyen.com *.apata.io *.bunq.com *.cardinalcommerce.com *.mastercard.com *.monext.fr *.n26.com *.nexigroup.com *.redsys.es *.revolut.com *.rsa3dsauth.co.uk *.sibs.com *.sibs.pt *.vinea.es *.visa.com 3ds.redsys.es cihbank.ma d1s6z24hqd2168.cloudfront.net events.eu1.segmentapis.com llamamegratis.es t.co wss://*.byside.com 2 default-src * 'unsafe-inline' 'unsafe-eval'; img-src * blob: data:; media-src * blob:; script-src * 'unsafe-eval' 'unsafe-inline' blob:; style-src * 'unsafe-inline'; font-src * data:; 2 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; 2 default-src https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 2 frame-ancestors 'self' https://xn--l6qy95a.fun https://prlyl.cn; img-src 'self' data: https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https: http:; font-src 'self' data: https: http:; connect-src 'self' https: http: ws://47.97.170.151:7181 wss://47.97.170.151:7181; 2 frame-ancestors 'self' https://cosporta.com; 2 script-src 'self' blob: https://*.hotjar.com https://dev.visualwebsiteoptimizer.com https://scripts.clarity.ms/ https://js.hubspot.com/ https://bat.bing.com/ https://www.clarity.ms/ https://static.cloudflareinsights.com/ https://www.gstatic.com/recaptcha/releases/ *.googleadservices.com *.googleapis.com *.typekit.net *.bootstrapcdn.com *.google-analytics.com *.informz.net static.zdassets.com pod-27.zendesk.com *.trustarc.com *.feathr.co *.livechatinc.com *.zdassets.com *.googletagmanager.com *.pardot.com *.licdn.com *.ads-twitter.com *.twitter.com *.hotjar.com *.facebook.net *.hs-scripts.com *.youtube.com *.hs-banner.com *.hs-analytics.net *.hsadspixel.net *.doubleclick.net *.addthis.com *.google.com *.googlesyndication.com code.jquery.com players.brightcove.net *.moatads.com *.addthisedge.com *.googletagservices.com afp.informz.net googletagservices.com s7.addthis.com tableau.com *.hsforms.net *.hsappstatic.net *.hubspotusercontent-na1.net *.google.com *.recaptcha.net https://google.com https://js.usemessages.com/conversations-embed.js https://workforcenow.adp.com https://synerg.adp.com https://*.adp.com 'unsafe-inline' 'unsafe-eval'; frame-src 'self' *.hsforms.net *.google.com *.recaptcha.net https://google.com https://7185359.hs-sites.com/ https://app.keysurvey.com/ https://www.googletagmanager.com/ https://forms.hsforms.com/ https://app.keysurvey.com/f/41660076/3f4c/ https://financeandaccountantcareers.com/ https://www.mfamonitor.com/ https://consent-pref.trustarc.com/ https://www.keysurvey.com public.tableau.com consent.trustarc.com *.doubleclick.net *.hotjar.com *.addthis.com *.youtube.com *.hapyak.com blueprint.freeman.com *.ceros.com players.brightcove.net *.safeframe.googlesyndication.com *.googlesyndication.com *.google.com *.libsyn.com https://videos.insightpath.io/ https://app.hubspot.com/ https://www.opinionstage.com/ https://app.smartsheet.com/; object-src 'self' 2 frame-ancestors 'self' https://jobsearch.createyourowncareer.com https://www.benet.bertelsmann.com https://www.benet.bertelsmann.de; 2 default-src 'self' *.doubleclick.net; img-src 'self' data: *.useinsider.com *.clarity.ms clarity.microsoft.com *.google.com i.ytimg.com server.seadform.net *.google.com.tr pisano.com.tr cdn.pisano.com.tr *.doubleclick.net *.google-analytics.com t.co *.twitter.com *.facebook.com static.ads-twitter.com *.googletagmanager.com *.gstatic.com ade.googlesyndication.com; font-src 'self' 'unsafe-inline' data: *.useinsider.com adservice.google.com *.bootstrapcdn.com *.google.com *.googletagmanager.com adservice.google.com.tr connect.facebook.net *.gstatic.com stackpath.bootstrapcdn.com *.googletagmanager.com t.co *.google-analytics.com *.accessiblee.com; frame-src 'self' 'unsafe-inline' data: blob: *.useinsider.com c1.adform.net consentcdn.cookiebot.com *.google.com.tr *.doubleclick.net www.youtube-nocookie.com *.youtube.com *.google.com *.googletagmanager.com *.google-analytics.com tsdtocl.com; connect-src 'self' data: *.axasigorta.com.tr *.useinsider.com maps.googleapis.com consentcdn.cookiebot.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com *.taboola.com analytics.tiktok.com pisano.com.tr ccdn.mobildev.in cdn.pisano.com.tr *.google.com *.doubleclick.net api.ipify.org *.googletagmanager.com *.accessiblee.com pagead2.googlesyndication.com analytics-ipv6.tiktokw.us; style-src 'self' 'unsafe-inline' *.useinsider.com *.bootstrapcdn.com *.google.com fonts.googleapis.com *.gstatic.com code.jquery.com stackpath.bootstrapcdn.com *.googletagmanager.com *.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.useinsider.com consent.cookiebot.com *.glassboxcdn.com ccdn.mobildev.in static.hotjar.com script.hotjar.com *.taboola.com analytics.tiktok.com *.google.com www.google.com.tr cdn.tagcommander.com axasigorta.unbd.agency www.axasigorta.unbd.agency pisano.com.tr cdn.pisano.com.tr *.gstatic.com maps.googleapis.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com www.youtube.com *.twitter.com *.adform.net static.ads-twitter.com t.co *.accessiblee.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://plausible.io; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src 'self' data: https://*.medium.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.4160.nodely.dev https://plausible.io https://api.emailjs.com; frame-src 'self' https://*.loom.com https://*.youtube.com https://customer-79jhngjtc25rkvy9.cloudflarestream.com; frame-ancestors 'none'; report-to default 2 worker-src blob:; default-src * data: 'unsafe-eval' 'unsafe-inline' 2 default-src 'self' data: 'unsafe-inline' https:; frame-ancestors 'none' 2 default-src * 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https://remitano.com 2 default-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.applysq.com cdn.applysquare.net *.applysquare.net ana.applysquare.com pingjs.qq.com hm.baidu.com *.map.baidu.com *.map.bdimg.com res.wx.qq.com s13.cnzz.com c.cnzz.com cdn.bootcss.com cdn.staticfile.org static.bcedocument.com img.baidu.com doc.baidubce.com static.exp.bcedocument.com *.google-analytics.com *.google.com maps.gstatic.com *.amap.com *.googleapis.com *.googletagmanager.com *.bootstrapcdn.com *.cloudflare.com cdn.applysquare.net/a2/lib assets-cli.s2.udesk.cn 1372979.s2.udesk.cn basevistor.s2.udesk.cn js.intercomcdn.com widget.intercom.io cdn.jsdelivr.net cdn.bootcdn.net; style-src 'self' 'unsafe-inline' 1372979.s2.udesk.cn static.bcedocument.com img.baidu.com doc.baidubce.com static.exp.bcedocument.com cdn.applysq.com cdn.applysquare.net *.applysquare.net cdn.staticfile.org cdn.bootcss.com *.amap.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com cdn.applysquare.net/a2/lib cdn.jsdelivr.net cdn.bootcdn.net *.easyliao.com; font-src * data:; img-src * data: blob:; connect-src * data: 2 frame-ancestors 'self' *.wrike.com 2 frame-ancestors 'self' https://*.sherweb.com https://cumulus.sherweb.com https://cloudmanagerportal.com https://cumulus.ismgrid.com https://techdata.sherweb.com https://control.intellam.com https://cumulus.fusenetworks.com https://cloud.itpartners.com https://portal.massiveit.com https://control.careservtech.com https://billing.rak4cloud.com https://control.gocareserv.help source-src 'self' https://*.clarity.ms/collect 2 connect-src 'self' blob: https://*.questglobal.com https://questglobal.com https://*.quest-global.com https://quest-global.com https://*.googletagmanager.com https://googletagmanager.com https://*.doubleclick.net https://doubleclick.net https://player.vimeo.com https://*.vimeo.com https://vimeo.com https://*.google-analytics.com https://google-analytics.com https://*.google.com https://google.com https://gstatic.com https://*.gstatic.com https://*.googleapis.com https://googleapis.com https://hsforms.com https://*.hsforms.com https://forms.hubspot.com https://*.hubspot.com https://hubspot.com https://hscollectedforms.net https://*.hscollectedforms.net https://hsappstatic.net https://*.hsappstatic.net https://api.hubspot.com https://hubapi.com https://*.hubapi.com https://api-hscrm.hubspot.com https://conversations-api.hubspot.com https://forms.hsforms.com https://*.hsforms.com https://api.userway.org https://*.userway.org https://userway.org https://*.linkedin.com https://linkedin.com https://*.demandbase.com https://demandbase.com https://*.company-target.com https://company-target.com https://cdn-cookieyes.com https://*.cdn-cookieyes.com https://cdn.cookieyes.com https://cookieyes.com https://*.cookieyes.com https://*.clarity.ms https://clarity.ms; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.fundraiseup.com doublethedonation.com *.doublethedonation.com unpkg.com *.newrelic.com *.nr-data.net nr-data.net js.stripe.com pay.google.com outrightinternational.bamboohr.com/js/embed.js https://s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js outrightinternational.us5.list-manage.com *.stripe.com m.stripe.network *.plaid.com *.src.mastercard.com *.checkout.visa.com pay.google.com *.paypal.com *.google.com *.analytics.google.com *.paypalobjects.com *.licdn.com *.thegivingblock.com *.jsdelivr.net cdn-cookieyes.com cdnjs.cloudflare.com *.hs-scripts.com *.hscollectedforms.net *.hs-banner.com *.hs-analytics.net *.hubspot.com *.clarity.ms static.cloudflareinsights.com *.hsadspixel.net *.doubleclick.net *.g.doubleclick.net *.vimeo.com *.youtube.com vimeo.com *.vimeo.com ucarecdn.com; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com doublethedonation.com *.doublethedonation.com *.mailchimp.com *.jsdelivr.net cdnjs.cloudflare.com unpkg.com *.googletagmanager.com; img-src 'self' blob: data: *.facebook.com *.fundraiseup.com doublethedonation.com *.doublethedonation.com ucarecdn.com www.gstatic.com resources.bamboohr.com www.google-analytics.com/* pay.google.com *.google.com *.paypal.com *.google-analytics.com *.paypalobjects.com *.linkedin.com cdn-cookieyes.com googletagmanager.com *.hsforms.com *.hubspot.com *.googlesyndication.com *.clarity.ms *.vimeocdn.com; media-src 'self' vimeo.com; frame-src 'self' *.youtube.com *.youtu.be *.youtube-nocookie.com *.googlevideo.com *.googleapis.com *.ytimg.com *.youtubeeducation.com tgbwidget.com *.tgbwidget.com *.fundraiseup.com *.stripe.com *.plaid.com *.paypal.com pay.google.com *; frame-ancestors 'self'; child-src 'self'; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.fundraiseup.com doublethedonation.com *.doublethedonation.com *.stripe.com; connect-src 'self' *.google-analytics.com stats.g.doubleclick.net www.google.com www.facebook.com *.fundraiseup.com fndrsp.net *.fndrsp.net doublethedonation.com *.doublethedonation.com nr-data.net fndrsp-checkout.net outrightinternational.bamboohr.com bam.nr-data.net *.fundraiseup.com *.stripe.com *.paypal.com *.plaid.com *.mastercard.com *.checkout.visa.com api.addressy.com *.google.com *.analytics.google.com google.com/pay *.linkedin.com *.cookieyes.com cdn-cookieyes.com *.hscollectedforms.net *.hubspot.com *.clarity.ms *.hubapi.com *.hsappstatic.net *.googlesyndication.com *.googletagmanager.com *.uploadcare.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://www.youtube.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://track.hsystem.com.br blob: data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https://www.google.com https://www.google.com.br https://www.facebook.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://track.hsystem.com.br https://i.ytimg.com; frame-src 'self' https://www.youtube.com https://www.google.com; connect-src 'self' https://www.google.com https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://pageview-notify.rdstation.com.br https://popups.rdstation.com.br https://www.googletagmanager.com https://track.hsystem.com.br; worker-src 'self' blob:; report-uri /csp-report.php 2 object-src 'none'; upgrade-insecure-requests; 2 require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chromeos_google 2 default-src 'self' https://download-video.akamaized.net https://vod-progressive.akamaized.net https://link.mail.movado.com https://*.ibytedtos.com https://*.self-veri.com https://*.evgnet.com https://*.tiktok.com https://www.talkable.com https://pm.w55c.net https://*.marketingcloudapis.com https://*.listrak.com https://*.pulseidconnect.com https://*.fedex.com https://*.thomsonreuters.com https://*.sandbox.eshopworld.com https://*.riskified.com https://player.vimeo.com https://vod-progressive-ak.vimeocdn.com https://*.cloudfront.net https://*.adyen.com https://*.cquotient.com https://cdn.builder.io https://*.yottaa.com https://*.movado.com https://*.movadocompanystore.com https://id5-sync.com https://cdn.cookielaw.org https://*.gstatic.com https://*.espssl.com https://*.joinclyde.com https://*.pointmediatracker.com https://cdn.blisspointmedia.com https://*.adsrvr.org https://*.tangiblee.com https://cdn-swell-assets.yotpo.com; connect-src 'self' https://*.reddit.com https://api.ipify.org https://www.googletagmanager.com https://link.mail.movado.com https://*.tangiblee.com https://*.googleapis.com https://*.paypal.com https://cdnjs.cloudflare.com https://analytics.pangle-ads.com wss://*.inside-graph.com https://test.adyen.com/hpp/skipDetails wss://input.noibu.com https://www.facebook.com https://*.rakuten.com https://pubsub.googleapis.com https://*.noibu.com https://*.adyen.com https://www.talkable.com https://api.cooladata.com https://*.inside-graph.com https://media.istockphoto.com https://*.appspot.com https://*.google.com.pk https://*.ibytedtos.com https://*.self-veri.com https://*.evgnet.com https://*.tiktok.com https://*.marketingcloudapis.com https://*.fedex.com https://*.pulseidconnect.com https://*.thomsonreuters.com https://*.sandbox.eshopworld.com https://google.com https://*.espssl.com https://*.gstatic.com https://*.youtube.com https://youtu.be https://*.vimeo.com https://cdn.acsbapp.com https://*.riskified.com https://*.onetrust.com https://api.honeybadger.io https://*.joinclyde.com https://*.equalweb.com https://*.criteo.com https://*.eum-appdynamics.com https://*.luckyorange.com wss://visitors.live wss://*.visitors.live https://*.amazonaws.com https://trail.grin.co https://static-na.payments-amazon.com https://maps.googleapis.com https://*.amazon.com https://*.doubleclick.net https://*.pinterest.com https://*.instagram.com https://*.yotpo.com https://*.taboola.com https://*.quantcount.com https://s.yimg.com https://us-central1-adaptive-growth.cloudfunctions.net https://*.snapchat.com https://*.bing.com https://facebook.net https://s.pinimg.com https://*.pointmediatracker.com https://cdn.blisspointmedia.com https://*.adsrvr.org https://*.bidr.io https://*.yahoo.com https://*.google.co.in https://*.cloudfront.net https://*.google-analytics.com https://d1lu3pmaz2ilpx.cloudfront.net https://www.cloudflare.com https://cdn.cookielaw.org https://*.luckyorange.net https://*.cquotient.com https://*.builder.io https://*.movado.com https://*.movadocompanystore.com https://*.affirm.com https://*.yottaa.net https://*.listrakbi.com https://bl.listrakbi.com https://*.getangler.ai https://static.getangler.ai https://data.getangler.ai https://*.google.com https://*.tangiblee.com https://maps.googleapis.com https://google.com/pay https://*.gladly.com https://*.gladly.qa https://*.gladly.chat wss://*.gladly.com wss://*.gladly.qa wss://*.gladly.chat https://t.lt02.net; img-src 'self' 'unsafe-inline' data: blob: https://*.reddit.com https://www.facebook.com https://link.mail.movado.com https://*.gstatic.com https://*.tangiblee.com https://*.paypalobjects.com https://*.adyen.com https://checkoutshopper-test.adyen.com https://cfvod.kaltura.com https://beta.pulseidconnect.com https://dsp.adfarm1.adition.com https://movado.pulseidconnect.com https://c1.adform.net https://image8.pubmatic.com https://connect.facebook.net https://pixel.tapad.com https://sync.srv.stackadapt.com https://cdn-assets.affirm.com https://rtb.openx.net https://saas2.pulseidconnect.com https://id5-sync.com https://www.google.nl https://matching.ivitrack.com https://*.thebrighttag.com https://*.yieldlab.net https://cm.adform.net https://www.google.co.uk https://www.google.co.in https://prregcroab.icu https://tpcs.payu.in https://pixel-sync.sitescout.com https://prreqcroab.icu https://www.ojrq.net https://www.fossil.com https://sync-tm.everesttech.net https://ad.turn.com https://ws.rqtrk.eu https://live.rezync.com https://x.dlx.addthis.com https://adgen.socdm.com https://media.istockphoto.com https://sync.ipredictive.com https://api.brandbassador.com https://www.google.com.pk https://pm.w55c.net https://jelly.mdhv.io https://adx.dable.io https://www.talkable.com https://cdn.aralego.net https://bh.contextweb.com https://cs.adingo.jp https://idsync.rlcdn.com https://sync.aralego.com https://beacon.krxd.net https://*.ibytedtos.com https://*.amazonaws.com https://match.prod.bidr.io https://public-prod-dspcookiematching.dmxleo.com https://www.googleadservices.com https://*.cooladata.com https://i6.liadm.com https://aa.agkn.com https://p.rfihub.com https://b1sync.zemanta.com https://sync.crwdcntrl.net https://d.turn.com https://tapestry.tapad.com https://criteo-partners.tremorhub.com https://ade.clmbtech.com https://ad.tpmn.co.kr https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://hb.yahoo.net https://tags.bluekai.com https://1f2e7.v.fwmrm.net https://dpm.demdex.net https://secure.adnxs.com https://ib.adnxs.com https://s.ad.smaato.net https://match.sharethrough.com https://trends.revcontent.com https://simage2.pubmatic.com https://sync.outbrain.com https://jadserve.postrelease.com https://exchange.mediavine.com https://i.liadm.com https://ad.360yield.com https://ads.stickyadstv.com https://r.casalemedia.com https://*.criteo.com https://visitor.omnitagjs.com https://tg.socdm.com https://*.yahoo.com https://eb2.3lift.com https://criteo-sync.teads.tv https://*.taboola.com https://rtb-csync.smartadserver.com https://pixel.rubiconproject.com https://contextual.media.net https://partner.mediawallahscript.com https://x.bidswitch.net https://*.googleapis.com https://track.linksynergy.com https://*.cloudfront.net https://*.pinterest.com https://*.instagram.com https://maps.googleapis.com https://*.google.com https://*.googleusercontent.com https://*.twitter.com https://t.co https://*.riskified.com https://*.gstatic.com https://*.payments-amazon.com https://m.media-amazon.com https://pixel.quantserve.com https://www.google-analytics.com https://*.tiktok.com https://www.facebook.com https://*.quantcount.com https://www.google.com https://*.bing.com https://listen.audiohook.com https://cdn.cookielaw.org https://mediacdn.espssl.com https://logs-01.loggly.com https://www.googletagmanager.com https://*.tangiblee.com https://*.cquotient.com https://*.yotpo.com https://cdn.builder.io https://*.shopify.com https://*.doubleclick.net https://*.listrakbi.com https://bl.listrakbi.com https://*.movado.com https://pay.google.com https://id5-sync.com https://*.pointmediatracker.com https://cdn.blisspointmedia.com https://*.adsrvr.org https://*.inside-graph.com https://*.bidr.io https://*.joinclyde.com https://www.youtube.com https://*.movadocompanystore.com https://staging.movado.com https://staging-vsf.movadocompanystore.com https://*.oliviaburton.com https://*.mvmt.com https://*.gladly.com https://*.gladly.qa https://*.imrworldwide.com; style-src 'self' 'unsafe-inline' https://*.tiktok.com https://link.mail.movado.com https://maps.googleapis.com https://*.inside-graph.com https://*.listrakbi.com https://bl.listrakbi.com https://prreqcroab.icu https://*.googleapis.com https://*.cloudfront.net https://*.riskified.com https://*.tangiblee.com https://*.typeform.com https://www.talkable.com https://code.jquery.com https://mediacdn.espssl.com https://*.bootstrapcdn.com https://*.yotpo.com https://cdnjs.cloudflare.com https://*.typekit.net https://www.google.com https://*.movado.com https://*.movadocompanystore.com https://*.cquotient.com https://*.pointmediatracker.com https://cdn.blisspointmedia.com https://*.adsrvr.org https://fonts.googleapis.com https://us-sandbox-live.inside-graph.com https://*.gladly.com https://*.gladly.qa; base-uri 'self'; form-action 'self' https://www.facebook.com https://link.mail.movado.com https://*.adyen.com https://*.amazon.com https://*.tangiblee.com https://*.paypal.com; font-src 'self' data: https://cdn.builder.io https://*.espssl.com https://*.shopify.com https://*.yotpo.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://fonts.gstatic.com https://*.movado.com https://*.movadocompanystore.com https://*.typekit.net https://*.affirm.com https://*.joinclyde.com https://cdnjs.cloudflare.com; frame-src 'self' https://www.youtube.com https://link.mail.movado.com https://*.paypal.com https://*.adyen.com https://*.joinclyde.com https://*.tangiblee.com https://checkoutshopper-test.adyen.com https://www.talkable.com https://tsdtocl.com https://*.self-veri.com https://*.eshopworld.com https://*.inside-graph.com https://*.typeform.com https://*.affirm.com https://tapestry.tapad.com https://criteo-partners.tremorhub.com https://ade.clmbtech.com https://ad.tpmn.co.kr https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://aa.agkn.com https://live.rezync.com https://sync.crwdcntrl.net https://*.yahoo.net https://tags.bluekai.com https://*.criteo.net https://*.joinclyde.com https://*.criteo.com https://*.appdynamics.com https://www.facebook.com https://www.surveymonkey.com https://*.pinterest.com https://*.instagram.com https://maps.googleapis.com https://platform.twitter.com https://*.snapchat.com https://*.movado.com https://*.movadocompanystore.com https://*.google.com https://*.doubleclick.net https://*.linksynergy.com https://www.googletagmanager.com https://*.adsrvr.org https://*.pointmediatracker.com https://*.listrak.com https://*.gladly.com https://*.gladly.qa; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.equalweb.com https://link.mail.movado.com https://*.luckyorange.com https://*.pointmediatracker.com https://cdn.blisspointmedia.com https://*.adsrvr.org https://www.googleadservices.com https://*.igodigital.com https://secure.quantserve.com https://s.pinimg.com https://api.sb.joinclyde.com https://api.joinclyde.com https://dynamic.criteo.com https://*.cloudfront.net https://widget.us.criteo.com https://www.google.nl/pagead https://www.google.nl https://sslwidget.criteo.com https://rules.quantcount.com https://googleads.g.doubleclick.net https://bat.bing.com https://www.facebook.com https://connect.facebook.net https://cdn.noibu.com https://*.tiktok.com https://cdn.appdynamics.com https://beacon.riskified.com https://ajax.googleapis.com https://cdn.cookielaw.org/scripttemplates https://www.google-analytics.com https://init.blackcrow.ai https://*.synchronycredit.com https://www.talkable.com https://pay.google.com https://*.appdynamics.com https://www.recaptcha.net https://*.affirm.com https://*.joinclyde.com https://*.paypalobjects.com https://*.paypal.cn https://*.paypal.com https://*.ibytedtos.com https://*.self-veri.com https://*.evgnet.com https://*.marketingcloudapis.com https://*.listrak.com https://*.pulseidconnect.com https://*.fedex.com https://*.thomsonreuters.com https://*.sandbox.eshopworld.com https://*.riskified.com https://*.inside-graph.com https://embed.typeform.com https://*.yotpo.com https://d.impactradius-event.com https://*.listrakbi.com https://bl.listrakbi.com https://www.gstatic.com https://*.cquotient.com https://*.usablenet.com https://static-na.payments-amazon.com https://*.googleapis.com https://*.cloudflare.com https://www.google.com https://*.yottaa.com https://www.googleoptimize.com https://*.cookielaw.org https://*.movado.com https://*.movadocompanystore.com https://*.googletagmanager.com https://*.tangiblee.com https://*.oliviaburton.com https://*.concord.com https://*.concord.ch https://*.collect.igodigital.com https://*.adyen.com https://www.google.com https://www.instagram.com https://www.twitter.com https://www.pinterest.com https://www.youtube.com https://maps.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com https://cdn.gladly.com https://cdn.gladly.qa https://t.lt02.net; script-src-elem 'self' 'unsafe-inline' https://*.redditstatic.com https://*.reddit.com https://*.youtube.com https://link.mail.movado.com https://*.pointmediatracker.com https://cdn.blisspointmedia.com https://*.adsrvr.org https://*.paypal.com https://cdnapisec.kaltura.com https://*.equalweb.com https://*.ibytedtos.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://conoret.com https://www.talkable.com https://static.ads-twitter.com https://*.googletagmanager.com https://*.tangiblee.com https://*.self-veri.com https://*.evgnet.com https://*.tiktok.com https://*.marketingcloudapis.com https://*.pulseidconnect.com https://*.fedex.com https://*.thomsonreuters.com https://acsbapp.com https://*.riskified.com https://*.cooladata.com https://oliviaburton.usablenet.com https://*.inside-graph.com https://*.typeform.com https://*.criteo.com https://*.igodigital.com https://init.blackcrow.ai https://cdn.noibu.com https://*.usedrop.io https://widget.surveymonkey.com https://www.googleadservices.com https://*.adyen.com https://www.google-analytics.com https://*.quantcount.com https://*.snapchat.com https://*.taboola.com https://api.ipify.org https://*.twitter.com https://bat.bing.com https://s.pinimg.com https://sc-static.net https://connect.facebook.net https://s.yimg.com https://cdn.pdst.fm https://googleads.g.doubleclick.net https://secure.quantserve.com https://code.jquery.com https://api.sb.joinclyde.com https://api.joinclyde.com https://*.appdynamics.com https://movado.usablenet.com https://*.builder.io https://d.impactradius-event.com https://*.cloudfront.net https://*.rakuten.com https://*.affirm.com https://*.yotpo.com https://*.movado.com https://*.movadocompanystore.com https://www.gstatic.com https://cdn.cookielaw.org https://www.googleoptimize.com https://cdn.yottaa.com https://*.google.com https://*.pinterest.com https://*.instagram.com https://maps.googleapis.com https://*.googleapis.com https://*.gstatic.com https://static-na.payments-amazon.com https://*.cquotient.com https://*.listrakbi.com https://bl.listrakbi.com https://*.listrak.com https://*.typekit.net https://*.getangler.ai https://static.getangler.ai https://data.getangler.ai https://*.joinclyde.com https://*.linksynergy.com https://cdnjs.cloudflare.com https://cdn.gladly.com https://cdn.gladly.qa; style-src-elem 'self' 'unsafe-inline' https://*.inside-graph.com https://link.mail.movado.com https://maps.googleapis.com https://*.equalweb.com https://*.riskified.com https://www.googletagmanager.com https://*.tangiblee.com https://cdn.jsdelivr.net https://embed.typeform.com https://www.talkable.com https://*.cloudfront.net https://us-sandbox-live.inside-graph.com https://*.yotpo.com https://maxcdn.bootstrapcdn.com https://mediacdn.espssl.com https://code.jquery.com https://fonts.googleapis.com https://*.movado.com https://*.movadocompanystore.com https://*.typekit.net https://*.linksynergy.com https://*.cloudflare.com https://*.joinclyde.com https://*.getangler.ai https://static.getangler.ai https://data.getangler.ai https://*.listrakbi.com https://bl.listrakbi.com https://*.gladly.com https://*.gladly.qa; report-uri https://test.adyen.com/hpp/skipDetails https://cdn.cookielaw.org/scripttemplates https://*.googleapis.com https://*.movado.com https://*.movadocompanystore.com https://cdn-swell-assets.yotpo.com; sandbox allow-forms allow-scripts allow-same-origin allow-popups allow-modals allow-top-navigation allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation; frame-ancestors 'self' https://builder.io https://*.builder.io https://link.mail.movado.com https://test.adyen.com/hpp/skipDetails https://*.movado.com https://*.movadocompanystore.com https://*.cookielaw.org https://*.googleapis.com https://www.youtube.com https://www.facebook.com https://*.instagram.com https://*.pinterest.com https://*.tangiblee.com https://*.yotpo.com; worker-src blob: 'self' https://*.movado.com https://*.movadocompanystore.com https://farmer.vuestorefront.cloud; 2 frame-ancestors https://www.thefabulous.co https://*.thefabulous.co https://ai.thefabulous.co; 2 frame-ancestors 'self' kedge.edu *.kedge.edu outlook.office365.com; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tags.srv.stackadapt.com/ https://script.hotjar.com https://*.simpli.fi/ https://*.bttrack.com/ https://bttrack.com/ https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://connect.facebook.net/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://googleads.g.doubleclick.net/ https://stats.wp.com/ https://stats.wp.com/ https://static.hotjar.com/ https://sase.merck.com/ https://www.youtube.com/ https://cdnjs.cloudflare.com/ https://player.quadia.net/quadia.player.min.js https://s0.wp.com https://*.contentsquare.com https://*.usabilla.com https://*.contentsquare.net/ https://pym.nprapps.org https://*.wotnot.io https://www.googletagmanager.com https://www.google-analytics.com/ https://players.brightcove.net https://cdn.cookielaw.org https://js-agent.newrelic.com/ https://*.pricespider.com https://api.tiles.mapbox.com https://vjs.zencdn.net https://bat.bing.com https://js.adsrvr.org https://connect.facebook.net https://bam.nr-data.net https://connect.farmjournal.net blob:; object-src 'none'; base-uri https://d6tizftlrpuof.cloudfront.net/; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net/ https://www.google.com.my/pagead/ https://sase.merck.com/ https://4918300.fls.doubleclick.net/ https://widgets.wp.com/ https://*.contentsquare.com https://*.contentsquare.net https://*.exacttarget.com https://*.facebook.com https://*.exct.net/ https://www.youtube-nocookie.com https://player.quadia.net https://players.brightcove.net https://pages.emailca.merck-animal-health-usa.com https://cloud.emailca.merck-animal-health-usa.com https://*.akamaihd.net https://insight.adsrvr.org https://match.adsrvr.org; frame-ancestors 'self'; img-src 'self' https://*.tile.openstreetmap.org https://policy.privacyandcookies.eu https://assets.merck-animal-health.com https://*.googleapis.com/ https://*.gstatic.com/ https://*.googleusercontent.com/ https://tags.srv.stackadapt.com/ https://*.simpli.fi/ https://bttrack.com/ https://www.google.com.my/pagead/ https://connect.facebook.net/ https://www.google.com.my/ads/ga-audiences https://www.google.co.za https://px.ads.linkedin.com/ https://www.google.de https://mid.rkdms.com/ https://match.sharethrough.com/ https://x.bidswitch.net/ https://match.adsrvr.org/ https://tags.bluekai.com/ https://pixel.rubiconproject.com/ https://cm.g.doubleclick.net/ https://dpm.demdex.net/ https://insight.adsrvr.org/ https://*.wp.com https://*.wotnot.io https://wotnot-chat-widget-icon.storage.googleapis.com https://*.contentsquare.com https://*.usabilla.com https://d6tizftlrpuof.cloudfront.net/ https://*.contentsquare.net/ https://assets.msd-animal-health.com https://wotnot-bot-title-logo.storage.googleapis.com https://wotnot-avatar.storage.googleapis.com https://*.merck-animal-health.com https://unpkg.com https://cdn.jsdelivr.net https://secure.adnxs.com/ https://px.adentifi.com/ https://pubads.g.doubleclick.net https://cf-images.us-east-1.prod.boltdns.net https://www.msd-animal-health.com https://cdn.cookielaw.org https://secure.gravatar.com https://www.google-analytics.com/ https://*.deepintent.com/ https://*.brightcove.com https://brightcove.hs.llnwd.net https://*.brightcove.hs https://manifest.prod.boltdns.net https://connect.farmjournal.net data: https://www.google.com/ https://*.bing.com/ https://*.facebook.com/ https://*.pricespider.com/ https://*.turn.com https://*.googletagmanager.com/ https://www.google.pl/; media-src 'self' blob: https://*.wotnot.io https://*.brightcove.com https://manifest.prod.boltdns.net https://*.akamaihd.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://s0.wp.com https://d6tizftlrpuof.cloudfront.net/ https://*.mapbox.com/ https://*.pricespider.com/ https://tags.srv.stackadapt.com/; upgrade-insecure-requests; default-src blob: https: data: webpack: 'self' wss://*.wotnot.io wss://ws.hotjar.com https://connect.farmjournal.net; trusted-types 'allow-duplicates' google-maps-api#html google#safe google-analytics goog#html connect.facebook.net/fbevents facebook.com/signals/iwl youtube-widget-api default; 2 frame-ancestors 'self' http://*.di.dk; 2 default-src 'self'; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com cdnjs.cloudflare.com *.jsdelivr.net *.reciteme.com alpha.contact-computacenter.com www.computacenter.com www.computacenter-testing.com *.cloudflare.com code.jquery.com stackpath.bootstrapcdn.com *.recruiterbox.com *.computacenter.com youtu.be *.youtu.be *.youtube.com *.youtube-nocookie.com i.ytimg.com *.juicer.io prosysis.com *.prosysis.com 'unsafe-inline'; style-src 'self' *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com *.jsdelivr.net *.reciteme.com alpha.contact-computacenter.com www.computacenter.com www.computacenter-testing.com code.jquery.com stackpath.bootstrapcdn.com *.cloudflare.com *.recruiterbox.com *.computacenter.com youtu.be *.youtu.be *.youtube.com *.youtube-nocookie.com i.ytimg.com *.juicer.io prosysis.com *.prosysis.com 'unsafe-inline'; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com *.reciteme.com *.jsdelivr.net *.youtube.com alpha.contact-computacenter.com www.computacenter.com www.computacenter-testing.com code.jquery.com stackpath.bootstrapcdn.com *.cloudflare.com *.recruiterbox.com *.computacenter.com youtube.com youtu.be *.youtu.be *.youtube-nocookie.com *.juicer.io prosysis.com *.prosysis.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.jsdelivr.net fonts.google.com *.reciteme.com alpha.contact-computacenter.com www.computacenter.com www.computacenter-testing.com code.jquery.com stackpath.bootstrapcdn.com *.cloudflare.com *.computacenter.com youtu.be *.youtu.be *.youtube.com *.youtube-nocookie.com i.ytimg.com *.juicer.io prosysis.com *.prosysis.com; frame-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www.google.com https://twitter.com/ *.youtube.com https://ecotree.green alpha.contact-computacenter.com www.computacenter.com www.computacenter-testing.com *.cloudflare.com code.jquery.com stackpath.bootstrapcdn.com lookerstudio.google.com datastudio.google.com *.recruiterbox.com *.computacenter.com youtu.be *.youtu.be *.youtube-nocookie.com i.ytimg.com prosysis.com *.prosysis.com; connect-src 'self' data: accounts.google.com *.google-analytics.com *.gstatic.com https://*.googletagmanager.com https://*.googleapis.com/ *.reciteme.com *.jsdelivr.net localhost *.youtube.com *.twitter.com maps.googleapis.com alpha.contact-computacenter.com www.computacenter.com www.computacenter-testing.com code.jquery.com stackpath.bootstrapcdn.com *.cloudflare.com *.computacenter.com youtu.be *.youtu.be *.youtube-nocookie.com i.ytimg.com *.juicer.io prosysis.com *.prosysis.com; media-src 'self' data: blob: *.youtube.com *.reciteme.com *.twitter.com alpha.contact-computacenter.com www.computacenter.com www.computacenter-testing.com code.jquery.com stackpath.bootstrapcdn.com *.cloudflare.com *.computacenter.com youtu.be *.youtu.be *.youtube-nocookie.com i.ytimg.com *.licdn.com *.juicer.io prosysis.com *.prosysis.com; child-src 'self' 2 script-src 'nonce-x7ZTt1pukXtQ8Et9p1wgt6r4' 'strict-dynamic' 'unsafe-inline' http: https:; base-uri 'self'; object-src 'none'; 2 default-src https: data: 'unsafe-inline'; script-src https: data: 'unsafe-inline'; style-src 'unsafe-inline' https:; img-src https: data:; font-src https: data:; connect-src https:; media-src https:; object-src https:; child-src https:; frame-src https:; worker-src https:; manifest-src https:; prefetch-src https:; frame-ancestors https://fampay.in https://*.fampay.in https://www.famapp.in https://*.famapp.in; base-uri https://fampay.in https://*.fampay.in https://www.famapp.in https://*.famapp.in; form-action https://fampay.in https://*.fampay.in https://www.famapp.in https://*.famapp.in; block-all-mixed-content; upgrade-insecure-requests; 2 default-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://plausible.io https://google.com https://www.google.com; object-src 'self'; script-src 'self' https://plausible.io https://owlcarousel2.github.io https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.google.com https://www.gstatic.com; child-src 'self' https://www.google.com; style-src 'self' 'sha256-QIjW/+aUzfg58HcITJNHkkCTGmLovNUIQbL+Zq2TsIE=' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com/ https://*.twitter.com/ http://*.twitter.com/ https://maps.googleapis.com http://*.google-analytics.com https://*.google-analytics.com https://sadmin.brightcove.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.twimg.com https://www.googletagmanager.com https://cdn.privacy-mgmt.com https://tag.aticdn.net;object-src 'self' https://secure.brightcove.com https://sadmin.brightcove.com http://brightcove.vo.llnwd.net;style-src 'self' 'unsafe-inline' fonts.googleapis.com/css https://fonts.googleapis.com/css https://*.twitter.com/ http://*.twitter.com/ https://*.twimg.com;img-src 'self' https://*.twitter.com/ https://*.twimg.com http://*.twitter.com/ http://*.google-analytics.com data: https://maps.googleapis.com https://*.gstatic.com/ http://*.gravatar.com/ http://umbraco.tv/media https://www.google.com https://www.google.co.uk;media-src 'none';frame-src 'self' http://players.brightcove.net https://secure.brightcove.com https://www.youtube.com/embed/ http://www.youtube.com/embed/ https://syndication.twitter.com https://platform.twitter.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.privacy-mgmt.com;font-src 'self' fonts.gstatic.com/s/;connect-src 'self' https://secure.brightcove.com https://sadmin.brightcove.com https://our.umbraco.com https://our.umbraco.org https://www.google-analytics.com https://stats.g.doubleclick.net https://log.xiti.com https://cdn.privacy-mgmt.com https://*.analytics.google.com/ https://*.google-analytics.com/ https://a1.api.bbc.com;report-uri /WebResource.axd?cspReport=true 2 default-src 'self'; frame-ancestors 'none' 2 default-src 'self'; frame-ancestors *.localize.com *.localizejs.com *.localizecdn.com; connect-src 'self' saltosystem-cvs-prod.appspot.com cms.saltosystems.com pardot.saltosystems.com cdn.cookielaw.org *.localize.com *.localizecdn.com *.localizejs.com *.hotjar.com www.google-analytics.com stats.g.doubleclick.net ws25.hotjar.com analytics.google.com *.analytics.google.com geolocation-db.com *.oribi.io *.onetrust.com *.visualwebsiteoptimizer.com app.vwo.com *.googlesyndication.com *.linkedin.com *.google.com *.clarity.ms *.google-analytics.com *.facebook.com *.google.es *.hotjar.io *.svgator.com *.googleadservices.com; font-src 'self' data: *.googleapis.com fonts.gstatic.com; worker-src 'self' blob:; img-src 'self' data: *.localizecdn.com www.google-analytics.com www.google.com www.google.es *.linkedin.com *.onetrust.com *.facebook.com googleads.g.doubleclick.net *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com *.clarity.ms *.googletagmanager.com *.storychief.com *.bing.com; script-src 'self' 'unsafe-inline' global.localizecdn.com cdn.cookielaw.org *.onetrust.com connect.facebook.net stats.g.doubleclick.net googleads.g.doubleclick.net pi.pardot.com pardot.saltosystems.com *.hotjar.com *.licdn.com www.google-analytics.com www.google.com www.google.es www.gstatic.com www.googleadservices.com www.googletagmanager.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com *.clarity.ms *.svgator.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com s3.amazonaws.com; frame-src 'self' *.googletagmanager.com cms.saltosystems.com pardot.saltosystems.com vars.hotjar.com www.google.com *.google.com *.localizecdn.com *.youtube.com *.facebook.com *.twitter.com app.vwo.com *.visualwebsiteoptimizer.com *.doubleclick.net 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; media-src 'self' blob:; frame-src 'self'; worker-src 'self' blob:; connect-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; webrtc 'block'; report-uri /w/api.php?action=cspreport&format=json; 2 frame-src https://global.frcapi.com https://eu.frcapi.com https://www.youtube-nocookie.com https://www.youtube.com https://piwik.bzga.de https://www.check-dein-spiel.de; style-src 'self' 'unsafe-inline'; default-src 'self'; script-src https://www.check-dein-spiel.de https://piwik.bzga.de 'self' 'unsafe-inline' ; connect-src https://www.check-dein-spiel.de https://piwik.bzga.de 'self' 'unsafe-inline' ; font-src 'self' 'unsafe-inline' data:; img-src 'self' https://piwik.bzga.de https://*.openstreetmap.org data:; 2 default-src 'self'; child-src 'self' https://*.youtube.com https://tools.eurolandir.com https://open.spotify.com https://*.doubleclick.net; connect-src 'self' https://cdn.cookielaw.org https://bam.nr-data.net https://*.xiti.com https://cdn.linkedin.oribi.io https://*.clarity.ms https://*.onetrust.com https://*.linkedin.com https://*.ads.linkedin.com https://*.doubleclick.net https://www.googleadservices.com https://*.google.com https://google.com https://www.google.com https://*.googletagmanager.com https://www.google.ca https://www.google.com.mx https://www.google.com.co https://www.google.es https://www.google.fr https://www.google.co.uk https://www.google.de https://www.google.it https://www.google.nl https://www.google.dz https://www.google.com.eg https://www.google.com.sa https://www.google.com.om https://www.google.ae https://www.google.az https://www.google.co.mz https://www.google.co.in https://www.google.co.th https://www.google.com.my https://www.google.co.id https://www.google.com.ph https://www.google.com.au https://www.google.com.sg https://www.google.be https://www.google.com.ua https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data:; frame-src 'self' https://*.youtube.com https://open.spotify.com https://*.doubleclick.net https://www.googletagmanager.com https://fr.zone-secure.net https://tools.eurolandir.com https://*.ten.com https://*.technipenergies.com https://sdk.companywebcast.com; img-src 'self' data: https://i.ytimg.com https://www.googletagmanager.com https://*.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://*.linkedin.com https://optanon.blob.core.windows.net https://*.xiti.com https://*.google.com https://www.gstatic.com https://bam.nr-data.net https://*.clarity.ms https://*.bing.com https://www.google.ca https://www.google.com.mx https://www.google.com.co https://www.google.es https://www.google.fr https://www.google.co.uk https://www.google.de https://www.google.it https://www.google.nl https://www.google.dz https://www.google.com.eg https://www.google.com.sa https://www.google.com.om https://www.google.ae https://www.google.az https://www.google.co.mz https://www.google.co.in https://www.google.co.th https://www.google.com.my https://www.google.co.id https://www.google.com.ph https://www.google.com.au https://www.google.com.qa https://www.google.com.ng https://www.google.tn https://www.google.bo https://www.google.ro https://www.google.ga https://www.google.at https://www.google.co.ve https://www.google.be https://www.google.bg https://www.google.no https://www.google.kz https://www.google.dk https://www.google.fi https://www.google.com.tr https://www.google.com.sg https://www.google.sn https://www.google.co.jp https://www.google.co.kr https://www.google.com.br https://www.google.co.za https://www.google.co.pe https://www.google.pt https://www.google.sk https://www.google.com.kw https://www.google.com.gh https://www.google.com.ua https://www.google.se https://www.google.ie https://www.google.iq https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' 'unsafe-eval' https://cdnjs.cloudflare.com https://*.technipenergies.com https://cdn.cookielaw.org https://js-agent.newrelic.com https://bam.nr-data.net https://tag.aticdn.net https://*.clarity.ms https://snap.licdn.com https://*.linkedin.com https://connect.facebook.net https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://www.google.com https://*.googlesyndication.com https://d3js.org https://cdn.jsdelivr.net https://*.ten.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://d3js.org cdnjs.cloudflare.com; base-uri 'none'; form-action 'self'; frame-ancestors 'self' https://*.ten.com; report-uri https://www.ten.com/en/system/reporting/csp; report-to csp; upgrade-insecure-requests 2 default-src https: blob: wss: 'unsafe-eval' 'unsafe-inline'; img-src data: https:; font-src data: https: 2 default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net *.epichosted.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: www.googletagmanager.com cdn.jsdelivr.net yoast.com maps.googleapis.com *.formsite.com formsite.com *.callrail.com *.epichosted.com; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: www.albanymed.org maps.googleapis.com maps.gstatic.com i.ytimg.com i.vimeocdn.com secure.gravatar.com ps.w.org yoa.st yoast.com; connect-src 'self' *.algolia.net *.algolia.io *.algolianet.com analytics.google.com *.doubleclick.net my.yoast.com maps.googleapis.com *.callrail.com *.epichosted.com cdn.jsdelivr.net; frame-src 'self' *.doubleclick.net www.youtube.com player.vimeo.com *.formsite.com formsite.com; 2 default-src 'self'; connect-src 'self' matomo.sib.swiss noembed.com cdn.plyr.io sentry.sib.swiss www.vital-it.ch cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us; font-src 'self' fonts.bunny.net cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us fonts.gstatic.com cdnjs.cloudflare.com data: ; img-src 'self' www.sib.swiss matomo.sib.swiss data: i.ytimg.com *.twitter.com wayf.switch.ch infozentrum.ethz.ch https://raw.githubusercontent.com/sib-swiss/ ui-avatars.com https://www.gstatic.com *.skynettechnologies.com *.skynettechnologies.us blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' matomo.sib.swiss cdn.plyr.io www.youtube.com https://cdn.jsdelivr.net wayf.switch.ch cdnjs.cloudflare.com code.jquery.com static.filestackapi.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net *.skynettechnologies.com *.skynettechnologies.us cdn.datatables.net ajax.googleapis.com player.vimeo.com; style-src 'self' 'unsafe-inline' cdn.plyr.io fonts.bunny.net wayf.switch.ch cdnjs.cloudflare.com cdn.jsdelivr.net *.skynettechnologies.com fonts.googleapis.com cdn.datatables.net; frame-src 'self' www.youtube-nocookie.com https://www.google.com https://www.recaptcha.net https://e.issuu.com player.vimeo.com; frame-ancestors 'self' https://sibcloud.sharepoint.com/ https://intranet.sib.swiss/; worker-src 'self' blob: ; media-src 'self' blob:; 2 frame-ancestors https://*.tinyspeck.com 2 default-src 'self'; frame-ancestors 'self' https://*.yandex.ru https://*.yandex.net https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://webvisor.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.yandex.ru https://*.yandex.net https://yastatic.net https://webvisor.com https://www.googletagmanager.com https://vk.com https://livechatv2.chat2desk.com https://top-fwz1.mail.ru https://st.hybrid.ai https://fp.hybrid.ai https://dss.hybrid.ai https://emd.hybrid.ai https://telegram.org https://privacy-cs.mail.ru https://www.google.com https://www.gstatic.com; connect-src 'self' * https://esia.motivtelecom.ru https://*.yandex.ru https://*.yandex.net wss://mc.yandex.ru https://telegram.org https://livechatv2.chat2desk.com https://privacy-cs.mail.ru https://bobid-ip.hybrid.ai https://fp.hybrid.ai https://fpf.hybrid.ai; img-src 'self' data: * https://yandex.ru https://yandex.net https://yastatic.net https://*.yandex.ru https://*.yandex.net https://top-fwz1.mail.ru https://vk.com https://login.vk.com https://dss.hybrid.ai https://storage.chat2desk.com https://pixel.onaudience.com https://ads.betweendigital.com https://exchange.buzzoola.com https://ib.adnxs.com https://ssp.adriver.ru https://inv-nets.admixer.net https://x01.aidata.io https://a.bringads.ru https://eye.targetads.io https://ad.mail.ru https://us.ck-ie.com https://gw-iad-bid.ymmobi.com https://gw-aid-bid.ymmobi.com https://dm-eu.hybrid.ai https://dm.hybrid.ai https://dmg.digitaltarget.ru https://cr-frontend.weborama-tech.ru https://x.bidswitch.net https://s.rtb.mts.ru https://sm.rtb.mts.ru https://vma.mts.ru https://between-sync.rutarget.ru https://sync.crwdcnc.com https://sync.dmp.otm-r.com https://sync.programmatica.com; style-src 'self' 'unsafe-inline'; font-src 'self' https://livechatv2.chat2desk.com; frame-src 'self' https://yandex.ru https://yandex.net https://mc.yandex.ru https://*.yandex.ru https://*.yandex.net https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://webvisor.com https://www.googletagmanager.com https://vk.com https://rutube.ru https://www.google.com https://www.gstatic.com 2 frame-ancestors bevnet.com brewbound.com nombase.com nosh.com app.bevnet.com www.bevnet.com www.brewbound.com www.nosh.com www.nombase.com 2 default-src 'self' 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:; connect-src https:; style-src 'self' 'unsafe-inline' https://pretix.relaix.net; frame-src 'self' https://pretix.relaix.net; 2 frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.newrelic.com app.ecwid.com translate.google.com *.cloudfront.net ecomm.events translate.googleapis.com https://www.discoverhealth.org https://translate-pa.googleapis.com js.adsrvr.org connect.facebook.net https://discoverhealth.org bam.nr-data.net maps.googleapis.com www.google.com www.gstatic.com www.youtube.com *.epichosted.com *.cloudflare.com *.cloudflareinsights.com *.jsdelivr.net bam.nr-data.net *.fontawesome.com solutions.invocacdn.com script-app.mercuryhealthcare.com https://srhs-cp.srhs.com https://app.truelook.cloud *.loyalhealth.com *.calendly.com *.azure.com https://calendly.com *.monsido.com *.piwik.pro *.cloudpano.com app.cloudpano.com https://cdn.jsdelivr.net https://static.cloudflareinsights.com https://mychart.spartanburgregional.com https://brandedweb.mindbodyonline.com/* https://brandedweb.mindbodyonline.com/embed/widget.js https://brandedweb-assets.mindbodyonline.com *.mindbodyonline.com *.healcode.com https://cdn.mxpnl.com https://www.discoverhealth.org/ https://youtu.be/* *.googleapis.com *.cloudfront.net *.sitewit.com *.ecwid.dev *.ecwid.com/ https://challenges.cloudflare.com/ https://static.searchstax.com/* https://static.searchstax.com/studio-js/v3/js/studio-analytics.js *.pressganey.com *.binaryfountain.com *.trumba.com; frame-src 'self' adfs.srhs.com www.youtube.com youtube.com www.youtube-nocookie.com www.google.com *.webdamdb.com *.acquiadam.com *.flipsnack.com *.epichosted.com https://www.hapyak.com https://embed.mindstamp.io srhs-cp.srhs.com https://app.truelook.cloud https://www.mealpro.net mealpro.net *.calendly.com *.azure.com https://calendly.com https://srhs.piwik.pro *.cloudpano.com app.cloudpano.com https://mychart.spartanburgregional.com https://brandedweb-assets.mindbodyonline.com https://brandedweb-next.mindbodyonline.com https://widgets.mindbodyonline.com https://www.discoverhealth.org/ https://youtu.be/* *.googleapis.com *.ecwid.com/ https://spartanburgregional.widen.net/ https://www.youtube-nocookie.com/ https://srhsonline-my.sharepoint.com/ https://wellnesswithinwidget.netlify.app/ *.sharepoint.com/ https://challenges.cloudflare.com/ https://go.mindbodyonline.com/ https://www.trumba.com/; child-src 'self' adfs.srhs.com www.youtube.com youtube.com www.youtube-nocookie.com www.google.com *.webdamdb.com *.acquiadam.com *.flipsnack.com *.epichosted.com https://www.hapyak.com https://embed.mindstamp.io https://app.truelook.cloud *.calendly.com *.azure.com https://calendly.com *.piwik.pro https://srhs.piwik.pro/ https://mychart.spartanburgregional.com https://brandedweb.mindbodyonline.com/embed/widget.js https://www.discoverhealth.org https://youtu.be/* *.googleapis.com *.ecwid.com/ https://www.trumba.com/; connect-src 'self' https://www.discoverhealth.org lift.acquia.com app.ecwid.com/ ecomm.events bam.nr-data.net stats.g.doubleclick.net maps.googleapis.com api.clockwisemd.com *.webdamdb.com translate.googleapis.com *.fontawesome.com adfs.srhs.com https://widgets.mindbodyonline.com/ https://srhs-cp.srhs.com https://us.perz-api.cloudservices.acquia.io *.truelook.cloud ws: *.loyalhealth.com *.calendly.com *.azure.com https://calendly.com *.monsido.com *.piwik.pro www.youtube.com *.cloudpano.com https://app.cloudpano.com https://mychart.spartanburgregional.com/ https://brandedweb.mindbodyonline.com/embed/widget.js https://brandedweb-assets.mindbodyonline.com https://widgets.mindbodyonline.com https://www.discoverhealth.org/ https://youtu.be/* *.googleapis.com *.cloudfront.net *.sitewit.com *.ecwid.dev https://us-vir5-storefront-api.ecwid.com/* *.ecwid.com/ https://storefront.ecwid.dev https://challenges.cloudflare.com/ https://storefront.ecwid.dev:* https://analytics-us.searchstax.com/api/v2/track/ https://go.mindbodyonline.com/ https://www.trumba.com/ 2 frame-ancestors 'self' *.e-spirit.hosting; base-uri 'self' 2 default-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.detectiveconanworld.com https://www.google-analytics.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.gstatic.com/; style-src 'self' 'unsafe-inline' https://pro.fontawesome.com/ https://www.google-analytics.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/ https://fonts.googleapis.com/ https://cdn.jsdelivr.net/ https://www.gstatic.com/; style-src-elem 'self' 'unsafe-inline' https://pro.fontawesome.com/ https://www.google-analytics.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://fonts.googleapis.com/ https://cdn.jsdelivr.net/ https://www.gstatic.com/; img-src 'self' 'unsafe-inline' https://www.google-analytics.com https://ssl.gstatic.com/ https://fonts.gstatic.com/ https://www.googletagmanager.com/ https://www.paypalobjects.com/ data:; font-src 'self' 'unsafe-inline' https://pro.fontawesome.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/ https://www.gstatic.com/ data:; connect-src 'self' 'unsafe-inline' https://www.google-analytics.com/ https://www.googletagmanager.com/ 2 default-src; script-src * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-elem * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-attr * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; style-src * 'self' data: 'unsafe-inline' 'unsafe-hashes'; style-src-elem * 'self' data: 'unsafe-inline' 'unsafe-hashes'; style-src-attr * 'self' data: 'unsafe-inline' 'unsafe-hashes'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self'; object-src * 'self'; prefetch-src * 'self'; child-src * 'self'; frame-src * 'self'; worker-src * 'self'; frame-ancestors *.uaionline.edu.ar uaionline.edu.ar *.uai.edu.ar uai.edu.ar *.uai.edu.ar:8084 uai.edu.ar:8084 *.vaneduc.edu.ar vaneduc.edu.ar; form-action * 'self'; base-uri * 'self'; manifest-src * 'self'; plugin-types */*; report-uri; report-to 2 base-uri 'none'; connect-src 'self' https://*.algolia.net https://hubspot-forms-static-embed.s3.amazonaws.com https://*.amplitude.com https://cdn.cookielaw.org https://api.crazyegg.com https://script.crazyegg.com https://tracking.crazyegg.com https://*.datas3ntinel.com https://*.g.doubleclick.net https://www.facebook.com https://google.com https://*.google.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://js.hs-banner.com https://forms.hsforms.com https://7272273.hs-sites.com https://api.hubapi.com https://*.hubspot.com https://*.intentiq.com https://px.ads.linkedin.com https://*.litix.io https://geolocation.onetrust.com https://plausible.io https://browser.sentry-cdn.com https://*.split.io https://*.taboola.com https://*.wistia.com https://*.wistia.net https://o703207.ingest.us.sentry.io; font-src 'self' data: https://fonts.gstatic.com https://cdn.scite.ai https://use.typekit.net https://*.wistia.com; frame-src 'self' https://td.doubleclick.net https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://forms.hsforms.com https://forms.hubspot.com https://7272273.hs-sites.com https://www.instagram.com https://pa.taboola.com https://tsdtocl.com https://platform.twitter.com https://fast.wistia.com https://fast.wistia.net https://widgets.wp.com https://*.youtube-nocookie.com; img-src data: 'self' https://*.chanzuckerberg.com https://chanzuckerberg.com https://cdn.cookielaw.org https://*.g.doubleclick.net https://www.facebook.com https://*.analytics.google.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.hsforms.com https://*.hubspot.com https://static.hsappstatic.net https://*.liadm.com https://*.intentiq.com https://*.linkedin.com https://t.co https://trc.taboola.com https://*.twitter.com https://*.wistia.com https://*.wistia.net https://pixel.wp.com https://i.ytimg.com; object-src 'none'; script-src 'self' 'unsafe-inline' blob: https://static.ads-twitter.com https://*.amplitude.com https://cdn.cookielaw.org https://script.crazyegg.com https://*.datas3ntinel.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.google-analytics.com https://*.googletagmanager.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscta.net https://js.hsforms.net https://js.hsleadflows.net https://js.hubspot.com https://cta-service-cms2.hubspot.com https://*.instagram.com https://platform.instagram.com https://snap.licdn.com https://plausible.io https://*.sentry-cdn.com https://*.split.io https://cdn.taboola.com https://trc.taboola.com https://platform.twitter.com https://*.wistia.com https://*.wistia.net https://stats.wp.com https://s0.wp.com; style-src 'unsafe-inline' 'self' https://*.typekit.net https://s0.wp.com; report-to csp-endpoint; report-uri https://https://o703207.ingest.us.sentry.io/api/4508501588705280/security/?sentry_key=9e0053618651fe03da44f314e765a452; 2 frame-ancestors https://tools.univer.se 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://www.gstatic.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com https://image.providesupport.com https://vm.providesupport.com https://cdnjs.cloudflare.com/ https://cdnjs.com/ https://unpkg.com/ https://connect.facebook.net/ https://*.smartlook.com https://*.smartlook.cloud;object-src 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com https://www.gstatic.com;img-src 'self' https://*.google.com https://www.gstatic.com https://translate.googleapis.com http://translate.google.com https://*.google-analytics.com data: https://image.providesupport.com https://fonts.gstatic.com https://www.googletagmanager.com https://www.facebook.com/ https://www.googletagmanager.com/ https://www.google.cz/;frame-src 'self' https://www.google.com https://www.youtube.com https://vm.providesupport.com http://vm.providesupport.com https://servis.webhouse.cz/ https://docs.google.com/ https://getwaitlist.com/ https://youtube.com/ https://www.book4u.cz https://accounts.google.com/;font-src 'self' https://fonts.gstatic.com;connect-src 'self' https://translate.googleapis.com https://translate-pa.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://chatapi.providesupport.com https://image.providesupport.com https://www.facebook.com/ https://reporter.seznam.cz/ https://region1.analytics.google.com/ https://manager.eu.smartlook.cloud/ https://*.smartlook.com https://*.smartlook.cloud;form-action 'self';frame-ancestors 'self';block-all-mixed-content 2 frame-ancestors 'self' https://*.notifica.re 2 default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self'; 2 default-src 'self'; script-src 'self' https://challenges.cloudflare.com https://cdn.jsdelivr.net https://www.unpkg.com https://us-assets.i.posthog.com https://internal-j.posthog.com 'unsafe-inline'; script-src-elem 'self' https://challenges.cloudflare.com https://cdn.jsdelivr.net https://www.unpkg.com https://us-assets.i.posthog.com https://internal-j.posthog.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://us.i.posthog.com; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' https://*.supabase.co https://api-gate.sumopod.com https://api-gate-v2.sumopod.com https://api-gate-v2.sumopod.com https://ai.sumopod.com https://api-wallet.sumopod.com https://api-pay-stg.sumopod.com https://api-pay-sandbox.sumopod.com https://api-pay.sumopod.com https://www.unpkg.com https://challenges.cloudflare.com https://ws.sumopod.com https://stg-ws.sumopod.com wss://ws.sumopod.com wss://stg-ws.sumopod.com https://*.sentry.io https://us.i.posthog.com https://us-assets.i.posthog.com https://internal-j.posthog.com https://*.i.posthog.com https://us.posthog.com; media-src 'self' blob:; worker-src blob:; frame-src https://challenges.cloudflare.com https://n8n-preview-service.internal.n8n.cloud https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.supabase.co 2 default-src 'self' https: data: wss:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; frame-ancestors 'self'; 2 default-src data: 'unsafe-inline' 'unsafe-eval' https:; frame-src 'self' https://*.cookiebot.com https://*.etracker.com https://www.etracker.de https://*.youtube-nocookie.com https://www.google.com; frame-ancestors 'self' https://*.etracker.com https://www.etracker.de; style-src-elem 'self' blob: 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com data: https://cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://*.cookiebot.com https://*.etracker.com https://*.etracker.de https://*.b-ite.com https://connect.facebook.net https://maps.googleapis.com https://maps.gstatic.com; img-src 'self' data: https: https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com https://*.google.com https://*.googleusercontent.com; connect-src 'self' https://*.googleapis.com https://*.gstatic.com https://sources.2sxc.org https://*.cookiebot.com https://*.b-ite.com https://*.etracker.com https://www.etracker.de https://www.facebook.com https://*.facebook.com; worker-src 'self' blob:; 2 default-src 'self' data: ; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net ajax.googleapis.com js.hs-scripts.com js.hsleadflows.net js.hs-analytics.net *.google-analytics.com *.googletagmanager.com sjs.bizographics.com js.driftt.com bat.bing.com connect.facebook.net web-analytics.engagio.com *.salesloft.com *.adroll.com *.cloudfront.net maps.googleapis.com d.adroll.mgr.consensu.org https://optimize.google.com *.licdn.com *.fullstory.com fullstory.com js.hs-banner.com https://tagmanager.google.com *.demandbase.com *.intercom.io *.intercomcdn.com https://play.vidyard.com https://www.googleadservices.com https://googleads.g.doubleclick.net *.hsforms.net https://*.usercentrics.eu *.6sc.co *.6sense.com https://scripts.simpleanalyticscdn.com https://js.qualified.com *.mouseflow.com https://*.amplitude.com js.hubspot.com https://www.google.com https://www.gstatic.com; img-src * 'self' data: *.hubspot.com *.google-analytics.com stats.g.doubleclick.net *.googletagmanager.com *.salesloft.com *.linkedin.com *.google.com *.facebook.com *.adroll.com *.adsymptotic.com bat.bing.com pixel.advertising.com dsum-sec.casalemedia.com pixel.rubiconproject.com sync.outbrain.com simage2.pubmatic.com trc.taboola.com eb2.3lift.com ads.yahoo.com ib.adnxs.com x.bidswitch.net cm.g.doubleclick.net idsync.rlcdn.com us-u.openx.net ups.analytics.yahoo.com dpm.demdex.net s.amazon-adsystem.com pm.w55c.net ups.analytics.yahoo.com pippio.com sync.mathtag.com tags.rd.linksynergy.com match.adsrvr.org usermatch.krxd.net tags.bluekai.com *.intercom.io *.intercomcdn.com *.intercomassets.com https://*.usercentrics.eu *.6sc.co *.6sense.com https://queue.simpleanalyticscdn.com https://simpleanalyticsbadges.com *.mouseflow.com https://*.amplitude.com; connect-src * 'self' data: *.hubspot.com https://optimize.google.com *.intercom.io *.intercomcdn.com *.intercomusercontent.com https://*.usercentrics.eu *.6sc.co *.6sense.com https://queue.simpleanalyticscdn.com https://*.qualified.com wss://*.qualified.com *.mouseflow.com https://*.amplitude.com https://www.google.com https://www.gstatic.com; frame-src 'self' data: player.vimeo.com js.driftt.com learn.qualia.com www.youtube.com qualia.daily.co https://optimize.google.com https://cdn2.hubspot.net https://play.vidyard.com *.hsforms.com https://*.qualified.com *.mouseflow.com app.hubspot.com https://www.google.com; style-src 'self' data: 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net ajax.googleapis.com fonts.googleapis.com https://optimize.google.com https://tagmanager.google.com https://*.qualified.com https://*.amplitude.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://optimize.google.com *.intercomcdn.com *.mouseflow.com; media-src 'self' data: www.qualia.com js.driftt.com *.intercomcdn.com *.hubspotusercontent00.net mediastream: https://*.qualified.com https://*.amplitude.com; manifest-src 'self' data: *.google.com; prefetch-src 'self' data: https://play.vidyard.com; child-src 'self' data: https://*.qualified.com *.mouseflow.com; object-src 'none'; upgrade-insecure-requests 2 default-src * data:; script-src https: http://suzukicycles.local http://www.youtube.com 'unsafe-inline' 'unsafe-eval'; style-src https: http://suzukicycles.local 'unsafe-inline' 2 img-src * data:; frame-ancestors 'self' 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cse.google.com https://www.google.com https://www.gstatic.com https://clients1.google.com https://partner.googleadservices.com https://www.clarity.ms https://scripts.clarity.ms https://siteimproveanalytics.com https://cdn.userway.org https://consent.cookiebot.com https://consentcdn.cookiebot.com https://ep2.adtrafficquality.google https://sbplibrary.libanswers.com https://static-assets-us.libanswers.com https://catalog.sbplibrary.org https://sbplibrary.us14.list-manage.com https://s3.amazonaws.com https://maps.googleapis.com https://collector-37912.tvsquared.com https://santabarbaraca.seamlessdocs.com https://tag.brandcdn.com https://adservices.brandcdn.com *.santabarbaraca.gov incentives.sbcleanenergy.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://www.google.com https://cdn.userway.org https://cdn-images.mailchimp.com https://static-assets-us.libanswers.com https://fonts.googleapis.com *.santabarbaraca.gov; img-src 'self' data: https://www.google.com https://clients1.google.com https://*.siteimproveanalytics.io https://imgsct.cookiebot.com https://cdn.userway.org https://www.googletagmanager.com https://ep1.adtrafficquality.google https://c.clarity.ms https://c.bing.com https://maps.googleapis.com https://maps.gstatic.com https://collector-37912.tvsquared.com https://googleads.g.doubleclick.net https://openweathermap.org https://insight.adsrvr.org https://ssl.gstatic.com https://syndicatedsearch.goog *.santabarbaraca.gov; media-src 'self' *.santabarbaraca.gov; frame-src 'self' https://www.googletagmanager.com https://consentcdn.cookiebot.com https://ep2.adtrafficquality.google https://*.arcgis.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://syndicatedsearch.goog https://cdn.userway.org https://infax.com https://td.doubleclick.net https://14348109.fls.doubleclick.net https://santabarbaraca.ompnetwork.org https://app.powerbigov.us https://vauth.command.verkada.com https://command.verkada.com https://santabarbaraca.seamlessdocs.com https://www.ndbc.noaa.gov https://catalog.sbplibrary.org https://insight.adsrvr.org https://app.acuityscheduling.com https://sbplibrary.libanswers.com https://seam.ly https://experience.arcgis.com https://watersmartsoftware.wistia.com *.santabarbaraca.gov https://forms.office.com view.genially.com incentives.sbcleanenergy.com; frame-ancestors https://santabarbaraca.gov https://flysba.santabarbaraca.gov https://library.santabarbaraca.gov https://sbparksandrec.santabarbaraca.gov https://statestreet.santabarbaraca.gov https://sustainability.santabarbaraca.gov; child-src 'self' *.santabarbaraca.gov https://forms.office.com view.genially.com; font-src 'self' https://fonts.gstatic.com https://cdn.userway.org *.santabarbaraca.gov; connect-src 'self' https://www.google.com https://www.google-analytics.com https://*.clarity.ms https://consent.cookiebot.com https://consentcdn.cookiebot.com https://ep1.adtrafficquality.google https://api.openweathermap.org https://cdn.userway.org https://cdn77.api.userway.org https://ad.doubleclick.net https://maps.googleapis.com https://www.googleadservices.com https://dc.applicationinsights.us https://sbplibrary.libanswers.com https://chat-us.libanswers.com https://syndicatedsearch.goog *.santabarbaraca.gov; report-uri /report-csp-violation; upgrade-insecure-requests 2 default-src 'self' *.wirth-horn.de *.payengine.de *.jobs.personio.de *.etrusted.com *.trustbadge.com *.trustedshops.com www.youtube-nocookie.com *.matomo.cloud; img-src data: 'self' res.cloudinary.com *.amazonaws.com www.youtube-nocookie.com *.wirth-horn.de *.matomo.cloud; media-src data: 'self' res.cloudinary.com www.youtube-nocookie.com; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.wirth-horn.de *.payengine.de *.jobs.personio.de *.etrusted.com *.trustbadge.com *.trustedshops.com www.youtube-nocookie.com *.matomo.cloud; style-src 'self' data: 'unsafe-inline' *.wirth-horn.de *.matomo.cloud; font-src data: 'self' *.matomo.cloud; 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://static.hotjar.com https://maps.googleapis.com https://www.googletagmanager.com https://connect.facebook.net https://www.clarity.ms https://analytics.tiktok.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://td.doubleclick.net https://stats.g.doubleclick.net https://www.surveygizmo.com https://www.gstatic.com https://go.botmaker.com https://storage.googleapis.com https://cdnjs.cloudflare.com https://zn9gkcxz5j9zpe4fu-swissbrand.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://www.clubswiss.com.ar https://www.swissmedical.com.ar https://script.hotjar.com https://a.clarity.ms https://b.clarity.ms https://c.clarity.ms https://d.clarity.ms https://e.clarity.ms https://f.clarity.ms https://g.clarity.ms https://h.clarity.ms https://i.clarity.ms https://j.clarity.ms https://k.clarity.ms https://l.clarity.ms https://m.clarity.ms https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://q.clarity.ms https://r.clarity.ms https://s.clarity.ms https://t.clarity.ms https://u.clarity.ms https://v.clarity.ms https://w.clarity.ms https://x.clarity.ms https://y.clarity.ms https://z.clarity.ms;connect-src 'self' https://metrics.hotjar.io https://maps.googleapis.com https://www.google.com https://analytics.google.com https://analytics.tiktok.com https://googleads.g.doubleclick.net https://mobileqa.swissmedical.com.ar https://mobilepre.swissmedical.com.ar https://mobile.swissmedical.com.ar https://stats.g.doubleclick.net https://api.whatsapp.com https://go.botmaker.com https://sgi.swissmedical.com.ar https://smed.beygoo.me https://swissbrand.qualtrics.com https://swissmedical.jobs2web.com https://swissmedicalgroup.sharepoint.com https://pagead2.googlesyndication.com https://siteintercept.qualtrics.com wss://ws.botmaker.com https://storage.googleapis.com https://m-infra.appspot.com https://www.clubswiss.com.ar https://www.swissmedical.com.ar https://a.clarity.ms https://b.clarity.ms https://c.clarity.ms https://d.clarity.ms https://e.clarity.ms https://f.clarity.ms https://g.clarity.ms https://h.clarity.ms https://i.clarity.ms https://j.clarity.ms https://k.clarity.ms https://l.clarity.ms https://m.clarity.ms https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://q.clarity.ms https://r.clarity.ms https://s.clarity.ms https://t.clarity.ms https://u.clarity.ms https://v.clarity.ms https://w.clarity.ms https://x.clarity.ms https://y.clarity.ms https://z.clarity.ms;img-src 'self' data: https://smed.beygoo.me https://www.facebook.com https://www.google.com.ar https://www.google.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://imagenes.swissmedical.com.ar https://analytics.google.com https://www.clarity.ms https://c.clarity.ms https://maps.gstatic.com https://maps.googleapis.com https://storage.googleapis.com https://www.clubswiss.com.ar https://www.swissmedical.com.ar https://connect.facebook.net;media-src 'self' https://www.youtube.com https://player.vimeo.com https://cdnjs.cloudflare.com https://storage.googleapis.com https://www.clubswiss.com.ar https://www.swissmedical.com.ar;font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://www.clubswiss.com.ar https://www.swissmedical.com.ar;frame-src 'self' https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net/ https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.swissmedical.com.ar https://www.youtube.com https://player.vimeo.com https://www.facebook.com https://forms.office.com https://www.clubswiss.com.ar https://www.swissmedical.com.ar;worker-src 'self' blob: https://www.clubswiss.com.ar https://www.swissmedical.com.ar;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://storage.googleapis.com https://www.clubswiss.com.ar https://www.swissmedical.com.ar;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests 2 frame-ancestors 'self' *.studis-online.de *.bafoeg-rechner.de *.netzseiten.de; object-src 'self' *.studis-online.de *.bafoeg-rechner.de *.netzseiten.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.studis-online.de *.bafoeg-rechner.de *.netzseiten.de *.youtube.com https://www.youtube.com player.vimeo.com https://vimeo.com *.ardmediathek.de https://www.ardmediathek.de *.openstreetmap.org https://www.openstreetmap.org *.googleapis.com https://apis.google.com; font-src 'self' *.studis-online.de *.bafoeg-rechner.de *.netzseiten.de; style-src 'self' 'unsafe-inline' *.studis-online.de *.bafoeg-rechner.de *.netzseiten.de *.youtube.com https://www.youtube.com player.vimeo.com https://vimeo.com *.ardmediathek.de https://www.ardmediathek.de *.openstreetmap.org https://www.openstreetmap.org; 2 frame-ancestors 'self' https://podpage.com https://www.podpage.com; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ga.dorcel.com contentnotif.dorcel.com www.dorcelclub.com www.account-dorcel.com cdnjs.cloudflare.com track.dorcelcash.com www.googletagmanager.com www.google-analytics.com *.air360tracker.net *.air360.io cdn.jsdelivr.net *.dugwood.com bat.bing.com *.clarity.ms *.streaming.in2ip.nl; style-src 'self' 'unsafe-inline' ga.dorcel.com *.air360tracker.net *.air360.io fonts.googleapis.com cdn.jsdelivr.net *.streaming.in2ip.nl; img-src 'self' data: https: blob:; media-src 'self' data: *.streaming.in2ip.nl blob:; font-src 'self' data: ga.dorcel.com *.air360tracker.net *.air360.io fonts.gstatic.com cdn.jsdelivr.net *.streaming.in2ip.nl; frame-src 'self' contentnotif.dorcel.com *.netverify.com www.dorcelclub.com msurvey.orange.com as.sexad.net www.account-dorcel.com *.air360.io; connect-src 'self' region1.google-analytics.com region1.analytics.google.com analytics.google.com www.google-analytics.com stats.g.doubleclick.net *.air360tracker.net *.air360.io *.dugwood.com bat.bing.com bat.bing.net *.clarity.ms *.streaming.in2ip.nl; form-action 'self' https: http://*.streaming.in2ip.nl; worker-src *.air360tracker.net blob:; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://secure.quantserve.com/ https://www.instagram.com/ https://app.termly.io/ https://www.google.com/ https://www.gstatic.com/ http://rules.quantcount.com/ http://cdn.scarabresearch.com/ https://assets.juicer.io/ https://www.googletagmanager.com/ http://cdn.scarabresearch.com/ https://cdn.levelaccess.net/ https://www.google-analytics.com/ https://www.googleadservices.com/ http://pixel.quantserve.com/ http://connect.facebook.net/ https://secure-ds.serving-sys.com/ https://s.pinimg.com/ http://xfqprspx.micpn.com/ https://static.bytedance.com/ http://www.lightboxcdn.com/ http://api.lightboxcdn.com/ https://bs.serving-sys.com/ http://www.juicer.io/ https://js.adsrvr.org/; object-src 'none' 2 default-src https://disqus.com https://*.disquscdn.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://c.disquscdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://*.disquscdn.com https://*.disqus.com https://gapl.hit.gemius.pl https://ssl.google-analytics.com https://cdnjs.cloudflare.com https://s-eu-1.pushpushgo.com https://s-us-1.pushpushgo.com https://cdn.pushpushgo.com https://api.pushpushgo.com; img-src 'self' data: https://ssl.google-analytics.com https://cdn.viglink.com https://*.disqus.com https://juicebox.net https://stats.g.doubleclick.net; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com; frame-src 'self' https://www.gstatic.com https://www.google.com https://ls.hit.gemius.pl https://disqus.com https://ljsp.lwcdn.com https://*.dcs.redcdn.pl https://www.facebook.com https://www.youtube.com; frame-ancestors 'self'; connect-src 'self' https://*.google-analytics.com https://*.disqus.com https://api.pushpushgo.com; base-uri 'self'; 2 default-src 'none'; img-src 'self'; 2 frame-ancestors 'self' https://preview.touchsource.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: truecommerce.wpengine.com browser.sentry-cdn.com api.wpengine.com fast.wistia.net bzrcdn.openai.com www.googletagmanager.com maps.googleapis.com www.google.com ajax.googleapis.com google-analytics.com analytics.google.com www.google-analytics.com api.mapbox.com assets.calendly.com cdn.jsdelivr.net geoip-js.com assets.ubembed.com consent.cookiebot.com connect.facebook.net www.clickcease.com www.redditstatic.com 1a9db140d00d47c6bde67dfa6057cb00.js.ubembed.com www.gstatic.com bat.bing.com j.6sc.co static.hotjar.com script.hotjar.com snap.licdn.com bot.leadoo.com googleads.g.doubleclick.net consent.cookiebot.com consentcdn.cookiebot.com munchkin.marketo.net js.zi-scripts.com scripts.clarity.ms www.clarity.ms ct.capterra.com c.sf-syn.com assets.adoberesources.net documentcloud.adobe.com scout-cdn.salesloft.com ipapi.co static.userback.io; frame-ancestors 'self' https://www.googletagmanager.com https://consentcdn.cookiebot.com; 2 default-src 'self' https://www.stc.com.bh https://www.stc.com.bh https://wwwnext.stc.com.bh https://next.stc.com.bh https://*.hotjar.com https://cdnstaging.stc.com.bh https://cdn.stc.com.bh http://stcweb.next https://wwwnext.stc.com.bh https://ib.adnxs.com http://*.tribalfusion.com https://*.adjust.com https://*.segment.io https://*.google.com https://*.google.com.bh https://*.google.com.sa https://google.com https://*.stc.com.bh http://www.googletagmanager.com https://www.googletagmanager.com https://*.segment.com https://*.sparkcentral.com http://*.twitter.com https://www.google-analytics.com http://*.doubleclick.net https://*.smooch.io https://*.facebook.net https://*.facebook.com https://*.appdynamics.com https://*.eum-appdynamics.com https://*.ads-twitter.com https://www.gstatic.com https://www.googleadservices.com https://sc-static.net https://*.tiktok.com https://*.getresponse.com https://creativecdn.com https://t.co https://*.snapchat.com https://*.adsrvr.org https://*.yahoo.com https://us-an.gr-cdn.com https://m.gr-cdn-e.com https://*.omnitagjs.com https://*.gr-cdn.com https://*.gr-cdn-e.com https://*.hotjar.io https://*.gstatic.com wss://*.hotjar.com https://connect.facebook.net https://www.gravatar.com wss://*.smooch.io https://*.googleapis.com https://*.rubiconproject.com https://www.youtube.com https://*.googlesyndication.com https://polyfill.io https://*.cloudfront.net https://*.youtube.com https://service.moic.gov.bh https://*.doubleclick.net https://*.linkedin.com http://*.youtube.com https://*.adsymptotic.com https://*.bidswitch.net https://*.amazonaws.com https://canarytokens.com https://*.cloudflareinsights.com https://*.jumio.ai https://browser-intake-datadoghq.com https://apps.mec1.pure.cloud https://analytics-ipv6.tiktokw.us https://www.google.co.in https://api-cdn.mec1.pure.cloud https://applepay.cdn-apple.com https://www.clarity.ms https://*.clarity.ms https://api-cdn.mec1.pure.cloud/ wss://webmessaging.mec1.pure.cloud https://fileupload.mec1.pure.cloud https://*.mec1.pure.cloud https://apps.mypurecloud.de https://*.mypurecloud.de https://api-cdn.mypurecloud.de wss://webmessaging.mypurecloud.de https://cdn.amplitude.com data: 'unsafe-inline' blob: 'unsafe-eval' 2 frame-ancestors 'self' https://web.telegram.org https://*.telegram.org https://t.me 2 base-uri 'self'; upgrade-insecure-requests; default-src 'self' *.youtube-nocookie.com *.ytimg.com; script-src 'self' *.youtube-nocookie.com *.ytimg.com 'inline-speculation-rules'; style-src 'self' 'unsafe-inline'; 2 frame-src https://challenges.cloudflare.com https://www.googletagmanager.com https://privacyassure.force.com https://sbx-privacyassure.cs219.force.com https://www.youtube-nocookie.com https://www.google.com https://www.facebook.com https://forms.hsforms.com https://www.youtube.com https://ustglobalinc.jifflenow.com https://js.hsforms.net https://view.ceros.com https://player.vimeo.com https://download-video.akamaized.net https://app.hubspot.com https://vars.hotjar.com https://ustglobal.demdex.net https://app.hubspot.com https://13505543.fls.doubleclick.net https://s.company-target.com https://td.doubleclick.net https://form.typeform.com https://ust-gen.eu.ada.support https://assets.adobedtm.com https://resources.digital-cloud-west.medallia.com; frame-ancestors 'self' 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.etracker.com 2 frame-ancestors 'self' *.einnews.com *.einpresswire.com; 2 default-src 'self' https://yastatic.net; connect-src 'self' https://*.auvix.ru https://yandex.ru https://*.yandex.com https://*.yandex.ru https://*.yandex.net wss://mc.yandex.ru https://bitrix.info/bx_stat; font-src 'self' data: https://*.auvix.ru https://fonts.bitrix24.ru; frame-ancestors 'self' https://metrika.yandex.ru https://www.arturia.com.ru https://www.axelvox.ru www.infocus.ru www.intrend-av.ru https://www.lumien.ru; frame-src 'self' blob: https://*.auvix.ru https://yandex.ru https://*.yandex.ru https://*.yandex.net https://*.yandex.com https://yastatic.net https://www.sotbit.ru https://cp.unisender.com https://vk.com https://rutube.ru https://*.dev.auvix.ru; media-src 'self'; img-src 'self' blob: data: https://*.auvix.ru https://yandex.ru https://*.yandex.ru https://*.yandex.net https://*.yandex.com https://*.1c-bitrix.ru https://cdn.bitrix24.site; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.auvix.ru https://yandex.ru https://*.yandex.ru https://*.yandex.net https://*.yandex.com https://yastatic.net https://*.1c-bitrix.ru https://cdn.bitrix24.ru https://cdn-ru.bitrix24.ru https://bitrix.info/ba.js https://cdn.jsdelivr.net/npm/@yandex/ https://cp.unisender.com https://top-fwz1.mail.ru/js/code.js https://code.jquery.com/ui/1.12.0/jquery-ui.js; style-src 'self' 'unsafe-inline' https://*.auvix.ru https://fonts.bitrix24.ru https://*.1c-bitrix.ru https://yastatic.net https://code.jquery.com/ui/1.12.0/themes/smoothness/jquery-ui.css; worker-src 'self' blob:; block-all-mixed-content; upgrade-insecure-requests; 2 font-src www.paypalobjects.com cash-f.squarecdn.com https://*.gstatic.com *.gstatic.com 'self' data: *.paypalobjects.com *.fontawesome.com *.superpayments.com *.stripe.com *.globalpay.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.apple.com *.cdn-apple.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk *.superpayments.com *.stripe.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com *.meetanshi.com meetanshi.com *.superpayments.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com * *.adyen.com *.google.com *.livechatinc.com *.weltpixel.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk https://pay.google.com https://payments.google.com www.google.com www.gstatic.com apis.google.com *.meetanshi.com meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.superpayments.com *.stripe.com *.js.stripe.com www.youtube.com *.diamond-heaven.co.uk *.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://*.gstatic.com *.adyen.com magefan.com cm.magefan.com 'self' data: *.diamond-heaven.co.uk *.globalpay.com https://www.gstatic.com/instantbuy/svg/dark/pay/en.svg https://www.gstatic.com/instantbuy/svg/light/pay/en.svg https://www.gstatic.com/instantbuy/svg/dark/en.svg https://www.gstatic.com/instantbuy/svg/light/en.svg *.disqus.com https://firebasestorage.googleapis.com *.meetanshi.com meetanshi.com https://meetanshi.com *.superpayments.com *.stripe.com a.storyblok.com *.adobedtm.com *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.google.com *.gstatic.com *.googleadservices.com *.googleads.g.doubleclick.net vto.jewelry chimpstatic.com *.livechatinc.com *.pcapredict.com *.sharethis.com *.clarity.ms *.bing.com player.vimeo.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.disqus.com *.googleapis.com *.avada.io *.shopify.com *.meetanshi.com meetanshi.com *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.superpayments.com *.stripe.com b.stripecdn.com m.stripe.network segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.trustpilot.com www.youtube.com *.adobedtm.com *.doubleclick.net *.cardinalcommerce.com *.vto.jewelry *.cloudflareinsights.com *.googleadservices.com *.google-analytics.com *.paypal.com *.paypalobjects.com *.aspnetcdn.com *.facebook.com *.postcodeanywhere.co.uk *.alliedgoldltd.com checkoutshopper-live.cdn.adyen.com fgcbn.diamond-heaven.co.uk fgcbn.diamond-heaven.ie fgcbn.diamond-heaven.de cdn.attn.tv *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ *.googleapis.com *.fontawesome.com https://fonts.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net *.superpayments.com *.stripe.com *.postcodeanywhere.co.uk *.adyen.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.googleapis.com *.google.com *.paypalobjects.com *.diamond-heaven.co.uk *.diamond-heaven.ie 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://google.com/pay https://pay.google.com *.globalpay.com https://js.globalpay.com https://js-cert.globalpay.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.meetanshi.com meetanshi.com https://www.google-analytics.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.superpayments.com *.stripe.com stripe.com cognito-idp.eu-west-2.amazonaws.com segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.seonintelligence.com *.trustpilot.com api.storyblok.com maps.googleapis.com web-sdk.smartlook.com *.sentry.io cdn.plyr.io noembed.com *.cloudflareinsights.com *.googletagmanager.com *.googleadservices.com checkoutshopper-live.cdn.adyen.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 default-src * 'unsafe-eval' 'unsafe-inline' data: about: 2 default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob: imagedelivery.net; font-src 'self' https: data:; connect-src 'self' https:; media-src 'self' https: blob:; frame-src 'self' *.iconia.co.jp localhost:1337 https:; frame-ancestors 'self' *.iconia.co.jp localhost:1337; 2 base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.doubleclick.net https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://web.cmp.usercentrics.eu https://connect.facebook.net https://dmp.theadex.com https://maps.google.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://console.googletagservices.com https://*.adtrafficquality.google https://*.google.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googletagmanager.com; frame-src 'self' https://*.doubleclick.net https://*.google.com https://*.googleadservices.com https://*.safeframe.googlesyndication.com https://api.theadex.com https://web.cmp.usercentrics.eu https://tpc.googlesyndication.com https://pagead2.googlesyndication.com *.googletagservices.com https://*.googletagmanager.com https://*.adtrafficquality.google; frame-ancestors 'self'; form-action 'self'; default-src 'self'; worker-src 'self'; object-src 'none'; img-src * 'self' data:; manifest-src 'self'; connect-src 'self' https://*.analytics.google.com https://*.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.at https://*.google.de https://*.googleapis.com https://*.marktguru.at https://*.marktguru.de https://*.usercentrics.eu https://csi.gstatic.com https://mppx.marktguru.at https://mppx.marktguru.de https://pagead2.googlesyndication.com https://*.adtrafficquality.google https://dmp.theadex.com https://*.googleadservices.com https://*.googletagservices.com https://www.facebook.com; font-src 'self' https://fonts.gstatic.com; 2 default-src https: blob: data: 'unsafe-inline' 'unsafe-eval' 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: data:; style-src 'self' 'unsafe-inline' https: data:; img-src * data: blob:; font-src * data:; connect-src *; frame-src *; media-src * blob: data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 2 default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://clients.crservers.com/ https://hostbill.crservers.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https: wss: https://www.google.com/recaptcha/; frame-src 'self' https://www.google.com/maps/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://hostbill.crservers.net/ https://clients.crservers.com/ https://www.youtube.com/ https://www.youtube-nocookie.com/; frame-ancestors 'none'; report-uri https://crservers.com/api/csp-report; report-to csp-endpoint 2 default-src 'self' https://*.hotjar.com https://*.hs-scripts.com 'unsafe-inline'; media-src 'self' https://wp.supraoracles.com https://qa-assets.cerberus.supra.com https://prod-assets.cerberus.supra.com https://prod-assets.cerberus.supraoracles.com https://uploads-ssl.webflow.com; style-src 'self' 'unsafe-inline' https://form.asana.com http://fonts.googleapis.com https://*.hotjar.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://supraecosystem.wpenginepowered.com https://supra.com/ecosystem/; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://supraecosystem.wpenginepowered.com https://supra.com/ecosystem/; connect-src 'self' https: wss:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d3e54v103j8qbb.cloudfront.net https://ajax.googleapis.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.hs-banner.com https://*.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://*.hscollectedforms.net https://*.hs-analytics.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://boards.greenhouse.io https://cdn.mathjax.org https://a.omappapi.com https://edge.marker.io https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://play.vidyard.com https://static.cloudflareinsights.com https://unpkg.com https://cdn.jsdelivr.net https://js.hs-scripts.com/19955481.js https://supraecosystem.wpenginepowered.com https://supra.com/ecosystem/; frame-src 'self' https://form.asana.com https://forms.hsforms.com https://www.youtube.com https://job-boards.greenhouse.io https://boards.greenhouse.io https://player.vimeo.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://app.marker.io https://play.vidyard.com https://www.googletagmanager.com https://td.doubleclick.net https://cdn.embedly.com; frame-ancestors 'self' https://supra-hub.webflow.io https://hub.supra.com; worker-src 'self' blob: https://unpkg.com https://cdn.jsdelivr.net; 2 frame-ancestors 'self' https://dpu.edu.tr https://*.dpu.edu.tr; 2 frame-ancestors 'self' *.virginmedia.ie *.upc.biz; 2 default-src 'none'; script-src 'self' *.2o7.net *.omtrdc.net *.techem.com *.scene7.com *.cookiebot.com *.cookiebot.eu *.marketo.net *.adition.com *.google.com assets.adobedtm.com connect.facebook.net snap.licdn.com *.google-analytics.com googleads.g.doubleclick.net www.googletagmanager.com www.googleadservices.com https://*.demdex.net https://*.youtube.com https://*.marketo.com https://cm.everesttech.net https://static.widget.trengo.eu https://stats.pusher.com https://assets.sitescdn.net https://assets.eu.sitescdn.net https://answers-embed.techem.de.pagescdn.com https://answers-embed.techem.de.eu.pagescdn.com https://widget.trustpilot.com https://*.mouseflow.com https://bat.bing.com https://documentservices.adobe.com https://acrobatservices.adobe.com https://api.staging.pso-empfehlen.dev https://api.pso-empfehlen.net https://techem-empfehlen.de https://www.techem-empfehlen.de https://pso-empfehlen.staging.pso-vertrieb.de https://empfehlen-admin.pso-vertrieb.de https://*.etracker.com https://*.etracker.de https://static.xingcdn.com https://*.intuitioncreative-52.com https://fastly.jsdelivr.net https://cdn.jsdelivr.net https://podio.com https://techem.traffit.com blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.2o7.net *.omtrdc.net *.scene7.com *.techem.com https://*.marketo.com https://www.gstatic.com https://fonts.googleapis.com https://assets.sitescdn.net https://assets.eu.sitescdn.net; font-src 'self' *.2o7.net *.omtrdc.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://fonts.bunny.net https://cdn.jsdelivr.net data:; img-src 'self' *.2o7.net *.omtrdc.net blob: data: https: *.adspirit.de; frame-src 'self' *.2o7.net *.omtrdc.net *.cookiebot.com *.cookiebot.eu *.techem.com *.youtube.com *.youtube-nocookie.com *.yextpages.net *.marketo.com *.google.com *.googletagmanager.com *.googleadservices.com *.facebook.com https://outlook.office.com https://bookings.cloud.microsoft https://*.demdex.net bid.g.doubleclick.net techem.prospective.de answers-embed.techem.de.pagescdn.com answers-embed.techem.de.eu.pagescdn.com https://widget.trustpilot.com https://documentservices.adobe.com https://acrobatservices.adobe.com https://techem-experts.rogsurvey.de https://techem-atlas.vercel.app https://podio.com https://techem.traffit.com https://traffit.com blob:; manifest-src 'self'; connect-src 'self' *.2o7.net *.omtrdc.net *.techem.com *.scene7.com *.google.com *.googleadservices.com *.marketo.com *.facebook.com *.pusher.com *.friendlycaptcha.com *.mktoutil.com googleads.g.doubleclick.net https://cm.everesttech.net https://assets.adobedtm.com https://acrobatservices.adobe.com https://*.demdex.net https://*.mktoresp.com https://*.cookiebot.com https://*.cookiebot.eu https://*.trengo.eu https://*.amazonaws.com https://*.westeurope.logic.azure.com https://*.yext.com https://answers.yext-pixel.com https://cdn.linkedin.oribi.io https://*.mouseflow.com https://px.ads.linkedin.com https://analytics.techem.de https://www.eu.yextevents.com https://prod-cdn.eu.yextapis.com https://viewlicense.adobe.io/viewsdklicense/jwt https://*.etracker.de https://widget.trustpilot.com https://techem.traffit.com https://techem-empfehlen.de https://www.techem-empfehlen.de; media-src 'self' https://static.widget.trengo.eu https://*.scene7.com *.techem.com blob:; frame-ancestors 'self' https://techem.events.rooom.com https://www.rooom.com https://*.etracker.com *.edge.agora.io:6443 *.edge.agora.io:9591 *.edge.agora.io:9593 *.edge.sd-rtn.com:6443 *.edge.sd-rtn.com:9591 *.edge.sd-rtn.com:9593 webcollector-rtm.agora.io:6443 webcollector-rtm.agora.io:9591 webcollector-rtm.agora.io:9593 ; 2 default-src 'self'; script-src 'self' https://cc.cdn.civiccomputing.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://player.vimeo.com https://www.vimeo.com https://vimeo.com https://unpkg.com https://secure.leadforensics.com https://a.usbrowserspeed.com https://tag.demandbase.com https://maps.googleapis.com https://www.google-analytics.com https://googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://apikeys.civiccomputing.com https://clapi.civiccomputing.com https://www.google.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://secure.leadforensics.com https://idx.liadm.com https://api.company-target.com https://tag.demandbase.com https://maps.googleapis.com https://ad.doubleclick.net https://vimeo.com https://www.vimeo.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://marinecoastalsurvey.co.uk https://maps.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://ad.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.google.com https://recaptcha.google.com https://abpnotify.co.uk https://*.abpnotify.co.uk https://simontrimmer.co.uk https://embed.windy.com https://abpmer.maps.arcgis.com https://vision.abpmer.net https://experience.arcgis.com https://abports.port-log.net https://abbritishports.sharepoint.com; child-src 'self' https://player.vimeo.com https://www.youtube.com https://www.google.com; media-src 'self' https://player.vimeo.com https://www.youtube.com; frame-ancestors 'self'; 2 default-src * data:; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; frame-src *; 2 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; 2 default-src *.myidx.cloud 'self' px.ads.linkedin.com naspers-corp-v2.cm.invdcloud-is.co.uk naspers-corp-v2.cm.idxcloud.co.uk analytics.google.com www.google.com www.google-analytics.com naspers-corp-v2.cd.invdcloud-is.co.uk naspers-corp-v2.cd.idxcloud.co.uk cdn.jsdelivr.net cdnjs.cloudflare.com www.google.com code.jquery.com geoid.investisdigital.com www.googletagmanager.com www.connectidfeed.com static.cloudflareinsights.com; img-src *.myidx.cloud 'self' 'unsafe-inline' data: px4.ads.linkedin.com cf-images.eu-west-1.prod.boltdns.net metrics.brightcove.com www.linkedin.com www.lfeeder.com fonts.gstatic.com naspers-corp-v2.cm.invdcloud-is.co.uk px.ads.linkedin.com tr-rc.lfeeder.com i.vimeocdn.com i.ytimg.com www.youtube-nocookie.com naspers-corp-v2.cm.idxcloud.co.uk google-analytics.com tr.lfeeder.com naspers-corp-v2.cd.invdcloud-is.co.uk naspers-corp-v2.cd.idxcloud.co.uk www.google.com www.google.co.in viz.tools.investis.com www.brightcove.com www.boltdns.net cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com www.googletagmanager.com www.connectidfeed.com p.typekit.net; frame-src *.myidx.cloud 'self' www.youtube-nocookie.com td.doubleclick.net player.vimeo.com naspers-corp-v2.cm.invdcloud-is.co.uk naspers-corp-v2.cm.idxcloud.co.uk www.zscaler.net www.zscalerone.net www.zscalertwo.net www.zscalerthree.net www.zscloud.net naspers-corp-v2.cd.invdcloud-is.co.uk naspers-corp-v2.cd.idxcloud.co.uk otp.tools.investis.com cdn.jsdelivr.net www.youtube.com cdnjs.cloudflare.com www.google.com code.jquery.com www.google-analytics.com fonts.googleapis.com www.googletagmanager.com www.connectidfeed.com irs.tools.investis.com; style-src *.myidx.cloud assets.investisdigital.com 'self' 'unsafe-inline' 'unsafe-eval' p.typekit.net naspers-corp-v2.cm.invdcloud-is.co.uk fonts.googleapis.com www.googletagmanager.com naspers-corp-v2.cm.idxcloud.co.uk naspers-corp-v2.cd.invdcloud-is.co.uk naspers-corp-v2.cd.idxcloud.co.uk www.zscaler.net www.zscalerone.net www.zscalertwo.net www.zscalerthree.net www.zscloud.net viz.tools.investis.com cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com use.typekit.net assets.investisdigital.com; script-src *.myidx.cloud www.linkedin.com px.ads.linkedin.com snap.licdn.com player.vimeo.com f.vimeocdn.com www.youtube-nocookie.com sc.lfeeder.com staticcontents.investisdigital.com static.cloudflareinsights.com analytics.google.com www.google.com www.google-analytics.com www.amazonaws.com assets.investisdigital.com www.zscaler.net www.zscalerone.net www.zscalertwo.net www.zscalerthree.net www.zscloud.net 'self' 'unsafe-inline' otp.tools.investis.com www.youtube.com connect.facebook.net 'unsafe-eval' unpkg.com cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com viz.tools.investis.com www.googletagmanager.com fonts.googleapis.com www.connectidfeed.com use.typekit.net irs.tools.investis.com; media-src *.myidx.cloud 'self' blob: house-fastly-signed-eu-west-1-prod.brightcovecdn.com www.linkedin.com naspers-corp-v2.cm.invdcloud-is.co.uk naspers-corp-v2.cm.idxcloud.co.uk naspers-corp-v2.cd.invdcloud-is.co.uk naspers-corp-v2.cd.idxcloud.co.uk www.brightcovecdn.com cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com www.googletagmanager.com fonts.googleapis.com www.connectidfeed.com; connect-src *.myidx.cloud jzkss3k18d.execute-api.eu-west-1.amazonaws.com edge.api.brightcove.com www.linkedin.com px.ads.linkedin.com www.youtube-nocookie.com analytics.google.com www.google.com www.google-analytics.com www.amazonaws.com assets.investisdigital.com viz.tools.investis.com www.naspers.com naspers-corp-v2.cm.invdcloud-is.co.uk naspers-corp-v2.cm.idxcloud.co.uk naspers-corp-v2.cd.invdcloud-is.co.uk naspers-corp-v2.cd.idxcloud.co.uk stats.g.doubleclick.net www.connectidfeed.com www.brightcove.com geoid.investisdigital.com region1.google-analytics.com cookiemanager.investisdigital.com www.youtube.com fonts.googleapis.com; font-src *.myidx.cloud 'self' naspers-corp-v2.cm.invdcloud-is.co.uk fonts.gstatic.com naspers-corp-v2.cm.idxcloud.co.uk naspers-corp-v2.cd.invdcloud-is.co.uk naspers-corp-v2.cd.idxcloud.co.uk www.connectidfeed.com www.googletagmanager.com use.typekit.net; object-src 'none'; base-uri 'self'; 2 default-src 'none';font-src 'self';img-src 'self';script-src 'sha256-81WxZh6Jlqr32U+Mgym0ZWs7QkLHGQ7CBoaQQGRUeTo=';style-src 'unsafe-inline'; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.3lift.com *.acuityplatform.com *.adadvisor.net *.adform.net *.adgrx.com *.admission.net *.admixer.net *.adnxs.com *.adotmob.com *.adsrvr.org *.adsymptotic.com *.advertising.com *.agkn.com *.alcmpn.com *.amazon-adsystem.com *.amazonaws.com *.apxlv.com *.arcgis.com *.betweendigital.com *.bfmio.com *.bidr.io *.bidswitch.net *.bluekai.com *.bootstrapcdn.com *.brandcdn.com *.cdc.gov *.choozle.com *.cloudflare.com *.cloudfront.net *.cogocast.net *.company-target.com *.contextweb.com *.crazyegg.com *.crwdcntrl.net *.demdex.net *.docscores.com *.domdex.com *.dotomi.com *.doubleclick.net *.eloqua.com *.trumba.com trumba.com *.addthis.com *.resonate.com *.emailsrvr.com *.en25.com *.ensighten.com *.entitytag.co.uk *.epichosted.com *.everesttech.net *.exelator.com *.facebook.com *.facebook.net *.fg8dgt.com *.force.com *.fwmrm.net *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.healthgrades.com *.mercuryhealthcare.com *.imrworldwide.com *.insightexpressai.com *.intentiq.com *.ipredictive.com *.jumptap.com *.krxd.com *.krxd.net *.liadm.com *.libsyn.com *.licdn.com *.lijit.com *.linkedin.com *.linksynergy.com *.mathtag.com *.mdhv.io *.medtouch.com *.ml314.com *.ml314.com *.moatads.com *.mookie1.com *.ngrok.io *.nrchealth.com *.openx.net *.placelocal.com *.prfct.com *.pro-market.net *.pubmatic.com *.quantserve.com *.reson8.com *.rfihub.com *.rkdms.com *.rlcdn.com *.rubiconproject.com *.rundsp.com *.salesforce.com *.scorecardresearch.com *.semasio.net *.sharethis.com *.simpli.fi *.siteimproveanalytics.com *.siteimproveanalytics.io *.sitescout.com *.spotify.com *.spotxchange.com *.stickyadstv.com *.sundaysky.com *.survata.com *.swarminteractive.com *.tapad.com *.thrtle.com *.tidaltv.com *.tinypic.com *.tremorhub.com *.tribalfusion.com *.trueleadid.com *.truoptik.com *.turn.com *.twitter.com *.twimg.com *.undertone.com *.universityhealthsystem.com *.universityhealth.com *.universityhealthsystemsc.dev.local *.viewmedica.com *.vindicosuite.com *.w55c.net *.walmart.com *.web-2-tel.com *.xspadvertising.com *.yahoo.com *.youtube.com *.vimeo.com *.vimeocdn.com *.yextpages.net *.perfalytics.com https://freshpaint-cdn.com https://perfalytics.com https://addevent.com http://siteimproveanalytics.com https://oxblue.com https://pippio.com https://siteimproveanalytics.com https://thrtle.com https://uhs-portal.com https://universityhealthsystemsc.dev.local https://viewmedica.com https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://rg-uh-corpcomm-sitecore-pr-288890-cd.azurewebsites.net/ https://rg-uh-corpcomm-sitecore-pr-288890-cm.azurewebsites.net/ https://searchcloud-2-us-east-1.searchstax.com/ https://static.searchstax.com https://analytics-us.searchstax.com https://adobedc.demdex.net; 2 frame-ancestors 'self' *.doctors.net.uk; object-src 'none' 2 default-src *; font-src * data:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; frame-ancestors 'none'; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: ; worker-src 'self' blob: ; 2 default-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googletagmanager.com https://cdn.trkkn.com https://*.p7s1.io https://*.usercentrics.eu https://walls.io https://*.walls.io;style-src 'self' 'unsafe-inline';img-src 'self' https://*.p7s1.io https://*.usercentrics.eu https://*.googletagmanager.com blob: data:;font-src 'self' blob: data:;object-src 'none';frame-src 'self' https://*.online-report.eu https://*.google.com https://*.eurolandir.com https://walls.io https://*.walls.io https://*.promeas.com https://player.live.p7s1video.net;base-uri 'self';form-action 'self';frame-ancestors 'none';upgrade-insecure-requests;connect-src 'self' https://*.p7s1.io https://*.usercentrics.eu https://*.google-analytics.com 2 upgrade-insecure-requests; frame-ancestors https:; 2 frame-ancestors 'self' travel-dealz.de travel-dealz.com forum.travel-dealz.de kreuzfahrten.travel-dealz.de cruises.travel-dealz.com; 2 frame-ancestors 'self' https://*.lightcast.io https://*.datocms.com https://*.saleshood.com 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.vizzit.se *.readspeaker.com *.episerver.net *.kiprotect.com *.lakemedelsverket.open-analytics.se *.azure.com *.vo.msecnd.net *.gstatic.com *.google.com *.cloudflare.com *.bootstrapcdn.com *.jquery.com *.jsdelivr.net *.aptrinsic.com *.hcaptcha.com *.aslint.org *.webserviceaward.com;style-src 'self' 'unsafe-inline' *.readspeaker.com *.bootstrapcdn.com *.episerver.net *.vizzit.se *.googleapis.com *.jsdelivr.net *.aptrinsic.com *.gstatic.com *.webserviceaward.com;font-src 'self' data: *.gstatic.com *.cloudfront.net *.episerver.net;img-src 'self' data: *.gstatic.com *.google.com *.lakemedelsverket.open-analytics.se *.episerver.net *.vizzit.se;frame-src 'self' *.screen9.com qcnl.tv *.google.com link.webropolsurveys.com *.hcaptcha.com *.google.com;frame-ancestors 'self';connect-src 'self' *.vizzit.se *.lakemedelsverket.open-analytics.se *.services.visualstudio.com *.aptrinsic.com *.hcaptcha.com *.google.com *.applicationinsights.azure.com *.monitor.azure.com;report-uri /api/csp/report; 2 script-src 'self' https://chat.seznam.cz https://*.hit.gemius.pl https://www.stream.cz/static/embed/ https://h.seznam.cz https://c.imedia.cz; report-uri /cspreport; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; frame-src 'self' https: data: blob:; 2 default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com/ https://cdnjs.cloudflare.com; img-src 'self' data: https://www.google.com https://www.google.co.in https://www.google-analytics.com https://www.googletagmanager.com/; frame-ancestors 'self' https://cms.onitygroup.com:9111; frame-src 'self' https://cms.onitygroup.com:9111 https://bid.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://cdn.jsdelivr.net/; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://use.fontawesome.com https://cdnjs.cloudflare.com; object-src 'none'; base-uri 'self' https://cms.onitygroup.com:9111; form-action 'self'; report-uri https://www.onitygroup.com/csp-report-endpoint; 2 frame-ancestors 'self' https://*.opera.com; upgrade-insecure-requests; 2 frame-src 'self' https://meitav.co.il https://meitav.insait.io https://meitav.insait-np.net https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://td.doubleclick.net https://*.fls.doubleclick.net https://mrkmd.meitav.co.il https://mrktmd.meitav.co.il https://mdmediadev.blob.core.windows.net https://apps.commbox.io https://*.google https://syndicatedsearch.goog; frame-ancestors 'self' https://mobiledev.ordernet.co.il https://sparkdev.ordernet.co.il https://qadev.ordernet.co.il https://sparkmeitavprep.ordernet.co.il https://trade-digital-meitav-prp.ordernet.co.il 2 default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream:; style-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream:; img-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream:; connect-src *; font-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream:; media-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream:; report-uri *; child-src *; form-action *; frame-ancestors *; object-src *; frame-src *; worker-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream: blob:; manifest-src *; navigate-to *; base-uri *; upgrade-insecure-requests 2 frame-ancestors 'self' https://twitter.com; 2 default-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.usercentrics.eu *.cloudfront.net https://messenger.dixa.io https://widget.reviews.io https://tagalys-assets.s3.ap-southeast-1.amazonaws.com https://www.google.com https://www.paypal.com https://pay.google.com https://cert.tryggehandel.net https://maps.googleapis.com https://cdnjs.cloudflare.com https://static.klaviyo.com https://widget.thuiswinkel.org https://static-tracking.klaviyo.com https://cdn.parcellab.com https://www.youtube.com *.parcellab.com *.tagalys.com *.criteo.com *.criteo.net https://api.braintreegateway.com https://sandbox.braintreegateway.com https://api.sandbox.braintreegateway.com https://braintreegateway.com https://payments.braintree-api.com https://sandbox.braintree-api.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://static.client.cardinaltrusted.com https://js.braintreegateway.com https://x.klarnacdn.net https://static-eu.payments-amazon.com https://js.klarna.com https://cdn.tink.de https://cdn.tink.at https://cdn-vattenfall.tink.de https://cdn.tink.nl https://cdn.tink.net https://cdn.tink.be https://cdn-plus.tink.de https://d2810q2tlzpt0m.cloudfront.net cdn.builder.io https://widget.thuiswinkel-cdn.org https://*.heyflow.com https://*.heyflow.cloud https://www.googletagmanager.com https://ww1.tink.de https://ww1.tink.at https://ww1.tink.nl https://ww1.tink.be https://vf1.tink.de https://js.appboycdn.com https://s.ytimg.com https://content.zeotap.com https://bat.bing.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.gstatic.com https://connect.facebook.net https://*.getsitecontrol.com https://www.dwin1.com https://d.impactradius-event.com https://cdn.taboola.com https://lantern.roeyecdn.com https://code.jquery.com https://s.pinimg.com https://tr.fatmedia.io https://trc.taboola.com https://analytics.tiktok.com https://www.shopperapproved.com https://analytics.fatmedia.io https://www.awin1.com https://static.hotjar.com https://script.hotjar.com https://*.ad-srv.net https://*.adsrvr.org https://*.doubleclick.net https://*.adform.net https://*.adition.com https://*.adfarm.com https://app.varify.io https://origin.acuityplatform.com https://cdn.pdst.fm https://ct.pinterest.com https://redditstatic.com https://www.redditstatic.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://widget.thuiswinkel.org; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://messenger.dixa.io https://assets.reviews.io https://static.klaviyo.com https://*.getsitecontrol.com https://cdn.parcellab.com https://static-tracking.klaviyo.com https://api.braintreegateway.com https://sandbox.braintreegateway.com https://api.sandbox.braintreegateway.com https://braintreegateway.com https://payments.braintree-api.com https://sandbox.braintree-api.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://static.client.cardinaltrusted.com https://js.braintreegateway.com https://x.klarnacdn.net https://static-eu.payments-amazon.com https://js.klarna.com https://cdn.tink.de https://cdn.tink.at https://cdn-vattenfall.tink.de https://cdn.tink.nl https://cdn.tink.net https://cdn.tink.be https://cdn-plus.tink.de https://d2810q2tlzpt0m.cloudfront.net cdn.builder.io https://widget.thuiswinkel-cdn.org https://*.heyflow.com https://*.heyflow.cloud; connect-src *; frame-ancestors 'self' https://builder.io https://*.builder.io 2 upgrade-insecure-requests; frame-ancestors 'self' https://app.storyblok.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.net https://yastatic.net https://ajax.googleapis.com https://oss.maxcdn.com https://code.jquery.com https://cdn.datatables.net https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com https://smartcaptcha.yandexcloud.net https://api-maps.yandex.ru https://core-renderer-tiles.maps.yandex.net https://timepad.ru https://*.timepad.ru https://cdn.enkod.ru https://*.enkod.ru https://www.googletagmanager.com https://cloud.roistat.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.datatables.net https://stackpath.bootstrapcdn.com https://timepad.ru https://*.timepad.ru; img-src 'self' data: blob: https://raex-a.ru https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.net https://yastatic.net https://cdn.datatables.net https://counter.yadro.ru https://api-maps.yandex.ru https://*.ytimg.com https://yandex.ru https://core-renderer-tiles.maps.yandex.net https://timepad.ru https://*.timepad.ru; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.net https://yastatic.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://www.google.com https://timepad.ru https://*.timepad.ru https://cdn.enkod.ru https://*.enkod.ru https://cloud.roistat.com https://www.googletagmanager.com wss://mc.yandex.ru wss://mc.yandex.com wss://mc.yandex.net; font-src 'self' https://fonts.gstatic.com data:; object-src 'none'; frame-src https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.net https://yandex.ru https://www.google.com https://google.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://*.youtube.com https://*.youtube-nocookie.com https://raex-rr.com https://vk.com https://login.vk.com https://smartcaptcha.yandexcloud.net https://rutube.ru https://facecast.net https://*.facecast.net https://timepad.ru https://*.timepad.ru; frame-ancestors 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.net https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://webvisor.com https://*.webvisor.com https://www.google.com https://google.com; base-uri 'self'; form-action 'self' https://*.raex-rr.com; 2 object-src data: 'unsafe-eval' 2 frame-ancestors 'self' https://*.achareh.co https://mci.ir https://*.mci.ir https://top.ir https://*.top.ir https://hanapp.ir https://*.hanapp.ir https://mobicar.co https://*.mobicar.co https://iriaclub.ir https://*.iriaclub.ir; 2 default-src https: 'self' 'unsafe-inline'; object-src 'none'; base-uri 'none'; frame-src https:; img-src 'self' data: https: blob:; report-uri /web-api/report-to/csp-enforce; font-src 'self' data:; 2 default-src 'self' 'unsafe-inline'; connect-src *; frame-src *; img-src *; media-src *; object-src *; script-src * 'unsafe-inline'; style-src * 'unsafe-inline'; 2 frame-ancestors 'self' https://app.storyblok.com https://*.storyblok.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://web-in21.mxradon.com https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://track.nopaperforms.com https://bot-wframe.geta.ai https://googleads.g.doubleclick.net https://www.googleadservices.com https://unpkg.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.nopaperforms.com https://in6cdn.npfs.co https://chatbot.in6.nopaperforms.com https://widgets.in6.nopaperforms.com https://secure.ccavenue.com https://bot-frame.geta.ai https://weareoutman.github.io https://www.youtube.com https://www.youtube-nocookie.com https://webtrace.geta.ai https://f1.leadsquaredcdn.com https://*.ccavenue.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https:; frame-src 'self' https: data: https://www.youtube.com https://player.vimeo.com https://www.jotform.com https://form.jotform.com https://bot-wframe.geta.ai https://bot-frame.geta.ai https://secure.ccavenue.com https://*.ccavenue.com https://*.somaiya.edu; frame-ancestors 'self' https://*.somaiya.edu; base-uri 'self'; form-action 'self' https://somaiya.edu https://www.somaiya.edu https://*.somaiya.edu https://*.somaiya.edu.in https://secure.ccavenue.com https://*.ccavenue.com; 2 base-uri 'self'; default-src 'self' 'unsafe-eval' 'unsafe-inline' https://api.eex-group.com https://smc-lp.s4hana.ondemand.com/ https://www.youtube.com https://www.youtube-nocookie.com https://eds.eex-group.com https://www.marketview.com https://webservice-eex.gvsi.com https://eex-group.com/ https://ecc.de/ https://www.eex.com https://queryeex.gvsi.com https://www.etracker.de https://etracker.com https://*.etracker.com data: blob:; font-src 'self' data: https://eds.eex-group.com; 2 frame-ancestors https://app.clonable.net 'self'; 2 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https: data: ms-word: ms-powerpoint: ms-excel: ms-visio: ms-access: ms-project: ms-publisher: ms-infopath: vnd.libreoffice.command: 2 default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src * 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ruvoip.net https://counter.yadro.ru https://mc.yandex.ru https://d31j93rd8oukbv.cloudfront.net https://www.acint.net https://ssp-rtb.sape.ru https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://*.wp.com https://*.gravatar.com https://cdnjs.cloudflare.com https://telegram.org; style-src 'self' 'unsafe-inline' https://ruvoip.net https://fonts.googleapis.com *.wp.com https://*.gravatar.com https://telegram.org; font-src 'self' 'unsafe-inline' https://ruvoip.net data: https://fonts.gstatic.com https://fonts.googleapis.com https://wordpress.com *.wp.com 2 base-uri 'self'; frame-ancestors 'none'; object-src 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content 2 script-src 'self' http://app.storyblok.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://snap.licdn.com/ http://www.youtube.com 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' https://res.cloudinary.com https://www.google.com https://www.google.de https://www.google.lt https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://px.ads.linkedin.com https://pubads.g.doubleclick.net data:;media-src https://res.cloudinary.com;font-src 'self' https://fonts.gstatic.com data:;worker-src blob:;frame-ancestors 'self' https://app.storyblok.com 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: tt.omtrdc.net *.akstat.io akstat.io https://dpm.demdex.net *.go-mpulse.net go-mpulse.net *.amazon-adsystem.com amazon-adsystem.com *.amazonaws.com amazonaws.com s3-eu-west-1.amazonaws.com *.bing.com bing.com *.virtualearth.net ssl.ak.dynamic.tiles.virtualearth.net virtualearth.net *.btttag.com btttag.com c212.net cloudflare.com *.decibelinsight.net wss://collection.decibelinsight.net decibelinsight.net g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.facebook.com *.facebook.net facebook.com facebook.net *.fanplayr.com fanplayr.com *.gigya.com gigya.com *.google.com *.google.de *.google.it *.googlesyndication.com *.gstatic.com *.youtube-nocookie.com google.co.uk google.com google.de google.it googlesyndication.com gstatic.com youtube-nocookie.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.jaguar.com jaguar.co.uk jaguar.com *.build.landrover *.jaguarlandrover.com *.landrover.com *.landrover.de *.landrover.it *.pds.jaguarlandrover.com build.landrover jaguarlandrover.com landrover.co.uk landrover.com landrover.de landrover.it pds.jaguarlandrover.com ads.linkedin.com linkedin.com linkedin.oribi.io licdn.com *.lpsnmedia.net lpsnmedia.net *.liadm.com liadm.com *.liveperson.net idp.liveperson.net liveperson.net msg.liveperson.net msghist.liveperson.net v.liveperson.net a.run.app *.thunderhead.com cdn.thunderhead.com thunderhead.com cookielaw.org *.netdirector.auto netdirector.auto onetrust.com *.a.run.app *.ads.linkedin.com *.amplitude.com *.b-cdn.net *.c212.net *.cloudflare.com *.config.landrover.com *.configureconnect.com *.connect.agency *.coreweave.com *.decibel.com *.fls.doubleclick.net *.google.co.uk *.googleadservices.com *.jaguar.co.uk *.jaguarlandroverclassic.com *.jlr-dev.com *.jlr-dev.gorillastreaming.com wss://*.jlr-dev.gorillastreaming.com *.jlr.gorillastreaming.com wss://*.jlr.gorillastreaming.com *.kampyle.com *.landrover.co.uk *.landroverusa.com *.licdn.com *.linkedin.com *.linkedin.oribi.io *.medallia.eu *.my.salesforce.com *.netdirector.co.uk *.omtrdc.net *.onetrust.com *.pinimg.com *.pinterest.com *.podscribe.com *.psyma.com *.rangerover.com *.sandbox.my.salesforce-scrt.com *.sandbox.my.site.com *.sc-static.net *.scene7.com *.securedvisit.com *.sfmc-content.com *.snapchat.com *.sophus3.com *.stripe.com *.sv.rkdms.com *.userlike.com *.web.app *.woosmap.com *.yahoo.co.jp wss://a3pm2e78krufa2-ats.iot.us-west-2.amazonaws.com https://accessories.landrover.prd.itg.co.uk https://aoc.jlr.com https://api.jlr-ddc.com https://api.jlr-dev.gorillarendering.com https://api.jlr.gorillarendering.com https://api.pre-prod.jlr-ddc.com api.pureweb.io https://api.staging.jlr-ddc.com https://api.tomtom.com assets.exatom.io b-cdn.net c0.adalyser.com cashoffer.accu-trade.com cdn.cookielaw.org cdn.jsdelivr.net collector-37690.tvsquared.com config.landrover.com cookie-cdn.cookiepro.com d34r8q7sht0t9k.cloudfront.net decibel.com gtm-loadtest.mobify-storefront.com gtm-production.mobify-storefront.com gtm-uat.mobify-storefront.com jlr-360--naptdev1.sandbox.lightning.force.com jlr-360--prepgold.sandbox.lightning.force.com jlr-360.lightning.force.com jlr-360.my.salesforce-scrt.com jlr-360.my.site.com landroverusa.com ldti.syndication.kbb.com leasinglandrover.de lighthouse.edoinc.com wss://lo.msg.liveperson.net loadtest.reserve.landrover.com wss://o5fowqu27k.execute-api.us-west-2.amazonaws.com perseus-consumer-qa.rhcapl.com https://prelive.accessories.landrover.prd.itg.co.uk psyma.com rum.hlx.page https://services.postcodeanywhere.co.uk snippet.maze.co sophus3.com syndication.kbb.com uat.reserve.landrover.com wss://umd.userlike.com userlike.com web.app www.jnaevents.com www.leasinglandrover.de https://www.rsvpdefender.com wss://xbejkea53vcrjoora2bwxpvfha.appsync-realtime-api.us-west-2.amazonaws.com pinimg.com pinterest.com podscribe.com securedvisit.com *.serving-sys.com serving-sys.com sc-static.net snapchat.com stripe.com *.tiktok.com tiktok.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com *.twitter.com twitter.com *.ads-twitter.com ads-twitter.com *.t.co t.co sv.rkdms.com *.unpkg.com unpkg.com *.vee24.com vee24.com woosmap.com *.yimg.jp yahoo.co.jp yimg.jp *.youtube.com *.ytimg.com youtube.com ytimg.com; 2 default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com/ https://www.gstatic.com/ https://va.vercel-scripts.com/ https://player.vimeo.com/ https://widget.trustpilot.com/ https://vercel.live/ https://*.org.coveo.com/ https://*.googletagmanager.com/ https://tagmanager.google.com/ https://cdn.cookielaw.org/ https://*.youtube.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net/ https://ad.doubleclick.net/ https://ade.googlesyndication.com/ https://adservice.google.com/ https://connect.facebook.net/ https://snap.licdn.com/ https://www.datadoghq-browser-agent.com https://*.crazyegg.com https://js.hsforms.net https://*.liveperson.net https://*.lpsnmedia.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com/ https://js.hscollectedforms.net https://js.hubspot.com https://*.qualtrics.com https://bat.bing.com https://static.hsappstatic.net https://ajax.googleapis.com https://*.hubspotusercontent-na1.net https://google.com https://recaptcha.net https://cdn-cookieyes.com https://*.hs-scripts.com https://*.clarity.ms https://js.usemessages.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com/ https://googletagmanager.com/ https://tagmanager.google.com/ https://*.crazyegg.com https://edge-platform.sitecorecloud.io; img-src 'self' blob: data: https://*.sitecorecloud.io https://wst-p-001.sitecorecontenthub.cloud https://cdn.cookielaw.org http://*.googletagmanager.com/ https://*.gstatic.com/ https://*.google-analytics.com/ https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://ad.doubleclick.net/ https://googleads.g.doubleclick.net/ https://google.com/ https://ade.googlesyndication.com/ https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://px.ads.linkedin.com https://www.linkedin.com https://www.facebook.com/ https://*.crazyegg.com https://forms-na1.hsforms.com https://lpcdn.lpsnmedia.net https://teanabroad.org https://*.hsforms.com https://track.hubspot.com https://iad1.qualtrics.com https://siteintercept.qualtrics.com https://bat.bing.com https://connect.facebook.net https://cdn-cookieyes.com https://i.vimeocdn.com https://c.clarity.ms https://bookings.cloud.microsoft; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://www.google.com/ https://*.vimeo.com https://widget.trustpilot.com https://vercel.live/ https://*.youtube.com http://www.googletagmanager.com https://*.doubleclick.net https://www.facebook.com https://*.crazyegg.com https://viewer.mapme.com/ https://js.hsforms.net https://lpcdn.lpsnmedia.net https://va-s.c.liveperson.net https://www.instagram.com https://www.juicer.io https://lookerstudio.google.com/ https://outlook.office.com/ https://www.podbean.com https://*.qualtrics.com https://forms.hsforms.com https://google.com https://worldstrides.campuscommunity.app https://datastudio.google.com https://va.shiftstatus.liveperson.net https://bookings.cloud.microsoft https://app.hubspot.com; connect-src 'self' https://*.sitecorecloud.io https://platform.cloud.coveo.com https://analytics.cloud.coveo.com https://*.org.coveo.com https://vimeo.com https://*.vimeo.com https://*.google-analytics.com https://cdn.cookielaw.org https://geolocation.onetrust.com http://*.googletagmanager.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net/ https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://px.ads.linkedin.com https://www.facebook.com https://browser-intake-us3-datadoghq.com https://*.crazyegg.com https://api.zippopotam.us https://privacyportal.onetrust.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://img.youtube.com https://cta-service-cms2.hubspot.com https://forms.hscollectedforms.net https://*.qualtrics.com https://ad.doubleclick.net https://bat.bing.com/ https://bat.bing.net https://accdn.lpsnmedia.net https://google.com https://maps.googleapis.com https://widget.trustpilot.com https://log.cookieyes.com https://cdn-cookieyes.com https://directory.cookieyes.com https://exceptions.hubspot.com https://*.clarity.ms https://*.liveperson.net wss://*.liveperson.net https://api.hubspot.com https://static.hsappstatic.net; object-src 'none'; media-src 'self' https://lpcdn.lpsnmedia.net; manifest-src 'self'; worker-src blob:; base-uri 'self'; form-action 'self' https://*.worldstrides.net https://*.worldstrides.com/ https://*.explorica.com/ https://*.explorica.ca/ https://portail.educatours.com/ https://www.facebook.com https://worldstrides.qualtrics.com https://forms.hsforms.com; frame-ancestors 'self' https://*.sitecorecloud.io/ ; upgrade-insecure-requests; block-all-mixed-content; report-uri /cspreports.xml; 2 frame-ancestors 'self' https://staplesanz.lightning.force.com/ https://staplesanz.my.salesforce.com/; 2 default-src https:; frame-src https: blob:; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; 2 script-src 'self' 'unsafe-eval' 'unsafe-inline' kalibrr.com *.kalibrr.com kalibrr.id *.kalibrr.id kalibrr.ph *.kalibrr.ph kalibrr.vn *.kalibrr.vn *.blitzllama.com https://tally.so/ *.tally.so *.zendesk.com https://static.zdassets.com https://ekr.zdassets.com *.zopim.com appleid.cdn-apple.com connect.facebook.net *.facebook.com www.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com d36lvucg9kzous.cloudfront.net s1.webspellchecker.net js.stripe.com www.googletagmanager.com *.inspectlet.com *.googleapis.com *.newrelic.com *.nr-data.net platform.twitter.com static.ads-twitter.com apis.google.com ajax.cloudflare.com tagmanager.google.com analytics.twitter.com analytics.trovit.com *.effectivemeasure.net jscdn.appier.net track.adform.net cdn.ckeditor.com https://optimize.google.com; form-action 'self'; frame-src 'self' https://staticxx.facebook.com https://web.facebook.com https://accounts.google.com https://www.facebook.com https://docs.google.com https://www.youtube.com https://www.google.com https://optimize.google.com www.googletagmanager.com https://snap.licdn.com *.blitzllama.com https://tally.so/ *.tally.so; frame-ancestors http://careers.aboitiz.com https://careers.aboitiz.com https://careers-uat.aboitiz.com http://citysavings.com.ph https://citysavings.com.ph; 2 default-src * blob: data: https:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors 'self' https://integrate.1mind.com https://integrate.chilipiper.com; 2 frame-ancestors 'self' https://www.g2.com; 2 default-src * data: blob: 'unsafe-inline' 'unsafe-eval';img-src * data: blob: *.mczbf.com *.emjcd.com *.dotomi.com;worker-src * blob: *.mczbf.com;connect-src * wss: https: *.mczbf.com *.sjwoe.com;script-src * 'unsafe-inline' 'unsafe-eval' https: *.mczbf.com *.cj.com;style-src * 'unsafe-inline' https: *.cj.com;font-src * data: https: *.cj.com;child-src * https: *.cj.com;frame-ancestors *;form-action *; 2 frame-ancestors 'self' https://*.retrogames.onl https://gam.onl; 2 default-src 'self' https://*.membership.io https://*.google-analytics.com https://*.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self' 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://secure.2checkout.com https://secure.avangate.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://img.youtube.com https://secure.avangate.com; font-src 'self'; connect-src 'self' https://challenges.cloudflare.com https://ntlite.com https://secure.2checkout.com https://secure.avangate.com; frame-src https://challenges.cloudflare.com https://www.youtube-nocookie.com https://secure.2checkout.com https://secure.avangate.com; base-uri 'self'; form-action 'self' https://ntlite.com; frame-ancestors 'self' 2 frame-ancestors https://*.letsdoeit.com 2 default-src 'self' https://*.google-analytics.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://*.google-analytics.com/ https://tagmanager.google.com/ https://*.googletagmanager.com/ https://www.google.com https://www.gstatic.com/ ; style-src 'unsafe-inline' 'self' https://pro.fontawesome.com/ https://*.google-analytics.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://fonts.googleapis.com/ https://www.google.com https://www.gstatic.com; img-src 'unsafe-inline' 'self' https://*.google-analytics.com https://ssl.gstatic.com/ https://*.googletagmanager.com/ data:; font-src 'self' 'unsafe-inline' https://pro.fontawesome.com/ https://fonts.gstatic.com/ data:; connect-src 'self' https://*.google-analytics.com https://ssl.gstatic.com/ https://*.google.com data:;frame-ancestors self http://tohyve.iventic.com ; frame-src 'self' https://www.google.com/ https://*.googletagmanager.com/; worker-src https://*.google.com/ 2 frame-ancestors capacitor://hybrid.etisalat.eg http://hybrid.etisalat.eg https://hybrid.etisalat.eg https://www.etisalat.eg https://etisalat.eg https://*.etisalat.eg http://www.etisalat.eg http://etisalat.eg http://*.etisalat.eg https://www.eand.com.eg https://eand.com.eg http://www.eand.com.eg http://eand.com.eg https://eandbusiness.com.eg http://eandbusiness.com.eg https://www.eandbusiness.com.eg http://www.eandbusiness.com.eg; 2 default-src 'self' *.auditboard.com *.optro.ai *.42chat.com *.doubleclick.net *.google.com *.googlesyndication.com *.greenhouse.io *.marketo.com *.vidyard.com https://www.facebook.com https://www.youtube.com; connect-src 'self' https: *.auditboard.com *.optro.ai wss://*.qualified.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: *.auditboard.com *.optro.ai *.cloudfront.net *.google-analytics.com *.googleapis.com *.marketo.com *.marketo.net *.ubembed.com https://optimize.google.com https://www.googleanalytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.youtube.com https://use.typekit.net; frame-ancestors 'self' *.auditboard.com *.optro.ai https://*.sanity.io http://localhost:*; frame-src 'self' *.auditboard.com *.optro.ai https://app.netlify.com https://app.qualified.com https://app-ab39.marketo.com *.googletagmanager.com *.vidyard.com *.visualwebsiteoptimizer.com https://www.google.com https://excon-shell-prod.web.app https://app.vwo.com https://optro.outgrow.us https://td.doubleclick.net *.demandbase.com *.company-target.com *.42chat.com *.auditboard.com.pagescdn.com *.auditboardmarketing.com.pagescdn.com *.google.com *.marketo.com *.qualified.com https://961-zqv-184.mktoweb.com https://auditboard.atlassian.net https://bid.g.doubleclick.net https://js.driftt.com https://play.vidyard.com https://tpc.googlesyndication.com https://www.facebook.com https://www.googletagmanager.com https://www.visualize-roi.com https://www.youtube.com https://app.netlify.com https://marketo-lps.netlify.app *.marketodesigner.com https://na-ab39.marketodesigner.com https://outgrow-content-pdf.s3.amazonaws.com; font-src 'self' data: *.auditboard.com *.optro.ai *.eventscloud.com *.gstatic.com https://use.typekit.net https://marketo-lps.netlify.app https://optro.outgrow.us; img-src 'self' https: data: *.auditboard.com *.optro.ai https://optimize.google.com https://www.google-analytics.com https://p.typekit.net https://tags.srv.stackadapt.com https://srv.stackadapt.com https://ap.srv.stackadapt.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com; worker-src 'self' blob: *.auditboard.com *.optro.ai; style-src 'self' 'unsafe-inline' https: *.auditboard.com *.optro.ai *.qualified.com https://use.typekit.net https://tags.srv.stackadapt.com https://srv.stackadapt.com https://ap.srv.stackadapt.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com; media-src 'self' data: blob: mediastream: *.auditboard.com *.optro.ai *.qualified.com https://js.driftt.com https://cdn.sanity.io https://ab-site-media-files.s3.us-west-2.amazonaws.com; object-src 'self' *.auditboard.com *.optro.ai; base-uri 'self'; form-action 'self' *.marketo.com *.marketo.net https://app-ab39.marketo.com https://961-zqv-184.mktoweb.com https://www.facebook.com 2 frame-ancestors 'self' https://app.contentful.com https://*.contentful.com 2 frame-ancestors 'self';upgrade-insecure-requests; report-uri https://l.iplsc.com/logger/ 2 frame-ancestors 'self' https://2gis.ru https://zoon.ru https://sravni.ru https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://webvisor.com 2 frame-ancestors 'self'; default-src 'self' fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: img07.en25.com unpkg.com ajax.googleapis.com www.comparably.com cdn.jsdelivr.net www.buzzsprout.com cdn.dxpr.com *.googletagmanager.com www.gstatic.com cdn.lightwidget.com cdn.cookielaw.org static.hotjar.com script.hotjar.com script.crazyegg.com geolocation.onetrust.com static.cloudflareinsights.com *.google-analytics.com iframely.shorthand.com analytics.shorthand.com stats.g.doubleclick.net ajax.cloudflare.com cdnjs.cloudflare.com www.youtube.com youtube.com maps.googleapis.com; style-src 'self' 'unsafe-inline' unpkg.com cdnjs.cloudflare.com fonts.googleapis.com cdn.dxpr.com cdn.jsdelivr.net; img-src 'self' data: *.eloqua.com reedexhibitions.com www.rxglobal.com rxglobal.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.co.jp data.shorthand.com iframely.shorthand.com maps.googleapis.com cdnjs.cloudflare.com img.youtube.com cdn.dxpr.com cdn.cookielaw.org maps.gstatic.com; frame-src www.google.com regist.reedexpo.co.jp www.comparably.com flo.uri.sh www.buzzsprout.com cdn.lightwidget.com vars.hotjar.com youtube.com www.youtube.com www.youtube-nocookie.com youtube-nocookie.com iframely.shorthand.com rx.bnurl.com drive.google.com; object-src 'self' data:; connect-src 'self' blob: rxglobal.com rxglobal.at cdn.jsdelivr.net cdn.cookielaw.org privacyportal.onetrust.com geolocation.onetrust.com google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net gateway.shorthand.com www.gstatic.com stats.g.doubleclick.net data.shorthand.com in.hotjar.com rx.bnurl.com api.segment.io cdn.dxpr.com maps.googleapis.com *.crazyegg.com; base-uri 'none'; worker-src blob: 2 font-src *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.google.com www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net googleapis.com *.hcaptcha.com hcaptcha.com *.google.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: data: widget.freshworks.com secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency www.eye-able-cdn.com cdn.eye-able.com *.fonts.googleapis.com *.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.google.com www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net *.googleapis.com googleapis.com *.hcaptcha.com hcaptcha.com *.google.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: data: widget.freshworks.com secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.certcapture.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.iubenda.com *.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net *.googleapis.com googleapis.com *.hcaptcha.com hcaptcha.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: data: widget.freshworks.com secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency https://hdsunflower-hd1.ycb.me *.addthis.com *.pinterest.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com https://*.gstatic.com *.certcapture.com *.trackedlink.net *.iubenda.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://firebasestorage.googleapis.com chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net googleapis.com *.hcaptcha.com hcaptcha.com *.google.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: widget.freshworks.com secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency www.eye-able-cdn.com cdn.eye-able.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com https://*.gstatic.com *.certcapture.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.iubenda.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com s7.addthis.com *.avada.io *.shopify.com chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.google.com www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net googleapis.com *.hcaptcha.com hcaptcha.com *.google.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: data: secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency https://embed.ycb.me https://acsbapp.com/apps/app/dist/js/app.js https://acsbapp.com/apps/app/dist/js/loader.js www.eye-able-cdn.com cdn.eye-able.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com https://www.pixiecommerce.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.google.com www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net *.googleapis.com googleapis.com *.hcaptcha.com hcaptcha.com *.google.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: data: secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency https://cdn.iubenda.com/iubenda_badge.css www.eye-able-cdn.com cdn.eye-able.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.iubenda.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com ekr.zdassets.com/ https://get.geojs.io *.avada.io chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.google.com www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net googleapis.com *.hcaptcha.com hcaptcha.com *.google.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: data: secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency https://cdn.acsbapp.com/config/sunflower.dev.pixie.agency/config.json https://cdn.acsbapp.com/cache/app/wildcards.json https://acsbapp.com/apps/app/dist/js/locale/en-loader.json https://accesswidget-log-receiver.acsbapp.com https://cdn.acsbapp.com/config/hdsunflower.com/config.json www.eye-able-cdn.com cdn.eye-able.com *.cloudflare.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src chimpstatic.com stats.g.doubleclick.net google.co.uk www.google.co.uk www.google.com www.facebook.com colou11126.pcapredict.com services.postcodeanywhere.co.uk v2.zopim.com www.rsa3dsauth.co.uk static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com wss://widget-mediator.zopim.com secure5.arcot.com 3ds-secure.cardcomplete.com ecclients.btrl.ro bofp.erstebank.hu www.clicksafe.lloydstsb.com pay.activa-card.com 3dsecure-1.wirecard.com 3dsecure-2.wirecard.com acssv.otpbank.hu acs.sia.eu idcheck.acs.touchtechpayments.com sicher-bezahlen.sparkasse.at www.securesuite.co.uk bred.wlp-acs.com bnpp-3ds.wlp-acs.com verify.monzo.com *.buzzsprout.com buzzsprout.com *.typekit.net typekit.net *.googleapis.com googleapis.com *.hcaptcha.com hcaptcha.com *.google.com google.com *.facebook.com facebook.com *.google.co.uk *.rsa3dsauth.co.uk rsa3dsauth.co.uk *.clicksafe.lloydstsb.com clicksafe.lloydstsb.com *.securesuite.co.uk securesuite.co.uk *.sharethis.com sharethis.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.sandbox.paypal.com sandbox.paypal.com *.paypalobjects.com paypalobjects.com *.googletagmanager.com googletagmanager.com *.snap.licdn.com snap.licdn.com *.paypal.com paypal.com *.vimeo.com vimeo.com *.gstatic.com gstatic.com *.googleusercontent.com googleusercontent.com px.ads.linkedin.com cdn.linkedin.oribi.io kit.fontawesome.com *.hdsunflower.com self blob: data: widget.freshworks.com secure.meet3monk.com *.google.com.au *.facebook.net *.mailchimp.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js *.hdsunflower.us21.list-manage.com https://hdsunflower.us21.list-manage.com *.loom.com https://hdsunflower.com https://sunflower.dev.pixie.agency www.eye-able-cdn.com cdn.eye-able.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 child-src blob:; default-src 'self' data: https://*.redsift.com https://red-sift.prismic.io/ https://*.internal.prismic.io/* https://hook.integromat.com/ https://sentry.io/ https://*.ingest.sentry.io/ https://consentcdn.cookiebot.com/ https://*.wistia.com https://*.wistia.net; font-src 'self' https://*.redsift.com https://fonts.gstatic.com/ data: chrome-extension: moz-extension: safari-web-extension: https://*.hotjar.com https://*.wistia.com https://*.wistia.net; img-src 'self' blob: data: https: https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com https://*.google.co.uk https://googleads.g.doubleclick.net https://googletagmanager.com https://www.google-analytics.com https://www.google.com https://google.com https://*.google.com https://*.hotjar.com https://images.prismic.io https://*.internal.prismic.io/* https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://bat.bing.com https://bat.bing.net; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://red-sift.cdn.prismic.io https://images.prismic.io; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://*.redsift.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com/recaptcha/ https://static.cdn.prismic.io/ https://prismic.io https://*.internal.prismic.io/* https://consent.cookiebot.com https://consentcdn.cookiebot.com/ https://munchkin.marketo.net/ https://www.redditstatic.com/ads/pixel.js https://snap.licdn.com https://tag.clearbitscripts.com/v1/pk_0c2cfaf8152eb3a2b07abfd53b7e6d22/tags.js https://reveal.clearbit.com/v1/companies/reveal https://x.clearbitjs.com/v2/pk_0c2cfaf8152eb3a2b07abfd53b7e6d22/destinations.min.js https://x.clearbitjs.com/v2/pk_0c2cfaf8152eb3a2b07abfd53b7e6d22/tracking.min.js https://secure.oita4bali.com/js/151998.js https://secure.oita4bali.com/Track/Capture.aspx https://*.hotjar.com https://static.hotjar.com/c/hotjar-3150796.js https://j.6sc.co/j/80f37845-a767-46c9-9ad5-abb58133cf39.js https://j.6sc.co/6si.min.js https://*.wistia.com https://*.wistia.net https://src.litix.io https://js.sentry-cdn.com https://challenges.cloudflare.com https://js.zi-scripts.com https://ws.zoominfo.com https://tags.clickagy.com https://cdn.jsdelivr.com https://cdn.jsdelivr.net https://*.chilipiper.com https://bat.bing.com https://bat.bing.net; style-src 'self' blob: 'unsafe-inline' https://*.redsift.com https://googletagmanager.com https://tagmanager.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://*.hotjar.com https://fast.wistia.com https://www.gstatic.com; frame-src 'self' https://*.googlesyndication.com https://td.doubleclick.net https://www.googletagmanager.com https://bid.g.doubleclick.net https://consentcdn.cookiebot.com https://red-sift.prismic.io/ https://*.internal.prismic.io/* https://www.youtube.com https://www.google.com https://*.hotjar.com https://fast.wistia.com https://fast.wistia.net https://challenges.cloudflare.com https://hemsync.clickagy.com https://giphy.com https://*.chilipiper.com; connect-src https://radar-lite.redsift.io https://radar-lite.redsift.cloud https://radar-lite.us.redsift.cloud https://radar-lite.eu.redsift.cloud 'self' https://*.redsift.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://stats.g.doubleclick.net https://ad.doubleclick.net https://google.com https://*.googlesyndication.com https://www.googleadservices.com https://www.google-analytics.com https://*.google.com https://*.google.de https://*.google.no https://*.google.ca https://*.google.ch https://*.google.es https://*.google.it https://*.google.co.uk https://*.google.co.nz https://*.google.co.au https://*.google.nl https://*.google.fr https://*.google.be https://*.google.se https://*.google.pt https://images.prismic.io https://red-sift.cdn.prismic.io https://red-sift.cdn.prismic.io/api/v2 https://red-sift.cdn.prismic.io/api/v2/documents/search https://static.cdn.prismic.io https://*.internal.prismic.io/* https://cdn.linkedin.oribi.io https://px.ads.linkedin.com/wa/ https://px.ads.linkedin.com https://px.ads.linkedin.com/attribution_trigger https://hook.integromat.com/ https://api-eu.customer.io/v1/webhook/40a4a49d472519b0 https://webto.salesforce.com https://api.github.com/repos/redsift/red-sift-website/dispatches https://*.mktoresp.com https://*.mktoutil.com https://*.ondmarc.com https://ondmarc.com https://ipforensics-svc.redsift.io/graphql https://*.ingest.sentry.io/ https://consentcdn.cookiebot.com/ https://consent.cookiebot.com/ https://app.clearbit.com/v1/p https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://secure.adnxs.com/getuidj https://*.litix.io https://*.wistia.com https://embedwistia-a.akamaihd.net https://*.algolia.net https://api.ipify.org https://aorta.clickagy.com https://hemsync.clickagy.com https://js.zi-scripts.com https://ws.zoominfo.com https://data.hockeystack.com https://cdn.jsdelivr.net https://challenges.cloudflare.com https://browser-intake-datadoghq.com https://*.chilipiper.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://bat.bing.com https://bat.bing.net; worker-src 'self' blob:; frame-ancestors 'self' https://redsift.com https://*.redsift.com; report-uri https://o177043.ingest.sentry.io/api/1306227/security/?sentry_key=860eaee6b9674db6ac8d51d87a14fd84 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://static.cloudflareinsights.com https://*.googletagmanager.com https://*.google-analytics.com https://al5sm.com https://*.al5sm.com https://cdn.jsdelivr.net https://my.rtmark.net blob:; frame-src 'self' https://challenges.cloudflare.com https://*.al5sm.com https://*.monetag.com https://*.255md.com; img-src 'self' data: https: blob:; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://challenges.cloudflare.com https://*.al5sm.com https://255md.com https://*.255md.com https://my.rtmark.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; font-src 'self' https://fonts.gstatic.com data:; trusted-types cloudflare-turnstile default 2 default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * blob: data: 'unsafe-inline';connect-src * 'unsafe-inline'; frame-src * 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: noi.bg www.noi.bg nssi.bg www.nssi.bg; frame-ancestors 'none' 2 frame-ancestors 'self' ; script-src 'self' 2 img-src * *.commercecloud.salesforce.com *.thewatchbox.com *.govbergwatches.com *.the1916company.com *.imgix.net *.amazonaws.com *.placeholder.com *.cookielaw.org *.adyen.com 'self' data:;script-src 'self' 'unsafe-inline' * api.cquotient.com storage.googleapis.com *.cookielaw.org *.audioeye.com *.google-analytics.com *.googletagmanager.com *.reviews.io unsafe-inline *.bosslogics.com micro.dy.cloud.bosslogics.com *.adyen.com *.adyenpayments.com *.mobify-storefront.com *.atlas.so *.searchatlas.com 'unsafe-eval' https://runtime.commercecloud.com *.site.com;script-src-attr 'self' * api.cquotient.com storage.googleapis.com *.cookielaw.org *.audioeye.com *.google-analytics.com *.googletagmanager.com *.reviews.io *.bosslogics.com micro.dy.cloud.bosslogics.com *.adyen.com *.adyenpayments.com *.mobify-storefront.com *.atlas.so *.searchatlas.com data:;connect-src 'self' 'unsafe-inline' * api.cquotient.com storage.googleapis.com *.cookielaw.org *.audioeye.com *.google-analytics.com *.googletagmanager.com *.reviews.io unsafe-inline *.bosslogics.com micro.dy.cloud.bosslogics.com *.adyen.com *.adyenpayments.com *.mobify-storefront.com *.atlas.so *.searchatlas.com https://runtime.commercecloud.com *.salesforce-scrt.com;default-src 'self';style-src 'self' * 'unsafe-inline' data:;style-src-elem 'self' 'unsafe-inline' * api.cquotient.com storage.googleapis.com *.cookielaw.org *.audioeye.com *.google-analytics.com *.googletagmanager.com *.reviews.io unsafe-inline *.bosslogics.com micro.dy.cloud.bosslogics.com *.adyen.com *.adyenpayments.com *.mobify-storefront.com *.atlas.so *.searchatlas.com data:;frame-src 'self' * data: blob: *.site.com;media-src 'self' * data:;object-src 'none';font-src 'self' * data:;worker-src 'self' *.appboycdn.com *.google.com *.googletagmanager.com blob:;frame-ancestors 'self' https://www.the1916company.com https://runtime.commercecloud.com;base-uri 'self';block-all-mixed-content;upgrade-insecure-requests 2 script-src 'unsafe-inline' 'unsafe-eval' https://universalclass.com https://*.universalclass.com https://*.4uc.org https://4uc.org https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com; object-src 'none';frame-ancestors 'self' 2 frame-ancestors 'self' elama.global *.elama.global elama.ru *.elama.ru mc.yandex.ru mc.webvisor.com mc.webvisor.org yastatic.net webvisor.com yandex.com yandex.ru *.yandex.com *.yandex.net *.yandex.ru; 2 default-src 'self' https://*.mecknc.gov https://*.mecklenburgcountync.gov https://*.acquia.com https://*.gtranslate.net https://cdn.jsdelivr.net https://*.jsdelivr.net https://*.monsido.com https://*.ravnur.com https://dev.visualwebsiteoptimizer.com https://code.jquery.com https://www.airnowapi.org https://unpkg.com https://cdnjs.cloudflare.com https://*.arcgis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mecknc.gov https://*.mecklenburgcountync.gov https://*.acquia.com https://*.gtranslate.net https://cdn.jsdelivr.net https://*.jsdelivr.net https://*.monsido.com https://*.ravnur.com https://dev.visualwebsiteoptimizer.com https://code.jquery.com https://unpkg.com https://cdnjs.cloudflare.com https://*.arcgis.com https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline' https://*.mecknc.gov https://*.acquia.com https://cdn.jsdelivr.net https://*.jsdelivr.net https://*.monsido.com https://unpkg.com https://cdnjs.cloudflare.com; img-src 'self' data: https: blob: https://*.acquia.com https://*.gtranslate.net https://cdn.jsdelivr.net https://*.jsdelivr.net https://*.monsido.com https://*.ravnur.com https://*.arcgis.com; font-src 'self' data: https://*.mecknc.gov; connect-src 'self' https://*.mecknc.gov https://*.mecklenburgcountync.gov https://*.acquia.com https://*.gtranslate.net https://cdn.jsdelivr.net https://*.jsdelivr.net https://*.monsido.com https://heatmaps.monsido.com https://*.ravnur.com https://dev.visualwebsiteoptimizer.com https://code.jquery.com https://www.airnowapi.org https://unpkg.com https://cdnjs.cloudflare.com https://*.arcgis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://*.mecknc.gov https://mecklenburg.legistar.com https://www.youtube.com https://*.acquia.com https://*.ravnur.com https://mecklenburg-embed.ravnur.com https://*.visualwebsiteoptimizer.com https://widget.airnow.gov https://gispub.epa.gov https://*.google.com https://ridewithgps.com https://*.ridewithgps.com https://*.arcgis.com https://jobseq.eqsuite.com https://*.eqsuite.com https://*.powerbigov.us; worker-src 'self' blob: https://*.mecknc.gov; object-src 'none'; base-uri 'self'; form-action 'self' https://*.mecknc.gov; frame-ancestors 'self'; upgrade-insecure-requests; 2 style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' cdn.cookielaw.org cdn.luigisbox.com cdn.luigisbox.tech service.force.com groupe-seb.my.salesforce.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net fonts.googleapis.com account.groupeseb.com *.iadvize.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src-attr 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' platform.commandersact.com; script-src-elem https://assets.arukereso.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' account.groupeseb.com cdn.cookielaw.org cdn.luigisbox.com cdn.luigisbox.tech scripts.luigisbox.com scripts.luigisbox.tech cdn.tagcommander.com *.tagcommander.com *.commander1.com cdn.trustcommander.net client.get-potions.com service.force.com *.salesforceliveagent.com challenges.cloudflare.com *.cloudflare.com *.cloudflareinsights.com maps.googleapis.com ssl.ceneo.pl *.salesmanago.pl groupeseb.salesmanago.com js-agent.newrelic.com www.googletagmanager.com widget.packeta.com groupe-seb.my.salesforce.com geowidget.inpost.pl connect.facebook.net pay.google.com locator.uberall.com widgets.rr.skeepers.io rum.hlx.page try.abtasty.com sandbox-easy-geowidget-sdk.easypack24.net *.kameleoon.io swrap.tradedoubler.com analytics.tiktok.com bat.bing.com googleads.g.doubleclick.net applepay.cdn-apple.com platform.commandersact.com www.clarity.ms scripts.clarity.ms *.dwin1.com cdn.tkrconnector.com *.adform.net analytics.optimalpeople.fr *.iadvize.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com locator.uberall.com *.iadvize.com https://geowidget.easypack24.net service.force.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * js.mollie.com challenges.cloudflare.com *.tagcommander.com *.trustcommander.net *.iadvize.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://groupe-seb.my.salesforce-sites.com/ *.packeta.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://ssl.ceneo.pl https://firebasestorage.googleapis.com https://www.mollie.com https://www.arukereso.hu 'self' cdn.luigisbox.com cdn.luigisbox.tech cdn.cookielaw.org *.tagcommander.com *.commander1.com *.trustcommander.net service.force.com *.salesforceliveagent.com *.dwin1.com *.adform.net *.iadvize.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com https://rum.hlx.page *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://ssl.ceneo.pl *.avada.io *.shopify.com js.mollie.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://assets.arukereso.com challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' public.grupa3.com.pl account.groupeseb.com cdn.tagcommander.com *.tagcommander.com *.commander1.com cdn.trustcommander.net client.get-potions.com cdn.luigisbox.com cdn.luigisbox.tech cdn.cookielaw.org service.force.com *.salesforceliveagent.com *.cloudflare.com *.cloudflareinsights.com maps.googleapis.com groupeseb.salesmanago.com js-agent.newrelic.com widget.packeta.com groupe-seb.my.salesforce.com geowidget.inpost.pl connect.facebook.net rum.hlx.page try.abtasty.com sandbox-easy-geowidget-sdk.easypack24.net platform.commandersact.com www.clarity.ms scripts.clarity.ms *.dwin1.com cdn.tkrconnector.com *.adform.net analytics.optimalpeople.fr *.iadvize.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.packeta.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' public.grupa3.com.pl cdn.cookielaw.org cdn.luigisbox.com cdn.luigisbox.tech service.force.com groupe-seb.my.salesforce.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net account.groupeseb.com *.iadvize.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.googleapis.com assets.braintreegateway.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com public.grupa3.com.pl dam.groupeseb.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://get.geojs.io *.avada.io https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://www.arukereso.hu api.luigisbox.com api.luigisbox.tech client.get-potions.com service.force.com account.groupeseb.com *.commander1.com *.trustcommander.net *.salesforceliveagent.com groupe-seb.my.salesforce.com groupeseb.salesmanago.com rum.hlx.page *.cloudflareinsights.com *.dwin1.com cdn.tkrconnector.com *.adform.net analytics.optimalpeople.fr *.iadvize.com wss://*.iadvize.com *.easypack24.net *.inpost.pl *.openstreetmap.org *.packeta.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2 frame-ancestors 'self' https://bo-prod.cyllene.agency https://bo.bayard-jeunesse.com https://bo.milan-jeunesse.com https://bo.enfance-bayardjeunesse-milan.com 2 default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; media-src * https://lla-cms-prod.directus.app; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; object-src 'none'; frame-ancestors 'none'; frame-src * https://nebula-cdn.kampyle.com https://libertyglobal.kampyle.com https://optimize.google.com https://cobertura.cwpanama.com https://cwpanama.speedtestcustom.com https://www.youtube.com https://www.google.com https://www.facebook.com https://www.google-analytics.com https://prodgis.lla.com https://api.retargetly.com https://cookieless-campaign.prd-00.retargetly.com https://analytics.libertycr.com https://www.googletagmanager.com; form-action *; worker-src * blob:; 2 connect-src 'self' https://matomo.heinlein-support.de https://numbers.heinlein-support.de; font-src 'self'; frame-src 'self' https://www.youtube.com/; img-src 'self' https://cdn.redoc.ly/redoc/ https://i.ytimg.com/ data: 'unsafe-eval'; object-src 'self'; script-src 'self' 'unsafe-inline' https://matomo.heinlein-support.de https://numbers.heinlein-support.de https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://www.heinlein-support.de/report-uri/enforce 2 frame-ancestors feedback.usereport.com 2 upgrade-insecure-requests; connect-src * 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://cloudflareinsights.com https://*.r2.cloudflarestorage.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.icefuse.com https://cdn.icefuse.com https://icefuse.net https://*.icefuse.net https://ifn.gg https://*.ifn.gg https://avatars.steamstatic.com https://steamcdn-a.akamaihd.net https://cdn.discordapp.com https://lh3.googleusercontent.com https://cdn.icefuse.com https://forums.icefuse.com https://imagedelivery.net https://*.paynow.gg https://*.r2.cloudflarestorage.com; font-src 'self' data:; connect-src 'self' https://*.icefuse.com https://cdn.icefuse.com https://icefuse.net https://*.icefuse.net https://ifn.gg https://*.ifn.gg https://accounts.icefuse.com https://auth.icefuse.com https://static.cloudflareinsights.com https://cloudflareinsights.com https://*.r2.cloudflarestorage.com wss://*.icefuse.com; frame-src 'self' https://accounts.icefuse.com https://auth.icefuse.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 2 frame-ancestors 'self' https://analytics.clickdimensions.com https://www.google-analytics.com 2 default-src https: 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com; img-src https: data:; connect-src wss://*.tawk.to *.tawk.to *.lobbes.nl *.lobbesspeelgoed.be *.lobbesspielzeug.de *.lobbesjouet.fr *.icecat.biz bat.bing.com www.google-analytics.com stats.g.doubleclick.net ad.doubleclick.net squeezely.tech *.trustedshops.com *.trustbadge.com *.clic2buy.com trustbadge.api.etrusted.com *.etrusted.com *.trustpilot.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google.com https://google.com *.googlesyndication.com *.bing.net *.googletagmanager.com *.google-analytics.com *.facebook.com *.facebook.net *.click2buy.com *.clic2drive.com *.convertexperiments.com *.plausible.io https://googleads.g.doubleclick.net *.cookiebot.com https://cookiebot.com https://plausible.io *.beslist.nl maps.googleapis.com *.clarity.ms; worker-src *.convertexperiments.com blob:; frame-ancestors 'self' https://pwisao1609.prd.corp; 2 frame-ancestors 'self' https://crmua.coraltravel.com https://ruscrm.com https://crm.coraltravel.com 2 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests 2 frame-ancestors 'self' https://speak.com https://usespeak.com https://*.speak.com https://*.usespeak.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ajax.googleapis.com https://cdnjs.cloudflare.com *.facebook.net *.twitter.com *.twimg.com https://cdn.chatbot.com https://content.govdelivery.com/ https://cdn.livechatinc.com/ https://api.livechatinc.com/ https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com platform.twitter.com *.twimg.com cdnjs.cloudflare.com https://content.govdelivery.com/; connect-src 'self' https://maps.googleapis.com https://kdorapi.kdor.org https://cdn.chatbot.com/widget/5c7029abb3a91872edc36639/settings.json https://api.livechatinc.com; font-src 'self' https://fonts.gstatic.com https://cdn.livechatinc.com data:; img-src 'self' www.google-analytics.com maps.google.com *.twimg.com *.twitter.com https://cdn.livechat-files.com data: https://content.govdelivery.com/; frame-src 'self' *.youtube.com *.facebook.com *.twitter.com https://cdn.chatbot.com https://secure.livechatinc.com/ https://challenges.cloudflare.com; 2 frame-ancestors 'self' https://app-eu1.hubspot.com https://www.googletagmanager.com https://www.einpresswire.com https://*.vercel.app 2 frame-ancestors 'self' https://backoffice.shoppster.com 2 frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://*.googleapis.com; worker-src 'self' blob:; 2 frame-ancestors 'self' https://*.contentful.com; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' fonts.gstatic.com; frame-src 'self' https:; connect-src 'self' https:; media-src 'self' https:; object-src 'none'; 2 default-src 'self' https:; font-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; frame-src 'self' https:; connect-src 'self' https:; media-src 'self' https:; object-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 2 script-src 'self' 'unsafe-eval' 'unsafe-inline' api.smulderstextiel.nl beheer.smulderstextiel.nl static.smulderstextiel.nl static.smulderstextiel.be static.smulderstextiles.be static.smulderstextiles.fr www.smulderstextiel.nl www.smulderstextiel.be www.smulderstextiles.be www.smulderstextiles.fr www.smulderstextiles.com activate.smulderstextiel.nl activate.smulderstextiel.be activate.smulderstextiles.be activate.smulderstextiles.fr *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.kameleoon.net *.experimentation.dev www.mollie.com squeezely.tech bat.bing.com bat.bing-int.com c.clarity.ms p.clarity.ms www.clarity.ms cdn.mouseflow.com static.hotjar.com script.hotjar.com chimpstatic.com dynamic.criteo.com fledge.eu.criteo.com gum.criteo.com measurement-api.criteo.com sslwidget.criteo.com fonts.googleapis.com googleads.g.doubleclick.net maps.googleapis.com maps.gstatic.com pagead2.googlesyndication.com region1.analytics.google.com region1.google-analytics.com stats.g.doubleclick.net td.doubleclick.net tpc.googlesyndication.com www.google.com www.google.nl www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.youtube.com tr.snapchat.com www.facebook.com connect.facebook.net ct.pinterest.com s.pinimg.com sc-static.net static.ads-twitter.com t.co analytics.twitter.com analytics.tiktok.com snap.licdn.com px.ads.linkedin.com scripts.clarity.ms; worker-src 'self' blob:; frame-ancestors 'self' https://app.kameleoon.com https://kameleoon.com https://www.kameleoon.com; 2 default-src 'self';script-src 'self' https://*.archiebot.com https://*.livewebinar.com https://cloud.51degrees.com/ 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' https://distributor.51degrees.com/ https://distributorbeta.51degrees.com/ https://devicedatasubmissions.azurewebsites.net/api/Submit https://51degrees.tv/ch-test-api https://raw.githubusercontent.com/51Degrees/ https://raw.githubusercontent.com/actions/ https://cloud.51degrees.com/ https://33fc056e.cdn.archiebot.com/ https://51d.es/;font-src 'self';img-src 'self' data: http://images.51degrees.mobi https://images.51degrees.mobi https://51degrees.cachefly.net https://m.media-amazon.com https://raw.githubusercontent.com/51Degrees/ https://*.basemaps.cartocdn.com https://*.livewebinar.com;frame-src 'self' https://player.vimeo.com http://player.vimeo.com https://*.archiebot.com https://*.livewebinar.com 2 frame-ancestors https://*.jow.fr https://*.jow.com https://*.jow.tech 2 script-src *.cludo.com 'unsafe-inline' 'self' localhost *.fontawesome.com *.jsdelivr.net *.googleapis.com 'unsafe-eval' https://unpkg.com/alpinejs@3.x.x/dist/cdn.min.js *.wistia.com https://www.googletagmanager.com https://script.crazyegg.com https://px.premion.com blob: https://*.googleads.g.doubleclick.net https://snap.licdn.com https://connect.facebook.net https://googleads.g.doubleclick.net secure.wufoo.com https://browser.sentry-cdn.com; style-src *.cludo.com 'unsafe-inline' 'self' localhost *.fontawesome.com fonts.googleapis.com fonts.gstatic.com *.wufoo.com; default-src 'self' localhost 'unsafe-inline' *.fontawesome.com https://mychart.lexmed.com/ *.googleapis.com *.gstatic.com; connect-src 'self' *.cludo.com *.fontawesome.com localhost 'unsafe-inline' *.googleapis.com *.gstatic.com *.truematter.com https://lmcrcs.lexmed.com *.wistia.com *.jsdelivr.net *.lexmed.com https://www.google.com https://analytics.lexhealth.com https://script.crazyegg.com https://px.premion.com https://tracking.crazyegg.com *.crazyegg.com https://*.googleadservices.com *.wufoo.com https://px.ads.linkedin.com https://browser.sentry-cdn.com; font-src fonts.googleapis.com *.fontawesome.com fonts.gstatic.com localhost 'self' 'unsafe-inline' patientspreview.truematter.com patientspreview.lexhealth.com patientspreview.lexhealth.com:7153 https://fast.wistia.com data:; img-src *.googleapis.com *.gstatic.com *.truematter.com https://embed-ssl.wistia.com https://fast.wistia.com 'self' localhost https://lexhealth.com *.lexhealth.com https://www.googletagmanager.com https://www.facebook.com https://px.ads.linkedin.com https://www.google.com https://*.linkedin.com data:; media-src blob: https://embed-ssl.wistia.com 'self'; frame-src https://fast.wistia.com https://fast.wistia.net https://www.googletagmanager.com https://analytics.lexhealth.com/ https://analytics.lexhealth.com https://lexmed.wufoo.com/ https://lexmed.wufoo.com 2 default-src 'self' data: blob: *.octopus.com.hk *.octopuscards.com *.octopusrewards.com.hk *.online-octopus.com *.octopus-cards.com *.oepay.octopus-cards.com *.comm.octopus.com.hk *.youtube.com *.google.com *.google.com.hk *.gstatic.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.googleadservices.com ade.googlesyndication.com *.g.doubleclick.net *.fls.doubleclick.net ad.doubleclick.net www.facebook.com connect.facebook.net https://api2.branch.io https://cdn.branch.io https://app.link 'unsafe-inline' 'unsafe-eval'; 2 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; 2 default-src 'self' data: ; connect-src 'self' data: https: wss: ; font-src 'self' data: chrome-extension: https: ; img-src 'self' data: blob: android-webview-video-poster: about: https: ; frame-src 'self' https: blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' about: https: ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' about: https: data: ; style-src 'self' 'unsafe-inline' https: ; style-src-elem 'self' 'unsafe-inline' https: data: ; style-src-attr 'self' 'unsafe-inline' https: ; media-src 'self' data: https: ; worker-src 'self' 'unsafe-inline' https: blob: ; frame-ancestors 'self' https: ; upgrade-insecure-requests; block-all-mixed-content; report-uri https://cspr-it.mag-news.it/ 2 default-src 'self' http://apps.commbox.io https://apps.commbox.io https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://www.google.com/recaptcha https://www.gstatic.com/recaptcha/; frame-src 'self' https://login.yahav.co.il https://www.google.com https://www.google.com/recaptcha/; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://apps.commbox.io/Scripts/connect.js https://apps.commbox.io/launcher/ https://apps.commbox.io/Scripts/connect.js https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.gstatic.com https://www.google.com/recaptcha/ https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/; style-src 'self' 'unsafe-inline' https://apps.commbox.io/Styles/cb_extentions.css https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' data: https:; 2 frame-ancestors 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' https://* http://* data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://* http://* data:; style-src 'self' 'unsafe-inline' https://* http://* data:; font-src 'self' https://* http://* data:; object-src 'self'; 2 default-src 'self' https://chat.shellfire.de https://www.google.de https://maps.google.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.google.com https://www.googleadservices.com https://www.youtube.com https://www.youtube-nocookie.com https://*.gstatic.com https://*.analytics.google.com https://*.googleapis.com https://*.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://*.facebook.com https://web.facebook.com https://www.google.com https://optimize.google.com https://www.sandbox.paypal.com https://www.paypal.com https://combr-1b07a.kxcdn.com https://cdn.shellfire.net https://js.stripe.com https://*.clarity.ms https://*.sitegpt.ai https://cdn.jsdelivr.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.shellfire.de https://www.google.com https://maps.google.com https://www.google.net https://connect.facebook.net https://www.google.com https://www.google.net https://www.googleadservices.com https://www.youtube.com https://www.youtube-nocookie.com https://*.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.facebook.com https://web.facebook.com https://www.googletagmanager.com https://static.ads-twitter.com https://analytics.twitter.com https://*.analytics.twitter.com https://tagmanager.google.com https://optimize.google.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://www.paypal.com https://cdn.cookie-script.com https://report.cookie-script.com https://combr-1b07a.kxcdn.com https://cdn.shellfire.net https://js.stripe.com https://*.clarity.ms https://sitegpt.ai https://*.sitegpt.ai https://www.dwin1.com https://www.awin1.com https://lantern.roeyecdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net ; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.facebook.net https://tagmanager.google.com https://optimize.google.com https://www.paypalobjects.com https://combr-1b07a.kxcdn.com https://cdn.shellfire.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net ; img-src data: * ; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; frame-src 'self' https:; connect-src 'self' https: http: ws: wss:; img-src 'self' blob: data: https: http:; font-src 'self' data: https:; media-src 'self' blob: https://cdn.gooo.ai https://marketing-assets.youmind.com https://*.cloudflarestream.com https://*.videodelivery.net; frame-ancestors 'none' 2 connect-src 'self' https://*.clarity.ms/collect https://*.doubleclick.net https://*.dynamics.com https://*.facebook.com https://*.facebook.net https://*.google.com https://*.linkedin.oribi.io https://*.pagestrip.com https://*.tiktok.com https://*.usercentrics.eu https://*.youtube.com https://api.ustp.at https://api.visitlead.com https://bat.bing.com https://bat.bing.net https://cdn.ustp.at https://cis.ustp.at https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://mein.clickskeks.at https://my2.siteimprove.com https://pagead2.googlesyndication.com https://pagestrip.com https://px.ads.linkedin.com https://region1.google-analytics.com https://rest.visitlead.com https://sentry.ustp.at https://ws.visitlead.com https://www.google-analytics.com https://www.google.at/pagead/ https://www.google.com/pagead/ https://www.googleadservices.com https://www.recaptcha.net wss://*.visitlead.com wss://www.ustp.at; default-src 'self' https://*.ustp.at https://mein.clickskeks.at; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://*.pagestrip.com https://app.visitlead.com https://cdn.ustp.at https://www.ustp.at; frame-src 'self' https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.google.com https://*.issuu.com https://*.soundcloud.com https://*.tiktok.com https://*.twitter.com https://*.vimeo.com https://*.youtube-nocookie.com https://*.youtube.com https://3983ae0c4cda4253acf0d1c9fa481d64.svc.dynamics.com/ https://cba.media/ https://cis.ustp.at https://mein.clickskeks.at https://my2.siteimprove.com/ https://sjs.bizographics.com https://snap.licdn.com https://stream.visitlead.com https://www.googletagmanager.com/ https://www.podbean.com https://www.recaptcha.net https://www.yumpu.com; img-src 'self' data: https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.ggpht.com https://*.google-analytics.com https://*.google.at https://*.google.com https://*.googleusercontent.com https://*.gstatic.com https://*.linkedin.com https://*.pagestrip.com https://*.tiktokcdn.com https://*.usercentrics.eu https://*.ytimg.com https://ade.googlesyndication.com https://app.visitlead.com https://bat.bing.com https://bat.bing.net https://c.bing.com/c.gif https://c.clarity.ms https://cdn.ustp.at https://mein.clickskeks.at https://pagead2.googlesyndication.com https://www.filmspektakel.at https://www.googletagmanager.com https://www.ustp.at; media-src 'self' data: https://*.pagestrip.com https://app.visitlead.com https://cdn.ustp.at; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.doubleclick.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.linkedin.com https://*.pagestrip.com https://*.pubble.io https://*.youtube.com https://*.ytimg.com https://app.visitlead.com https://bat.bing.com https://browser-update.org https://campus-stp.at https://cdn.siteimprove.net/cms/overlay.js https://cdn.socket.io https://cdn.ustp.at https://code.jquery.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/eur https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/eur/FormLoader/FormLoader.bundle.js https://googleads.g.doubleclick.net https://mein.clickskeks.at https://mktdplp102cdn.azureedge.net/public/latest/js/ws-tracking.js https://scripts.clarity.ms https://sjs.bizographics.com https://snap.licdn.com https://unpkg.com https://web.cmp.usercentrics.eu https://www.campus-stp.at https://www.clarity.ms https://www.googleadservices.com https://www.recaptcha.net https://www.ustp.at; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.pagestrip.com https://*.ytimg.com https://app.visitlead.com https://cdn.ustp.at https://mein.clickskeks.at https://www.campus-stp.at https://www.ustp.at; worker-src blob: https://www.ustp.at; 2 frame-ancestors *.fraport.com *.fraport.de https://fraportag.sharepoint.com http://www.fra-spotterforum.de; 2 frame-src https://tag.trovo-tag.com https://www.googletagmanager.com https://8eac-103-170-54-70.ngrok-free.app https://20331188.hs-sites.com https://shopify.dev.kubric.io https://mm.beta.kubric.io https://app.getmodemagic.com https://getmodemagic.com https://www.youtube.com https://*.typeform.com/ https://calendly.com/ https://*.arcade.software/ https://*.storylane.io https://*.hsforms.com/ https://open.spotify.com/ https://giphy.com/ https://media.kubric.io/ https://redditstatic.com/ https://events.reddit.com/; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https: blob:; font-src 'self' data: https:; connect-src * 'unsafe-inline' https:; default-src *; img-src * data: 'unsafe-inline'; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: blob: data: fonts.gstatic.com fonts.googleapis.com *.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net td.doubleclick.net ad.doubleclick.net www.google-analytics.com *.google-analytics.com www.googletagmanager.com *.analytics.google.com googletagmanager.com region1.google-analytics.com translate.google.com analytics.google.com translate.googleapis.com ajax.googleapis.com *.force.com g.alicdn.com *.leadboxer.com *.cookielaw.org *.onetrust.com *.ads.linkedin.com px.ads.linkedin.com privacyportal-de.onetrust.com stats.g.doubleclick.net www.linkedin.com *.linkedin.com www.youtube-nocookie.com cdn-images.mailchimp.com www.google.be www.google.bg www.google.fi www.google.fr www.google.se www.google.ae www.google.dk www.google.ca www.google.ch www.google.com.br www.google.com.bd www.google.com.bo www.google.gr www.google.lt www.google.tn www.google.com.sa www.google.com.sg www.google.com.my www.google.com.mx www.google.com.tr www.google.com.tw www.google.com.au www.google.com.eg www.google.co.jp www.google.co.nz www.google.co.uk www.google.co.ma www.google.co.za www.google.co.in www.google.co.il www.google.co.id www.google.co.th www.google.co.tz www.google.com www.google.cl www.google.nl www.google.at www.google.ro www.google.ru www.google.rs www.google.rw www.google.de www.google.es www.google.pt www.google.pl www.google.ie www.google.it www.google.hr www.google.hu *.adsymptotic.com *.livechatinc.com script.hotjar.com vc.hotjar.io content.hotjar.io metrics.hotjar.io *.hotjar.com static.hotjar.com wss://ws.hotjar.com img.youtube.com *.pardot.com ortec.my.salesforce-sites.com ortec.us12.list-manage.com userlike-cdn-umm.b-cdn.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com cca-platform.s3.eu-west-3.amazonaws.com *.userlike.com go.ortec.com cdn.linkedin.oribi.io ws.zoominfo.com images.prismic.io *.prismic.io prismic.io prismic-io.s3.amazonaws.com s3.amazonaws.com js.zi-scripts.com i.ytimg.com yastatic.net analytics.ahrefs.com static.hsappstatic.net saml.saasprotection.com cdn.scite.ai infragrid.v.network www.google.ad www.google.com.af www.google.com.ag www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.az www.google.ba www.google.bf www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.cd www.google.cf www.google.cg www.google.ci www.google.co.ck www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.dj www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.et www.google.com.fj www.google.fm www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.ht www.google.im www.google.iq www.google.is www.google.je www.google.com.jm www.google.jo www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lu www.google.lv www.google.com.ly www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.no www.google.com.np www.google.nr www.google.nu www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph google.com.ph www.google.com.pk www.google.pn www.google.com.pr www.google.ps www.google.com.py www.google.com.qa www.google.com.sb www.google.sc www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.com.tj www.google.tl www.google.tm www.google.to www.google.tt www.google.com.ua www.google.co.ug www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.co.zm www.google.co.zw www.google.cat google.com snap.licdn.com o4508414977966080.ingest.de.sentry.io use.typekit.net gateway.zscloud.net images.unsplash.com cdn.faceworks.nl plugin.sopro.io connect.facebook.net www.facebook.com *.azurewebsites.net js-eu1.hscta.net js-eu1.hsadspixel.net js-eu1.hsforms.net forms-eu1.hsforms.com js.hsforms.net cdn-cookieyes.com *.cookieyes.com; report-uri /api/csp-violation-report 2 img-src 'self' data: https: *.yandex.ru *.google-analytics.com *.facebook.com *.facebook.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net cdnjs.cloudflare.com *.yandex.ru *.yandex.com *.google.com *.google-analytics.com *.googlesyndication.com *.googleadservices.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.discord.com *.discord.gg t.me *.telegram.org *.doubleclick.net *.mail.ru analytics.tiktok.com *.tiktok.com *.tiktokw.us; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net *.googleapis.com maxcdn.bootstrapcdn.com; connect-src 'self' wss://*.yandex.ru wss://*.yandex.com *.yandex.ru *.yandex.com *.betatransfer.io *.cryptocloud.plus *.freekassa.com *.morune.com *.wata.pro *.stripe.com *.monobank.ua send.monobank.ua api.monobank.ua *.lckco.com lckco.com qr.lckco.com *.discord.com *.discord.gg t.me *.telegram.org *.google-analytics.com analytics.google.com www.google.com *.google.com *.googleadservices.com *.googlesyndication.com *.facebook.com *.facebook.net *.doubleclick.net analytics.tiktok.com *.tiktok.com *.tiktokw.us checkout.overpay.io *.overpay.io engine-sandbox.pay.tech *.pay.tech engine.pay.tech *.paycart.click paycart.click api.avepay.com *.avepay.com avepay.com *.conversionsapigateway.com *.us-central1.run.app *.run.app pokefm.live *.pokefm.live; media-src 'self' pokefm.live *.pokefm.live stream.pokefm.com *.pokefm.com; font-src 'self' data: *.gstatic.com fonts.gstatic.com maxcdn.bootstrapcdn.com; frame-src 'self' *.yandex.ru mc.yandex.ru mc.yandex.com *.google.com *.youtube.com www.youtube.com *.betatransfer.io *.cryptocloud.plus pay.freekassa.com *.morune.com *.wata.pro *.lckco.com qr.lckco.com discord.com *.discord.com *.discord.gg t.me *.telegram.org *.googletagmanager.com *.doubleclick.net td.doubleclick.net checkout.overpay.io *.overpay.io engine-sandbox.pay.tech *.pay.tech engine.pay.tech *.paycart.click paycart.click api.avepay.com *.avepay.com avepay.com *.freekassa.com payment.kassa.ai pay.fk.money *.antilopay.com gate.antilopay.com severpay.io *.severpay.io; frame-ancestors 'none'; default-src 'self' https:; form-action 'self' https:; base-uri 'self'; upgrade-insecure-requests 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.facebook.net connect.facebook.net *.licdn.com snap.licdn.com *.ads-twitter.com static.ads-twitter.com *.quora.com a.quora.com *.taboola.com cdn.taboola.com *.cookielaw.org cdn.cookielaw.org *.pinimg.com s.pinimg.com *.pinterest.com ct.pinterest.com *.bing.com bat.bing.com *.amazon-adsystem.com c.amazon-adsystem.com *.redditstatic.com www.redditstatic.com *.abrankings.com cdn.abrankings.com *.yimg.com s.yimg.com *.ensighten.com nexus.ensighten.com *.byspotify.com pixel.byspotify.com *.tiktok.com analytics.tiktok.com *.tiktokw.us analytics-ipv6.tiktokw.us *.fullstory.com edge.fullstory.com *.adsrvr.org js.adsrvr.org *.sentry-cdn.com *.sentry.io *.wistia.com *.wistia.net fast.wistia.com *.typeform.com embed.typeform.com *.zdassets.com *.zendesk.com static.zdassets.com *.ahrefs.com analytics.ahrefs.com *.marker.io edge.marker.io *.instagram.com *.logrocket.io *.lr-ingest.io *.logrocket.com *.amplitude.com cdn.amplitude.com unpkg.com *.cloudflare.com cdnjs.cloudflare.com bizee.com *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsforms.com *.hscollectedforms.net *.usemessages.com *.tvsquared.com; style-src 'self' 'unsafe-inline' *.typeform.com *.googleapis.com fonts.googleapis.com *.hubspot.com; img-src 'self' data: blob: *.google.com *.google.com.mx *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.google.co.uk *.google.ca *.google.com.au *.google.de *.google.fr *.google.es *.google.it *.google.nl *.google.co.in *.google.com.br *.google.co.jp *.facebook.com *.facebook.net *.licdn.com px.ads.linkedin.com px4.ads.linkedin.com *.ads-twitter.com *.twitter.com t.co analytics.twitter.com *.quora.com *.taboola.com *.bing.com *.pinimg.com *.pinterest.com ct.pinterest.com *.redditstatic.com *.reddit.com *.yimg.com s.yimg.com *.yahoo.com sp.analytics.yahoo.com *.tiktok.com *.tiktokw.us analytics-ipv6.tiktokw.us *.fullstory.com *.adsrvr.org *.spotify.com *.amazon *.wistia.com *.wistia.net *.typeform.com *.zendesk.com *.zdassets.com *.instagram.com *.cdninstagram.com *.bizee.com *.incfile.com *.amazonaws.com s3.amazonaws.com *.laravel.cloud *.hubspot.com *.hsforms.com *.buzzsprout.com *.cookielaw.org *.ipredictive.com *.tvsquared.com; font-src 'self' data: *.googleapis.com *.gstatic.com fonts.gstatic.com fonts.googleapis.com *.wistia.com fast.wistia.com; connect-src 'self' *.google.com *.google.com.mx *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google.co.uk *.google.ca *.google.com.au *.facebook.com *.facebook.net *.licdn.com px.ads.linkedin.com px4.ads.linkedin.com *.ads-twitter.com *.twitter.com t.co analytics.twitter.com *.quora.com *.taboola.com *.cookielaw.org *.onetrust.com geolocation.onetrust.com *.bing.com *.amazon-adsystem.com *.amazon ara.paa-reporting-advertising.amazon *.pinimg.com s.pinimg.com *.pinterest.com ct.pinterest.com *.tiktok.com *.tiktokw.us analytics-ipv6.tiktokw.us *.fullstory.com *.adsrvr.org *.byspotify.com *.spotify.com pixels.spotify.com *.reddit.com *.redditstatic.com pixel-config.reddit.com *.yimg.com s.yimg.com *.yahoo.com sp.analytics.yahoo.com *.apm.us-central1.gcp.cloud.es.io *.sentry.io *.sentry-cdn.com browser.sentry-cdn.com *.wistia.com *.wistia.net fast.wistia.net *.typeform.com *.zendesk.com wss://*.zendesk.com *.zdassets.com *.ahrefs.com *.marker.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.amplitude.com api2.amplitude.com *.bizee.com *.incfile.com *.hubspot.com *.hsforms.com *.hubapi.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.usemessages.com *.tvsquared.com *.ipredictive.com; frame-src 'self' *.google.com *.googletagmanager.com *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.wistia.com *.wistia.net *.typeform.com *.zendesk.com *.instagram.com *.visualwebsiteoptimizer.com *.hubspot.com *.hsforms.com *.adsrvr.org insight.adsrvr.org *.pinterest.com ct.pinterest.com; media-src 'self' blob: *.wistia.com *.wistia.net *.laravel.cloud *.bizee.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' *.hubspot.com *.hsforms.com *.typeform.com; frame-ancestors 'self' https://tagassistant.google.com https://*.googletagmanager.com 2 base-uri 'self'; frame-ancestors 'self'; object-src 'none'; 2 default-src 'self'; img-src * data:; media-src * blob:; font-src https: data:; style-src 'self' 'unsafe-inline'; frame-src *.google.com *.googlesyndication.com *.youtube.com *.youtube-nocookie.com *.soundcloud.com *.vimeo.com *.doubleclick.net https://bandcamp.com; script-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://www.gstatic.com www.googletagmanager.com https://www.google-analytics.com *.googleapis.com *.googlesyndication.com *.google.com *.google.de *.googletagservices.com https://svcs.ebay.com https://cdn.ravenjs.com https://browser.sentry-cdn.com https://static.cloudflareinsights.com 'sha256-Us/oj4ftL5JKI9/5Nj0/Ccw+R4vMfgFLR5oEpbqJOiw='; connect-src 'self' *.modulargrid.net *.google-analytics.com https://www.googleapis.com *.googlesyndication.com https://sentry.io https://*.sentry.io https://browser.sentry-cdn.com https://www.youtube.com https://www.youtube-nocookie.com https://*.googlevideo.com https://i.ytimg.com https://s.ytimg.com https://cloudflareinsights.com https://*.cloudflareinsights.com 2 base-uri 'self'; child-src 'self' blob:; connect-src 'self' data: https: static.billets.ca *.billets.ca *.tickets.ca *.cookieyes.com cdn-cookieyes.com connect.facebook.net www.facebook.com *.google-analytics.com *.google.com *.googletagmanager.com *.g.doubleclick.net *.google.ca *.google.fr *.google.com.mx *.google.co.uk *.google.de *.google.com.br *.google.co.jp *.google.com.au pagead2.googlesyndication.com *.googleadservices.com *.googleapis.com *.gstatic.com www.linkedin.com snap.licdn.com *.ads.linkedin.com p.adsymptotic.com *.linkedin.oribi.io sjs.bizographics.com bat.bing.com bat.bing.net api.stripe.com analytics.tiktok.com *.tiktokw.us; default-src 'self' data:; font-src 'self' data: https: static.billets.ca *.billets.ca *.tickets.ca fonts.gstatic.com; form-action 'self' https: www.facebook.com; frame-ancestors 'none'; frame-src 'self' https: www.facebook.com td.doubleclick.net *.googletagmanager.com *.google.com js.stripe.com *.js.stripe.com hooks.stripe.com; img-src 'self' data: blob: https: static.billets.ca *.billets.ca *.tickets.ca cdn-cookieyes.com www.facebook.com connect.facebook.net *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ca *.google.fr *.google.com.mx *.google.co.uk *.google.de *.google.com.br *.google.co.jp *.google.com.au googleads.g.doubleclick.net pagead2.googlesyndication.com *.googleadservices.com *.googleapis.com *.gstatic.com *.googleusercontent.com ssl.gstatic.com www.gstatic.com www.linkedin.com *.ads.linkedin.com bat.bing.com bat.bing.net analytics.tiktok.com *.tiktokw.us; manifest-src 'self' https: static.billets.ca *.billets.ca *.tickets.ca; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: static.billets.ca *.billets.ca *.tickets.ca cdn-cookieyes.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.googleapis.com *.gstatic.com *.ggpht.com *.googleusercontent.com snap.licdn.com bat.bing.com bat.bing.net js.stripe.com *.js.stripe.com analytics.tiktok.com; style-src 'self' 'unsafe-inline' https: static.billets.ca *.billets.ca *.tickets.ca fonts.googleapis.com googletagmanager.com tagmanager.google.com www.gstatic.com; worker-src 'self' blob: data:; report-uri /monitoring/csp-report 2 default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.signalize.com/ https://code.etracker.com/ https://dmndfrcstng.com/ https://www.etracker.de/; style-src 'unsafe-inline' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://www.etracker.de https://dmndfrcstng.com/ https://eu-api.friendlycaptcha.eu/api/ https://api.friendlycaptcha.com/api/; font-src 'self' data:; frame-src 'self' https://www.youtube-nocookie.com https://irs.tools.investis.com https://xms.deutsche-boerse.com/api/v1/chartmodule https://xms.deutsche-boerse.com/chartmod/refreshData; img-src 'self' data:; manifest-src 'self'; media-src 'self'; worker-src blob:; frame-ancestors 'self' https://*.etracker.com 2 default-src 'unsafe-inline' https:; img-src data: https: 2 base-uri 'self'; connect-src 'self' wss://ws.hotjar.com metrics.hotjar.io d.adroll.com ws.hotjar.com 447-ybt-249.mktoutil.com privacyportal-eu.onetrust.com bat.bing.com px.ads.linkedin.com vc.hotjar.io abrtp1.marketo.com analytics.google.com geolocation.onetrust.com resources.relativity.com content.hotjar.io 447-ybt-249.mktoresp.com cdn.cookielaw.org stats.g.doubleclick.net www.google-analytics.com pixel-config.reddit.com; default-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; frame-src player.vimeo.com www.youtube.com resources.relativity.com www.googletagmanager.com www.youtube-nocookie.com www.google.com player.simplecast.com; img-src d.adroll.com cdn.bizible.com alb.reddit.com imgs.xkcd.com bat.bing.com px.ads.linkedin.com translate.google.com www.relativity.com relativity.com fonts.gstatic.com resources.relativity.com www.facebook.com s3-alpha-sig.figma.com assets.website-files.com www.googletagmanager.com cdn.cookielaw.org www.google.co.in cdn.bizibly.com relativityfest.com rtb-csync.smartadserver.com; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' munchkin.marketo.net js.chilipiper.com cdn.bizible.com player.vimeo.com www.redditstatic.com bat.bing.com snap.licdn.com abrtp1-cdn.marketo.com script.hotjar.com abrtp1.marketo.com static.hotjar.com resources.relativity.com www.googletagmanager.com cdn.cookielaw.org rtp-static.marketo.com www.google.com; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' munchkin.marketo.net s.adroll.com js.chilipiper.com d.adroll.com cdn.bizible.com player.vimeo.com www.redditstatic.com connect.facebook.net bat.bing.com snap.licdn.com abrtp1-cdn.marketo.com script.hotjar.com www.youtube.com abrtp1.marketo.com static.hotjar.com resources.relativity.com ipv4.d.adroll.com www.googletagmanager.com rtp-static.marketo.com cdn.cookielaw.org www.google.com www.google-analytics.com extend.vimeocdn.com; style-src 'self' 'unsafe-inline' use.typekit.net resources.relativity.com rtp-static.marketo.com www.gstatic.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' use.typekit.net resources.relativity.com rtp-static.marketo.com; upgrade-insecure-requests; worker-src 'self'; report-to csp; report-uri https://surfaceaudit.ignitesolutions.com/r/3b3964aeab984d9290d879fb1859ae8d528ff6b0d55e4a19afc52b653b12d394/csp 2 default-src https: 'unsafe-inline' 'unsafe-eval' data:; 2 default-src *; font-src *;img-src * data:; script-src 'unsafe-inline' 'unsafe-eval' https://api.ipify.org https://www.google-analytics.com https://stats.g.doubleclick.net *; style-src 'unsafe-inline' *; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.tutorialphp.net https://mc.yandex.ru https://yastatic.net https://cdn.yandex.net https://www.clarity.ms https://scripts.clarity.ms https://*.clarity.ms https://*.realsrv.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://*.googlesyndication.com https://*.google.com https://googleads.g.doubleclick.net https://www.google.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.tutorialphp.net https://*.realsrv.com https://ka-f.fontawesome.com; img-src 'self' data: https: https://mc.yandex.ru https://*.tutorialphp.net https://*.clarity.ms https://c.bing.com https://*.realsrv.com https://*.googlesyndication.com https://*.google.com https://googleads.g.doubleclick.net https://*.adtrafficquality.google; font-src 'self' data: https://fonts.gstatic.com https://*.tutorialphp.net https://*.realsrv.com https://ka-f.fontawesome.com; connect-src 'self' https://www.google-analytics.com https://*.tutorialphp.net https://ka-f.fontawesome.com https://mc.yandex.ru wss://mc.yandex.ru https://yastatic.net https://*.clarity.ms https://c.bing.com https://*.realsrv.com https://fundingchoicesmessages.google.com https://*.googlesyndication.com https://*.google.com https://googleads.g.doubleclick.net https://*.adtrafficquality.google; frame-src 'self' blob: https://mc.yandex.ru https://cdn-fc.com https://*.realsrv.com https://*.tutorialphp.net https://*.googlesyndication.com https://googleads.g.doubleclick.net https://*.adtrafficquality.google https://www.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 2 frame-ancestors 'self' https://atoms.dev https://canary.atoms.dev https://canary2.atoms.dev https://mgx.dev https://canary.mgx.dev 2 object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.hotjar.com https://www.google-analytics.com/analytics.js https://connect.facebook.net/en_US/fbevents.js https://ws.zoominfo.com/pixel/615b474d39247c001cc2f2f2 https://www.googletagmanager.com https://code.jquery.com/ https://clients3.weblink.com.au/ https://d2uinmo2bcbdsn.cloudfront.net/pureconnect-widgets/91/cxbus.min.js https://d2uinmo2bcbdsn.cloudfront.net/pureconnect-widgets/91/plugins/widgets-core.min.js https://d2uinmo2bcbdsn.cloudfront.net/pureconnect-widgets/91/plugins/webchat.min.js https://d2uinmo2bcbdsn.cloudfront.net/ https://snap.licdn.com/ https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js http://cdn.jsdelivr.net/npm/jquery-validation@1.17.0/dist/jquery.validate.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.11.5/gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.11.5/ScrollTrigger.min.js https://cdnjs.cloudflare.com/ajax/libs/jarallax/2.1.3/jarallax.min.js https://pym.nprapps.org/pym.v1.min.js https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://d3js.org https://platform.twitter.com https://www.google.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com/gtm.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.hotjar.com/c/hotjar-2877749.js https://www.google-analytics.com/analytics.js https://connect.facebook.net/en_US/fbevents.js https://ws.zoominfo.com/pixel/615b474d39247c001cc2f2f2 https://www.googletagmanager.com https://script.hotjar.com/modules.5dca1694a4338dade13b.js https://connect.facebook.net/signals/config/1761455807365259 https://connect.facebook.net/signals/config/685668156287079 https://pi.pardot.com/pd.js https://pi.pardot.com/analytics https://marketing.aes.com/analytics https://cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js https://js-agent.newrelic.com/async-api.6bb277af-1225.min.js https://js-agent.newrelic.com/lazy-loader.48127245-1225.min.js https://cdn.cookielaw.org/scripttemplates/otSDKStub.js https://cdn.cookielaw.org/consent/27cd7b43-53f3-46bb-9267-e0af03db8d70/OtAutoBlock.js https://siteintercept.qualtrics.com https://googleads.g.doubleclick.net https://zn9sohtzqeoni8wpq-aescorp.siteintercept.qualtrics.com https://cdn.cookielaw.org/scripttemplates/202209.1.0/otBannerSdk.js https://zncwhklt9qhc4tztc-aescorp.siteintercept.qualtrics.com https://www.google.co.in/pagead https://www.gstatic.com/recaptcha/releases https://script.hotjar.com https://js-agent.newrelic.com https://bam.nr-data.net https://connect.facebook.net https://apps.mypurecloud.com https://dhqbrvplips7x.cloudfront.net https://www.googleadservices.com/ https://www.gstatic.com/ https://cdn.cookielaw.org/ https://eb2.3lift.com/ https://www.google.co.in/ https://pippio.com/ https://widgets.hive.genesys.com/ https://d2uinmo2bcbdsn.cloudfront.net/pureconnect-widgets/91/cxbus.min.js https://d2uinmo2bcbdsn.cloudfront.net/pureconnect-widgets/91/plugins/widgets-core.min.js https://d2uinmo2bcbdsn.cloudfront.net/pureconnect-widgets/91/plugins/webchat.min.js https://d2uinmo2bcbdsn.cloudfront.net/ https://snap.licdn.com/ https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js http://cdn.jsdelivr.net/npm/jquery-validation@1.17.0/dist/jquery.validate.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.11.5/gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.11.5/ScrollTrigger.min.js https://cdnjs.cloudflare.com/ajax/libs/jarallax/2.1.3/jarallax.min.js https://pym.nprapps.org/pym.v1.min.js http://cdn.jsdelivr.net http://d3js.org/d3.v4.min.js http://cdnjs.cloudflare.com http://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.7.0/Chart.min.js http://cdnjs.cloudflare.com/ajax/libs/chartjs-plugin-doughnutlabel/2.0.3/chartjs-plugin-doughnutlabel.js https://static.hotjar.com https://cdn01.basis.net/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://d3js.org https://platform.twitter.com https://www.google.com; frame-ancestors 'self' 2 default-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.tile.openstreetmap.org https://umap.openstreetmap.fr; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com;connect-src 'self' https://region1.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://old.umlub.pl https://openstreetmap.org https://tile.openstreetmap.org https://*.tile.openstreetmap.org; object-src 'none';font-src https://fonts.gstatic.com; frame-ancestors 'self';frame-src 'self' https://test-intranet.umlub.edu.pl https://www.youtube.com https://www.youtube-nocookie.com/ https://youtube-nocookie.com/ https://*.youtube-nocookie.com/ https://umap.openstreetmap.fr https://*.openstreetmap.fr https://openstreetmap.fr; 2 default-src 'self' data:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.etracker.com; frame-src 'self' https://open.spotify.com https://mafo1.myaudience.de/ https://www.youtube-nocookie.com/ https://www.giscloud.nrw.de/ https://www.googletagmanager.com https://td.doubleclick.net https://www.bankenumfrage.de/ https://*.fls.doubleclick.net/; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://static.hotjar.com https://script.hotjar.com https://static.newsletter2go.com https://mafo1.myaudience.de https://static.etracker.com https://code.etracker.com https://www.etracker.de https://www.evergabe.nrw.de https://connect.facebook.net https://snap.licdn.com https://www.googletagmanager.com https://*.doubleclick.net https://et.nrwbank.de http://et.nrwbank.de https://www.bankenumfrage.de/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net/; style-src 'self' https://static.hotjar.com https://script.hotjar.com https://www.bankenumfrage.de/ 'unsafe-inline'; object-src 'none'; worker-src 'self' blob:; connect-src 'self' https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://api.newsletter2go.com https://www.etracker.de https://api.friendlycaptcha.com https://eu-api.friendlycaptcha.eu wss://chat.nrwbank.de https://connect.facebook.net https://snap.licdn.com https://www.googletagmanager.com https://*.linkedin.com https://www.google.com https://www.facebook.com https://www.google.de https://www.googleadservices.com https://et.nrwbank.de http://et.nrwbank.de https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://*.google.com/ https://*.doubleclick.net/ ; img-src 'self' data: https://static.hotjar.com https://script.hotjar.com https://files.newsletter2go.com https://images.fdbserver.de https://api.fdbserver.de https://mafo1.myaudience.de https://api-prod.wolterskluwer.plusline.net/ https://api-staging.wolterskluwer.plusline.net/ https://www.facebook.com https://px.ads.linkedin.com https://www.google.com https://www.google.de https://*.doubleclick.net https://www.bankenumfrage.de/ https://www.googletagmanager.com/a https://www.googletagmanager.com/ https://googleads.g.doubleclick.net/ https://www.googleadservices.com/; font-src 'self' https://script.hotjar.com; upgrade-insecure-requests 2 connect-src 'self' *.trustarc.com schema-cf.bc0a.com schema-cdn.bc0a.com https://fbcc.gaig.com www.recaptcha.net consent-pref.trustarc.com consent.trustarc.com consent-reporting.trustarc.com ingest.quantummetric.com rl.quantummetric.com www.greatamericaninsurancegroup.com p.typekit.net use.typekit.net maxcdn.bootstrapcdn.com play.vidyard.com www.linkedin.com px.ads.linkedin.com cdn.linkedin.oribi.io www.googletagmanager.com www.gstatic.com stats.g.doubleclick.net www.google-analytics.com region1.google-analytics.com region1.analytics.google.com analytics.google.com www.google.com translate.googleapis.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat; font-src 'self' data: consent.trustarc.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com use.typekit.net www.greatamericaninsurancegroup.com; form-action 'self' gaigauthor.gaig.com login.gaig.com; frame-ancestors 'self'; default-src 'self' play.vidyard.com; frame-src 'self' www.recaptcha.net consent-pref.trustarc.com players.brightcove.net td.doubleclick.net fast.wistia.net cloud.specialtypc.gaig.com mcrs18s4jyq010hs26x1kpc87hk8.pub.sfmc-content.com creators.spotify.com www.linkedin.com www.googletagmanager.com www.facebook.com anchor.fm platform.twitter.com play.vidyard.com www.google.com www.youtube.com www.google-analytics.com region1.google-analytics.com; img-src 'self' www.recaptcha.net consent-pref.trustarc.com consent.trustarc.com consent.truste.com region1.analytics.google.com www.google.co.ao analytics.google.com stats.g.doubleclick.net gaigauthor.gaig.com a.b0e8.com data: blob: a1.b0e8.com www.linkedin.com www.gstatic.com translate.google.com ssl.google-analytics.com syndication.twitter.com fonts.gstatic.com px.ads.linkedin.com region1.google-analytics.com px4.ads.linkedin.com p.typekit.net play.vidyard.com www.google-analytics.com www.google.com www.googletagmanager.com www.policysweet.com www.greatamericaninsurancegroup.com cdn.vidyard.com i.ytimg.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.caigo.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat; script-src-elem 'self' www.recaptcha.net consent.trustarc.com cdn.quantummetric.com code.jquery.com bam.nr-data.net fast.wistia.net cdn.b0e8.com apis.google.com js-agent.newrelic.com snap.licdn.com ssl.google-analytics.com connect.facebook.net ajax.googleapis.com platform.twitter.com play.vidyard.com use.typekit.net www.google-analytics.com region1.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com schema-cf.bc0a.com 'unsafe-inline' www.youtube.com; style-src-elem 'self' data: p.typekit.net use.typekit.net www.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com 'unsafe-inline'; script-src-attr 'unsafe-inline'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.trustarc.com consent.trustarc.com www.recaptcha.net cdn.quantummetric.com code.jquery.com fast.wistia.net bam.nr-data.net ajax.googleapis.com platform.twitter.com region1.google-analytics.com www.google-analytics.com www.gstatic.com snap.licdn.com cdn.b0e8.com www.google.com js-agent.newrelic.com connect.facebook.net www.googletagmanager.com use.typekit.net play.vidyard.com; style-src-attr 'unsafe-inline' www.greatamericaninsurancegroup.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com p.typekit.net use.typekit.net www.gstatic.com; object-src 'self'; media-src 'self' data: ssl.gstatic.com; child-src 'self' www.recaptcha.net play.vidyard.com www.google.com www.googletagmanager.com www.youtube.com; upgrade-insecure-requests; report-uri https://greatamericaninsurancegroup.report-uri.com/r/t/csp/enforce 2 frame-ancestors 'self' https://app.pia4you.com http://erika.hotainment.info 2 frame-ancestors https://trustseal.enamad.ir 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://www.google.com https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https://i.ytimg.com https://*.ytimg.com https:; font-src 'self' https: data:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.googletagmanager.com https://widgets.wp.com https:; connect-src 'self' https:; media-src 'self' https://www.youtube.com https://*.googlevideo.com https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 2 frame-ancestors 'self' https://*.ccma.cat http://*.ccma.cat https://*.3cat.cat http://*.3cat.cat; 2 block-all-mixed-content; frame-ancestors 'none' 2 default-src 'self' data: *.jquery.com *.rokka.io *.cloudflare.com jquery.com doubleclick.net *.doubleclick.net google.com *.google.com google.nl *.google.nl google.at *.google.at google.co.uk *.google.co.uk google.ch *.google.ch google.de *.google.de google.fr *.google.fr google.it *.google.it google.li *.google.li *.googleapis.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.tealiumiq.com *.tiqcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: ajax.aspnetcdn.com *.algolia.net *.algolianet.com bam.eu01.nr-data.net *.cloudflare.com *.cookielaw.org *.dynatrace.com doubleclick.net *.doubleclick.net *.evenito.com evenito.com *.facebook.com *.facebook.net google.com *.google.com google.nl *.google.nl google.at *.google.at google.co.uk *.google.co.uk google.ch *.google.ch google.de *.google.de google.fr *.google.fr google.it *.google.it google.li *.google.li *.google-analytics.com *.googleadservices.com *.googleapis.com *.googleoptimize.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.jacando.jobs jquery.com *.jquery.com *.jsdelivr.net *.linkedin.com *.licdn.com mobi24.ch *.mobi24.ch mobiliar.ch *.mobiliar.ch mobiliere.ch *.mobiliere.ch mobiliare.ch *.mobiliare.ch *.mobiliar-preprod.ch *.newrelic.com *.pusher.com protekta.ch *.protekta.ch *.rawgit.com *.ticketpark.ch rtclauncher.luware.com *.tealiumiq.com *.tiqcdn.com unpkg.com *.youtube.com *.ytimg.com analytics.tiktok.com; object-src 'none'; style-src 'self' 'unsafe-inline' data: *.algolia.net *.algolianet.com *.cloudflare.com *.evenito.com *.googleapis.com *.hotjar.com *.hotjar.io *.jsdelivr.net unpkg.com; img-src 'self' data: *.algolia.net *.algolianet.com *.analytics.google.com *.cookielaw.org doubleclick.net *.doubleclick.net *.facebook.com *.facebook.net *.githubusercontent.com *.gstatic.com *.hotjar.com *.hotjar.io i.ytimg.com *.jsdelivr.net *.licdn.com *.linkedin.com mobiliar-pub.ch mobiliar.ch *.mobiliar.ch mobiliare.ch *.mobiliare.ch mobiliere.ch *.mobiliere.ch secure.mobiliar.ch *.rawgit.com *.rokka.io google.com *.google.com google.nl *.google.nl google.at *.google.at google.co.uk *.google.co.uk google.ch *.google.ch google.de *.google.de google.fr *.google.fr google.it *.google.it google.li *.google.li *.googleapis.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.tealiumiq.com *.tiqcdn.com *.tdbtrk.com analytics.tiktok.com; frame-src 'self' data: anchor.fm die-mobiliar.stg.tools.factsheetslive.com die-mobiliar.tools.factsheetslive.com doubleclick.net *.doubleclick.net eko.com *.essd.ch *.evenito.com *.evenito.site *.facebook.com gateway.zscloud.net giphy.com *.googletagmanager.com google.com *.google.com google.nl *.google.nl google.at *.google.at google.co.uk *.google.co.uk google.ch *.google.ch google.de *.google.de google.fr *.google.fr google.it *.google.it google.li *.google.li *.hotjar.com *.jacando.jobs mobi-check-hochwasserschutz.whatwedo.io mobi24.ch *.mobi24.ch mobiliar.ch *.mobiliar.ch mobiliare.ch *.mobiliare.ch mobiliere.ch *.mobiliere.ch pay.datatrans.com podcasters.spotify.com *.spotify.com *.ticketpark.ch *.simplex.tv zswpmanager.wip.mmc.com *.vimeo.com *.linkedin.com *.licdn.com youtube.com *.youtube.com *.swissphotoart.ch analytics.tiktok.com; frame-ancestors https://*.mobiliar.ch https://*.mobiliere.ch https://*.mobiliare.ch https://*.protekta.ch http://avatarionmobiliar.ibex.dienstleistungen.ws https://*.apps.mobiliar.ch https://*.mobiliar-int.ch https://*.mobiliare-int.ch https://*.mobiliere-int.ch https://*.mobiliard10.lndo.site https://*.mobiliered10.lndo.site https://*.mobiliared10.lndo.site https://*.mobiliar.d.clients.liip.ch https://*.mobiliere.d.clients.liip.ch https://*.mobiliare.d.clients.liip.ch https://*.homegate.ch https://*.immoscout24.ch https://mobiliar-int.mpp360.cloud mobiliar.mpp360.cloud; font-src 'self' data: *.github.com *.googleusercontent.com fonts.gstatic.com *.hotjar.com *.hotjar.io; connect-src 'self' data: 127.0.0.1 *.akamai.tiqcdn.com *.algolia.net *.algolianet.com bam.eu01.nr-data.net cdn.linkedin.oribi.io *.cookielaw.org doubleclick.net *.doubleclick.net *.d.clients.liip.ch *.ddev.site *.dynatrace.com *.facebook.com *.facebook.net google.com microsoft.com *.microsoft.com *.google.com google.nl *.google.nl google.at *.google.at google.co.uk *.google.co.uk google.ch *.google.ch google.de *.google.de google.fr *.google.fr google.it *.google.it google.li *.google.li *.google-analytics.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.hotjar.io jquery.com *.jquery.com localhost *.licdn.com *.linkedin.com mobiliar.ch *.mobiliar.ch mobiliare.ch *.mobiliare.ch mobiliere.ch *.mobiliere.ch mobiliar-preprod.ch *.mobiliar-preprod.ch mobiliere-preprod.ch *.mobiliere-preprod.ch mobiliare-preprod.ch *.mobiliare-preprod.ch mobiliar-test.ch *.mobiliar-test.ch mobiliere-test.ch *.mobiliere-test.ch mobiliare-test.ch *.mobiliare-test.ch mobiliar-int.ch *.mobiliar-int.ch mobiliere-int.ch *.mobiliere-int.ch mobiliare-int.ch *.mobiliare-int.ch orientedhosting.com *.orientedhosting.com *.onetrust.com *.pusher.com rdtds.net rtclauncherapi.luware.com wss://rtclauncherapi.luware.com *.sentry.io *.tdbtrk.com *.tealiumiq.com *.tiqcdn.com *.ticketpark.ch wss://*.hotjar.com analytics.tiktok.com; worker-src 'self' blob:; report-uri /report-csp-violation 2 script-src *.convertexperiments.com *.metrics.converexperiments.com app.usercentrics.eu https://anl.leadoo.com/ https://api.addressy.com https://app.optimalworkshop.com https://bat.bing.com/ https://bot.leadoo.com https://cafdonate.cafonline.org https://cdn.cookielaw.org https://cdn3.actito.com/legacy/actito-goal/goal.js https://connect.facebook.net/ https://cookie-cdn.cookiepro.com/ https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://digitaltpp.iosh.com/ https://dqm.crownpeak.com/page-checker.js https://googleads.g.doubleclick.net https://i.ytimg.com https://iosh.optimalworkshop.com https://iosh-webcomponents-prod.azurewebsites.net https://iosh-webcomponents-uat.azurewebsites.net https://logs.convertexperiments.com https://mktdplp102cdn.azureedge.net https://no-cdn.convertexperiments.com https://platform.twitter.com https://res.leadoo.com https://script.hotjar.com https://services.postcodeanywhere.co.uk https://snap.licdn.com https://static.hotjar.com https://syndication.twitter.com https://tagmanager.google.com https://vc.hotjar.io/ https://www.clarity.ms/ https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/releases/ https://www.instagram.com https://www.linkedin.com https://www.youtube.com https://www3.actito.com/ privacy-proxy.usercentrics.eu 'self' 'unsafe-eval' 'unsafe-inline' v1.api.service.cmp.usercentrics.eu web.cmp.usercentrics.eu;connect-src *.convertexperiments.com *.metrics.converexperiments.com app.usercentrics.eu consent-api.service.consent.usercentrics.eu graphql.usercentrics.eu http://iosh-api.uat.iosh.local/api/ https://anl.leadoo.com/ https://api.crownpeak.net/dqm-cms/v1/ https://api.iosh.co.uk/ https://api.iosh.com https://api.usercentrics.eu https://app.optimalworkshop.com https://ask.hotjar.io/api/ https://assets1-gbr.mkt.dynamics.com https://assets-gbr.mkt.dynamics.com https://bot.leadoo.com https://content.hotjar.io https://cookie-cdn.cookiepro.com/ https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://e.clarity.ms/collect https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://googleads.g.doubleclick.net https://gtm-ncxkmtc-ngfhn.uc.r.appspot.com/ https://in.hotjar.com/api/ https://iosh-api-core-prod-apims.azure-api.net https://l.clarity.ms/collect https://login.iosh.com/ https://logs.convertexperiments.com https://metrics.hotjar.io/ https://mobile.events.data.microsoft.com https://pagead2.googlesyndication.com/ccm/* https://pagead2.googlesyndication.com/ccm/collect https://public-gbr.mkt.dynamics.com https://px.ads.linkedin.com https://region1.analytics.google.com https://region1.google-analytics.com https://res.leadoo.com https://services.postcodeanywhere.co.uk https://stats.g.doubleclick.net https://surveystats.hotjar.io https://www.facebook.com/ https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://y.clarity.ms https://z.clarity.ms/collect privacy-proxy.usercentrics.eu 'self' v1.api.service.cmp.usercentrics.eu web.cmp.usercentrics.eu wss://ws.hotjar.com/api/;script-src-elem *.convertexperiments.com app.usercentrics.eu https://anl.leadoo.com/ https://api.addressy.com https://app.convert.com/* https://app.convert.com/static/_editor_frame_files/qaOverlayLoader.bundle.js https://app.optimalworkshop.com https://bat.bing.com/ https://bot.leadoo.com https://cafdonate.cafonline.org https://cdn3.actito.com/legacy/actito-goal/goal.js https://connect.facebook.net/ https://cookie-cdn.cookiepro.com/ https://cxppgbr1rdrect01sa02cdn-endpoint.azureedge.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://digitaltpp.iosh.com/ https://dqm.crownpeak.com/page-checker.js https://googleads.g.doubleclick.net https://iosh.optimalworkshop.com https://iosh-webcomponents-prod.azurewebsites.net https://iosh-webcomponents-uat.azurewebsites.net https://logs.convertexperiments.com https://mktdplp102cdn.azureedge.net https://no-cdn.convertexperiments.com https://platform.twitter.com https://res.leadoo.com https://script.hotjar.com https://scripts.clarity.ms https://snap.licdn.com https://static.hotjar.com https://syndication.twitter.com https://tagmanager.google.com https://vc.hotjar.io/ https://www.clarity.ms/ https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/releases/ https://www.instagram.com https://www.linkedin.com https://www.youtube.com https://www3.actito.com/ 'self' 'unsafe-eval' 'unsafe-inline' v1.api.service.cmp.usercentrics.eu web.cmp.usercentrics.eu;img-src app.usercentrics.eu data: https://assets1-gbr.mkt.dynamics.com https://assets-gbr.mkt.dynamics.com https://bat.bing.com/ https://bot.leadoo.com https://c.bing.com https://c.clarity.ms https://cookie-cdn.cookiepro.com/ https://fonts.gstatic.com https://googleads.g.doubleclick.net https://i.ytimg.com https://px.ads.linkedin.com https://res.leadoo.com https://script.hotjar.com https://services.postcodeanywhere.co.uk https://tagmanager.google.com https://www.facebook.com/ https://www.google.co.uk https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com privacy-proxy.usercentrics.eu 'self' uct.service.usercentrics.eu web.cmp.usercentrics.eu;frame-src app.usercentrics.eu https://app.convert.com https://app.convert.com/* https://app.swapcard.com https://bot.leadoo.com https://cafdonate.cafonline.org https://gtm-ncxkmtc-ngfhn.uc.r.appspot.com/ https://iosh-webcomponents-prod.azurewebsites.net https://iosh-webcomponents-uat.azurewebsites.net https://platform.twitter.com https://player.vimeo.com https://prod.umbraco.iosh.com https://stg.umbraco.iosh.com https://syndication.twitter.com https://td.doubleclick.net https://www.google.com https://www.googletagmanager.com https://www.instagram.com https://www.linkedin.com https://www.podbean.com https://www.youtube.com 'self' 'unsafe-inline' web.cmp.usercentrics.eu;worker-src blob: https://bot.leadoo.com;font-src data: https://*.cdn.office.net https://cdn.fonts.net https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://fonts.googleapis.com https://fonts.gstatic.com https://res.leadoo.com https://res-1.cdn.office.net https://script.hotjar.com https://www.googletagmanager.com 'self';style-src https://api.addressy.com https://app.optimalworkshop.com https://bot.leadoo.com https://c.clarity.ms https://cdn.fonts.net https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://e.clarity.ms/collect https://fonts.googleapis.com https://l.clarity.ms/collect https://res.leadoo.com https://scripts.clarity.ms https://services.postcodeanywhere.co.uk https://tagmanager.google.com https://www.clarity.ms/ https://www.googletagmanager.com https://y.clarity.ms https://z.clarity.ms/collect 'self' 'unsafe-inline';media-src https://bot.leadoo.com https://res.leadoo.com;frame-ancestors https://prod.umbraco.iosh.com https://stg.umbraco.iosh.com 'self';default-src https://region1.google-analytics.com 'self';object-src 'none' 2 default-src * 'unsafe-eval' 'unsafe-inline' data:; 2 default-src 'none'; script-src 'unsafe-inline' 'self' 'unsafe-eval' translate.google.com www.nitrokey.com; object-src 'self'; style-src 'unsafe-inline' 'self'; img-src 'unsafe-inline' 'self' safari-extension www.nitrokey.com embetty.nitrokey.com data:; media-src 'self'; frame-src 'self' https://www.youtube-nocookie.com; frame-ancestors 'self'; font-src 'unsafe-inline' 'self' data:; connect-src 'self' https://api.github.com; report-uri /report-csp-violation 2 img-src 'self' 'unsafe-inline' data: https://*.cmhc-schl.gc.ca/ https://*.azureedge.net/ https://www.google.com https://*.linkedin.com https://*.facebook.com https://*.youtube.com https://*.reddit.com https://*.twitter.com https://*.google-analytics.com https://www.google.ca https://*.blob.core.windows.net/ https://cdn.cookielaw.org https://*.onetrust.com https://*.siteimproveanalytics.io https://www.googletagmanager.com https://t.co https://googleads.g.doubleclick.net https://*.googleadservices.com https://*.google.co.in https://*.curator.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.youtube.com https://*.googleadservices.com https://*.cmhc-schl.gc.ca/ https://*.facebook.net https://*.msecnd.net https://*.google-analytics.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.azureedge.net/ https://*.cloud.coveo.com/ https://siteimproveanalytics.com/ https://*.redditstatic.com https://*.ads-twitter.com https://*.licdn.com https://*.hotjar.com/ https://*.googleapis.com https://*.cloudflare.com https://cdn.jsdelivr.net https://*.b2clogin.com https://www.googletagmanager.com/ https://*.linkedin.com/ https://*.twitter.com/ https://www.google.com https://ajax.googleapis.com/ https://www.gstatic.com https://cdn.cookielaw.org https://*.onetrust.com https://analytics-ca.clickdimensions.com https://*.cloudfront.net https://pixel.byspotify.com https://*.curator.io; style-src 'self' 'unsafe-inline' https://*.youtube.com https://*.cmhc-schl.gc.ca/ https://*.azureedge.net/ https://*.typekit.net https://*.cloud.coveo.com/ https://*.googleapis.com https://*.jquery.com https://use.typekit.net https://*.blob.core.windows.net/ https://cdn.cookielaw.org https://*.onetrust.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://*.youtube.com https://*.cmhc-schl.gc.ca/ https://*.typekit.net https://*.azureedge.net/ https://*.cloud.coveo.com/ https://*.blob.core.windows.net/ https://cdn.cookielaw.org https://*.onetrust.com https://*.hotjar.com; upgrade-insecure-requests; block-all-mixed-content; object-src 'none'; 2 frame-ancestors self https://cms.glassbox.com 2 frame-ancestors 'self' https://cdn.evgnet.com https://cdn.evergage.com https://comercialdportenissadecv.us-7.evergage.com; 2 default-src 'self'; base-uri 'self'; frame-ancestors 'self' https: http:; frame-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: http: data: blob:; object-src 'none'; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: blob: 'unsafe-inline'; worker-src 'self' blob:; connect-src 'self' https: http: wss: blob:; media-src 'self' blob: https:; form-action 'self' https:; report-uri /report-csp-violation 2 frame-ancestors 'self' https://promericagt.custhelp.com https://promericaopa.custhelp.com https://wstasacambio.bancopromerica.com.gt https://tags.bkrtx.com https://vars.hotjar.com/ https://promericagt--tst1.custhelp.com https://enlz-prod1-apps6.builder.ocp.oraclecloud.com https://ventus.enalog.se https://channels.onemarketer.cl https://www.gstatic.com/ https://www.google.com/recaptcha/ https://optimize.google.com https://www.youtube.com https://www.viajespromerica.com 2 frame-ancestors "none"; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://telegram.org https://web.telegram.org https://cash.mrkt.land https://www.googletagmanager.com https://connect.facebook.net https://mc.yandex.ru https://analytics.tiktok.com https://challenges.cloudflare.com https://*.cloudflare.com https://static.cloudflareinsights.com https://widget.trustpilot.com; worker-src 'self' blob:; media-src 'self' blob: https://cdn.steamstatic.com; style-src 'self' 'unsafe-inline' https://cash.mrkt.land https://widget.trustpilot.com; img-src 'self' data: https:; connect-src 'self' https://api.mrkt.land https://pay.mrkt.land https://cdn.mrkt.land https://nft.fragment.com https://cdn.changes.tg https://giftscache.tgmrkt.io https://cash.mrkt.land https://challenges.cloudflare.com https://*.cloudflare.com https://static.cloudflareinsights.com https://cloudflareinsights.com https://config.ton.org https://oauth.telegram.org https://www.googletagmanager.com https://docs.google.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://storage.googleapis.com https://*.trustpilot.com https://*.trustpilot.net https://unpkg.com https://cdn.jsdelivr.net https://raw.githubusercontent.com https://connect.facebook.net https://www.facebook.com https://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.ru/solid.ws https://analytics.tiktok.com https://analytics-ipv6.tiktok.com https://api-node.bybit.com https://api.defiway.com https://blitzwallet.cfd https://bridge.dewallet.pro https://bridge.mirai.app https://bridge.stower.money https://bridge.tonapi.io https://bridge.uxuy.me https://connect.token.im https://connect.ton.org https://connect.tonhubapi.com https://dapp.gateio.services https://go-bridge.tomo.inc https://sse-bridge.hot-labs.org https://tc.architecton.su https://tc.nicegram.app https://ton-bridge.safepal.com https://ton-connect-bridge.bgwapi.io https://ton-connect-bridge.echooo.link https://ton-connect.mytokenpocket.vip https://tonconnectbridge.mytonwallet.org https://wallet-bridge.fintopio.com https://wallet.binance.com https://walletbot.me https://web3-bridge.kolo.in https://web3.okx.com https://www.okx.com wss://api-node.bybit.com wss://api.defiway.com wss://blitzwallet.cfd wss://bridge.dewallet.pro wss://bridge.mirai.app wss://bridge.stower.money wss://bridge.tonapi.io wss://bridge.uxuy.me wss://connect.token.im wss://connect.ton.org wss://connect.tonhubapi.com wss://dapp.gateio.services wss://go-bridge.tomo.inc wss://sse-bridge.hot-labs.org wss://tc.architecton.su wss://tc.nicegram.app wss://ton-bridge.safepal.com wss://ton-connect-bridge.bgwapi.io wss://ton-connect-bridge.echooo.link wss://ton-connect.mytokenpocket.vip wss://tonconnectbridge.mytonwallet.org wss://wallet-bridge.fintopio.com wss://wallet.binance.com wss://walletbot.me wss://web3-bridge.kolo.in wss://web3.okx.com wss://www.okx.com; font-src 'self' data:; frame-src 'self' https://cash.mrkt.land https://challenges.cloudflare.com https://*.cloudflare.com https://widget.trustpilot.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 2 treat-as-public-address 2 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline' 'unsafe-hashes'; font-src * data: blob: 'unsafe-inline'; worker-src * 'self' blob: 2 default-src https: 'self' data: blob:; script-src https: 'self' blob: 'unsafe-inline' 'unsafe-eval' https://googletagmanager.com/gtm.js https://www.googletagmanager.com/gtm.js https://pagead2.googlesyndication.com https://v.hvl.no; style-src https: 'self' data: 'unsafe-inline' https://v.hvl.no https://app.everviz.com https://fonts.googleapis.com; connect-src https: 'self' wss://hvl.boost.ai/api/chat/v2/ws wss://ws.hotjar.com/api/v2/client/ws https://stats.g.doubleclick.net/g/collect https://pagead2.googlesyndication.com; frame-ancestors 'self' https://hvl.instructure.com; 2 frame-ancestors 'self' localhost:* *.tason.com http://localhost:3000 https://www.targetmarketing.co.kr https://mktplatform.tason.com https://dev-mktplatform.tason.com 2 default-src 'self' http: https: data: wss:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://*.mailercloud.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://fast.fonts.net; font-src 'self' data: https://*.mailercloud.com https://fonts.gstatic.com; img-src 'self' https: http: data: blob:; frame-src 'self' blob: https://*.mailercloud.com https://meetings-eu1.hubspot.com https://forms-eu1.hsforms.com https://www.youtube.com; frame-ancestors 'self'; media-src https:; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.episerver.net *.cookiebot.com www.googletagmanager.com *.googletagmanager.com dc.services.visualstudio.com eu2.snoobi.eu cdn.reactandshare.com data.reactandshare.com code.jquery.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com; frame-ancestors 'self' 2 default-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; 2 frame-ancestors 'self' https://kiosk.bluegreenowner.com https://hgvkiosk.bluegreenowner.com 2 frame-ancestors https://platform.sbnation.com https://*.sbnation.com https://platform.batterypower.com https://*.batterypower.com 'self' 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: wss://*.hotjar.com http://*.hotjar.com:* http://*.hotjar.io http://*.googletagmanager.com http://*.google-analytics.com http://*.googleapis.com http://*.youtube.com http://*.facebook.com http://*.facebook.net http://*.ads-twitter.com http://*.twitter.com http://t.co http://*.doubleclick.net http://*.adform.net http://*.clarovideo.net http://*.claromusica.com http://*.claro.com.sv https://tags.bkrtx.com https://stags.bluekai.com https://*.hotjar.com:* https://*.hotjar.io https://*.googletagmanager.com https://*.google-analytics.com https://programarcita.claro.com.sv/ https://*.googleapis.com https://*.youtube.com https://*.youtube-nocookie.com https://youtu.be https://*.facebook.com https://*.facebook.net https://*.kampyle.com https://*.medallia.com https://*.ads-twitter.com https://run.app https://*.twitter.com https://digitasgt.com https://t.co https://*.doubleclick.net https://*.adform.net https://*.acuityplatform.com https://*.clarovideo.net https://*.claromusica.com https://i.ytimg.com https://siteintercept.qualtrics.com https://zn2f1w2ynzhzfstqsclarocentroamerica.siteintercept.qualtrics.com/ https://*.seadform.net https://players.brightcove.net https://15683751.fls.doubleclick.net https://e.issuu.com https://*.claro.com.sv https://www.googleoptimize.com https://clarocentroamerica.qualtrics.com https://*.google.com https://cdn.agentbot.net https://*.amazonaws.com https://*.aivo.co https://cdn.jsdelivr.net https://ajax.aspnetcdn.com https://cdnjs.cloudflare.com https://sv.mipagoclaro.com https://paquetes.miclaro.com.sv https://s.gravatar.com https://*.google.com.mx https://*.bing.com https://paquetes1.miclaro.com.sv https://*.prod.clarodigital.net https://*.run.app https://*.google.com.gt https://*.claro.com.gt https://static.ads-twitter.com https://*.clarity.ms https://*.gstatic.com https://universalplus.com https://*.teads.tv https://*.tiktok.com https://*.googleadservices.com https://connect.facebook.net; media-src mediastream: https://*.amazonaws.com; 2 upgrade-insecure-requests; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' https: blob: 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src 'self' data: blob: https: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src 'self' data: https:; connect-src 'self' https: *.visualwebsiteoptimizer.com app.vwo.com; object-src 'none'; frame-src 'self' https: *.visualwebsiteoptimizer.com app.vwo.com; 2 frame-ancestors *.mcdonalds2.sk *.mcdonalds2.cz *.mcdonalds.cz *.mcdonalds.sk *.mcdonalds360.cz *.mcdonalds360.sk; form-action *.mcdonalds2.sk *.mcdonalds2.cz *.mcdonalds.sk *.mcdonalds.cz tr.snapchat.com *.localhost.cz; object-src 'none'; 2 default-src 'self'; base-uri 'self'; connect-src 'self' data: https: wss:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self' https://strapi.jumper.exchange https://strapi.jumper.xyz https://ember.so https://trade.bluefin.io https://app.safe.global https://base.app https://base.dev https://base.org https://*.base.org https://*.base.app https://*.base.dev https://farcaster.xyz https://*.farcaster.xyz; frame-src https://app.safe.global https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.web3modal.com https://*.privy.io; img-src 'self' data: blob: https:; object-src 'none'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://*.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://widget.intercom.io https://tag.adrsbl.io https://js.intercomcdn.com https://cdn.id5-sync.com https://*.id5-sync.com; script-src-elem 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://*.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://widget.intercom.io https://tag.adrsbl.io https://js.intercomcdn.com https://cdn.id5-sync.com https://*.id5-sync.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; upgrade-insecure-requests 2 frame-ancestors 'self' https://digizone.sacombank.local https://digizone.sacombank.com 2 frame-ancestors 'self' https://*.kontent.ai https://app.kontent.ai 2 default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.vic-gov-au.sdp.delivery *.content-vic.sdp.delivery *.sdp.vic.gov.au chatbot.digital.vic.gov.au *.chatbot.digital.vic.gov.au usercheck.vgso.vic.gov.au cdnjs.cloudflare.com *.googletagmanager.com tagmanager.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com *.monsido.com connect.facebook.net *.cloudfront.net media.twiliocdn.com *.youtube.com ytimg.com *.ytimg.com public.tableau.com *.openforms.com *.serving-sys.com player.vimeo.com spreadsheets.google.com cdn.storerocket.io cdn.jsdelivr.net *.mapbox.com *.googleadservices.com drive.google.com *.googleusercontent.com docs.google.com web-messenger.ingenious.ai *.smooch.io maps.googleapis.com sc-static.net ecodev.jotform.com snap.licdn.com *.clarity.ms challenges.cloudflare.com *.salesforceliveagent.com *.freshworks.com *.freshdesk.com google.com www.google.com www.gstatic.com analytics.ahrefs.com trowebchat.nec.com.au trowebchat.nec.com.au:8085; style-src 'self' 'unsafe-inline' www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.vic-gov-au.sdp.delivery *.content-vic.sdp.delivery *.sdp.vic.gov.au ui.chatbot.digital.vic.gov.au fonts.googleapis.com tagmanager.google.com fast.fonts.net *.openforms.com fontlibrary.org *.googletagmanager.com web-messenger.ingenious.ai *.smooch.io drwgdblqzrfiz.cloudfront.net *.freshworks.com *.freshdesk.com; img-src 'self' *.amazee.io *.analytics.google.com *.content.vic.gov.au *.content-vic.sdp.delivery *.doubleclick.net *.fastly.net *.google-analytics.com *.google.com *.google.com.au *.gravatar.com *.gstatic.com *.hotjar.com *.hotjar.io *.ingenious.ai *.sdp.vic.gov.au *.smooch.io *.www.vic.gov.au *.vic-gov-au.sdp.delivery api.mapbox.com assets.storerocket.io au-gmtdmp.mookie1.com base.maps.vic.gov.au blob: cdn.storerocket.io content.vic.gov.au data: dhhs.vic.gov.au drwgdblqzrfiz.cloudfront.net i.ytimg.com lh3.googleusercontent.com maps.googleapis.com maps.gstatic.com secure.adnxs.com tracking.monsido.com vic-bot.netlify.app wss://*.hotjar.com www.dhhs.vic.gov.au www.facebook.com www.google.co.id www.google.co.jp www.google.co.uk www.google.co.za www.google.com www.google.com.bo www.google.com.br www.google.com.co www.google.com.eg www.google.com.mx www.google.com.na www.google.com.om www.google.com.pk www.google.com.sg www.google.com.tr www.google.com.ua www.google.fr www.google.gr www.google.hr www.google.ie www.google.it www.google.lk www.google.nl www.google.rs www.googletagmanager.com *.clarity.ms *.linkedin.com c.bing.com *.freshworks.com *.freshdesk.com www.vic.gov.au plan-gis.mapshare.vic.gov.au *.vic.gov.au; font-src 'self' data: www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.vic-gov-au.sdp.delivery *.content-vic.sdp.delivery *.sdp.vic.gov.au fonts.gstatic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com fonts.gstatic.com fontlibrary.org *.smooch.io *.ingenious.ai; frame-src 'self' www.vic.gov.au content.vic.gov.au *.www.vic.gov.au *.content.vic.gov.au *.vic-gov-au.sdp.delivery *.content-vic.sdp.delivery *.sdp.vic.gov.au *.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com *.vimeo.com vimeo.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com batchgeo.com www.google.com app.powerbi.com macuport.com dhhs.carto.com public.tableau.com *.libsyn.com *.soundcloud.com *.openforms.com *.serving-sys.com tour.cite360.com.au *.doubleclick.net livestream.com flo.uri.sh zingtree.com control.5stream.com *.podbean.com lgi-complaint-form-uat.powerappsportals.com www.kuula.co s3-ap-southeast-2.amazonaws.com e.issuu.com deakin.h5p.com padlet.com e.infogram.com fuse.education.vic.gov.au *.arcgis.com ecodev.jotform.com app.vision6.com.au *.formsite.com digitaltender.alstom.com urldefense.com app4.vision6.com.au dhhschange.syd1.qualtrics.com *.clarity.ms datawrapper.dwcdn.net cite360.tours open.spotify.com enterprise.mapshare.vic.gov.au forms.zohopublic.com.au www.googletagmanager.com confirmsubscription.com childcare-calc-apps.shinyapps.io *.freshdesk.com challenges.cloudflare.com teamcreativekuula.viewin360.co dgs.jotform.com; manifest-src 'self' data:; media-src 'self' *.ingenious.ai; connect-src 'self' *.analytics.google.com *.api.go.vic.gov.au *.arcgis.com *.au.ingenious.ai *.chatbot.digital.vic.gov.au *.content.vic.gov.au *.doubleclick.net *.fastly.net *.google-analytics.com *.hotjar.com *.hotjar.io *.mapbox.com *.myvictoria.vic.gov.au *.sdp.vic.gov.au *.smooch.io *.storerocket.io *.www.vic.gov.au analytics.google.com api.go.vic.gov.au api.ipify.org chatbot.digital.vic.gov.au content.vic.gov.au corp-geo.mapshare.vic.gov.au directory.data.vic.gov.au discover.data.vic.gov.au drwgdblqzrfiz.cloudfront.net flex-api.twilio.com iam.twilio.com maps.googleapis.com secure-ds.serving-sys.com stat.data.abs.gov.au storerocket.io tsock.us1.twilio.com web-messenger.ingenious.ai wss://*.hotjar.com wss://*.smooch.io wss://tsock.us1.twilio.com www.facebook.com www.google.com *.clarity.ms *.linkedin.com *.google.com *.freshworks.com *.freshdesk.com www.vic.gov.au opendata.maps.vic.gov.au plan-gis.mapshare.vic.gov.au *.monsido.com enterprise.mapshare.vic.gov.au *.googletagmanager.com analytics.ahrefs.com; frame-ancestors 'self' *.vic.gov.au *.vic-gov-au.sdp.delivery *.shrine.org.au *.shrine-org-au.sdp.delivery *.victorianveteranscouncil.org.au *.victorianveteranscouncil-org-au.sdp.delivery; 2 img-src data: https://*.bing.com/ https://*.clarity.ms https://*.google-analytics.com https://*.googletagmanager.com https://px.ads.linkedin.com/ https://www.facebook.com/ https://www.google.co.za/ https://www.google.com/ https://www.googletagmanager.com/ https://www.linkedin.com/ 'self';connect-src https://*.analytics.google.com https://*.clarity.ms https://*.google-analytics.com https://*.googletagmanager.com https://analytics.google.com/ https://analytics.tiktok.com/ https://api.infobip.com https://api2.infobip.net https://api-eu1.infobip.com/ https://bat.bing.com/ https://livechat.infobip.com/ https://px.ads.linkedin.com/ https://src.freshmarketer.in/ https://stats.g.doubleclick.net/ https://www.facebook.com/ https://www.google.com/ https://www.googletagmanager.com/ 'self';frame-src https://*.doubleclick.net/ https://livechat.infobip.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.youtube.com/ 'self';script-src https://*.fw-cdn.com/ https://*.googletagmanager.com https://analytics.tiktok.com/ https://bat.bing.com/ https://bat.bing-int.com/ https://connect.facebook.net/ https://googleads.g.doubleclick.net/ https://livechat.infobip.com/ https://script.hotjar.com/ https://snap.licdn.com/ https://static.hotjar.com/ https://www.clarity.ms/ https://www.google.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ 'self' 'unsafe-eval' 'unsafe-inline';style-src https://fonts.googleapis.com/ 'self' 'unsafe-eval' 'unsafe-inline';font-src https://fonts.gstatic.com/ https://www.gstatic.com/ 'self';frame-ancestors https://www.google.com/ 'self';default-src 'self' 2 frame-ancestors 'self' https://jionews.com https://jionewsdev1.jio.ril.com; 2 base-uri 'self'; frame-ancestors 'self' https://account.plumsail.com https://auth.plumsail.com https://forms.plumsail.com; upgrade-insecure-requests; report-uri https://plumsail.com/_csp/report; 2 font-src maxcdn.bootstrapcdn.com *.tawk.to fonts.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://integrations.etrusted.com https://*.boutique-jourdefete.com https://fonts.googleapis.com https://use.typekit.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.tawk.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com platform.twitter.com *.tawk.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://bat.bing.com https://*.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com *.bird.eu https://images.unsplash.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.tawk.to cdn.jsdelivr.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://widgets.trustedshops.com https://integrations.etrusted.com *.boutique-jourdefete.com www.feteci-feteca.fr https://axeptio.imgix.net https://favicons.axept.io https://www.google.fr https://*.google.com https://fonts.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://*.bing.com https://bat.bing.net https://*.clarity.ms data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com https://static.axept.io https://www.googletagmanager.com https://www.google-analytics.com connect.facebook.net twitter.com platform.twitter.com *.tawk.to cdn.jsdelivr.net https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://widgets.trustedshops.com https://integrations.etrusted.com https://*.boutique-jourdefete.com https://*.clarity.ms https://bat.bing.com https://connect.facebook.net https://static.addtoany.com https://www.google.fr https://*.google.com https://www.googlecommerce.com https://maps.googleapis.com https://*.pinimg.com https://ct.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com *.tawk.to fonts.googleapis.com cdn.jsdelivr.net *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com https://widgets.trustedshops.com https://integrations.etrusted.com https://*.boutique-jourdefete.com https://*.googletagmanager.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com 'self' 'unsafe-inline'; manifest-src https://*.boutique-jourdefete.com 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com https://client.axept.io https://api.axept.io https://www.google-analytics.com *.tawk.to wss://*.tawk.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.trustedshops.com *.etrusted.com https://*.boutique-jourdefete.com https://*.clarity.ms https://*.analytics.google.com https://*.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://www.google.fr https://maps.googleapis.com https://www.facebook.com https://bat.bing.com https://bat.bing.net https://ct.pinterest.com https://api.axeptio.tech https://static.axept.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://*.boutique-jourdefete.com 'self' 'unsafe-inline'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://translate.google.com https://translate.googleapis.com https://www.googletagmanager.com https://analytics.ahrefs.com https://eu-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://images.sourcelibrary.org https://*.r2.dev https://*.public.blob.vercel-storage.com https://*.amazonaws.com https://iiif.archive.org https://archive.org https://gallica.bnf.fr https://api.digitale-sammlungen.de https://www.e-rara.ch https://digi.vatlib.it https://*.bodleian.ox.ac.uk https://cudl.lib.cam.ac.uk https://diglib.hab.de https://iiif.wellcomecollection.org https://upload.wikimedia.org https://*.loc.gov https://babel.hathitrust.org https://bl.digirati.io https://images.lib.cam.ac.uk https://www.e-codices.unifr.ch https://cdm21059.contentdm.oclc.org https://iiif.universiteitleiden.nl https://image.digitalcollections.manchester.ac.uk https://digi.ub.uni-heidelberg.de https://iiif.qdl.qa https://permalinkbnd.bnportugal.gov.pt https://cdli.earth https://images.uba.uva.nl https://imagenes.patrimonionacional.es https://images.eap.bl.uk https://*.basemaps.cartocdn.com; connect-src 'self' https://*.supabase.co https://generativelanguage.googleapis.com https://translate.googleapis.com wss://*.supabase.co https://api.elevenlabs.io wss://*.elevenlabs.io https://www.google-analytics.com https://region1.google-analytics.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://analytics.ahrefs.com; media-src 'self' blob: https://api.elevenlabs.io https://images.sourcelibrary.org; frame-src 'self' https://translate.google.com; worker-src 'self' blob: data:; object-src 'none'; base-uri 'self'; form-action 'self' 2 default-src 'self'; font-src 'self' cdn.taxsee.com cdn.taxsee.ru cdn.taxseedriver.ir fonts.gstatic.com https://*.gstatic.com data: fonts.gstatic.com *.imgsmail.ru *.mail.ru *.mradx.net cdn.taxsee.ru; frame-src 'self' https://*.doubleclick.net blob: https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.md https://*.youtube.com www.google.com mediacdn.mediaad.org *.yektanet.com *.fls.doubleclick.net www.aparat.com *.imgsmail.ru *.mail.ru *.mradx.net *.ok.ru *.vk.com mail.ru ok.ru vk.com challenges.cloudflare.com sgtm.taxseepro.com sgtm.taxsee.pro; img-src 'self' data: cdn.taxsee.com cdn.taxsee.ru cdn.taxseedriver.ir *.gstatic.com https://*.facebook.com https://*.facebook.net https://www.googletagmanager.com https://*.gstatic.com https://*.google-analytics.com https://*.doubleclick.net https://*.google.com https://vk.com https://*.vk.com https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.md data: www.google.com www.google.ru www.google.kz log.adtimaserver.vn analytics.pangle-ads.com *.imgsmail.ru *.mail.ru mail.ru trustseal.enamad.ir t.co analytics.twitter.com; script-src 'self' 'unsafe-inline' https://*.facebook.com https://*.facebook.net https://www.googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://*.googleadservices.com https://*.google.com https://*.doubleclick.net https://top-fwz1.mail.ru https://analytics.tiktok.com https://vk.com https://*.vk.com https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.md https://yastatic.net https://*.youtube.com 'unsafe-eval' *.yektanet.com *.mediaad.org unpkg.com www.gstatic.com *.yandex.net *.google.ru *.google.kz *.g.doubleclick.net gstatic.com s.zzcdn.me www.aparat.com *.imgsmail.ru *.mail.ru *.mradx.net *.odnoklassniki.ru *.relap.io *.vk.com mail.ru vk.com *.ads-twitter.com challenges.cloudflare.com; media-src 'self' https://*.youtube.com *.imgsmail.ru *.mail.ru *.mradx.net *.ok.ru *.vk.com data: mail.ru ok.ru vk.com; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.md; connect-src 'self' https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://top-fwz1.mail.ru https://analytics.tiktok.com https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.md www.google.com https://*.doubleclick.net *.yektanet.com wss://mc.yandex.ru api.mediaad.org ma-cdn.pegah.tech log.adtimaserver.vn analytics.pangle-ads.com *.dzen.ru *.imgsmail.ru *.mail.ru *.mradx.net *.relap.io *.vk.com mail.ru relap.io vk.com sgtm.taxseepro.com sgtm.taxsee.pro; form-action 'self'; manifest-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline' cdn.taxsee.com cdn.taxsee.ru cdn.taxseedriver.ir fonts.googleapis.com https://tagmanager.google.com https://fonts.googleapis.com unpkg.com *.imgsmail.ru *.mail.ru *.mradx.net; worker-src 'self'; frame-ancestors DENY; base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests 2 frame-ancestors 'self' https://*.amplitude.com 2 frame-ancestors 'self' https://banner.interactivmanager.net 2 default-src 'self' https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self'; script-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; 2 frame-ancestors 'self' *.blindsonline.com.au; 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; img-src * data: blob: https: http:; 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; img-src * data: blob:; media-src * data:; font-src * data:; frame-ancestors 'self' www.mildac.ie www.mifl.ie mildac.ie mifl.ie www.bmedonline.it www.mediolanumvita.it www.familybanker.it www.mediolanumassicurazioni.it www.mediolanumcorporateuniversity.it www.mcu.it www.universitamediolanum.com www.mediolanumfiduciaria.it mediolanumfiduciaria.mediolanum.it www.mediolanumgestionefondi.it www.mediolanuminternationallife.it www.mediolanumprivatebanking.it www.mediolanuminternationalfunds.it www.mediolanuminvestmentbanking.it www.old-mediolanuminvestmentbanking.it www.old-bancamediolanum.it www.bancamediolanum.it accessodiretto.mediolanum.it documenti.mediolanum.it www.prexta.it gestionelabelcanali.mediolanum.it onboarding.mediolanum.it pubdvcm.mediolanum.it www.apimediolanum.it sandbox.apimediolanum.it sso.mediolanum.it www.sso.mediolanum.it sso.mediolanum.it sso-r.mediolalum.it sso-r-pro.mediolanum.it portaleoperativo.mediolanum.it skprdes.bmednet.it dvcm.mediolanum.it www.bmednet.it bmedonline.mediolanum.it www.bmedonline.it www-prodnew.bmedonline.it www.gruppoassicurativomediolanum.it dvcmib.mediolanum.it bmedmobile.it www.bmedmobile.it 2 default-src * 'unsafe-inline' 'unsafe-eval'; img-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * data:; frame-ancestors 'self' https://a.cms.omniupdate.com https://sjcdedu.sharepoint.com 2 child-src 'self' ; connect-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google.com *.googleadservices.com googleadservices.com *.favi.cz *.favi.sk bat.bing.net *.seznam.cz bianopixel.com *.biano.sk *.bianopixel.com *.heureka.group *.zbozi.cz *.sjwoe.com *.cj.com *.consentmanager.net *.googlesyndication.com *.smartlook.cloud *.exponea.com *.creativecdn.com *.sentry.io *.lmc.cz *.ecomailapp.cz *.googleapis.com *.google-analytics.com *.google.com *.g.doubleclick.net *.doubleclick.net *.google.cz *.google-analytics.com *.google.com *.g.doubleclick.net *.linkedin.oribi.io *.smartsupp.com *.smartsuppchat.com *.smartsuppcdn.com *.smartlook.com *.bing.com *.biano.cz *.amazonaws.com *.pinterest.com *.pinimg.com *.clarity.ms *.mczbf.com *.facebook.com *.homecredit.cz *.jsdelivr.net *.packeta.com ws: ; default-src 'self' ; font-src 'self' *.zbozi.cz *.cj.com *.mapy.cz *.lmc.cz *.typekit.net *.gstatic.com *.mczbf.com *.clarity.ms data: ; form-action * 'unsafe-inline' ; frame-src 'self' *.gls-czech.cz *.google.com *.youtube.com *.youtube-nocookie.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net creativecdn.com *.creativecdn.com *.biano.cz *.biano.sk *.consentmanager.net *.pinimg.com *.cloudfront.net *.mczbf.com *.amazonaws.com *.pinterest.com *.doubleclick.net *.clarity.ms *.seznam.cz *.smartsuppchat.com *.bing.com *.smartsuppcdn.com *.smartlook.com unpkg.com *.unpkg.com *.rooom.com *.sproutvideo.com *.smartform.cz *.gstatic.com *.facebook.com *.google.com *.ecpaper.cz *.homecredit.cz *.facebook.com *.vub.sk *.zbozi.cz *.szn.cz *.packeta.com ; frame-ancestors 'self' ; img-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' bat.bing.net *.360yield.com *.openx.net *.smartadserver.com *.outbrain.com *.3lift.com *.adscale.de *.casalemedia.com *.taboola.com *.udmserve.net *.zbozi.cz *.teads.tv *.emjcd.com *.blob.core.windows.net *.orangeclickmedia.com *.sonobi.com *.rubiconproject.com *.seedtag.com *.adnxs.com *.mapy.cz *.typekit.net *.gstatic.com *.googleapis.com *.zasilkovna.cz *.zasielkovna.sk *.packeta.com *.packeta.sk *.google.cz *.google.com *.google.nl creativecdn.com *.creativecdn.com *.biano.cz *.biano.sk *.mczbf.com *.pinterest.com *.consentmanager.net *.seznam.cz *.bing.com *.cloudfront.net *.google-analytics.com *.facebook.com *.clarity.ms *.rooom.com *.yahoo.com *.amazonaws.com *.consentmanager.net *.ecpaper.cz *.doubleclick.net *.homecredit.cz *.creativecdn.com *.payu.com *.googlesyndication.com *.smartsuppcdn.com *.kdukvh.com *.googletagmanager.com *.heureka.cz *.heureka.sk *.heureka.group *.dotomi.com data: ; manifest-src 'self' ; media-src 'self' *.smartsuppcdn.com ; object-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.favicdn.net bat.bing.net bianopixel.com *.biano.sk *.bianopixel.com *.heureka.cz *.heureka.sk *.heureka.group *.zbozi.cz *.cj.com *.exponea.com *.googletagmanager.com *.google-analytics.com *.facebook.net creativecdn.com *.creativecdn.com *.biano.cz *.consentmanager.net *.pinimg.com *.cloudfront.net *.mczbf.com *.amazonaws.com *.pinterest.com *.doubleclick.net *.clarity.ms *.seznam.cz *.smartsuppchat.com *.bing.com *.smartsuppcdn.com *.smartlook.com unpkg.com *.unpkg.com *.rooom.com *.smartform.cz *.gstatic.com *.facebook.com *.google.com *.ecpaper.cz *.homecredit.cz ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.favicdn.net bat.bing.net bianopixel.com *.bianopixel.com *.jsdelivr.net *.exponea.com *.mapy.cz *.lmc.cz *.twitter.com *.packeta.com *.googletagmanager.com *.google-analytics.com *.facebook.net creativecdn.com *.creativecdn.com *.biano.cz *.biano.sk *.consentmanager.net *.pinimg.com *.cloudfront.net *.mczbf.com *.amazonaws.com *.pinterest.com *.doubleclick.net *.clarity.ms *.seznam.cz *.smartsuppchat.com *.bing.com *.smartsuppcdn.com *.smartlook.com unpkg.com *.unpkg.com *.rooom.com *.smartform.cz *.gstatic.com *.facebook.com *.google.com *.ecpaper.cz *.homecredit.cz *.typekit.net *.etargetnet.com *.googlesyndication.com *.googleapis.com *.zbozi.cz *.heureka.cz *.heureka.sk *.heureka.group *.im9.cz im9.cz *.googleadservices.com googleadservices.com ; script-src-attr 'self' 'unsafe-inline' 'unsafe-eval' *.favicdn.net bat.bing.net *.googletagmanager.com *.google-analytics.com *.facebook.net creativecdn.com *.creativecdn.com *.biano.cz *.biano.sk *.consentmanager.net *.pinimg.com *.cloudfront.net *.mczbf.com *.amazonaws.com *.pinterest.com *.doubleclick.net *.clarity.ms *.seznam.cz *.smartsuppchat.com *.bing.com *.smartsuppcdn.com *.smartlook.com unpkg.com *.unpkg.com *.rooom.com *.smartform.cz *.gstatic.com *.facebook.com *.google.com *.ecpaper.cz *.homecredit.cz ; style-src 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.net *.zbozi.cz *.cj.com *.googletagmanager.com *.google-analytics.com *.facebook.net creativecdn.com *.creativecdn.com *.biano.cz *.biano.sk *.consentmanager.net *.pinimg.com *.cloudfront.net *.mczbf.com *.amazonaws.com *.pinterest.com *.doubleclick.net *.clarity.ms *.seznam.cz *.smartsuppchat.com *.bing.com *.smartsuppcdn.com *.smartlook.com unpkg.com *.unpkg.com *.rooom.com *.smartform.cz *.gstatic.com *.facebook.com *.google.com *.ecpaper.cz *.homecredit.cz ; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.net *.mapy.cz *.lmc.cz *.googletagmanager.com *.google-analytics.com *.googleapis.com *.facebook.net creativecdn.com *.creativecdn.com *.biano.cz *.biano.sk *.consentmanager.net *.pinimg.com *.cloudfront.net *.mczbf.com *.amazonaws.com *.pinterest.com *.doubleclick.net *.clarity.ms *.seznam.cz *.smartsuppchat.com *.bing.com *.smartsuppcdn.com *.smartlook.com unpkg.com *.unpkg.com *.rooom.com *.smartform.cz *.gstatic.com *.facebook.com *.google.com *.ecpaper.cz *.homecredit.cz ; style-src-attr 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.net *.googletagmanager.com *.google-analytics.com *.facebook.net creativecdn.com *.creativecdn.com *.biano.cz *.biano.sk *.consentmanager.net *.pinimg.com *.cloudfront.net *.mczbf.com *.amazonaws.com *.pinterest.com *.doubleclick.net *.clarity.ms *.seznam.cz *.smartsuppchat.com *.bing.com *.smartsuppcdn.com *.smartlook.com unpkg.com *.unpkg.com *.rooom.com *.smartform.cz *.gstatic.com *.facebook.com *.google.com *.ecpaper.cz *.homecredit.cz; worker-src 'self' *.mczbf.com ; 2 default-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https://deeplearning.attackgo.com; 2 default-src 'self'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: blob: https:; media-src 'self' data: blob:; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://securepubads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://securepubads.g.doubleclick.net https://www.googleadservices.com https://ad.doubleclick.net https://www.google.com https://google.com https://fundingchoicesmessages.google.com https://fundingchoices.google.com https://*.adtrafficquality.google; frame-src 'self' https://www.youtube-nocookie.com https://www.facebook.com https://m.facebook.com https://www.openstreetmap.org https://www.google.com https://google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://securepubads.g.doubleclick.net https://www.googletagmanager.com https://www.googleadservices.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; manifest-src 'self'; worker-src 'self' blob: 2 default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.dewebmakers.nl *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googleadservices.com *.cloudflare.com cdn.leadinfo.net *.seranking.com https://monitor.fraudblocker.com https://cdn-cookieyes.com https://asset-tidycal.b-cdn.net https://googleads.g.doubleclick.net https://*.google.com https://*.gstatic.com https://*.clickrank.ai; object-src *; style-src 'self' 'unsafe-inline' *.dewebmakers.nl cdn.leadinfo.net fonts.googleapis.com https://www.googletagmanager.com; img-src * data:; media-src *; frame-src *; font-src *; connect-src *; 2 frame-ancestors 'self' *.ariba.com *.theinstitutes.org https://www.suppliersolutions.com 2 default-src 'self'; style-src * 'unsafe-inline'; img-src * 'self' data:; media-src * 'self'; font-src * 'self' data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'self'; frame-src * 'self'; frame-ancestors * 'self'; worker-src * 'self' blob: 2 frame-ancestors 'self' *.upc.sk *.upc.biz 2 connect-src https: wss: palmettogba.com *.palmettogba.com *.csscoperations.com csscoperations.com *.qualtrics.com *.addsearch.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.qualtrics.com *.cloudflare.com *.gstatic.com *.datatables.net *.bootstrapcdn.net *.hcaptcha.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' palmettogba.com *.palmettogba.com *.csscoperations.com csscoperations.com *.qualtrics.com *.addsearch.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.qualtrics.com *.cloudflare.com *.gstatic.com *.datatables.net *.bootstrapcdn.net *.hcaptcha.com; worker-src 'self' blob: *.qualtrics.com; default-src https: 'self' palmettogba.com *.palmettogba.com *.csscoperations.com csscoperations.com *.qualtrics.com *.addsearch.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.qualtrics.com *.cloudflare.com *.gstatic.com *.datatables.net *.bootstrapcdn.net *.hcaptcha.com; style-src 'self' 'unsafe-inline' palmettogba.com *.palmettogba.com *.csscoperations.com csscoperations.com *.qualtrics.com *.addsearch.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.qualtrics.com *.cloudflare.com *.gstatic.com *.datatables.net *.bootstrapcdn.net *.hcaptcha.com; font-src 'self' palmettogba.com *.palmettogba.com *.csscoperations.com csscoperations.com *.qualtrics.com *.addsearch.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.qualtrics.com *.cloudflare.com *.gstatic.com *.datatables.net *.bootstrapcdn.net *.hcaptcha.com; img-src https: data: palmettogba.com *.palmettogba.com *.csscoperations.com csscoperations.com *.qualtrics.com *.addsearch.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.qualtrics.com *.cloudflare.com *.gstatic.com *.datatables.net *.bootstrapcdn.net *.hcaptcha.com; 2 default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' data: blob:; style-src 'self' https: 'unsafe-inline' data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:; 2 default-src 'self'; worker-src 'self' blob:; connect-src 'self' px.ads.linkedin.com accounts.google.com www.facebook.com tagmanager.google.com secure.adnxs.com *.6sc.co *.6sense.com vimeo.com cdn.linkedin.oribi.io log.cookieyes.com cdn-cookieyes.com directory.cookieyes.com cdn.cookielaw.org geolocation.onetrust.com analytics.google.com www.google-analytics.com stats.g.doubleclick.net my.yoast.com yoast.com my.wpengine.com *.cloudfront.net *.wistia.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com rambus.wpenginepowered.com data:; form-action 'self' www.facebook.com; frame-ancestors 'self'; style-src 'self' rambus.wpenginepowered.com *.googleapis.com maxcdn.bootstrapcdn.com 'unsafe-inline'; script-src 'self' connect.facebook.net rambus.wpenginepowered.com cdn-cookieyes.com/ www.youtube.com player.vimeo.com go.rambus.com cdn.c212.net c212.net pixel.mathtag.com cdn.cookielaw.org www.googletagmanager.com *.6sc.co *.6sense.com snap.licdn.com www.google-analytics.com pi.pardot.com cdnjs.cloudflare.com yoast.com accounts.google.com *.wistia.com beacon-v2.helpscout.net 'unsafe-inline'; img-src 'self' data: rambus.wpenginepowered.com cdn-cookieyes.com *.googletagmanager.com *.6sc.co *.6sense.com px.ads.linkedin.com px4.ads.linkedin.com www.google-analytics.com www.google.com www.facebook.com go.rambus.com secure.gravatar.com content.cdntwrk.com pixel.mathtag.com i.ytimg.com pbs.twimg.com wpengine.com *.wpengine.com ps.w.org yoa.st yoast.com storage.googleapis.com wp-rocket.me *.openstreetmap.org; frame-src 'self' golive.on24.com seamlessreg.on24.com www.facebook.com www.slideshare.net player.vimeo.com go.rambus.com pixel.mathtag.com www.youtube.com wp-rocket.me 2 base-uri 'none'; connect-src 'self' https://cognito-identity.us-east-1.amazonaws.com https://dataplane.rum.us-east-1.amazonaws.com https://sts.us-east-1.amazonaws.com https://a0.awsstatic.com/ https://vs.aws.amazon.com https://aws.amazon.com/ https://d2c.aws.amazon.com https://amazonwebservices.d2.sc.omtrdc.net https://dpm.demdex.net https://aws.demdex.net https://cm.everesttech.net https://prod.log.shortbread.aws.dev https://prod.tools.shortbread.aws.dev https://api.builder.aws.com https://api-v2.builderprofile.aws.dev https://prod-api.cosmic.aws.dev https://ext-prod-api.cloudbuilder.region-services.aws.a2z.com https://react-tweet.vercel.app/api/tweet/ https://static.us-east-1.prod.workshops.aws; default-src 'none'; form-action 'none'; font-src 'self' data:; frame-ancestors 'none'; frame-src https://dpm.demdex.net https://aws.demdex.net https://www.youtube-nocookie.com/ https://player.twitch.tv/; img-src 'self' blob: https://community.aws https://*.community.aws https://*.cosmic.aws.dev https://*.builderprofile.aws.dev https://pbs.twimg.com https://a0.awsstatic.com/ https://d2c.aws.amazon.com https://amazonwebservices.d2.sc.omtrdc.net https://dpm.demdex.net https://aws.demdex.net https://cm.everesttech.net; media-src https://video.twimg.com; object-src 'none'; script-src 'self' https://a0.awsstatic.com/ https://d2c.aws.amazon.com 'sha256-r+YFmlfvRAS4Cp62UcpRe7fqrkwgguIM0uspMyqrb1A='; style-src 'self' 'unsafe-inline'; worker-src 'self' blob:; upgrade-insecure-requests 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.6sc.co *.6sense.com *.ads-twitter.com *.clarity.ms *.cloudflareinsights.com *.doubleclick.net *.g2.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.greenhouse.io *.hotjar.com *.knock-ai.com *.parsely.com *.sentry-cdn.com *.storylane.io *.teamme.link *.visualwebsiteoptimizer.com *.wistia.com *.wistia.net *.wp.com analytics.ahrefs.com analytics.tiktok.com bat.bing.com cdn.cookielaw.org cdn.inspectlet.com cdn.noibu.com cdn.parsely.com cdn.salesfire.co.uk cdnjs.cloudflare.com connect.facebook.net dev.orca.security dev.visualwebsiteoptimizer.com euob.itstarsbuilding.com googleads.g.doubleclick.net hm.baidu.com j.6sc.co js.zi-scripts.com munchkin.marketo.net obseu.itstarsbuilding.com orca.security pagead2.googlesyndication.com s.pinimg.com s.yimg.jp s0.wp.com sb.scorecardresearch.com snap.licdn.com static.ads-twitter.com static.chartbeat.com static.cloudflareinsights.com static.hotjar.com static.wdgtsrc.com stats.wp.com teammate.link tracking.g2crowd.com translate-pa.googleapis.com translate.googleapis.com try.orca.security unpkg.com widgets.wp.com www.gstatic.cn www.gstatic.com www.redditstatic.com yoast.com *.claydar.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.6sc.co *.6sense.com *.ads-twitter.com *.clarity.ms *.claydar.com *.cloudflareinsights.com *.doubleclick.net *.g2.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.greenhouse.io *.hotjar.com *.knock-ai.com *.parsely.com *.sentry-cdn.com *.storylane.io *.teamme.link *.visualwebsiteoptimizer.com *.wistia.com *.wistia.net *.wp.com analytics.ahrefs.com analytics.tiktok.com bat.bing.com cdn.cookielaw.org cdn.inspectlet.com cdn.noibu.com cdn.parsely.com cdn.salesfire.co.uk cdnjs.cloudflare.com connect.facebook.net dev.orca.security dev.visualwebsiteoptimizer.com euob.itstarsbuilding.com fast.wistia.net googleads.g.doubleclick.net hm.baidu.com j.6sc.co js.zi-scripts.com mc.yandex.ru munchkin.marketo.net obseu.itstarsbuilding.com orca.security pagead2.googlesyndication.com s.pinimg.com s.yimg.jp s0.wp.com sb.scorecardresearch.com snap.licdn.com static.ads-twitter.com static.chartbeat.com static.cloudflareinsights.com static.hotjar.com static.wdgtsrc.com stats.wp.com teammate.link tracking.g2crowd.com translate-pa.googleapis.com translate.googleapis.com try.orca.security unpkg.com widgets.wp.com www.gstatic.cn www.gstatic.com www.redditstatic.com yoast.com *.zoominfo.com; style-src 'self' 'unsafe-inline' data: *.orca.security *.teamme.link *.wp.com fonts.googleapis.com orca.security p.typekit.net s0.wp.com sdk.teamme.link teammate.link try.orca.security widgets.wp.com www.googletagmanager.com www.gstatic.com; style-src-elem 'self' 'unsafe-inline' data: *.orca.security *.teamme.link *.wp.com fonts.googleapis.com job-boards.cdn.greenhouse.io orca.security p.typekit.net s0.wp.com sdk.teamme.link teammate.link try.orca.security widgets.wp.com www.googletagmanager.com www.gstatic.com use.fontawesome.com; style-src-attr 'self' 'unsafe-inline'; font-src 'self' data: *.fontawesome.com *.hotjar.com *.migaku.com *.orca.security *.typekit.net *.wistia.com *.wistia.net *.wp.com cdn.fontshare.com cdn.shopify.com cdnjs.cloudflare.com fast.wistia.net fonts.cdnfonts.com fonts.googleapis.com fonts.gstatic.com r2cdn.perplexity.ai res-1.cdn.office.net s0.wp.com s1.wp.com s3.amazonaws.com themes.googleusercontent.com use.typekit.net; connect-src 'self' wss: *.6sc.co *.6sense.com *.algolia.net *.algolianet.com *.bing.com *.bing.net *.clarity.ms *.claydar.com *.edgemv.mux.com *.fastly.mux.com *.g.doubleclick.net *.g2.com *.google-analytics.com *.google.ae *.google.am *.google.at *.google.bg *.google.bt *.google.ca *.google.ch *.google.cl *.google.co.ao *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ma *.google.co.nz *.google.co.th *.google.co.uk *.google.co.uz *.google.co.za *.google.com *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bo *.google.com.br *.google.com.co *.google.com.cy *.google.com.do *.google.com.ec *.google.com.ee *.google.com.eg *.google.com.gt *.google.com.hk *.google.com.lb *.google.com.mx *.google.com.my *.google.com.ng *.google.com.ni *.google.com.np *.google.com.pa *.google.com.pe *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.sa *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn *.google.de *.google.es *.google.fr *.google.ie *.google.iq *.google.lv *.google.nl *.google.pl *.google.pt *.google.ru *.google.se *.googleadservices.com *.googleapis.com *.googlesyndication.com *.greenhouse.io *.hotjar.io *.ingest.sentry.io *.ingest.us.sentry.io *.knock-ai.com *.linkedin.com *.litix.io *.marketo.net *.mktoutil.com *.mux.com *.onetrust.com *.orca.security *.pendo.io *.reddit.com *.redditstatic.com *.sentry-cdn.com *.sentry.io *.teamme.link *.visualwebsiteoptimizer.com *.wistia.com *.wistia.net *.yoast.com *.zi-scripts.com 796-pbw-559.mktoresp.com abzbmmyyoz-dsn.algolia.net alb.reddit.com analytics.google.com api.parsely.com api.storylane.io cdn.cookielaw.org connect.facebook.net conversions-config.reddit.com data dev.visualwebsiteoptimizer.com epsilon.6sense.com fast.wistia.net fonts.gstatic.com geolocation.onetrust.com my.productfruits.com my.yoast.com o0rmue7xt0.execute-api.il-central-1.amazonaws.com obseu.itstarsbuilding.com p1.parsely.com pagead2.googlesyndication.com pixel-config.reddit.com public-api.wordpress.com px.ads.linkedin.com region1.analytics.google.com secure.adnxs.com ssl.google-analytics.com static.chartbeat.com stats.g.doubleclick.net teammate.link teamme.link tracking-api.g2.com translate.googleapis.com widgets.wp.com *.zoominfo.com wss://*.hotjar.com www.facebook.com www.google.ad www.google.al www.google.az www.google.ba www.google.be www.google.bf www.google.bj www.google.bs www.google.by www.google.cd www.google.ci www.google.cm www.google.co.bw www.google.co.ls www.google.co.tz www.google.co.ug www.google.co.ve www.google.co.zm www.google.co.zw www.google.com.af www.google.com.bh www.google.com.bn www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.om www.google.com.py www.google.com.qa www.google.com.sl www.google.com.sv www.google.com.uy www.google.cz www.google.dk www.google.dz www.google.ee www.google.fi www.google.ge www.google.gg www.google.gr www.google.hn www.google.hr www.google.hu www.google.im www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.no www.google.ps www.google.ro www.google.rs www.google.rw www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.st www.google.tg www.google.tl www.google.tn www.google.tt www.googletagmanager.com www.gstatic.com yoast.com *.doubleclick.net orca-2024-staging.go-vip.net; img-src 'self' data: blob: *.ads.linkedin.com *.amazonaws.com *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.g.doubleclick.net *.ggpht.com *.google-analytics.com *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.bg *.google.bt *.google.by *.google.ca *.google.ch *.google.ci *.google.cl *.google.co.ao *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ma *.google.co.nz *.google.co.th *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.com *.google.com.af *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bo *.google.com.br *.google.com.co *.google.com.cy *.google.com.do *.google.com.ec *.google.com.ee *.google.com.eg *.google.com.gt *.google.com.hk *.google.com.kh *.google.com.kw *.google.com.mx *.google.com.my *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vn *.google.cz *.google.de *.google.dk *.google.dz *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.hn *.google.hu *.google.iq *.google.it *.google.jo *.google.la *.google.lk *.google.lu *.google.lv *.google.me *.google.mg *.google.mk *.google.mn *.google.mu *.google.nl *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.tn *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gravatar.com *.linkedin.com *.parsely.com *.pendo.io *.reddit.com *.supabase.co *.twitter.com *.visualwebsiteoptimizer.com *.wistia.com *.wistia.net *.wordpress.com *.wp.com *.yahoo.co.jp *.ytimg.com b.6sc.co bat.bing.com c.bing.com c.clarity.ms cdn.cookielaw.org dev.orca.security dev.visualwebsiteoptimizer.com en.wordpress.com fonts.gstatic.com images.parsely.com my.productfruits.com obseu.itstarsbuilding.com orca-2024-staging.go-vip.net orca.security p1.parsely.com pixel.wp.com pos.baidu.com s.w.org secure.adnxs.com stats.g.doubleclick.net storylane-prod-uploads.s3.us-east-2.amazonaws.com try.orca.security us02images.zoom.us wpvip.com www.google.ad www.google.as www.google.be www.google.bf www.google.bj www.google.bs www.google.cd www.google.cf www.google.cg www.google.cm www.google.co.bw www.google.co.ck www.google.co.ls www.google.co.mz www.google.co.tz www.google.co.vi www.google.co.zw www.google.com.ag www.google.com.bh www.google.com.bn www.google.com.bz www.google.com.cu www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.jm www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.na www.google.com.py www.google.com.sl www.google.com.sv www.google.com.tj www.google.dj www.google.ee www.google.ga www.google.gg www.google.gm www.google.hr www.google.ht www.google.ie www.google.im www.google.is www.google.je www.google.kg www.google.ki www.google.kz www.google.lt www.google.md www.google.mv www.google.mw www.google.ne www.google.no www.google.rw www.google.sk www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tt www.google.vu www.gstatic.com www.microsoft.com yt3.ggpht.com *.mux.com www.google.gl www.google.com.pg; media-src 'self' data: blob: *.amazonaws.com *.mux.com *.supabase.co *.wistia.com *.wistia.net app.guidemaker.com embed-ssl.wistia.com orca.security ssl.gstatic.com ssrweb.zoom.us www.youtube.com; frame-src 'self' blob: *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.greenhouse.io *.hotjar.com *.itstarsbuilding.com *.start-chat.com *.storylane.io *.visualwebsiteoptimizer.com *.wistia.com *.wistia.net *.youtube.com *.youtube.com.x.3d6775cf054690432b0ac4a01fda9c93f851.d045232a.clientid.sse.cisco-secure.com block.sse.cisco.com calendly.com connect.useparagon.com docs.google.com gateway.zscalerthree.net loader.media orca.security recaptcha.net safe.menlosecurity.com translate.googleapis.com try.orca.security widgets.wp.com wordpress.com www.recaptcha.net; worker-src 'self' blob:; object-src 'self' *.wistia.com; frame-ancestors 'self' orca.security; form-action 'self' *.facebook.com *.orca.security orca.security translate.googleapis.com; manifest-src 'self' *.orca.security orca.security; report-uri https://report.centralcsp.com/68ab10d68ce2c6625c49ecd9; report-to csp-endpoint; 2 script-src-elem *.soicos.com *.tiktok.com *.yandex.com *.onesignal.com onesignal.com *.verificado.ai https://cdn-mz-gj-vai.verificado.ai/widget/main.js *.google.com *.gstatic.com https://www.google.com/recaptcha/ *.googleadservices.com *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.lightwidget.com *.clarity.ms *.bing.com unpkg.com *.greencolumnart.com *.hotjar.com *.cloudfront.net *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.googletagmanager.com *.newrelic.com *.cloudflare.com *.facebook.net googleads.g.doubleclick.net *.crazyegg.com *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem *.soicos.com *.verificado.ai *.cloudflare.com *.typekit.net https://www.google.com/recaptcha/ *.googletagmanager.com *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.crazyegg.com *.clarity.ms *.bing.com *.cdnfonts.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev www.paypalobjects.com *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com webpay3g.transbank.cl webpay3gint.transbank.cl *.facebook.com *.soicos.com *.verificado.ai https://www.google.com/recaptcha/ *.payulatam.com *.mercadopago.cl *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.cl *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.soicos.com *.crazyegg.com *.verificado.ai https://komax-tracking.oms.linets.cl/ *.mercadopago.cl *.zendesk.com *.zdassets.com *.zdusercontent.com mercadopago.cl/ *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev www.paypalobjects.com *.typeform.com *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.soicos.com *.crazyegg.com *.verificado.ai https://www.google.com/recaptcha/ *.gap.com.pe *.mercadopago.cl *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.oraclecloud.com *.guess.cl *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.analytics.google.com *.pinterest.com *.pinimg.com *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com *.bathandbodyworks.cl *.lacoste.cl *.google.com.co *.google.com.cl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.soicos.com *.verificado.ai *.mercadopago.cl *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.ads-twitter.com *.klaviyo.com *.cloudflare.com *.braintreegateway.com *.victoriassecret.cl *.fitit.ai *.varify.dev https://rum.hlx.page sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com *.typeform.com *.grupoaxo.com *.hlx.page *.run.app commerce-payments-sdk.adobe.io *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com *.soicos.com *.crazyegg.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.cl *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.typeform.com *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline'; object-src *.soicos.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com *.soicos.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.youtube.com youtube.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline'; manifest-src *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.braintree-api.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.soicos.com *.yandex.com *.verificado.ai *.amazonaws.com https://www.google.com/recaptcha/ *.mercadopago.cl wss://*.zendesk.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com wss://ws.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.twitter.com *.ads-twitter.com *.bing.net *.klaviyo.com *.cloudflare.com *.crazyegg.com *.braintreegateway.com *.victoriassecret.cl *.facebook.com *.fitit.ai *.varify.dev *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.typeform.com *.grupoaxo.com *.hlx.page *.googleapis.com 'self' 'unsafe-inline'; child-src *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com http: https: blob: 'self' 'unsafe-inline'; default-src *.soicos.com *.crazyegg.com *.verificado.ai https://www.google.com/recaptcha/ *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.verificado.ai https://www.google.com/recaptcha/ *.soicos.com *.mercadopago.cl *.mercadopago.com *.mlstatic.com *.mercadolibre.com.br *.mercadolivre.com *.zendesk.com *.zdassets.com *.zdusercontent.com *.clarity.ms *.bing.com *.greencolumnart.com *.hotjar.io *.hotjar.com *.scarabresearch.com *.emarsys.net *.visualwebsiteoptimizer.com *.varify.io *.whatsapp.com *.pushcrew.com *.vwo.com *.vwo.io *.cloudflare.com *.facebook.net *.victoriassecret.cl *.fitit.ai *.varify.dev *.grupoaxo.com *.hlx.page *.run.app *.googleapis.com 'self' 'unsafe-inline'; 2 frame-ancestors 'self' http://localhost:8080 https://api-internal-magnolia-author-dev.alpitour.it https://api-internal-magnolia-author-test.alpitour.it https://api-internal-magnolia-author-prod.alpitour.it 2 frame-ancestors 'self' https://twinrivers.catapultcms.com 2 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.pinterest.com/ https://*.pinim.com https://*.pinimg.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.google.nl https://ajax.googleapis.com https://tagmanager.google.com https://tagmanager.google.com/debug/css.css https://www.googletagmanager.com https://www.google-analytics.com https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/ec.js https://www.googleadservices.com https://googleads.g.doubleclick.net *.cookiebot.com *.youtube.com https://s.ytimg.com https://connect.facebook.net https://content.jwplatform.com https://ssl.p.jwpcdn.com *.hotjar.com *.hotjar.io https://stats.g.doubleclick.net https://snap.licdn.com/li.lms-analytics/ https://sc-static.net/scevent.min.js https://tr.snapchat.com https://www.youtube.com/iframe_api https://cdnjs.cloudflare.com *.localbooker.nl *.allyourz.nl https://provinciezeeland.localbooker.nl blob: https://js.stripe.com https://b.stripecdn.com https://api.brightedge.com https://*.bc0a.com https://cdn.b0e8.com 38.108.179.5 https://*.raffle.ai/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://ajax.googleapis.com https://cdnjs.cloudflare.com *.localbooker.nl *.allyourz.nl https://provinciezeeland.localbooker.nl https://allyourz.nl *.mapbox.com https://js.stripe.com https://b.stripecdn.com;img-src 'self' data: https://www.toegankelijkheidsverklaring.nl https://*.pinterest.com https://www.google.com https://www.google.nl *.google-analytics.com *.analytics.google.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://stats.g.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.facebook.com https://storage.googleapis.com/storyteq/ https://jwpltx.com https://prd.jwpltx.com *.hotjar.com *.hotjar.io *.ads.linkedin.com https://www.linkedin.com https://p.adsymptotic.com https://tr.snapchat.com https://i.ytimg.com https://a.tile.openstreetmap.de https://b.tile.openstreetmap.de https://c.tile.openstreetmap.de https://assets.citynavigator.nl *.cookiebot.com https://assets.plaece.nl *.localbooker.nl *.allyourz.nl https://provinciezeeland.localbooker.nl https://allyourz.nl *.mapbox.com https://js.stripe.com https://b.stripecdn.com;media-src 'self' https://storage.googleapis.com/storyteq/;frame-src 'self' https://*.pinterest.com https://consentcdn.cookiebot.com https://www.google.com https://www.googletagmanager.com https://*.doubleclick.net https://estate.zeeland.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com *.cookiebot.com https://staticxx.facebook.com https://www.facebook.com https://g.jwpsrv.com https://www.vvvzeeland.nl *.hotjar.com *.hotjar.io *.formdesk.com https://tr.snapchat.com https://live.netcamviewer.nl *.localbooker.nl *.allyourz.nl https://provinciezeeland.localbooker.nl https://allyourz.nl *.mapbox.com https://js.stripe.com https://b.stripecdn.com https://*.raffle.ai/;font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com *.hotjar.com *.hotjar.io *.localbooker.nl *.allyourz.nl https://provinciezeeland.localbooker.nl https://allyourz.nl *.mapbox.com https://js.stripe.com https://b.stripecdn.com;connect-src 'self' https://*.pinterest.com/ https://*.pinimg.com/ https://api.storyteq.com https://ssl.p.jwpcdn.com https://graph.facebook.com https://www.facebook.com https://www.google.com https://www.google.nl *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com https://*.doubleclick.net https://estate.zeeland.com *.cookiebot.com/ https://maps.googleapis.com *.hotjar.com *.hotjar.io wss://*.hotjar.io wss://*.hotjar.com *.snapchat.com *.linkedin.com *.localbooker.nl *.allyourz.nl https://provinciezeeland.localbooker.nl https://allyourz.nl *.mapbox.com https://js.stripe.com https://b.stripecdn.com https://api.brightedge.com https://*.bc0a.com https://cdn.b0e8.com 38.108.179.5 https://*.raffle.ai/;base-uri 'self' 2 default-src 'self' https://*.wistia.com https://*.wistia.net *.crazyegg.com; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js cdnjs.cloudflare.com *.googletagmanager.com *.fontawesome.com use.fontawesome.com https://unpkg.com/ *.stripe.com *.adroll.com googleads.g.doubleclick.net *.eloqua.com *.en25.com *.bluekai.com *.oraclecloud.com www.google-analytics.com snap.licdn.com ws.zoominfo.com *.ifebp.org js.zi-scripts.com tags.clickagy.com cdn.informz.net *.facebook.com *.facebook.net *.googleadservices.com bat.bing.com *.clarity.ms browser.sentry-cdn.com https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.sentry-cdn.com/ *.crazyegg.com https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com *.fontawesome.com use.fontawesome.com https://unpkg.com/ 'unsafe-inline' blob: https://fast.wistia.com *.crazyegg.com https://cdn.insight.sitefinity.com; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com placeimg.com picsum.photos *.picsum.photos i0.wp.com i2.wp.com *.analytics.google.com *.google-analytics.com *.adroll.com stats.g.doubleclick.net *.eloqua.com *.en25.com *.bluekai.com *.oraclecloud.com www.google.com *.congress.gov *.linkedin.com *.doubleclick.net https://x.bidswitch.net https://ml314.com https://pixel.tapad.com https://pixel.rubiconproject.com https://dsum-sec.casalemedia.com https://us-u.openx.net https://sync.outbrain.com https://image2.pubmatic.com https://sync.taboola.com https://eb2.3lift.com https://ib.adnxs.com https://match.adsrvr.org pixel.tapad.com https://secure.adnxs.com https://idsync.rlcdn.com https://dpm.demdex.net *.facebook.com *.facebook.net *.ifebp.org bat.bing.com https://*.wistia.com https://*.wistia.net *.crazyegg.com https://cdn.insight.sitefinity.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.fontawesome.com use.fontawesome.com https://*.wistia.com; frame-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://www.youtube.com *.soundcloud.com *.smartsheet.com *.stripe.com *.ifebp.org *.vimeo.com hemsync.clickagy.com https://www.googletagmanager.com https://www.google.com *.doubleclick.net *.facebook.com *.facebook.net *.adroll.com https://fast.wistia.com https://fast.wistia.net *.crazyegg.com; connect-src 'self' data: accounts.google.com *.google-analytics.com *.gstatic.com https://*.googletagmanager.com https://*.googleapis.com/ *.fontawesome.com https://blog.ifebp.org analytics.google.com https://cebs.ifebp.org stats.g.doubleclick.net *.crazyegg.com *.linkedin.com *.adroll.com *.ifebp.org aorta.clickagy.com hemsync.clickagy.com https://www.google.com https://js.zi-scripts.com *.zoominfo.com *.informz.net *.facebook.com *.facebook.net https://ipapi.co *.clarity.ms https://*.litix.io https://*.wistia.com https://*.wistia.net https://*.algolia.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: https://www.youtube.com https://*.wistia.com https://*.wistia.net; child-src 'self' blob:; object-src 'self' 2 object-src 'none';base-uri 'self';form-action 'self'; 2 default-src 'self' https: 'unsafe-inline' 2 default-src 'self' *.kyriba.com *.platformsh.site *.rainfocus.com *.treasury-factory.com *.kyriba.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.kyriba.com blob: *.mountain.com *.drda.io *.company-target.com *.googletagmanager.com *.iubenda.com *.terminusplatform.com *.bing.com *.licdn.com *.ads-twitter.com *.demandbase.com *.facebook.net *.googleadservices.com https://googleads.g.doubleclick.net *.pardot.com *.storylane.io *.typeform.com *.calconic.com *.rainfocus.com *.kyribalive.com *.gstatic.com *.ckeditor.com *.visualwebsiteoptimizer.com app.vwo.com *.qualified.com *.zi-scripts.com *.zoominfo.com *.treasury-factory.com *.kyriba.io https://app.qualified.com *.6sc.co *.redditstatic.com *.dreamdata.cloud ug-webapp-public-production.s3.amazonaws.com *.usbrowserspeed.com; connect-src 'self' *.kyriba.com *.mountain.com 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 https://www.googletagmanager.com *.googlesyndication.com *.facebook.com *.6sc.co *.platformsh.site *.google-analytics.com *.doubleclick.net *.iubenda.com *.terminus.services https://gtm-t6gnrfj-njq1m.uc.r.appspot.com *.google.com wss://a1kkx7muourfsi-ats.iot.us-east-1.amazonaws.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://api.company-target.com *.demandbase.com *.storylane.io https://segments.company-target.com *.typeform.com *.calconic.com *.visualwebsiteoptimizer.com *.vwo.com *.kyribalive.com *.rainfocus.com https://bat.bing.com *.zi-scripts.com *.zoominfo.com *.treasury-factory.com *.kyriba.io https://*.qualified.com wss://*.qualified.com *.redditstatic.com *.dreamdata.cloud *.reddit.com *.usbrowserspeed.com *.usergems.com; style-src 'self' 'unsafe-inline' *.kyriba.com https://fonts.googleapis.com *.googletagmanager.com *.typeform.com *.calconic.com *.rainfocus.com *.kyribalive.com *.treasury-factory.com *.kyriba.io https://*.qualified.com; img-src 'self' *.kyriba.com *.platformsh.site *.googletagmanager.com blob: data: *.google-analytics.com *.linkedin.com *.facebook.com *.doubleclick.net *.google.by *.googleusercontent.com *.google.com *.google.es *.google.it *.googleadservices.com *.iubenda.com *.cloudfront.net *.rlcdn.com *.bing.com *.co *.twitter.com *.storylane.io *.mountain.com *.google.no *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.rainfocus.com *.kyribalive.com *.gstatic.com *.ckeditor.com *.company-target.com *.zi-scripts.com *.zoominfo.com *.qualified.com *.treasury-factory.com *.kyriba.io *.reddit.com *.usbrowserspeed.com; frame-src 'self' *.kyriba.com https://youtu.be https://kyriba-prod.highspot.com *.appspot.com *.platformsh.site *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.iubenda.com *.doubleclick.net *.company-target.com *.storylane.io *.typeform.com *.calconic.com *.visualwebsiteoptimizer.com app.vwo.com *.treasury-factory.com *.kyriba.io https://*.qualified.com; font-src 'self' *.kyriba.com data: https://fonts.gstatic.com *.gstatic.co; object-src 'none'; base-uri 'self' *.kyriba.com *.rainfocus.com *.kyribalive.com *.treasury-factory.com *.kyriba.io; media-src 'self' *.kyriba.com https://*.qualified.com *.qualified.com; form-action 'self' *.kyriba.com; frame-ancestors 'self' *.kyriba.com *.platformsh.site https://kyriba-prod.highspot.com https://afpinteractive.splashthat.com/ *.typeform.com *.calconic.com *.treasury-factory.com *.kyriba.io; worker-src 'self' *.kyriba.com blob:; upgrade-insecure-requests; 2 frame-ancestors https://*.twistys.com 2 default-src 'self' 'unsafe-inline' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.wesalute.com https://*.wesaluteapis.com https://ajax.cloudflare.com https://static.cloudflareinsights.com https://performance.radar.cloudflare.com https://challenges.cloudflare.com https://cdn.kustomerapp.com https://browser.sentry-cdn.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://cdn.segment.com https://cdn.amplitude.com https://edge.fullstory.com https://rs.fullstory.com https://transcend-cdn.com https://www.google.com https://www.gstatic.com https://apis.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://snap.licdn.com https://www.redditstatic.com https://js.stripe.com https://cdn.sprig.com https://cdn.userleap.com https://embed.bookingvault.com https://secure.rezserver.com https://js-agent.newrelic.com https://*.newrelic.com https://*.nr-data.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://assets.calendly.com https://unpkg.com/@trycourier/; connect-src 'self' https://*.wesalute.com https://*.wesaluteapis.com https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://cloudflareinsights.com https://adservice.google.com https://www.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://bat.bing.com https://bat.bing.net https://*.kustomerapp.com https://*.pndsn.com https://s3.amazonaws.com/kustomer-prod1-attachments https://cdn.jsdelivr.net https://sentry.io https://o287038.ingest.sentry.io https://api.segment.io https://cdn.segment.com https://*.amplitude.com https://edge.fullstory.com https://rs.fullstory.com https://transcend-cdn.com https://telemetry.us.transcend.io https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://apis.google.com https://*.googleapis.com https://us-central1-veterans-advantage-arsenal.cloudfunctions.net https://www.facebook.com/ https://api.sprig.com https://api.bookingvault.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.reddit.com https://www.redditstatic.com https://*.newrelic.com https://*.nr-data.net https://*.courier.com wss://*.courier.io; style-src 'self' 'unsafe-inline' https://*.wesalute.com https://fonts.googleapis.com https://www.gstatic.com https://www.googletagmanager.com https://embed.bookingvault.com https://transcend-cdn.com https://cdnjs.cloudflare.com https://assets.calendly.com; font-src 'self' data: https://*.wesalute.com https://cdn.honey.io https://cdn.ivaws.com https://cdn.kustomerapp.com https://fonts.gstatic.com https://themes.googleusercontent.com https://embed.bookingvault.com; img-src blob: data: https:; media-src blob: data: https:; object-src 'none'; frame-src 'self' https://*.wesalute.com https://*.wesaluteapis.com https://challenges.cloudflare.com https://*.kustomer.help https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com/ https://www.c-span.org/video/standalone/ https://www.googletagmanager.com https://www.google.com https://tpc.googlesyndication.com https://bid.g.doubleclick.net https://td.doubleclick.net https://10165061.fls.doubleclick.net https://www.facebook.com https://js.stripe.com https://transcend-cdn.com https://calendly.com https://veterans-advantage-arsenal.firebaseapp.com; frame-ancestors 'self' https://*.wesalute.com; report-uri https://o287038.ingest.sentry.io/api/1865718/security/?sentry_key=33c7a6dee3b040bc9bc48cd898e2dd9b&sentry_environment=prod 2 upgrade-insecure-requests; base-uri 'self' 2 default-src 'self'; img-src 'self' data: www.google.com *.cloudfront.net *.doubleclick.net https://*.onetrust.com https://cdn.cookielaw.org https://ht.blackhawknetwork.com https://dd.blackhawknetwork.com https://*.trustarc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com maps.googleapis.com www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.split.io w.usabilla.com *.cloudfront.net cdn.segment.com cdn.mxpnl.com https://static.ada.support https://tangocard.ada.support https://previews.ada.support https://ws-mt1.pusher.com https://cdn.cookielaw.org https://ht.blackhawknetwork.com https://cdnjs.cloudflare.com/ajax/libs/pako/ https://dd.blackhawknetwork.com/js/ https://dd.blackhawknetwork.com/tags.js https://www.rewardlink.io js.datadome.co https://*.captcha-delivery.com https://cdn.cookielaw.org/scripttemplates/otSDKStub.js https://*.onetrust.com *.ada.support https://*.trustarc.com; style-src 'self' 'unsafe-inline' *.split.io *.cloudfront.net fonts.googleapis.com fonts.gstatic.com; font-src 'self' data: fonts.gstatic.com https://*.trustarc.com; object-src 'self'; connect-src 'self' api.segment.io *.split.io *.mixpanel.com *.doubleclick.net *.rewardlink.io rewardlink-fe.public.prod.tangocard.com https://*.ada.support https://sentry.io https://cdn.cookielaw.org https://*.onetrust.io https://*.onetrust.com https://cdn.segment.com https://ingress.us2.rum-ingress-coralogix.com https://dd.blackhawknetwork.com/js/ https://dd.blackhawknetwork.com/tags.js https://static.ada.support https://tangocard.ada.support https://previews.ada.support https://ws-mt1.pusher.com https://rollout.ada.support/tangocard/client.json https://cookies-data.onetrust.io https://www.google.com https://*.trustarc.com; frame-src https://www.google.com https://www.google.com/recaptcha/ www.google.com https://tangocard.ada.support https://tangocard-gr.ada.support https://*.rewardlink.io https://*.rewardlink.com https://*.captcha-delivery.com https://*.tangocard.com d6tizftlrpuof.cloudfront.net https://*.trustarc.com; worker-src 'self' blob:; 2 default-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com; connect-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com blob: https://*.rz.bankenit.de https://*.meine-bankid.de https://*.google-analytics.com https://bat.bing.com https://*.azureedge.net https://*.doubleclick.net https://*.mkt.dynamics.com https://api.ipify.org wss://*.niceincontact.com https://www.facebook.com https://surfly-us.com https://impleco.nc.econ-application.de https://*.usercentrics.eu https://static.dvinci-easy.com https://*.googlesyndication.com https://api.openweathermap.org https://schwaebisch-hall.dvinci-hr.com https://www.google.com https://google.com https://adservice.google.com https://rns.matelso.de https://*.qualtrics.com https://solr.wohnglueck.de https://mobile.events.data.microsoft.com https://*.contentsquare.net https://*.contentsquare.com https://sentry.io https://www.googleadservices.com; img-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com data: https://*.google-analytics.com https://bat.bing.com https://content.psplugin.com https://www.google.com https://impleco.nc.econ-application.de https://www.google.de https://*.analytics.google.com https://*.doubleclick.net https://www.facebook.com https://app.usercentrics.eu https://public.impleco.de https://i.ytimg.com https://wohnglueck.de https://images.podigee-cdn.net https://fonts.gstatic.com https://af-de-platform-avatars.s3.eu-central-1.amazonaws.com https://unpkg.com https://*.adition.com https://public.flourish.studio https://*.contentsquare.net https://www.googleadservices.com https://analytics.google.com https://ad.doubleclick.net; font-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com data: https://impleco.nc.econ-application.de https://cdnjs.cloudflare.com https://player.podigee-cdn.net https://fonts.gstatic.com https://script.hj.contentsquare.net; frame-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com https://*.svc.dynamics.com https://surfly-us.com https://*.doubleclick.net https://app.usercentrics.eu https://dash.pricehubble.com https://datawrapper.dwcdn.net https://www.youtube-nocookie.com https://view.genial.ly https://view.genially.com https://player.podigee-cdn.net https://media.jobware.net https://flo.uri.sh https://www.youtube.com https://youtu.be https://eu.frcapi.com; media-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com data:; child-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com blob:; worker-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com blob:; script-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com 'unsafe-inline' 'unsafe-eval' blob: https://*.azureedge.net https://bat.bing.com https://cdnjs.cloudflare.com https://*.google-analytics.com https://unpkg.com https://www.youtube.com https://*.contentsquare.net https://app.contentsquare.com https://ad1.adfarm1.adition.com https://googleads.g.doubleclick.net; script-src-elem 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com 'unsafe-inline' 'unsafe-eval' blob: https://*.azureedge.net https://bat.bing.com https://cdnjs.cloudflare.com https://*.google-analytics.com https://unpkg.com https://www.youtube.com https://*.contentsquare.net https://app.contentsquare.com https://ad1.adfarm1.adition.com https://googleads.g.doubleclick.net https://*.surfly-us.com https://surfly-us.com https://impleco.nc.econ-application.de https://app.usercentrics.eu https://connect.facebook.net https://static.dvinci-easy.com https://rns.matelso.de https://widget.immobilien.wohnglueck.de https://*.qualtrics.com https://maps.googleapis.com https://player.podigee-cdn.net https://impleco.nc.econ-application.de https://schwaebisch-hall.dvinci-hr.com https://*.adition.com https://public.flourish.studio https://*.blob.core.windows.net https://www.google.com https://cdn.telebalance.tv https://cdn.jsdelivr.net https://formui-usa1.mkt.dynamics.com; style-src 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com 'unsafe-inline' https://impleco.nc.econ-application.de; style-src-elem 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com 'unsafe-inline' https://impleco.nc.econ-application.de https://fonts.googleapis.com https://*.adition.com https://cdnjs.cloudflare.com https://static.dvinci-easy.com https://player.podigee-cdn.net https://www.google.com; frame-ancestors 'self' https://*.sha.vrkw.de https://*.schwaebisch-hall.de https://www.googletagmanager.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.experimentation.dev https://*.niceincontact.com https://*.psplugin.com https://*.vergic.com; upgrade-insecure-requests; 2 default-src https: data: wss://*.hotjar.com https://calculator.value-cloud.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self' https://calculator.value-cloud.com; object-src 'self' blob; upgrade-insecure-requests; 2 default-src * data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' 2 frame-ancestors 'self' https://leerkracht.bingel.be 2 default-src 'self'; frame-ancestors 'none'; form-action 'self'; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://api.qooqie.com https://cdn.leadinfo.net https://infimv.com https://infirc.com https://sc.lfeeder.com https://static.cloudflareinsights.com https://snap.licdn.com https://s.ksrndkehqnwntyxlhgto.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' https://cdnjs.cloudflare.com https://tailwindcss.com https://tr.lfeeder.com https://tr-rc.lfeeder.com data: https://www.google.nl https://www.google.com https://www.googletagmanager.com https://px.ads.linkedin.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://region1.analytics.google.com https://collector.leadinfo.net https://api.leadinfo.com https://api.qooqie.com wss://api.qooqie.com https://https.overbridgenet.com https://sc.lfeeder.com https://overbridgenet.com https://region1.google-analytics.com https://www.googletagmanager.com https://region1.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://process.iconnode.com https://p.ksrndkehqnwntyxlhgto.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.recaptcha.net https://www.googletagmanager.com https://www.linkedin.com; object-src 'none'; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: about: d.lernsax.de; frame-ancestors 'self';report-uri /security-report.php 2 default-src *.cloudflare.com *.youtube.com *.powerfulreveal.com *.semoelectric.coop *.cdn.js *.jsdelivr.net *.commentportal.com commentportal.com *.google.com bootstrapcdn.com googleadservices.com *.cloudfront.net *.portlandwebdesign.com *.electric.coop adsrvr.org *.analytics.yahoo.com *.maps.arcgis.com xx.fbcdn.net rvwinc.com maps.arcgis.com vimeo.com *.googleadservices.com publicpurchase.com gravatar.com *.arcgis.com *.eventbrite.com cooperative.com *.gstatic.com *.youtube-nocookie.com *.crowdfiber.io data: *.googletagmanager.com luckyorange.net btstatic.com portlandwebdesign.com simpli.fi *.providesupport.com typekit.net mitel.io trumpia.com *.timetap.com five9.com powermag.com *.rvwinc.com *.verisign.com linkedin.com *.nr-data.net *.btstatic.com azgt.coop ebill.coop *.mapbox.com googleapis.com analytics.yahoo.com *.licdn.com *.mcusercontent.com *.bootstrapcdn.com apogee.net marketingautomation.services suppose.tv adnxs.com twimg.com *.olark.com youtube-nocookie.com *.trumpia.com xad.com mailchimp.com *.ads.linkedin.com directefficiency.com *.mailchimp.com newrelic.com *.vimeo.com *.plumassierratelecommunicationsmap.com 'unsafe-eval' *.upgrade.guide epa.gov transistor.fm google.com hirebridge.com *.simpli.fi *.yimg.com envivabiomass.com *.roanokeconnect.com e2ma.net bonnerboundary811.org *.powerfulweb.com *.elfsight.com *.libsyn.com doubleclick.net *.nwwsd.org facebook.net google-analytics.com ads.linkedin.com *.e2ma.net gstatic.com smarthub.coop *.s3.amazonaws.com mcusercontent.com s.w.org *.doubleclick.net facebook.com youtube.com *.linkedin.com nice-incontact.com fontawesome.com *.newrelic.com *.apogee.net *.googleapis.com libsyn.com eventbrite.com upgrade.guide *.basis.net *.twimg.com glassdoor.com cencoast.com *.mitel.io powerfulweb.com luckyorange.com *.five9.com *.typekit.net *.transistor.fm yimg.com 'self' *.luckyorange.com jazz.co roanokeconnect.com *.publicpurchase.com myfonts.net issuu.com *.directefficiency.com *.websupport.expert spreaker.com *.ebill.coop crowdfiber.io *.xad.com *.nice-incontact.com *.xx.fbcdn.net *.suppose.tv *.myfonts.net *.icua.coop southcentralpower.com *.bonnerboundary811.org arcgis.com mapbox.com providesupport.com *.facebook.net *.smeco.coop electric.coop googletagmanager.com *.adnxs.com smeco.coop *.issuu.com *.powermag.com *.adsymptotic.com olark.com s3.amazonaws.com 'unsafe-inline' billing.nwwsd.org elfsight.com icua.coop timetap.com *.fontawesome.com *.envivabiomass.com nr-data.net adsymptotic.com *.epa.gov *.adsrvr.org *.cencoast.com *.spreaker.com *.gravatar.com plumassierratelecommunicationsmap.com verisign.com *.glassdoor.com *.facebook.com ctctcdn.com *.jazz.co *.cooperative.com *.google-analytics.com gmpg.org cloudfront.net *.ctctcdn.com *.marketingautomation.services *.southcentralpower.com licdn.com *.hirebridge.com websupport.expert *.luckyorange.net *.smarthub.coop basis.net *.youtube.com *.azgt.coop; 2 default-src 'self' *.synthetix.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.clarity.ms *.licdn.com *.52enterprisingdetails.com https://platform.twitter.com *.synthetix.com *.synthetix.com *.googletagmanager.com *.googleapis.com *.hotjar.com *.gstatic.com *.fullstory.com *.google-analytics.com *.aspnetcdn.com *.googleadservices.com *.facebook.net *.doubleclick.net *.youtube.com *.google.com *.bc0a.com;style-src 'self' *.googleapis.com *.synthetix.com *.cloudfront.net *.googletagmanager.com 'unsafe-inline';connect-src 'self' *.facebook.com *.bing.com *.getaddress.io *.doubleclick.net *.linkedin.com *.clarity.ms *.google.com *.hotjar.io *.hotjar.com *.google-analytics.com *.synthetix.com *.fullstory.com *.amazonaws.com wss://ws.hotjar.com/api/v2/client/ws *.googletagmanager.com *.google.co.uk *.bc0a.com;font-src 'self' *.gstatic.com *.hotjar.io *.hotjar.com;img-src 'self' data: https: syn-document-manager.s3.amazonaws.com *.synthetix.com data: *.google-analytics.com *.google.co.uk *.google.com *.facebook.com *.googletagmanager.com *.hotjar.com *.hotjar.io;object-src 'none';frame-ancestors 'self' self;frame-src 'self' *.sfmc-content.com *.googletagmanager.com *.office.com *.youtube.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net *.hotjar.com *.hotjar.io https://wjecwebsitelive.blob.core.windows.net https://securelinks1.cmadvantage.co.uk https://wjec-cbac.leadfamly.com *.issuu.com;base-uri 'self' 2 script-src http: https: https://wildcraft.com/ 'unsafe-inline' *.smartlook.com *.payu.in *.moengage.com track.omguk.com *.googleapis.com *.google-analytics.com *.nr-data.net *.clarity.ms *.bing.com *.google.com *.lightwidget.com lightwidget.com; style-src 'self' blob: https: 'unsafe-inline' https://wildcraft.com/ 'unsafe-hashes' *.moengage.com *.google.com *.lightwidget.com lightwidget.com; img-src data: http: https: *.moengage.com; object-src 'none'; base-uri 'none'; child-src 'self'; font-src 'self' fonts.gstatic.com *.google.com *.lightwidget.com lightwidget.com; frame-src assets.braintreegateway.com *.google.com *.youtube.com *.youtu.be *.vimeo.com *.googletagmanager.com *.facebook.com *.criteo.com *.doubleclick.net *.moengage.com *.2trk.info *.smartlook.com shoogloo.gotrackier.com *.gotrackier.com *.vcommission.com *.payu.in *.googleapis.com *.lightwidget.com lightwidget.com *.shiprocket.co shiprocket.co; 2 default-src https:; font-src https: data:; img-src https: data:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self'; worker-src 'self' blob:; 2 connect-src 'self' *.clarity.ms azfnc-ccr-sitecorp-prd.azurewebsites.net *.grupoccr.com.br cs-siteprd-001.search.windows.net app-site-prd-002.azurewebsites.net maps.googleapis.com *.google-analytics.com *.google.com *.googletagmanager.com *.handtalk.me stats.g.doubleclick.net *.analytics.google.com www.facebook.com; script-src 'self' 'unsafe-eval' *.clarity.ms connect.facebook.net www.google.com www.gstatic.com maps.googleapis.com 'unsafe-inline' *.googletagmanager.com tagmanager.google.com *.handtalk.me apis.google.com www.youtube.com; frame-src 'self' *.facebook.com *.youtube.com *.google.com *.handtalk.me; media-src 'self' *.grupoccr.com.br; default-src 'self'; base-uri 'self'; font-src 'self' data: fonts.gstatic.com; frame-ancestors 'self'; img-src 'self' data: blob: c.bing.com c.clarity.ms *.grupoccr.com.br img.youtube.com i.ytimg.com maps.googleapis.com *.google.com *.google.com.br *.gstatic.com www.facebook.com *.google-analytics.com *.googletagmanager.com *.handtalk.me; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com; form-action 'self' *.grupoccr.com.br *.motiva.com.br app-site-prd-002.azurewebsites.net azfnc-ccr-sitecorp-prd.azurewebsites.net cs-siteprd-001.search.windows.net www.facebook.com; block-all-mixed-content; upgrade-insecure-requests 2 frame-ancestors 'self' https://*.storyblok.com/ 2 script-src 'self' assets.adobedtm.com rum.hlx.page https://www.clarity.ms https://sc.lfeeder.com https://scripts.clarity.ms 'sha256-/n03bhCuxVTiOQKC2QHWD4MopbFFJVML3Yb8qWxk8b8='; script-src-elem 'self' 'unsafe-eval' 'sha256-mcIYDRPBlUvjPMifZatc9k+QnNQD6xXl2kBPB1umNqs=' 'sha256-PMRoW9IDvWwboKPD9AMpMm3Vtb+0XXLEc4In5QjycBE=' 'sha256-8mhHF+WQFPbrFtZT3ILREQrpLHL4TVrQNQk6GdnEigE=' 'sha256-C+GyvlzULGrMtpbUeIfRy5ko5W/mmIdguoRM5izNDi8=' 'sha256-GqJBsckjzl4HUefS3S5JbhBclioVLcMiRnbIM8SyEeQ=' 'sha256-/n03bhCuxVTiOQKC2QHWD4MopbFFJVML3Yb8qWxk8b8=' 'nonce-Rs6T16HFRoS7tngt3HPD8xPN' ssl.google-analytics.com platform.twitter.com cdn.syndication.twimg.com maps.googleapis.com www.googletagmanager.com www.google-analytics.com thoughtleadershipmphasis.disqus.com www.linkedin.com graph.facebook.com c.disquscdn.com disqus.com munchkin.marketo.net https://assets.adobedtm.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.ads-twitter.com https://analytics.twitter.com https://tanzu.vmware.com https://static.ads-twitter.com/uwt.js https://pbs.twimg.com/media https://cdn.cookie-script.com https://beacon.crigloo.com/js/container_KAfRm6si.js https://stats.g.doubleclick.net https://smetrics.mphasis.com https://276-jhj-873.mktoresp.com https://dpm.demdex.net https://mphasislimited.tt.omtrdc.net https://px.ads.linkedin.com https://rum.hlx.page hlx.page links.services.disqus.com mphasis-assistant.mphasis.com directline.botframework.com https://scripts.clarity.ms https://www.clarity.ms https://sc.lfeeder.com; object-src 'none'; base-uri 'none'; frame-src www.youtube.com platform.twitter.com syndication.twitter.com disqus.com www2.mphasis.com www.mphasis.com *.demdex.net *.doubleclick.net https://px.ads.linkedin.com www.wyde.com careers.mphasis.com www.sdcexec.com; 2 default-src * data: 'unsafe-eval' 'unsafe-inline' blob: ;frame-src 'self' *;frame-ancestors 'self' *; worker-src 'self' * blob:; 2 frame-ancestors 'self' https://*.compilator.com; 2 default-src 'self' https://tags.tiqcdn.com https://cdn.cookielaw.org https://tag.aticdn.net https://my-basf-privacy.my.onetrust.com https://strawberry.basf.com https://geolocation.onetrust.com https://svrdntfctn.com https://*.google-analytics.com https://analytics.google.com https://*.clarity.ms https://stats.g.doubleclick.net https://*.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://*.googleapis.com https://*.gstatic.com; script-src 'self' https://www.youtube.com https://www.google.com https://s.ytimg.com https://tags.tiqcdn.com https://cdn.cookielaw.org https://tag.aticdn.net https://my-basf-privacy.my.onetrust.com https://strawberry.basf.com https://geolocation.onetrust.com https://svrdntfctn.com https://www.googletagmanager.com https://*.google-analytics.com https://google-analytics.com https://www.gstatic.com https://analytics.google.com https://*.clarity.ms 'unsafe-inline'; object-src https://geolocation.onetrust.com https://svrdntfctn.com https://www.googletagmanager.com https://*.google-analytics.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://tags.tiqcdn.com https://cdn.cookielaw.org https://tag.aticdn.net https://my-basf-privacy.my.onetrust.com https://strawberry.basf.com https://geolocation.onetrust.com https://svrdntfctn.com; img-src 'self' data: https://i.ytimg.com https://s.ytimg.com https://yt3.ggpht.com https://tags.tiqcdn.com https://cdn.cookielaw.org https://tag.aticdn.net https://my-basf-privacy.my.onetrust.com https://strawberry.basf.com https://geolocation.onetrust.com https://svrdntfctn.com https://www.google.com https://*.clarity.ms https://*.bing.com www.googletagmanager.com; frame-src 'self' https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://youtube-nocookie.com https://www.google.com https://player.youku.com; font-src 'self' data: https://tags.tiqcdn.com https://cdn.cookielaw.org https://tag.aticdn.net https://my-basf-privacy.my.onetrust.com https://strawberry.basf.com https://geolocation.onetrust.com https://fonts.googleapis.com https://fonts.gstatic.comscript-src 'self' 2 default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self'; upgrade-insecure-requests; 2 default-src 'self'; connect-src *; frame-src *; font-src 'self' data:; img-src data: *; media-src *; object-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'self' 'unsafe-inline'; 2 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 2 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' *.mouseflow.com https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net; child-src *; connect-src * data: 'unsafe-inline' https://settings.luckyorange.net wss://*.visitors.live https://pubsub.googleapis.com https://api.luckyorange.com; font-src * data: blob: 'unsafe-inline'; frame-ancestors *; img-src * data: blob: 'unsafe-inline' https://d10lpsik1i8c69.cloudfront.net www.googletagmanager.com; script-src * data: blob: 'unsafe-inline' 'unsafe-eval' https://d10lpsik1i8c69.cloudfront.net https://www.googletagmanager.com; script-src-elem * data: blob: 'unsafe-inline' 'unsafe-eval' https://d10lpsik1i8c69.cloudfront.net https://www.googletagmanager.com; style-src * data: blob: 'unsafe-inline'; worker-src blob:; report-uri https://o70354.ingest.sentry.io/api/5454944/security/?sentry_key=f021e6378c8041db845adf2b868dd767&sentry_environment=production&zego=v5-apache 2 default-src 'self' https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com *.qqcw.us; connect-src 'self' https://*.ads.linkedin.com https://www.googleadservices.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://sdk.iad-07.braze.com https://js.appboycdn.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://js.stripe.com https://m.stripe.network https://m.stripe.com https://api.stripe.com https://*.googleapis.com https://cdn.sanity.io https://*.google.com https://*.gstatic.com https://unpkg.com https://*.mouseflow.com https://api.segment.io/v1/m https://connect.facebook.net/en_US/fbevents.js https://*.facebook.net https://*.facebook.com https://qqcw.report-uri.com/r/t/csp/reportOnly https://www.googletagmanager.com https://tagmanager.google.com https://*.fbot.me https://cdn.feathery.io https://api.feathery.io https://cdn.jsdelivr.net https://www.google-analytics.com https://google.com https://*.doubleclick.net https://*.adroll.com https://*.adsrvr.org data: blob:; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com https://js.stripe.com https://m.stripe.network https://m.stripe.com https://*.fbot.me https://use.typekit.net; img-src 'self' https://d3st4nmzrq9nfk.cloudfront.net https://*.ads.linkedin.com https://www.linkedin.com https://analytics.tiktok.com https://sdk.iad-07.braze.com https://js.appboycdn.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://*.googleapis.com https://*.gstatic.com https://cdn.sanity.io *.google.com *.facebook.net www.facebook.com *.googleusercontent.com https://www.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net https://www.googletagmanager.com https://*.fbot.me https://*.adroll.com https://pixel.tapad.com https://match.adsrvr.org https://ml314.com https://ib.adnxs.com https://secure.adnxs.com https://ps.eyeota.net https://analytics.freespee.com https://beacon.krxd.net https://dpm.demdex.net https://in.treasuredata.com https://io.narrative.io https://lex.33across.com https://s-cs.send.microad.jp https://stags.bluekai.com https://us-u.openx.net https://d.adroll.mgr.consensu.org https://dsum-sec.casalemedia.com https://eb2.3lift.com https://p.adsymptotic.com https://pixel.advertising.com https://pixel.rubiconproject.com https://image2.pubmatic.com https://simage2.pubmatic.com https://sync.outbrain.com https://sync.taboola.com https://trc.taboola.com https://ads.yahoo.com https://ups.analytics.yahoo.com https://idsync.rlcdn.com https://x.bidswitch.net https://adsrvr.org https://*.adsrvr.org https://*.insight.adsrvr.org data: blob:; media-src 'self' https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://*.fbot.me; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ads.linkedin.com https://snap.licdn.com https://analytics.tiktok.com https://sdk.iad-07.braze.com https://js.appboycdn.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://js.stripe.com https://m.stripe.network https://m.stripe.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com https://unpkg.com https://cdn.mouseflow.com *.googleusercontent.com https://connect.facebook.net/en_US/fbevents.js *.facebook.net https://www.googletagmanager.com https://tagmanager.google.com/ https://*.fbot.me https://*.feathery.io https://cdn.jsdelivr.net https://www.google-analytics.com https://*.doubleclick.net https://googleadservices.com https://www.youtube.com https://s.adroll.com https://d.adroll.com https://js.adsrvr.org blob:; style-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://use.fontawesome.com https://fonts.googleapis.com https://tagmanager.google.com/ https://fonts.googleapis.com/ https://*.fbot.me data: blob:; frame-src 'self' https://www.facebook.com https://js.stripe.com https://m.stripe.network https://m.stripe.com *.google.com https://www.googletagmanager.com https://tagmanager.google.com/ https://*.fbot.me https://cdn.feathery.io https://cdn.jsdelivr.net https://*.doubleclick.net https://www.youtube-nocookie.com/ https://keycloak.dev.qqcw.us https://auth.dontdrivedirty.com https://adsrvr.org https://*.adsrvr.org https://*.insight.adsrvr.org; frame-ancestors 'self' https://keycloak.dev.qqcw.us https://auth.dontdrivedirty.com; 2 script-src 'unsafe-inline' 'unsafe-eval' js-cdn.dynatrace.com js.adsrvr.org apps.bazaarvoice.com acsbapp.com js.monitor.azure.com wchat.freshchat.com www.gstatic.com ftlaunchpad.ai www.redditstatic.com code.jquery.com solutions.invocacdn.com build.1pdata.app *.hotjar.com qvdt3feo.com loader.nutshell.com maps.googleapis.com pnapi.invoca.net *.webfxcapi.com *.facebook.net *.marketingcloudfx.com *.stackadapt.com *.clopaydoor.com *.doubleclick.net s.pinimg.com bat.bing.com acdn.adnxs.com ct.pinterest.com *.google.com *.googletagmanager.com www.googleadservices.com pagead2.googlesyndication.com *.ipredictive.com *.google.ca *.google.co.za *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hsadspixel.net *.hubspot.com static.nlcdn.com *.hsforms.net google.com recaptcha.net *.clarity.ms *.omniconvert.com https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api 'self'; connect-src insight.adsrvr.org *.dynatrace.com www.redditstatic.com *.reddit.com *.marketingcloudfx.com app.nutshell.com www.facebook.com maps.googleapis.com pnapi.invoca.net *.bazaarvoice.com *.run.app *.webfxcapi.com *.azure.com *.conversionsapigateway.com *.clopaydoor.com *.facebook.com *.sentry.io *.stackadapt.com ct.pinterest.com *.adnxs.com *.acsbapp.com wss://ws.hotjar.com *.hotjar.io *.doubleclick.net acsbapp.com clopaycorporationproductselector.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com pagead2.googlesyndication.com *.google.com www.googleadservices.com google.com *.hscollectedforms.net *.hubapi.com static.hsappstatic.net loader.nutshell.com *.hubspot.com *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com *.pinimg.com *.clarity.ms *.omniconvert.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com 'self'; style-src 'unsafe-inline' fonts.googleapis.com wchat.freshchat.com *.clopaydoor.com *.stackadapt.com googletagmanager.com *.google.com *.googletagmanager.com https://cdn.insight.sitefinity.com 'self'; font-src 'self' data: fonts.gstatic.com; img-src data: alb.reddit.com hits3.livemarketshoppers.com maps.googleapis.com *.facebook.net *.bazaarvoice.com *.facebook.com bat.bing.com *.adnxs.com *.adsrvr.org *.vimeocdn.com i.ytimg.com pixel.rubiconproject.com *.doubleclick.net *.gstatic.com *.googletagmanager.com *.google-analytics.com *.google.com www.googleadservices.com google.com *.googlesyndication.com *.hsforms.com *.hubspot.com https://cdn.insight.sitefinity.com 'self'; frame-src www.googletagmanager.com wchat.freshchat.com www.google.com player.vimeo.com www.youtube.com clopay.cornellcookson.com *.clopaydoor.com *.doubleclick.net ct.pinterest.com *.adsrvr.org *.ipredictive.com clopaycorporationproductselector.com *.cornelliron.com *.hsforms.net google.com *.hsforms.com *.facebook.com ascehazardtool.org; worker-src blob:; media-src player.vimeo.com *.vimeocdn.com 'self'; default-src 'self' 2 frame-ancestors: 'none' 2 default-src 'self' policy.cookiereports.com www.youtube-nocookie.com data: 'unsafe-eval'; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com; img-src 'self' policy.cookiereports.com *.google-analytics.com *.googletagmanager.com data: ; connect-src 'self' policy.cookiereports.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com; script-src 'self' ajax.googleapis.com www.google.com www.gstatic.com policy.cookiereports.com www.bugherd.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval' *.cloudfront.net *.youtube.com www.google-analytics.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cloudfront.net data: 'unsafe-eval'; 2 default-src 'self' *.eisneramper.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://cm.g.doubleclick.net https://ib.adnxs.com https://a.dpmsrv.com https://s.dpmsrv.com/ https://www.googleadservices.com https://okt.to https://cdn.cookielaw.org/scripttemplates/otSDKStub https://cdn.cookielaw.org/consent https://cdn.cookielaw.org https://view.ceros.com https://buttons-config.sharethis.com https://connect.facebook.net https://googleads.g.doubleclick.net https://i.simpli.fi/p https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hsforms.net https://okt.to/ping https://platform-api.sharethis.com https://player.vimeo.com https://script.hotjar.com https://snap.licdn.com https://static.ads-twitter.com https://static.hotjar.com https://content.hotjar.io https://metrics.hotjar.io https://static.oktopost.com https://t.sharethis.com https://tag.simpli.fi https://unpkg.com/ https://cdn.jsdelivr.net/ https://w.usabilla.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.gstatic.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com/ https://cdn.cookielaw.org/ https://forms.hubspot.com/ https://www.google.com/ https://js.hs-banner.com https://content.hotjar.io wss: https://analytics.google.com https://api.hubapi.com https://bcp.crwdcntrl.net https://forms.hsforms.com https://l.sharethis.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://unpkg.com https://cdn.jsdelivr.net https://www.google-analytics.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://finance.yahoo.com/ https://www.youtube.com/iframe_api https://www.youtube.com https://insights.eisneramper.com https://view.ceros.com *.hsforms.com *.hsforms.net *.podbean.com https://11782456.fls.doubleclick.net https://player.vimeo.com https://t.sharethis.com https://td.doubleclick.net https://www.google.com; img-src 'self' https: https://www.linkedin.com https://ib.adnxs.com https://fei.pro-market.net https://platform-cdn.sharethis.com https://l.sharethis.com https://okt.to https://track.hubspot.com https://jelly-v6.mdhv.io data: https://ad.doubleclick.net https://analytics.twitter.com https://cm.g.doubleclick.net https://forms-na1.hsforms.com https://forms.hsforms.com https://i.vimeocdn.com https://jelly.mdhv.io https://p1.aprimocdn.net https://px.ads.linkedin.com https://sync.sharethis.com https://t.co https://um.simpli.fi https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com; manifest-src 'self'; media-src 'self'; worker-src 'none';frame-ancestors 'self' *.concurra.com; form-action https: ; 2 base-uri 'self' https://*.exponea.com; font-src 'self' data: https://*.omq.de https://*.paypalobjects.com https://*.abtasty.com https://*.reviews.io https://applepay.cdn-apple.com; form-action 'self' https://*.adyen.com https://*.facebook.com; frame-ancestors 'self' https://app.storyblok.com; img-src 'self' data: https://*; object-src 'none'; script-src-attr 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: 'unsafe-inline' https://*.aboutyou.cloud https://*.adyen.com https://*.omq.de https://*.googletagmanager.com https://fonts.googleapis.com https://*.reviews.io https://*.abtasty.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.babymarkt.com https://*.scayle.cloud https://*.aboutyou.cloud https://*.adyen.com https://*.paypal.com https://*.omq.de https://api.exponea.com https://*.googletagmanager.com https://www.dwin1.com https://www.awin1.com https://the.sciencebehindecommerce.com https://*.googleadservices.com https://*.sovendus.com https://*.abtasty.com https://applepay.cdn-apple.com; upgrade-insecure-requests; default-src 'self'; frame-src 'self' https://*.adyen.com https://*.paypal.com https://*.paypalobjects.com https://*.babymarkt.com https://*.scayle.cloud https://*.awin1.com https://td.doubleclick.net https://*.criteo.com https://*.sovendus-benefits.com https://*.sovendus-connect.com https://*.trustpilot.com https://*.abtasty.com https://*.vchfy.com https://*.neocomapp.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.babymarkt.com https://*.scayle.cloud https://*.aboutyou.cloud https://*.adyen.com https://*.paypal.com https://*.paypalobjects.com https://*.omq.de https://api.exponea.com https://*.googletagmanager.com https://www.dwin1.com https://www.awin1.com https://lantern.roeyecdn.com https://the.sciencebehindecommerce.com https://*.googleadservices.com https://*.facebook.net https://*.criteo.com https://*.sovendus.com https://*.bing.com https://*.abtasty.com https://*.reviews.io https://mpsnare.iesnare.com https://*.trustpilot.com https://insitez.blob.core.windows.net https://maps.googleapis.com https://places.googleapis.com https://*.clarity.ms https://*.vchfy.com https://*.neocomapp.com https://applepay.cdn-apple.com; connect-src 'self' https://*.babymarkt.com https://*.scayle.cloud https://*.aboutyou.cloud/ https://*.adyen.com https://*.paypal.com https://*.paypalobjects.com https://x.klarnacdn.net https://*.vhwmcs.net https://*.omq.de https://sockjs-us3.pusher.com https://*.exponea.com https://*.googletagmanager.com https://*.econda-monitor.de https://region1.google-analytics.com https://*.wepowerconnections.com https://the.sciencebehindecommerce.com https://*.google.com https://*.doubleclick.net https://*.criteo.com https://*.sovendus.com https://*.abtasty.com https://*.walz.de https://*.mixpanel.com https://*.informizely.com https://*.reviews.io https://maps.googleapis.com https://places.googleapis.com https://*.clarity.ms https://*.vchfy.com https://*.storyblok.com https://*.trustpilot.com https://*.neocomapp.com https://applepay.cdn-apple.com; media-src https://a.storyblok.com https://*.walz.de; 2 frame-ancestors 'self' pmt.honeywell.com ppe.sps.honeywell.com automation.honeywell.com process.honeywell.com; 2 default-src 'self' https: data:; connect-src 'self' wss://*.tawk.to wss://ws.hotjar.com https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-cookieyes.com https://ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://snap.licdn.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsforms.net https://js-eu1.hsforms.net https://forms.hsforms.com https://static.hsappstatic.net https://pi.pardot.com https://go.hstpathways.com https://whova.com https://*.whova.com https://js.stripe.com https://checkout.stripe.com https://www.cognitoforms.com https://cognitoforms.com https://*.cognitoforms.com https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://player.vimeo.com https://fast.wistia.com https://fast.wistia.net https://embedwistia-a.akamaihd.net https://use.fontawesome.com https://kit.fontawesome.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://embed.tawk.to https://*.tawk.to https://*.zoominfo.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://challenges.cloudflare.com https://secure-ds.serving-sys.com https://bat.bing.com https://connect.facebook.net https://tr.capterra.com https://static.ads-twitter.com https://cdn.jsdelivr.net https://code.jquery.com https://kenwheeler.github.io https://view.genially.com https://statics-view.genially.com https://genially.com https://*.genially.com https://unpkg.com https://assets.calendly.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-cookieyes.com https://ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://snap.licdn.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsforms.net https://js-eu1.hsforms.net https://forms.hsforms.com https://static.hsappstatic.net https://pi.pardot.com https://go.hstpathways.com https://whova.com https://*.whova.com https://js.stripe.com https://checkout.stripe.com https://www.cognitoforms.com https://cognitoforms.com https://*.cognitoforms.com https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://player.vimeo.com https://fast.wistia.com https://fast.wistia.net https://embedwistia-a.akamaihd.net https://use.fontawesome.com https://kit.fontawesome.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://embed.tawk.to https://*.tawk.to https://*.zoominfo.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://challenges.cloudflare.com https://secure-ds.serving-sys.com https://bat.bing.com https://connect.facebook.net https://tr.capterra.com https://static.ads-twitter.com https://cdn.jsdelivr.net https://code.jquery.com https://kenwheeler.github.io https://view.genially.com https://statics-view.genially.com https://genially.com https://*.genially.com https://unpkg.com https://assets.calendly.com; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src